This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft File: US7HYztuWDv6P6f_eEjxqp8oAIU.mft (raw, json) Hash identifier: JaWpYTGmiDPKARUh5TZFO+3xMVhplgQ56j8zwHzoCB4= Subject key identifier: E9:0B:B8:17:D4:ED:4F:00:15:A6:40:50:9F:23:8E:7B:3C:51:EB:51 Authority key identifier: 51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85 Certificate issuer: /CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085 Certificate serial: 019B5AF68A70E9D7CD5CCDC8B63542829148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft Manifest number: 57 Signing time: Fri 26 Dec 2025 14:01:05 +0000 Manifest this update: Fri 26 Dec 2025 14:01:05 +0000 Manifest next update: Sat 27 Dec 2025 14:01:05 +0000 Files and hashes: 1: US7HYztuWDv6P6f_eEjxqp8oAIU.crl (hash: GduzmdPVr9tmq12OZGFDarO15n0+oVbU+cFsNuRPEM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:8a:70:e9:d7:cd:5c:cd:c8:b6:35:42:82:91:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085 Validity Not Before: Dec 26 14:01:05 2025 GMT Not After : Dec 27 14:01:05 2025 GMT Subject: CN=e90bb817d4ed4f0015a640509f238e7b3c51eb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:74:e9:98:11:9e:e6:53:9f:dc:21:e7:74: 3a:fd:7f:e4:80:3a:fe:4c:f6:ce:58:da:60:f4:69: d8:02:aa:3d:9f:4a:b3:0d:b8:7b:a0:dc:cb:04:e1: 24:93:1e:eb:3d:98:2a:03:bf:80:e6:58:1d:c0:67: 8a:13:17:47:21:9d:4d:e9:26:9f:c8:85:17:88:0e: cb:06:4d:9f:f8:e5:8f:dd:91:c3:65:5b:f9:41:5e: 3f:06:2b:83:a4:aa:cd:ec:65:02:c2:c4:c1:66:6e: b0:c5:bf:3a:84:e8:53:8f:d2:a7:8a:ab:0d:00:cd: 7f:7a:c9:66:dc:52:6a:20:a8:b3:b1:92:b8:c6:15: 4b:1b:e0:17:9d:83:6f:89:67:e5:72:44:07:88:38: b8:e5:7c:0e:ab:3c:d5:5c:9d:f9:29:0a:15:09:8d: 45:bd:89:77:e7:e1:4a:54:92:72:2c:a4:8e:26:4c: 53:d4:18:a8:68:5d:5b:35:89:68:b6:4f:6b:77:93: 5b:40:84:b2:dd:86:bc:43:76:aa:dc:b0:48:17:eb: 97:d0:f7:ca:67:d3:25:b7:cc:61:01:0d:c4:6e:26: 89:c0:83:5e:98:2a:22:22:5d:84:9d:e0:41:f5:cc: 48:43:58:c2:0c:64:9e:d7:65:4e:b3:0c:78:63:f7: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:B8:17:D4:ED:4F:00:15:A6:40:50:9F:23:8E:7B:3C:51:EB:51 X509v3 Authority Key Identifier: keyid:51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1b:19:a9:d2:1a:ad:d8:4a:03:27:04:72:61:b6:7a:c7:0e: 60:af:85:d1:ce:ca:94:3e:81:6a:24:6a:49:2d:0f:1f:6f:64: 15:be:2b:75:74:6f:7b:7a:a2:03:da:2d:4f:a6:c4:26:98:29: bd:cc:e0:8f:2a:60:66:7d:0e:c5:ce:c0:2a:1f:0d:26:38:63: 69:4b:28:b5:8e:92:ea:b6:3b:4b:dc:af:85:00:46:29:34:ab: d3:14:ad:94:db:ab:14:e0:02:2d:04:a2:ec:40:40:bf:d0:ff: 87:a1:b0:bb:40:89:ea:78:de:a1:0a:cc:c2:88:ef:d3:bc:ed: b4:42:48:42:dc:cd:9e:ce:7a:33:50:0a:56:8e:e6:01:ca:7a: 67:cd:a0:67:a2:83:ee:61:11:fa:8b:4b:d0:66:5e:7c:dc:37: bb:39:e8:f1:bf:40:21:8c:af:2e:68:3f:bc:e1:4a:47:42:99: f6:b5:b1:0c:b3:54:49:db:8e:22:80:a7:86:a1:49:ac:a4:9f: 9a:70:a5:eb:f0:57:5f:57:0a:d1:96:f0:a3:8f:3d:c3:d7:f6: 81:04:70:e7:fa:d8:7c:d0:b5:7c:27:d6:4b:76:2e:dd:61:23: 93:f0:fa:17:1b:f8:3a:ff:1f:19:17:ef:91:31:59:41:36:2f: 6c:db:e8:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9opw6dfNXM3ItjVCgpFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMmVjNzYzM2I2ZTU4M2JmYTNmYTdmZjc4NDhmMWFhOWYy ODAwODUwHhcNMjUxMjI2MTQwMTA1WhcNMjUxMjI3MTQwMTA1WjAzMTEwLwYDVQQD EyhlOTBiYjgxN2Q0ZWQ0ZjAwMTVhNjQwNTA5ZjIzOGU3YjNjNTFlYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxl06ZgRnuZTn9wh53Q6/X/kgDr+ TPbOWNpg9GnYAqo9n0qzDbh7oNzLBOEkkx7rPZgqA7+A5lgdwGeKExdHIZ1N6Saf yIUXiA7LBk2f+OWP3ZHDZVv5QV4/BiuDpKrN7GUCwsTBZm6wxb86hOhTj9KniqsN AM1/eslm3FJqIKizsZK4xhVLG+AXnYNviWflckQHiDi45XwOqzzVXJ35KQoVCY1F vYl35+FKVJJyLKSOJkxT1BioaF1bNYlotk9rd5NbQISy3Ya8Q3aq3LBIF+uX0PfK Z9Mlt8xhAQ3EbiaJwINemCoiIl2EneBB9cxIQ1jCDGSe12VOswx4Y/cf4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkLuBfU7U8AFaZAUJ8jjns8UetRMB8GA1UdIwQY MBaAFFEux2M7blg7+j+n/3hI8aqfKACFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81MjI0Y2MtZTc0My00YTZlLTk4YjUt NDFkM2E4NGFiY2NiLzEvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81MjI0Y2MtZTc0My00YTZlLTk4YjUtNDFkM2E4NGFiY2Ni LzEvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRsZqdIa rdhKAycEcmG2escOYK+F0c7KlD6BaiRqSS0PH29kFb4rdXRve3qiA9otT6bEJpgp vczgjypgZn0Oxc7AKh8NJjhjaUsotY6S6rY7S9yvhQBGKTSr0xStlNurFOACLQSi 7EBAv9D/h6Gwu0CJ6njeoQrMwojv07zttEJIQtzNns56M1AKVo7mAcp6Z82gZ6KD 7mER+otL0GZefNw3uzno8b9AIYyvLmg/vOFKR0KZ9rWxDLNUSduOIoCnhqFJrKSf mnCl6/BXX1cK0Zbwo489w9f2gQRw5/rYfNC1fCfWS3Yu3WEjk/D6Fxv4Ov8fGRfv kTFZQTYvbNvo7A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:23 2025 by rpki-client