This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json) Hash identifier: w3lvCSnvbk0JSUXh/pLO1Wz5pKOjwQrXELGVKR0ywp0= Subject key identifier: 87:A8:1F:04:6A:45:62:F3:80:B4:09:28:AF:1F:B4:33:36:9C:E8:21 Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019B47A681759B14ADD23EBE56C900A53C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft Manifest number: 0D83 Signing time: Mon 22 Dec 2025 20:00:52 +0000 Manifest this update: Mon 22 Dec 2025 20:00:52 +0000 Manifest next update: Tue 23 Dec 2025 20:00:52 +0000 Files and hashes: 1: 29SLMo34FhaAnpTCRG4-JhzaoEU.roa (hash: 2fi9WOSprxmNRnuIjRed7XskP0Ewr4AfYM3eX1Xq9nE=) 2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: KriHVVUGEdN7S1LT0FEkIkjEoH7p4DwlPeBbNZvwn+I=) 3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=) 4: gC44VWnXdqeRgBq7XFfpWF95Q6M.roa (hash: ZlFvQ0FdcQWc6LDQd+RgeJur3FpyWFSWGQsV0siREzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:81:75:9b:14:ad:d2:3e:be:56:c9:00:a5:3c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Dec 22 20:00:52 2025 GMT Not After : Dec 23 20:00:52 2025 GMT Subject: CN=87a81f046a4562f380b40928af1fb433369ce821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:57:aa:22:dd:13:fc:29:fc:0a:8d:97:63:90: 0e:0d:1e:96:44:21:e8:56:3b:b0:66:54:3f:5d:a3: ec:eb:8b:46:e5:32:5a:1b:99:42:25:d7:65:fe:0f: 3f:15:6c:5e:07:8b:35:44:2b:af:ce:b5:b8:61:f6: 80:8b:9f:14:6d:87:e3:3f:01:7c:02:cd:e1:ba:ab: 43:b8:88:45:de:62:a4:59:e2:29:91:f7:ac:b2:c9: 80:c7:ff:a9:6e:1a:5e:53:24:96:d2:b1:cc:45:8c: fa:26:9e:e1:e7:62:ec:31:20:34:3d:cd:3c:2a:50: 08:e5:0f:7c:36:11:47:b6:04:c9:f8:c3:99:7a:e6: 16:ef:1a:07:8e:9f:5e:c7:8e:5a:2d:7a:c7:0a:ed: b2:c3:90:e6:9b:d7:db:1e:81:cf:d3:4c:63:03:0f: 0f:2d:3e:e1:27:8d:c6:03:37:9e:c2:28:e1:9d:61: 6d:9e:10:8e:51:76:f1:27:32:df:8c:63:85:e7:b0: 0e:de:8f:5c:1b:8a:83:39:d6:af:b6:8b:d4:d3:51: df:e2:b0:2d:8d:2c:f9:ea:9a:1e:e9:49:35:7e:26: ea:e7:3d:5b:27:41:d1:d1:6f:86:31:18:fb:3c:92: d8:b2:e3:9b:6c:d4:37:4b:66:99:26:9d:7e:6c:e2: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A8:1F:04:6A:45:62:F3:80:B4:09:28:AF:1F:B4:33:36:9C:E8:21 X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:65:ce:ef:ad:cd:6e:88:a5:27:42:a7:85:66:07:dd:88:65: 1a:a3:3f:82:b4:aa:17:81:8a:8e:06:81:27:20:14:67:ac:19: 26:82:0f:3c:cb:77:83:a0:2d:89:9a:51:81:a1:7c:e1:14:6e: 8e:75:da:87:b5:a5:32:b2:25:1f:83:f8:98:cf:c6:62:9c:e6: ee:14:10:d0:1a:cd:52:a7:79:9f:84:36:90:10:2f:c0:fb:db: 61:e7:eb:1b:63:b0:75:1a:c9:3a:d8:8e:93:dd:e0:fb:44:3a: d7:6b:a1:35:59:87:d8:e2:32:56:a5:61:a0:b6:4b:c6:5a:5e: 44:d6:9a:68:7a:59:b4:5b:bb:b4:cc:c3:a8:15:ba:ab:22:60: 71:57:7d:7b:75:20:37:90:10:65:7d:98:0c:85:1b:ad:9f:78: 73:d5:d5:dc:4d:ca:e6:38:fe:f8:b7:df:b6:fb:21:51:26:23: bb:8e:19:de:0c:d0:0c:d0:2a:87:f0:a5:50:82:ba:6f:81:17: 37:1f:43:0f:f5:8e:28:56:af:cf:c3:37:13:ce:31:28:74:d6: 17:92:00:f2:fa:72:e9:93:59:5a:88:c5:1d:b3:7a:7e:dc:70: ac:2d:50:41:fd:c7:47:cf:66:ea:c8:f4:ed:2a:14:a1:21:01: 14:39:a7:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpoF1mxSt0j6+VskApTxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjUxMjIyMjAwMDUyWhcNMjUxMjIzMjAwMDUyWjAzMTEwLwYDVQQD Eyg4N2E4MWYwNDZhNDU2MmYzODBiNDA5MjhhZjFmYjQzMzM2OWNlODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VeqIt0T/Cn8Co2XY5AODR6WRCHo VjuwZlQ/XaPs64tG5TJaG5lCJddl/g8/FWxeB4s1RCuvzrW4YfaAi58UbYfjPwF8 As3huqtDuIhF3mKkWeIpkfesssmAx/+pbhpeUySW0rHMRYz6Jp7h52LsMSA0Pc08 KlAI5Q98NhFHtgTJ+MOZeuYW7xoHjp9ex45aLXrHCu2yw5Dmm9fbHoHP00xjAw8P LT7hJ43GAzeewijhnWFtnhCOUXbxJzLfjGOF57AO3o9cG4qDOdavtovU01Hf4rAt jSz56poe6Uk1fibq5z1bJ0HR0W+GMRj7PJLYsuObbNQ3S2aZJp1+bOIiJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeoHwRqRWLzgLQJKK8ftDM2nOghMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGXO763N boilJ0KnhWYH3YhlGqM/grSqF4GKjgaBJyAUZ6wZJoIPPMt3g6AtiZpRgaF84RRu jnXah7WlMrIlH4P4mM/GYpzm7hQQ0BrNUqd5n4Q2kBAvwPvbYefrG2OwdRrJOtiO k93g+0Q612uhNVmH2OIyVqVhoLZLxlpeRNaaaHpZtFu7tMzDqBW6qyJgcVd9e3Ug N5AQZX2YDIUbrZ94c9XV3E3K5jj++LfftvshUSYju44Z3gzQDNAqh/ClUIK6b4EX Nx9DD/WOKFavz8M3E84xKHTWF5IA8vpy6ZNZWojFHbN6ftxwrC1QQf3HR89m6sj0 7SoUoSEBFDmn/A== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:32 2025 by rpki-client