This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json) Hash identifier: SvqcARm2hi8/jfh2iYKmyYj2CTwFtP3H1Djlp+8rXZM= Subject key identifier: 5F:13:D9:B4:43:9A:ED:A9:BF:AE:75:91:19:39:FC:1A:6D:4B:EA:11 Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b Certificate serial: 019B48B91AD3F3B7CAA388D788C1027B56E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft Manifest number: 14CF Signing time: Tue 23 Dec 2025 01:00:49 +0000 Manifest this update: Tue 23 Dec 2025 01:00:49 +0000 Manifest next update: Wed 24 Dec 2025 01:00:49 +0000 Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=) 2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: h9VnJXP/4E0OhEIH0k3VhIggwA9HJjpQ+uXp775KGkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:1a:d3:f3:b7:ca:a3:88:d7:88:c1:02:7b:56:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b Validity Not Before: Dec 23 01:00:49 2025 GMT Not After : Dec 24 01:00:49 2025 GMT Subject: CN=5f13d9b4439aeda9bfae75911939fc1a6d4bea11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fb:fe:e5:26:2e:6a:32:2e:16:21:46:45:d2: 94:93:30:be:13:0d:27:9e:bf:c3:de:00:29:cf:80: a1:a0:61:06:02:6c:a5:82:d7:1b:3e:c3:2e:20:9d: a3:c3:68:27:d1:d4:b2:bf:c9:94:60:f3:98:dd:16: 75:86:75:8f:f8:b4:ca:a4:13:2d:08:e5:b4:0a:74: 46:ae:d8:4f:c2:ab:0d:2a:f5:f9:2c:6d:19:3d:00: 1b:ef:1a:41:3e:9d:08:7e:fb:2f:d4:64:64:d2:23: 6c:f3:fc:9d:ef:d0:ee:8a:a4:9b:2d:7f:3b:98:44: 88:bc:67:b4:19:87:73:65:81:92:c5:e4:fb:68:49: 98:0a:ba:a7:4d:19:58:9e:3e:ce:a4:25:7b:21:d2: 03:4a:52:fe:3b:48:7d:5c:61:d0:01:77:45:de:ac: f7:51:06:89:47:fb:5c:38:3d:7f:b8:2d:9f:aa:bb: aa:c5:f1:91:6e:e6:b7:e7:9e:a4:6f:f0:1a:bb:c5: b9:50:ad:98:d2:3a:f9:fc:ad:59:40:a0:c2:45:59: e8:f2:1e:ae:3b:7a:12:2b:4a:8d:ba:c8:e3:16:c0: df:16:62:56:e9:29:42:ab:86:c0:38:ba:04:a9:a2: 2a:b7:fd:7e:42:4b:b5:69:28:65:cf:67:14:d0:d1: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:13:D9:B4:43:9A:ED:A9:BF:AE:75:91:19:39:FC:1A:6D:4B:EA:11 X509v3 Authority Key Identifier: keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:df:42:bc:c8:15:a0:09:c8:1e:50:35:a9:88:49:61:b9:2b: 51:43:b4:87:7f:3f:39:00:e3:be:9b:a4:9f:cd:24:4e:ce:f4: 61:fe:a7:1a:ec:82:e3:bb:b8:e4:2e:50:f0:2f:49:5c:5b:d8: 6e:4b:76:50:d5:d6:6e:e5:60:ad:b2:61:50:bc:29:63:88:96: 45:e2:89:2d:4d:f1:54:71:76:23:19:91:50:c7:e8:71:d4:57: 25:9a:ee:30:14:9c:82:bc:e0:5d:14:c9:eb:c8:76:f4:60:b7: b5:52:f5:ec:e4:a6:c4:5f:87:09:c3:67:3b:d3:65:33:45:0a: 49:d2:7b:4b:2d:27:d3:c0:65:77:88:0a:45:3d:fc:2d:de:c7: ea:76:4a:ed:85:27:df:a1:fc:b0:62:34:a0:29:84:ac:97:e7: eb:21:5d:9d:47:e2:c5:38:84:03:48:df:cb:db:1a:87:0c:18: 38:6e:5f:c6:c6:5c:52:3b:95:b6:d6:ed:56:6a:20:8e:70:42: 26:3b:d9:e2:5d:ef:9a:60:f2:b2:8b:e1:fc:86:3d:8e:5e:29: 11:42:65:bc:ef:4d:bd:db:ea:6f:52:fd:02:71:21:2e:a7:d6: 4f:77:5a:64:f2:36:1b:3a:fe:72:7b:a9:0d:0e:ca:54:26:80: b0:17:31:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuRrT87fKo4jXiMECe1bjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWRiMTQzZTkwNmFhMjBlNTc4MjkwN2Y4NDVkNGE3Njk2 MmZmN2IwHhcNMjUxMjIzMDEwMDQ5WhcNMjUxMjI0MDEwMDQ5WjAzMTEwLwYDVQQD Eyg1ZjEzZDliNDQzOWFlZGE5YmZhZTc1OTExOTM5ZmMxYTZkNGJlYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fv+5SYuajIuFiFGRdKUkzC+Ew0n nr/D3gApz4ChoGEGAmylgtcbPsMuIJ2jw2gn0dSyv8mUYPOY3RZ1hnWP+LTKpBMt COW0CnRGrthPwqsNKvX5LG0ZPQAb7xpBPp0Ifvsv1GRk0iNs8/yd79DuiqSbLX87 mESIvGe0GYdzZYGSxeT7aEmYCrqnTRlYnj7OpCV7IdIDSlL+O0h9XGHQAXdF3qz3 UQaJR/tcOD1/uC2fqruqxfGRbua3556kb/Aau8W5UK2Y0jr5/K1ZQKDCRVno8h6u O3oSK0qNusjjFsDfFmJW6SlCq4bAOLoEqaIqt/1+Qku1aShlz2cU0NEj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8T2bRDmu2pv651kRk5/BptS+oRMB8GA1UdIwQY MBaAFFNdsUPpBqog5XgpB/hF1KdpYv97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMt NDg3MzFiM2MwM2E0LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMtNDg3MzFiM2MwM2E0 LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh99CvMgV oAnIHlA1qYhJYbkrUUO0h38/OQDjvpukn80kTs70Yf6nGuyC47u45C5Q8C9JXFvY bkt2UNXWbuVgrbJhULwpY4iWReKJLU3xVHF2IxmRUMfocdRXJZruMBScgrzgXRTJ 68h29GC3tVL17OSmxF+HCcNnO9NlM0UKSdJ7Sy0n08Bld4gKRT38Ld7H6nZK7YUn 36H8sGI0oCmErJfn6yFdnUfixTiEA0jfy9sahwwYOG5fxsZcUjuVttbtVmogjnBC JjvZ4l3vmmDysovh/IY9jl4pEUJlvO9Nvdvqb1L9AnEhLqfWT3daZPI2Gzr+cnup DQ7KVCaAsBcx9w== -----END CERTIFICATE-----Generated at Tue Dec 23 06:51:34 2025 by rpki-client