This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json) Hash identifier: sy4EEtq7Agk8R+V3fvXdZuDQeq17EI812izC1ckvzRA= Subject key identifier: C1:9F:2F:BF:AD:09:A9:11:7C:92:B1:4B:02:BC:C4:B0:78:66:CF:E8 Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b Certificate serial: 019B394637104FFDB06E3123F674B398C588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft Manifest number: 14C7 Signing time: Sat 20 Dec 2025 01:01:01 +0000 Manifest this update: Sat 20 Dec 2025 01:01:01 +0000 Manifest next update: Sun 21 Dec 2025 01:01:01 +0000 Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=) 2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: +Gcmkf2JVSANp8QUoJ0PQcKPgcLgCb8B9mFjEwKbSUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:37:10:4f:fd:b0:6e:31:23:f6:74:b3:98:c5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b Validity Not Before: Dec 20 01:01:01 2025 GMT Not After : Dec 21 01:01:01 2025 GMT Subject: CN=c19f2fbfad09a9117c92b14b02bcc4b07866cfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:2a:65:1a:3f:bd:d2:d8:88:2d:c6:30:13: 7b:fb:37:2b:5b:5e:91:99:ab:0c:27:0d:3e:ac:47: fe:ac:fe:f7:67:49:ba:42:67:b8:75:1b:a1:4e:33: d2:13:d9:9a:ec:af:83:90:4b:19:6d:40:29:a0:0e: 4c:37:4e:c7:5e:5e:bf:3f:0d:af:e7:96:9d:37:1e: 13:e1:9f:be:3e:13:a4:c6:ec:87:81:07:c9:a4:fb: 9e:e6:1f:1f:97:f6:76:79:f1:14:27:9b:df:6b:26: 37:e9:a8:49:56:34:74:0a:89:b1:fb:b6:59:c0:c6: 20:ed:f4:db:52:b8:23:46:7c:63:ee:d5:7a:ff:39: 40:5e:42:05:f3:14:1d:a0:b5:80:5f:bb:58:22:88: d4:0c:22:1a:df:92:ff:60:2f:05:a0:db:7b:c2:df: 65:4b:82:c8:ba:58:07:9c:e7:69:48:f7:ea:e2:1e: ce:2d:c8:3f:a2:57:6a:66:de:a3:c1:0d:6b:d7:ec: 47:6b:81:37:75:56:a4:c9:e3:8b:27:5c:2c:6d:d5: ba:46:5e:2a:0b:a7:31:6c:06:05:92:a5:62:3b:7f: 44:f1:e6:78:9e:5b:99:5f:9b:e4:23:6a:d6:29:c5: 1c:82:c6:50:f4:ac:5e:03:23:a8:73:5d:a0:89:85: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9F:2F:BF:AD:09:A9:11:7C:92:B1:4B:02:BC:C4:B0:78:66:CF:E8 X509v3 Authority Key Identifier: keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:87:ee:18:ea:14:7c:e6:ab:4e:cf:cd:30:2a:33:7f:f7:f9: 6c:d6:03:40:e3:41:6f:41:40:25:a5:c6:f5:9d:56:93:40:a7: b1:b4:e7:78:65:bd:fa:18:0e:fc:a1:35:cb:d1:c4:a9:8d:cf: 25:0c:b1:1d:c0:68:b1:5b:9b:46:77:40:1b:b5:b9:d8:bc:38: 62:58:02:90:db:ae:e8:2f:a9:0a:17:4c:67:f7:78:37:01:da: 9b:b4:75:06:8f:d3:f7:dc:36:84:86:3c:10:d7:3b:82:41:30: 64:40:9b:79:c8:71:0f:e0:de:34:aa:78:fb:45:92:a9:5f:5b: 0c:ca:ab:c7:3e:15:09:c4:63:03:ec:a3:4e:0b:20:4f:8e:94: 81:af:d3:28:c0:6e:1f:d8:96:7d:39:2f:5f:3c:c4:5c:f8:4f: 96:d5:e7:76:4a:8a:f7:c8:a5:a0:74:92:46:54:a7:f0:1a:8c: a7:72:e4:c6:ea:1d:da:e5:fd:a7:0a:e6:3b:88:25:70:74:80: 3a:0f:75:03:b4:bd:ee:00:ee:69:96:cc:ff:b7:8e:57:57:06: 63:84:e0:55:8f:bc:41:15:61:17:21:34:c5:92:32:c9:47:ea: 4a:45:aa:5d:5a:4e:95:64:29:e8:f4:91:2f:ce:98:b4:a3:2c: 85:c8:bb:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RjcQT/2wbjEj9nSzmMWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWRiMTQzZTkwNmFhMjBlNTc4MjkwN2Y4NDVkNGE3Njk2 MmZmN2IwHhcNMjUxMjIwMDEwMTAxWhcNMjUxMjIxMDEwMTAxWjAzMTEwLwYDVQQD EyhjMTlmMmZiZmFkMDlhOTExN2M5MmIxNGIwMmJjYzRiMDc4NjZjZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qsqZRo/vdLYiC3GMBN7+zcrW16R masMJw0+rEf+rP73Z0m6Qme4dRuhTjPSE9ma7K+DkEsZbUApoA5MN07HXl6/Pw2v 55adNx4T4Z++PhOkxuyHgQfJpPue5h8fl/Z2efEUJ5vfayY36ahJVjR0Comx+7ZZ wMYg7fTbUrgjRnxj7tV6/zlAXkIF8xQdoLWAX7tYIojUDCIa35L/YC8FoNt7wt9l S4LIulgHnOdpSPfq4h7OLcg/oldqZt6jwQ1r1+xHa4E3dVakyeOLJ1wsbdW6Rl4q C6cxbAYFkqViO39E8eZ4nluZX5vkI2rWKcUcgsZQ9KxeAyOoc12giYWsXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGfL7+tCakRfJKxSwK8xLB4Zs/oMB8GA1UdIwQY MBaAFFNdsUPpBqog5XgpB/hF1KdpYv97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMt NDg3MzFiM2MwM2E0LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMtNDg3MzFiM2MwM2E0 LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIfuGOoU fOarTs/NMCozf/f5bNYDQONBb0FAJaXG9Z1Wk0CnsbTneGW9+hgO/KE1y9HEqY3P JQyxHcBosVubRndAG7W52Lw4YlgCkNuu6C+pChdMZ/d4NwHam7R1Bo/T99w2hIY8 ENc7gkEwZECbechxD+DeNKp4+0WSqV9bDMqrxz4VCcRjA+yjTgsgT46Uga/TKMBu H9iWfTkvXzzEXPhPltXndkqK98iloHSSRlSn8BqMp3Lkxuod2uX9pwrmO4glcHSA Og91A7S97gDuaZbM/7eOV1cGY4TgVY+8QRVhFyE0xZIyyUfqSkWqXVpOlWQp6PSR L86YtKMshci7WA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:31:36 2025 by rpki-client