This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json) Hash identifier: Bsca7wl23oaPaLXBv20FW/s3rieJC/7ttlvXg97aRrU= Subject key identifier: 4E:60:8F:8F:94:10:92:80:CF:67:D1:80:A4:FD:77:04:8E:B4:01:CF Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019B07EB9BE9E086B2C2586E0C2CD71CDB74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft Manifest number: 0D62 Signing time: Wed 10 Dec 2025 11:00:39 +0000 Manifest this update: Wed 10 Dec 2025 11:00:39 +0000 Manifest next update: Thu 11 Dec 2025 11:00:39 +0000 Files and hashes: 1: 29SLMo34FhaAnpTCRG4-JhzaoEU.roa (hash: 2fi9WOSprxmNRnuIjRed7XskP0Ewr4AfYM3eX1Xq9nE=) 2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: rAWlaOgiXpbUPkaujpk5OKCDEZfAdWOns4fEKLIgr2Y=) 3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=) 4: gC44VWnXdqeRgBq7XFfpWF95Q6M.roa (hash: ZlFvQ0FdcQWc6LDQd+RgeJur3FpyWFSWGQsV0siREzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:9b:e9:e0:86:b2:c2:58:6e:0c:2c:d7:1c:db:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Dec 10 11:00:39 2025 GMT Not After : Dec 11 11:00:39 2025 GMT Subject: CN=4e608f8f94109280cf67d180a4fd77048eb401cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:d9:a9:f5:3d:2d:c1:07:af:5c:73:00:d8: 6a:aa:cb:60:dc:8d:83:f9:a1:d6:dc:be:b4:60:21: 16:56:ed:59:6f:46:f2:50:93:b8:4b:99:ae:85:61: 40:ac:4a:1f:2f:73:fc:88:c5:b9:59:e7:58:3e:73: 46:a8:ed:28:b2:d8:eb:26:4a:69:12:20:45:4e:eb: 3e:8f:3e:e8:91:6c:3f:da:5b:3c:a1:5f:3f:b3:2c: e9:83:15:ef:d6:f0:50:5a:96:c4:83:d7:fe:ac:aa: 34:cc:4a:07:ca:6a:da:73:2f:4d:93:c5:a4:02:19: 7a:10:d0:43:58:04:b8:90:a5:5b:f0:35:02:18:f7: ee:e8:c0:f4:3d:16:37:ce:2d:f7:05:a4:a4:05:80: 99:cc:e9:00:a8:1f:10:be:f0:56:29:ea:f5:59:1a: 3b:5b:c4:36:69:44:8a:31:6a:2e:40:ae:f6:36:b3: d4:da:6d:ea:f1:44:02:55:3f:bd:81:9b:28:d1:d7: 75:ce:e2:1d:f5:75:e0:05:11:ac:9d:d0:b1:e7:e8: b3:dc:85:09:94:b7:ad:cf:c4:34:68:a5:b7:9f:cc: 5d:75:5b:39:b4:46:d1:43:37:3f:1d:bf:0b:c4:b8: 59:1b:5d:23:4c:7f:cf:8c:7b:9f:5a:a7:9a:3d:11: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:60:8F:8F:94:10:92:80:CF:67:D1:80:A4:FD:77:04:8E:B4:01:CF X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d2:50:79:ac:ef:ee:20:23:ee:62:01:cc:ae:1e:7a:1c:02: bb:13:11:97:6d:48:21:6b:dc:66:7d:47:71:17:cf:06:86:cc: 92:58:74:a6:f5:17:04:3c:7a:ab:cc:d4:a9:f4:16:d5:15:54: e7:fd:4b:11:61:b8:21:cc:4e:d0:da:29:5d:a6:c6:14:03:04: d7:f3:ba:a2:6c:ae:2c:80:1d:05:cd:52:0b:85:44:2b:6c:e6: 45:9a:59:6f:82:e2:20:a9:d9:3b:89:78:50:30:d4:38:9b:db: 87:0e:35:5d:44:9b:96:3d:2d:11:83:36:ba:dc:e8:d5:cc:c9: 11:d9:fe:a3:3e:06:28:85:d3:a5:c4:1b:d9:b5:2d:d2:83:87: c5:86:db:27:8b:64:18:44:60:a7:9f:e8:03:73:8f:27:52:ef: 36:47:90:bd:8d:78:dd:95:d2:37:e4:64:6f:df:2f:4e:f3:02: f4:ec:2a:f4:d5:19:3d:8a:cf:f4:ec:57:47:7f:90:28:0f:57: 9b:2a:85:12:77:4d:ae:83:77:18:43:27:1d:4b:c2:ce:ec:f3: 50:10:6f:83:7a:12:07:ce:b9:b5:6a:e5:a9:30:43:c1:9b:0e: 3e:eb:46:68:00:8d:4c:f9:17:b3:6d:39:c5:a7:f7:d7:fe:7d: aa:6b:3a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH65vp4IaywlhuDCzXHNt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjUxMjEwMTEwMDM5WhcNMjUxMjExMTEwMDM5WjAzMTEwLwYDVQQD Eyg0ZTYwOGY4Zjk0MTA5MjgwY2Y2N2QxODBhNGZkNzcwNDhlYjQwMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU/ZqfU9LcEHr1xzANhqqstg3I2D +aHW3L60YCEWVu1Zb0byUJO4S5muhWFArEofL3P8iMW5WedYPnNGqO0ostjrJkpp EiBFTus+jz7okWw/2ls8oV8/syzpgxXv1vBQWpbEg9f+rKo0zEoHymracy9Nk8Wk Ahl6ENBDWAS4kKVb8DUCGPfu6MD0PRY3zi33BaSkBYCZzOkAqB8QvvBWKer1WRo7 W8Q2aUSKMWouQK72NrPU2m3q8UQCVT+9gZso0dd1zuId9XXgBRGsndCx5+iz3IUJ lLetz8Q0aKW3n8xddVs5tEbRQzc/Hb8LxLhZG10jTH/PjHufWqeaPRH3lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5gj4+UEJKAz2fRgKT9dwSOtAHPMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudJQeazv 7iAj7mIBzK4eehwCuxMRl21IIWvcZn1HcRfPBobMklh0pvUXBDx6q8zUqfQW1RVU 5/1LEWG4IcxO0NopXabGFAME1/O6omyuLIAdBc1SC4VEK2zmRZpZb4LiIKnZO4l4 UDDUOJvbhw41XUSblj0tEYM2utzo1czJEdn+oz4GKIXTpcQb2bUt0oOHxYbbJ4tk GERgp5/oA3OPJ1LvNkeQvY143ZXSN+Rkb98vTvMC9Owq9NUZPYrP9OxXR3+QKA9X myqFEndNroN3GEMnHUvCzuzzUBBvg3oSB865tWrlqTBDwZsOPutGaACNTPkXs205 xaf31/59qms6eA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:18:23 2025 by rpki-client