This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json) Hash identifier: dqWfQOySENtmj27TT85IpIXsEpl9nqnZ1ML1NZ6LxAc= Subject key identifier: 49:92:4D:AE:42:56:33:81:33:B3:66:17:10:30:CC:47:BC:00:35:E4 Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99 Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399 Certificate serial: 019B2106F79585A526FFAA86640645F9BDE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 08:01:03 +0000 Manifest this update: Mon 15 Dec 2025 08:01:03 +0000 Manifest next update: Tue 16 Dec 2025 08:01:03 +0000 Files and hashes: 1: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: Ceant+VNkc4XLkpnUFS6yckCi46YhF/D9dHEW8AfNAc=) 2: ax8BOGm-GJfb7NvYozzZ62QdRvA.roa (hash: cIhLyiLj0Foy8DN1xACbtMKul9Di0Oi3YIqfjaju72U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:f7:95:85:a5:26:ff:aa:86:64:06:45:f9:bd:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399 Validity Not Before: Dec 15 08:01:03 2025 GMT Not After : Dec 16 08:01:03 2025 GMT Subject: CN=49924dae4256338133b366171030cc47bc0035e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:14:56:e9:45:48:b4:00:64:aa:6d:5a:18: 50:fa:c6:8d:02:72:20:61:ae:11:f7:e0:ca:22:56: 7a:27:fa:af:ec:2c:51:39:40:fe:df:d5:b9:91:02: 06:e9:05:d9:a5:ed:14:1f:f0:73:54:d0:12:a5:c3: 7d:88:1c:aa:ae:6a:92:05:27:13:4a:8e:b5:f5:f8: d9:a4:9a:78:62:3d:93:e3:47:62:e0:d7:e8:ee:0f: b5:7a:de:7e:8d:cc:0e:f4:fc:1f:a9:ae:8c:9d:56: 49:f9:7e:3a:1d:b6:eb:fd:e3:19:3a:23:8d:4b:b9: 48:a7:e8:cc:eb:96:a3:5f:cc:28:f0:9b:fc:c1:f5: 21:a6:e5:e1:24:52:40:88:84:2a:8d:98:16:1d:a8: 8d:79:77:f1:2f:d6:e4:26:76:d6:72:c9:2b:0b:67: fc:3b:a4:b4:ab:1f:4e:24:69:5f:86:86:4e:0b:23: fa:d5:72:0b:26:96:78:62:b4:ce:8a:85:c7:73:0e: cc:06:eb:97:1a:ca:b0:71:a8:59:21:e3:ae:48:e4: c6:04:22:2c:c8:d7:93:79:a3:ed:11:99:4f:39:00: 96:f6:e3:82:83:f7:11:1e:a3:e6:95:c3:cc:7e:38: 93:8b:7e:97:0a:26:21:5c:8a:5a:79:39:3e:6f:59: 89:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:4D:AE:42:56:33:81:33:B3:66:17:10:30:CC:47:BC:00:35:E4 X509v3 Authority Key Identifier: keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4e:04:d7:a3:89:2d:50:cf:7d:b5:21:de:f0:28:8d:8c:34: 09:4e:b9:0f:25:c4:1b:7a:6e:bd:04:d2:1b:81:3e:d9:14:18: f0:47:41:5f:ff:71:3b:38:28:f4:3c:4f:9c:37:0a:b5:14:76: 2b:22:5f:d6:44:26:4b:8f:6a:31:67:f0:30:e7:90:ef:1d:1d: fa:dc:b1:42:d5:12:01:10:f1:75:60:52:f5:55:da:2f:fe:5e: c6:e8:e1:8a:37:cc:0b:cf:10:0c:b3:d7:a8:1d:2c:42:ed:62: 0b:46:6a:68:e9:45:33:a3:55:37:35:13:49:8d:26:0b:a0:7d: ef:2d:c3:73:15:2a:51:b9:3e:1b:8f:45:b8:06:72:bb:e7:8d: ff:ac:7f:d2:25:af:5e:5c:0e:73:b9:48:e1:fe:73:d9:68:2d: fc:44:35:df:77:1d:e9:3c:0c:90:ef:70:a9:07:aa:2d:5c:86: e5:99:ea:62:72:03:96:cb:81:1b:4c:dc:c2:15:d4:ec:a6:9d: e0:31:cf:b2:c4:0a:7d:89:05:be:56:4d:fb:9b:60:f2:06:ca: 7a:82:a9:e4:dd:62:56:7e:87:23:85:d5:a6:42:5c:fc:2f:6b: 6f:c5:a1:4b:14:66:84:6f:18:ac:95:92:68:49:4c:fa:73:ae: 7f:64:bb:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBveVhaUm/6qGZAZF+b3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzc3MzEyZTBkMmNlYzg0NWEwNDYxMzg0NWY4YTFiZTI2 M2MzOTkwHhcNMjUxMjE1MDgwMTAzWhcNMjUxMjE2MDgwMTAzWjAzMTEwLwYDVQQD Eyg0OTkyNGRhZTQyNTYzMzgxMzNiMzY2MTcxMDMwY2M0N2JjMDAzNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6UUVulFSLQAZKptWhhQ+saNAnIg Ya4R9+DKIlZ6J/qv7CxROUD+39W5kQIG6QXZpe0UH/BzVNASpcN9iByqrmqSBScT So619fjZpJp4Yj2T40di4Nfo7g+1et5+jcwO9Pwfqa6MnVZJ+X46Hbbr/eMZOiON S7lIp+jM65ajX8wo8Jv8wfUhpuXhJFJAiIQqjZgWHaiNeXfxL9bkJnbWcskrC2f8 O6S0qx9OJGlfhoZOCyP61XILJpZ4YrTOioXHcw7MBuuXGsqwcahZIeOuSOTGBCIs yNeTeaPtEZlPOQCW9uOCg/cRHqPmlcPMfjiTi36XCiYhXIpaeTk+b1mJZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmSTa5CVjOBM7NmFxAwzEe8ADXkMB8GA1UdIwQY MBaAFFPHcxLg0s7IRaBGE4RfihviY8OZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjct YzliZjU1ZDlkMWJhLzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjctYzliZjU1ZDlkMWJh LzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU4E16OJ LVDPfbUh3vAojYw0CU65DyXEG3puvQTSG4E+2RQY8EdBX/9xOzgo9DxPnDcKtRR2 KyJf1kQmS49qMWfwMOeQ7x0d+tyxQtUSARDxdWBS9VXaL/5exujhijfMC88QDLPX qB0sQu1iC0ZqaOlFM6NVNzUTSY0mC6B97y3DcxUqUbk+G49FuAZyu+eN/6x/0iWv XlwOc7lI4f5z2Wgt/EQ133cd6TwMkO9wqQeqLVyG5ZnqYnIDlsuBG0zcwhXU7Kad 4DHPssQKfYkFvlZN+5tg8gbKeoKp5N1iVn6HI4XVpkJc/C9rb8WhSxRmhG8YrJWS aElM+nOuf2S7aQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:17 2025 by rpki-client