This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json) Hash identifier: eyWnweNX1HYtPmNCoiIP52MJSzGeK9U9cJ8Ip2LXw9k= Subject key identifier: 8D:3C:68:32:43:DC:19:59:5B:BE:B7:0F:D3:09:2A:04:52:BE:BC:E3 Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af Certificate serial: 019B1B3BA10E2FE15890D0E0C388F8E91BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft Manifest number: 175F Signing time: Sun 14 Dec 2025 05:00:51 +0000 Manifest this update: Sun 14 Dec 2025 05:00:51 +0000 Manifest next update: Mon 15 Dec 2025 05:00:51 +0000 Files and hashes: 1: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (hash: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=) 2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: q/frFkR+5p9zniMTE6k90rj0KRe4y3rmuVQFm1N+r9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:a1:0e:2f:e1:58:90:d0:e0:c3:88:f8:e9:1b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af Validity Not Before: Dec 14 05:00:51 2025 GMT Not After : Dec 15 05:00:51 2025 GMT Subject: CN=8d3c683243dc19595bbeb70fd3092a0452bebce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:06:1d:8f:63:65:05:8e:a7:40:53:a9:70: 71:64:bf:71:f6:5c:f0:a8:3c:9e:8f:3d:65:33:38: d7:dc:08:8a:5f:1f:f1:06:84:5c:f0:67:43:09:bb: 97:5c:04:7c:b2:de:12:d1:87:c1:f1:74:a6:79:af: 1e:c3:ed:bc:90:ab:06:31:14:9e:1e:d1:40:94:65: b7:a8:82:9a:76:07:71:01:36:5c:25:34:24:09:ab: 83:5d:8a:e4:c4:29:02:c3:28:4f:27:87:9a:34:58: 81:1e:0f:aa:c9:49:99:aa:4c:55:0f:8e:9b:fb:8e: fe:cf:59:6e:61:65:10:16:e0:d8:7a:41:06:0c:08: 06:7a:33:3c:34:81:02:26:f4:90:af:7a:a8:59:8c: b0:5a:70:7a:7e:79:88:ff:7c:1d:f9:2d:4f:7c:74: 36:c1:f1:73:79:d4:7d:72:6f:8a:ea:a8:43:c2:7e: 2c:4c:82:f3:bb:f1:a4:e9:cd:4d:1e:ea:30:09:8d: 74:f4:53:65:7d:23:ff:61:5d:b3:c1:8e:2e:8e:04: 21:db:b5:38:37:fa:18:5b:02:1f:ea:1f:c3:70:40: c4:86:9d:d9:74:21:43:05:f7:61:2e:f7:58:15:2b: 7a:ce:af:e1:35:dd:ba:09:bf:23:77:c0:81:62:c9: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3C:68:32:43:DC:19:59:5B:BE:B7:0F:D3:09:2A:04:52:BE:BC:E3 X509v3 Authority Key Identifier: keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:92:a6:0e:1a:b4:fa:25:bc:f4:73:3d:ab:0f:f6:ae:2a:91: c2:72:9d:3b:4d:2c:9c:48:bf:f5:a1:b5:fe:81:ed:46:f6:fc: 08:f7:e4:ae:fa:c1:c9:e1:df:5d:25:4c:17:9e:48:5f:15:5b: bd:e2:a6:3e:89:3e:8d:41:39:3e:58:0c:e3:c9:93:74:6f:cc: e8:02:ba:54:d5:9a:f8:0b:ce:99:3c:a7:38:01:31:30:a2:ff: 52:b2:34:08:07:3f:77:59:ff:18:99:2e:5e:de:21:4b:76:90: ac:b2:a6:61:4d:81:75:c2:5d:b3:77:59:e7:53:5e:d7:17:3d: 5e:b4:1b:8a:26:e9:b7:7e:2c:23:8c:5e:22:53:3b:9c:2b:39: a0:66:f6:1e:6e:3a:7f:97:74:58:76:78:c4:62:5a:b1:60:f5: 5c:ec:6c:b5:81:0c:a1:2c:aa:2f:bf:2a:78:b0:c8:03:f7:a1: 7a:fc:97:64:7f:24:d1:06:70:81:99:8e:39:f7:cd:21:bf:25: 6c:8f:8d:0f:17:5e:e6:66:19:1a:be:69:35:2e:32:2e:57:a8: 40:7c:c9:d3:4e:07:b2:c4:e0:7d:e1:aa:a1:36:2d:b1:fb:93: a9:58:73:84:81:25:9f:dd:49:76:1a:6a:43:d3:fe:45:05:c0: 06:f0:7a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO6EOL+FYkNDgw4j46RvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjhiYWNjMzY1OWRjYjMzODlhYTQ3ZTM2NjRhNWY4Mjg0 ZTAwYWYwHhcNMjUxMjE0MDUwMDUxWhcNMjUxMjE1MDUwMDUxWjAzMTEwLwYDVQQD Eyg4ZDNjNjgzMjQzZGMxOTU5NWJiZWI3MGZkMzA5MmEwNDUyYmViY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMwGHY9jZQWOp0BTqXBxZL9x9lzw qDyejz1lMzjX3AiKXx/xBoRc8GdDCbuXXAR8st4S0YfB8XSmea8ew+28kKsGMRSe HtFAlGW3qIKadgdxATZcJTQkCauDXYrkxCkCwyhPJ4eaNFiBHg+qyUmZqkxVD46b +47+z1luYWUQFuDYekEGDAgGejM8NIECJvSQr3qoWYywWnB6fnmI/3wd+S1PfHQ2 wfFzedR9cm+K6qhDwn4sTILzu/Gk6c1NHuowCY109FNlfSP/YV2zwY4ujgQh27U4 N/oYWwIf6h/DcEDEhp3ZdCFDBfdhLvdYFSt6zq/hNd26Cb8jd8CBYskobwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI08aDJD3BlZW763D9MJKgRSvrzjMB8GA1UdIwQY MBaAFFP4usw2WdyzOJqkfjZkpfgoTgCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQt MTUxMDdiY2E0NWI1LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQtMTUxMDdiY2E0NWI1 LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpKmDhq0 +iW89HM9qw/2riqRwnKdO00snEi/9aG1/oHtRvb8CPfkrvrByeHfXSVMF55IXxVb veKmPok+jUE5PlgM48mTdG/M6AK6VNWa+AvOmTynOAExMKL/UrI0CAc/d1n/GJku Xt4hS3aQrLKmYU2BdcJds3dZ51Ne1xc9XrQbiibpt34sI4xeIlM7nCs5oGb2Hm46 f5d0WHZ4xGJasWD1XOxstYEMoSyqL78qeLDIA/ehevyXZH8k0QZwgZmOOffNIb8l bI+NDxde5mYZGr5pNS4yLleoQHzJ004HssTgfeGqoTYtsfuTqVhzhIEln91Jdhpq Q9P+RQXABvB6bA== -----END CERTIFICATE-----Generated at Sun Dec 14 09:34:11 2025 by rpki-client