This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json) Hash identifier: wrbY5s/uQ7lEIPBFR4GrkxQNINOG0FHmG4HQjXwDv1U= Subject key identifier: A0:FC:B6:77:8D:B0:8A:7F:AD:88:1B:1F:18:5F:F0:30:AE:E5:E0:B8 Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d Certificate serial: 019B37C56B74C94F4D73DA24D9EBE948DEF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 18:00:43 +0000 Manifest this update: Fri 19 Dec 2025 18:00:43 +0000 Manifest next update: Sat 20 Dec 2025 18:00:43 +0000 Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: rH4z+XLXXGkZCG2EtIg13e4L9n0SACnSCsV6UaxcxXE=) 2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:6b:74:c9:4f:4d:73:da:24:d9:eb:e9:48:de:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d Validity Not Before: Dec 19 18:00:43 2025 GMT Not After : Dec 20 18:00:43 2025 GMT Subject: CN=a0fcb6778db08a7fad881b1f185ff030aee5e0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:da:a0:be:79:69:f4:3e:56:64:f4:38:8e: ad:cb:89:5b:70:e0:37:d2:97:25:75:11:1f:c1:ca: 34:a1:50:fd:fb:d5:d5:7f:06:4f:08:b8:98:ee:77: 5c:91:3c:9d:60:75:ea:8c:93:02:33:15:c0:e0:92: 83:30:fc:f6:a1:af:c8:69:53:12:84:dd:fa:aa:0f: 69:61:55:32:4b:15:8d:e6:43:bf:a9:1a:9e:05:fd: 5d:87:df:7e:a9:b7:5c:d0:1b:5b:07:b9:bf:77:65: 68:fe:54:94:3c:19:3c:4c:9d:13:1c:e4:6c:94:79: 3c:65:3d:63:21:7e:ea:da:25:b6:7a:fa:2e:d0:34: 70:cb:f8:e2:33:88:c7:1b:c8:cd:80:f9:17:25:00: 5a:e4:0f:b6:0f:5a:69:64:14:3f:b2:ca:c1:9d:87: 4f:f6:6a:48:36:11:8f:94:98:9c:53:80:10:85:05: 63:fb:e6:7a:a4:3b:bd:65:18:eb:42:0c:b8:6d:55: 07:02:6e:c9:66:00:c4:2d:db:15:ce:53:70:79:68: 62:01:cc:ca:e6:76:6c:ea:f6:d7:f4:93:43:5b:d1: cb:8c:04:4e:0e:67:42:43:35:04:22:6d:2d:e4:80: 8c:74:f7:c6:7a:b1:a5:fb:8e:34:f4:50:63:0e:1a: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:B6:77:8D:B0:8A:7F:AD:88:1B:1F:18:5F:F0:30:AE:E5:E0:B8 X509v3 Authority Key Identifier: keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:39:7a:85:d7:3d:33:38:e2:ea:ef:fa:45:c8:fb:58:59:b5: 49:63:2f:9d:93:48:f8:9b:67:c2:6c:21:a1:8a:48:db:2a:92: 2b:36:98:81:09:da:dc:1b:03:07:22:80:af:65:c1:ec:4d:24: 69:0e:5f:9a:c7:e2:10:d4:8a:c7:27:31:03:b1:da:a2:b8:14: 0c:b8:c5:83:60:8a:1c:15:7d:70:21:3d:b3:35:49:47:4a:ae: 99:89:c0:10:3c:1c:0f:8f:67:f8:8b:1f:b8:d1:66:a7:2a:8b: fb:b3:e6:ed:c3:df:75:77:5a:da:30:d0:22:80:f5:3b:a5:d0: db:81:44:ec:3c:d6:51:4e:6c:93:bb:5d:e2:96:18:fe:0a:07: fa:cb:b7:39:9d:6f:ac:09:3d:58:96:2b:4d:e0:ba:79:39:09: c0:f2:76:3f:8f:70:20:8f:a1:c0:14:98:53:49:d7:0a:73:eb: a5:11:f7:72:ec:26:4b:85:d8:b8:fd:bf:23:7a:0a:32:00:ac: 32:ca:d1:c7:e7:d3:92:88:2d:b3:8e:af:25:8b:f4:33:45:95: 90:16:be:8f:6f:fb:a5:b8:c5:5d:c0:b4:37:d0:31:5b:39:65: 1b:f2:5e:35:d6:ff:c9:a9:e4:8a:4b:53:42:74:63:03:18:69: 75:61:43:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xWt0yU9Nc9ok2evpSN71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWJlNDUzNzZkNTg5ODc0NTJiZDA2NDZiOWE3NGNmOWVi NmNiMmQwHhcNMjUxMjE5MTgwMDQzWhcNMjUxMjIwMTgwMDQzWjAzMTEwLwYDVQQD EyhhMGZjYjY3NzhkYjA4YTdmYWQ4ODFiMWYxODVmZjAzMGFlZTVlMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfraoL55afQ+VmT0OI6ty4lbcOA3 0pcldREfwco0oVD9+9XVfwZPCLiY7ndckTydYHXqjJMCMxXA4JKDMPz2oa/IaVMS hN36qg9pYVUySxWN5kO/qRqeBf1dh99+qbdc0BtbB7m/d2Vo/lSUPBk8TJ0THORs lHk8ZT1jIX7q2iW2evou0DRwy/jiM4jHG8jNgPkXJQBa5A+2D1ppZBQ/ssrBnYdP 9mpINhGPlJicU4AQhQVj++Z6pDu9ZRjrQgy4bVUHAm7JZgDELdsVzlNweWhiAczK 5nZs6vbX9JNDW9HLjARODmdCQzUEIm0t5ICMdPfGerGl+4409FBjDhrkXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD8tneNsIp/rYgbHxhf8DCu5eC4MB8GA1UdIwQY MBaAFFNb5FN21YmHRSvQZGuadM+etsstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUt Y2VjOTJiNTc4MDA2LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUtY2VjOTJiNTc4MDA2 LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjl6hdc9 Mzji6u/6Rcj7WFm1SWMvnZNI+JtnwmwhoYpI2yqSKzaYgQna3BsDByKAr2XB7E0k aQ5fmsfiENSKxycxA7HaorgUDLjFg2CKHBV9cCE9szVJR0qumYnAEDwcD49n+Isf uNFmpyqL+7Pm7cPfdXda2jDQIoD1O6XQ24FE7DzWUU5sk7td4pYY/goH+su3OZ1v rAk9WJYrTeC6eTkJwPJ2P49wII+hwBSYU0nXCnPrpRH3cuwmS4XYuP2/I3oKMgCs MsrRx+fTkogts46vJYv0M0WVkBa+j2/7pbjFXcC0N9AxWzllG/JeNdb/yankiktT QnRjAxhpdWFDSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:41 2025 by rpki-client