This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json) Hash identifier: Pm8TXPUPSG5l0o56hrnnW2PNiUhTOd9kASSfsG7dugw= Subject key identifier: BD:E7:24:EB:58:56:18:49:C3:7F:35:10:05:39:E6:B3:F8:4B:8B:8D Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36 Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436 Certificate serial: 019B0D80236200CB8F4E1E1399546F86D4D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft Manifest number: 177F Signing time: Thu 11 Dec 2025 13:00:59 +0000 Manifest this update: Thu 11 Dec 2025 13:00:59 +0000 Manifest next update: Fri 12 Dec 2025 13:00:59 +0000 Files and hashes: 1: 1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa (hash: xMXmg6U7dk2I47UFlru0YwTYb2PTB2hNFflS+Hs5NZA=) 2: 47T-_h4yrwTkNISxK8J3mV88Fh0.roa (hash: BQum24aWy9VPt+BVB7kWULFG+ntEIPlMGrK1sM76ojQ=) 3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: k5NqFwy8iVxejwa1bQyZg0I0u13uVV7ocdH2eBowegI=) 4: _Swn7rfHkqyddWiH6mJBPzEvtPw.roa (hash: DdKMWCZ6/KHD8pm9QRG9mImRVRpGoqtnHO9unsKXibs=) 5: tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa (hash: gVnI/4eE/aC58PSWg9zuIzqcxtqe9LJ1Nbo9TV7QxCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:23:62:00:cb:8f:4e:1e:13:99:54:6f:86:d4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436 Validity Not Before: Dec 11 13:00:59 2025 GMT Not After : Dec 12 13:00:59 2025 GMT Subject: CN=bde724eb58561849c37f35100539e6b3f84b8b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1f:7f:d6:64:ba:cd:a9:ce:10:73:3c:cf:27: be:b0:b0:df:1d:10:90:49:10:45:65:69:3a:70:a6: 96:7a:98:60:53:5b:b6:a3:96:53:1f:bc:60:27:e0: 5d:8b:e3:df:55:d6:0b:b5:6a:49:d5:ab:82:b9:cb: b0:f3:b2:f3:6d:c2:58:2c:5b:c6:b0:13:44:f2:15: b1:bb:46:e3:38:11:ea:d9:56:b2:16:b9:38:c8:0a: b1:de:c4:70:90:de:33:ce:26:5e:c8:e9:f0:9d:9d: d2:4e:d2:1a:17:84:37:22:09:75:dd:02:98:0d:37: bb:99:43:4b:6d:99:1c:38:3d:21:41:12:97:e9:70: 28:b0:2c:5f:7c:e6:77:9d:20:48:24:f4:d4:68:d0: 07:df:02:82:5a:88:bc:97:59:90:35:e1:cc:1f:1f: 64:e3:73:e0:44:d9:a3:ef:9f:01:b2:34:fb:96:8e: 05:d2:6d:f5:8e:c1:62:97:64:7e:9d:7e:9a:33:f2: f7:ce:f7:78:b0:93:e0:37:ef:31:df:93:57:a5:cc: e0:02:2b:3b:8e:23:e4:11:3f:57:1c:ef:ef:c0:f3: f3:b0:ec:47:5b:71:4b:be:b7:ab:a6:b0:04:ea:78: 3d:38:8d:ee:29:8d:a8:7e:ef:80:cd:6c:3b:4a:92: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E7:24:EB:58:56:18:49:C3:7F:35:10:05:39:E6:B3:F8:4B:8B:8D X509v3 Authority Key Identifier: keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f9:18:34:35:bb:8a:b0:29:3a:9b:3d:9f:5b:33:bc:0b:8b: 3a:fc:90:15:61:4d:9b:51:aa:3d:da:98:10:2a:ca:02:c7:3a: d8:00:e5:38:9e:80:c9:a3:65:23:ef:01:cd:81:27:9f:29:e9: 3f:a8:f2:84:a1:09:00:53:2c:46:c9:5e:1f:1b:3d:6e:da:74: c5:7f:5f:c5:85:0a:b1:b3:b4:73:ae:ab:9e:66:ea:81:7f:7e: b9:de:57:5c:0b:e7:77:79:ca:9b:0a:0b:98:fa:23:66:91:a0: 6b:0e:42:dd:35:42:93:3f:60:fb:e3:f1:f5:0c:06:25:63:74: b4:72:30:be:3d:5b:e2:f4:35:f4:db:3e:57:81:02:2f:cc:31: 5e:36:5e:29:36:6f:d5:70:28:15:19:87:5c:72:e2:65:92:87: dc:ff:c3:e9:a5:b4:42:5b:be:a7:c8:72:1a:fa:a1:5a:1f:01: c4:0f:34:67:1f:fd:0c:58:a0:32:9c:fd:c1:d1:b5:88:40:0e: 4a:e9:c2:82:4b:2f:88:b9:a4:81:b0:78:0f:16:61:49:61:f0: 6f:20:79:4e:59:8e:a7:d6:43:96:48:f2:e6:95:23:13:fd:4e: bf:72:c5:07:43:3c:42:b9:fd:cd:ae:47:40:81:6d:ba:90:d4: 21:61:3a:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgCNiAMuPTh4TmVRvhtTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjYyYWNlNjE1YjkwNmI0MmFiMjdmNGZiMWQyMDNkZjM2 ZDU0MzYwHhcNMjUxMjExMTMwMDU5WhcNMjUxMjEyMTMwMDU5WjAzMTEwLwYDVQQD EyhiZGU3MjRlYjU4NTYxODQ5YzM3ZjM1MTAwNTM5ZTZiM2Y4NGI4YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x9/1mS6zanOEHM8zye+sLDfHRCQ SRBFZWk6cKaWephgU1u2o5ZTH7xgJ+Bdi+PfVdYLtWpJ1auCucuw87LzbcJYLFvG sBNE8hWxu0bjOBHq2VayFrk4yAqx3sRwkN4zziZeyOnwnZ3STtIaF4Q3Igl13QKY DTe7mUNLbZkcOD0hQRKX6XAosCxffOZ3nSBIJPTUaNAH3wKCWoi8l1mQNeHMHx9k 43PgRNmj758BsjT7lo4F0m31jsFil2R+nX6aM/L3zvd4sJPgN+8x35NXpczgAis7 jiPkET9XHO/vwPPzsOxHW3FLvrerprAE6ng9OI3uKY2ofu+AzWw7SpLitQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3nJOtYVhhJw381EAU55rP4S4uNMB8GA1UdIwQY MBaAFFO2Ks5hW5BrQqsn9PsdID3zbVQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDIt OTcyYTRjM2RjM2YzLzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDItOTcyYTRjM2RjM2Yz LzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/kYNDW7 irApOps9n1szvAuLOvyQFWFNm1GqPdqYECrKAsc62ADlOJ6AyaNlI+8BzYEnnynp P6jyhKEJAFMsRsleHxs9btp0xX9fxYUKsbO0c66rnmbqgX9+ud5XXAvnd3nKmwoL mPojZpGgaw5C3TVCkz9g++Px9QwGJWN0tHIwvj1b4vQ19Ns+V4ECL8wxXjZeKTZv 1XAoFRmHXHLiZZKH3P/D6aW0Qlu+p8hyGvqhWh8BxA80Zx/9DFigMpz9wdG1iEAO SunCgksviLmkgbB4DxZhSWHwbyB5TlmOp9ZDlkjy5pUjE/1Ov3LFB0M8Qrn9za5H QIFtupDUIWE6rg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:42:47 2025 by rpki-client