This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: reTNQPEP9Pnk6KmKPnfQAFw0dnVOv20vgnikQFdlI1Y= Subject key identifier: 99:8E:81:99:61:5E:5A:5A:64:05:E3:2C:E7:A7:B0:7C:35:7E:62:02 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B010DD617B54AD9448969F5983A3C9E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1401 Signing time: Tue 09 Dec 2025 03:00:42 +0000 Manifest this update: Tue 09 Dec 2025 03:00:42 +0000 Manifest next update: Wed 10 Dec 2025 03:00:42 +0000 Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=) 2: 1z54-R2eueuH54PTbLjKQAuYZZc.roa (hash: na8VleR3QcCgQLwEPa245cMk4lobIy28u3ve1B3bHSc=) 3: 5kD6IuHCvqBGkvTIL1aw15a-eq8.roa (hash: 7zOYElEzQJAaLUzKz3umism7RmjDLk8v6vzcQyKv7Uc=) 4: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=) 5: BIV00WGdCsdMPZily9CzqPCb__g.roa (hash: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=) 6: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=) 7: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=) 8: LO3Dmh76o3yUP4OdafCd70xCYL4.roa (hash: 2kNEWUMSLr9EsTWZSZq6yn8Fzkq0/lSxUPtBhfFtAkQ=) 9: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=) 10: N8DREp9r8mOMTx82dCznYOBmi0U.roa (hash: U1YNu1TATTo2GJ7jthgUIu3jxffhrfvRRPtT3JsQMh8=) 11: R0Hwt2TjrZqW1C7ySxLTYzMnXrc.roa (hash: s6HOXG1qMIRlgT7xfEGOeNiratV5XemVYRhMFOe3pX8=) 12: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=) 13: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=) 14: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: EpbKB1yR63LUvUQpW4Wy/kBcbAzIkgEXyozYh5SUQaE=) 15: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=) 16: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=) 17: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=) 18: arl_yEtpP4DDXrmQ6KVg-jQ2qHc.roa (hash: 5M1R6GNVKpG+HzSwMNPMjsqeNhJUUjm69hOu68qG2wo=) 19: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=) 20: grJ9EqNLqk_bD_Laqgpm9f9Ro9k.roa (hash: xyE/NpDyYVcmoAY0T1X5Ke+ynTjOQBvPePI7t1fDBgE=) 21: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=) 22: s0b5Fwdu-zyh8O2GAm7qQ0wY_w0.roa (hash: Eks6tlyajlng306QOp1CtkVeuU4kzzJoAMHFpAAbNDE=) 23: w2mTXklqmB3KRUtzG9fxKD6ZDi4.roa (hash: DcW9Z2MnonH9MmcvaudchOkSRXJ7jGtdyGxCDchTggE=) 24: xAvwjMwo9Fp6y1PvKbJ6RRt6G3w.roa (hash: fJlab6oLHx5C5SCjDs4c/EMoaSWfL71TwFXzs0YH4ws=) 25: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:0d:d6:17:b5:4a:d9:44:89:69:f5:98:3a:3c:9e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Dec 9 03:00:42 2025 GMT Not After : Dec 10 03:00:42 2025 GMT Subject: CN=998e8199615e5a5a6405e32ce7a7b07c357e6202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:86:df:b6:f6:0c:55:91:21:11:ed:ae:2a: 14:01:4b:c5:cb:dc:75:24:60:d7:5b:83:5e:2e:76: a7:47:82:5d:d5:6f:72:c9:15:7a:3a:cc:35:cd:fc: 2b:19:f5:a3:cf:ca:b5:7f:99:e5:de:5a:37:7d:6f: 8c:7a:61:17:91:f4:22:ff:65:96:6b:ed:8f:25:bf: 4b:74:11:1d:5d:1b:e5:57:97:d0:14:89:cd:98:ef: cf:16:5c:4e:26:d6:9b:3c:e2:e0:e6:f2:00:4b:fa: 57:31:91:68:35:f5:89:85:57:45:46:a8:70:3b:f7: b8:e7:68:53:11:67:a2:30:b0:57:25:9c:73:c4:30: 68:3a:75:1e:24:47:1b:cb:7f:ee:36:36:71:02:ba: 35:60:31:6f:c4:a0:d0:61:42:2a:cb:f1:b8:0f:c6: 33:56:67:78:88:96:74:36:8f:32:a5:fb:38:c8:87: b9:7f:3c:3d:fb:92:d6:07:61:11:36:69:50:c0:a8: 9f:5f:e5:1b:ff:52:59:67:71:cc:72:ac:5a:fd:40: e1:76:58:75:f0:60:8b:9b:44:4b:f4:5b:be:98:ae: f1:1f:5d:ca:d6:a7:ad:e3:57:fb:76:4e:70:69:16: 0e:b4:f2:bd:83:e7:7a:21:59:33:31:0e:b0:1f:ee: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:81:99:61:5E:5A:5A:64:05:E3:2C:E7:A7:B0:7C:35:7E:62:02 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ff:2c:2b:f9:e0:69:f8:d5:2a:28:00:62:ea:01:a0:77:8e: 28:0d:17:2b:a0:06:10:63:c8:48:8d:f6:66:75:44:2c:78:f4: 78:53:a9:63:c4:66:9f:25:93:ed:5c:03:a1:29:e8:54:4c:25: 56:8c:a3:a4:fd:55:1e:99:20:28:3f:81:20:22:9a:92:2f:be: e9:ae:db:d8:94:47:6c:4a:f5:ee:4e:2c:c0:e3:d0:11:a1:23: a6:e7:8b:e3:d7:35:5a:00:81:32:ea:99:50:2e:68:87:e7:f5: a5:e3:1b:a5:98:da:b1:30:85:cf:ab:37:d2:d7:b5:37:04:3b: d4:18:ff:0c:6b:92:f5:f7:45:5e:9b:0b:99:f2:53:68:40:88: ff:1c:cf:4a:5c:99:68:ed:a1:63:4f:23:0f:cb:9f:a0:0e:f1: d2:c3:d8:26:f2:6d:14:41:36:d6:fd:29:83:0c:85:80:1a:a3: 58:8d:f6:8f:29:5b:e2:71:41:49:a4:90:ef:53:76:42:eb:2d: 30:5a:80:49:16:26:44:bf:c7:86:70:a4:d4:f9:7c:3d:32:b5: 3c:68:1f:e1:a7:e1:a1:8e:33:80:91:27:7a:1c:33:5a:3a:aa: f0:f4:2e:86:44:88:92:61:2b:eb:7b:99:6a:b8:07:5c:a9:34: d1:92:e9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsBDdYXtUrZRIlp9Zg6PJ59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMjA5MDMwMDQyWhcNMjUxMjEwMDMwMDQyWjAzMTEwLwYDVQQD Eyg5OThlODE5OTYxNWU1YTVhNjQwNWUzMmNlN2E3YjA3YzM1N2U2MjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+G37b2DFWRIRHtrioUAUvFy9x1 JGDXW4NeLnanR4Jd1W9yyRV6Osw1zfwrGfWjz8q1f5nl3lo3fW+MemEXkfQi/2WW a+2PJb9LdBEdXRvlV5fQFInNmO/PFlxOJtabPOLg5vIAS/pXMZFoNfWJhVdFRqhw O/e452hTEWeiMLBXJZxzxDBoOnUeJEcby3/uNjZxAro1YDFvxKDQYUIqy/G4D8Yz Vmd4iJZ0No8ypfs4yIe5fzw9+5LWB2ERNmlQwKifX+Ub/1JZZ3HMcqxa/UDhdlh1 8GCLm0RL9Fu+mK7xH13K1qet41f7dk5waRYOtPK9g+d6IVkzMQ6wH+5UXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmOgZlhXlpaZAXjLOensHw1fmICMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv8sK/ng afjVKigAYuoBoHeOKA0XK6AGEGPISI32ZnVELHj0eFOpY8RmnyWT7VwDoSnoVEwl VoyjpP1VHpkgKD+BICKaki++6a7b2JRHbEr17k4swOPQEaEjpueL49c1WgCBMuqZ UC5oh+f1peMbpZjasTCFz6s30te1NwQ71Bj/DGuS9fdFXpsLmfJTaECI/xzPSlyZ aO2hY08jD8ufoA7x0sPYJvJtFEE21v0pgwyFgBqjWI32jylb4nFBSaSQ71N2Qust MFqASRYmRL/HhnCk1Pl8PTK1PGgf4afhoY4zgJEnehwzWjqq8PQuhkSIkmEr63uZ argHXKk00ZLpCw== -----END CERTIFICATE-----Generated at Tue Dec 9 11:36:59 2025 by rpki-client