This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json) Hash identifier: toRkJviq1X2Alcp4qgeIjvP6vy+9e8wN6dVe9jiapb8= Subject key identifier: 30:B1:AB:FD:E6:34:3C:0B:32:8C:5F:51:6F:44:51:43:D4:D0:1F:F4 Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3 Certificate serial: 019B341F885294E0D13559D190F3325586C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 01:00:40 +0000 Manifest this update: Fri 19 Dec 2025 01:00:40 +0000 Manifest next update: Sat 20 Dec 2025 01:00:40 +0000 Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: a/y3oK/RyV9G0TJIbM0vFxNKq0TJjO5waklzFBl4d6k=) 2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=) 3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:88:52:94:e0:d1:35:59:d1:90:f3:32:55:86:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3 Validity Not Before: Dec 19 01:00:40 2025 GMT Not After : Dec 20 01:00:40 2025 GMT Subject: CN=30b1abfde6343c0b328c5f516f445143d4d01ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:62:fd:c9:2b:21:18:e0:5a:44:a8:bb:4d: 99:e0:08:30:46:d6:22:15:22:9c:39:a0:a0:71:9e: 6b:70:6a:1f:e4:71:c9:fb:bc:8f:f6:80:51:1f:b2: d7:47:23:2b:a8:dd:49:6f:42:b3:59:21:f5:7e:e1: ce:28:1b:cc:7d:e8:fb:49:83:66:7b:0e:62:72:3e: 9d:51:3a:8e:fb:68:19:45:26:1a:a6:79:f0:68:cd: 80:42:51:19:2c:75:32:5f:b1:34:41:4d:89:5b:aa: f4:a9:67:49:c0:a5:d0:4a:b3:79:11:b6:91:9b:ea: 68:40:92:c5:5f:f4:35:c1:97:a8:06:f7:ad:c4:e6: d3:9e:72:cc:4a:4d:b6:f2:44:46:e2:7f:dc:26:86: d9:0b:7e:64:15:81:ad:9d:ff:b5:c1:09:0f:c7:00: b4:ba:3e:85:8d:52:3d:48:44:80:44:4e:fe:de:d9: ac:b2:5d:d7:2b:d2:22:6d:1e:78:a7:0e:c5:fe:91: cd:c5:cb:c0:be:03:b5:04:43:56:b7:81:86:f7:2d: ee:64:d0:94:d0:4a:2b:15:50:01:4d:19:e9:ba:b9: b8:b0:b8:35:c0:07:35:86:a4:4f:b4:19:91:d2:aa: aa:22:f0:c0:f3:66:51:cf:b7:6e:e0:9a:8a:ff:5f: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B1:AB:FD:E6:34:3C:0B:32:8C:5F:51:6F:44:51:43:D4:D0:1F:F4 X509v3 Authority Key Identifier: keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b5:26:dd:40:b5:bc:bc:79:d5:e8:a1:58:f3:ae:2b:fc:3b: 8e:13:b6:7c:c5:a7:1f:5c:01:a3:d0:46:29:1c:68:ed:33:2e: bf:6c:23:df:54:36:8c:31:b5:85:e0:4f:00:67:0c:7b:71:7f: 00:7b:82:30:ee:2a:9d:c8:1b:7e:2f:11:80:ae:9f:89:66:35: 47:20:46:a2:3e:17:a0:5e:d2:0b:4e:51:93:a5:d1:a3:25:da: 03:2c:f5:55:50:d1:5a:18:bf:38:56:ed:c8:58:00:ab:92:9b: f8:3f:4e:dd:1d:46:7d:27:81:68:3d:d2:3e:3c:1c:0e:ec:b1: a7:fa:9f:e3:82:a6:d5:66:5d:ae:c5:f7:02:1d:a4:af:1b:43: bb:6b:0b:21:68:07:4c:3d:32:23:e8:2c:2f:0c:1c:39:96:e0: 56:d5:6c:dc:32:1b:e4:1f:da:3d:30:8f:02:8c:86:d4:bb:84: 04:a5:b7:87:54:4a:42:2f:11:34:a9:f2:82:6e:85:4a:82:85: 20:e6:23:ff:c0:8c:9b:3d:7f:d8:3d:60:2b:cc:3c:b6:a0:68: 53:84:ca:ca:37:47:75:ac:6e:cd:3d:3f:29:9e:6a:a2:b3:dc: 0d:8f:b7:47:cb:f1:41:73:5c:e8:f6:b3:bd:1b:3d:d9:15:e1: 97:f9:ec:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H4hSlODRNVnRkPMyVYbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNmM0Yzk0ZmVkNGZhOGI5MDNmNmY2ZmI1MzQwNDg0YzBl NGE0ZDMwHhcNMjUxMjE5MDEwMDQwWhcNMjUxMjIwMDEwMDQwWjAzMTEwLwYDVQQD EygzMGIxYWJmZGU2MzQzYzBiMzI4YzVmNTE2ZjQ0NTE0M2Q0ZDAxZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcFi/ckrIRjgWkSou02Z4AgwRtYi FSKcOaCgcZ5rcGof5HHJ+7yP9oBRH7LXRyMrqN1Jb0KzWSH1fuHOKBvMfej7SYNm ew5icj6dUTqO+2gZRSYapnnwaM2AQlEZLHUyX7E0QU2JW6r0qWdJwKXQSrN5EbaR m+poQJLFX/Q1wZeoBvetxObTnnLMSk228kRG4n/cJobZC35kFYGtnf+1wQkPxwC0 uj6FjVI9SESARE7+3tmssl3XK9IibR54pw7F/pHNxcvAvgO1BENWt4GG9y3uZNCU 0EorFVABTRnpurm4sLg1wAc1hqRPtBmR0qqqIvDA82ZRz7du4JqK/181RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCxq/3mNDwLMoxfUW9EUUPU0B/0MB8GA1UdIwQY MBaAFFNsTJT+1PqLkD9vb7U0BITA5KTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYt YTY3Zjk1ZjJkZTVlLzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYtYTY3Zjk1ZjJkZTVl LzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLUm3UC1 vLx51eihWPOuK/w7jhO2fMWnH1wBo9BGKRxo7TMuv2wj31Q2jDG1heBPAGcMe3F/ AHuCMO4qncgbfi8RgK6fiWY1RyBGoj4XoF7SC05Rk6XRoyXaAyz1VVDRWhi/OFbt yFgAq5Kb+D9O3R1GfSeBaD3SPjwcDuyxp/qf44Km1WZdrsX3Ah2krxtDu2sLIWgH TD0yI+gsLwwcOZbgVtVs3DIb5B/aPTCPAoyG1LuEBKW3h1RKQi8RNKnygm6FSoKF IOYj/8CMmz1/2D1gK8w8tqBoU4TKyjdHdaxuzT0/KZ5qorPcDY+3R8vxQXNc6Paz vRs92RXhl/nszA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:32 2025 by rpki-client