This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json) Hash identifier: j6A4sGyrf60cGbPh8PahoW1fLgIRwT/eSdxdjISzdhM= Subject key identifier: E9:01:1A:93:6C:00:0B:28:A3:66:9F:05:EF:E9:D9:89:8A:87:5B:E0 Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f Certificate serial: 019B4C2800B8E6EEACAE1E3C651131BC3D35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft Manifest number: 09D5 Signing time: Tue 23 Dec 2025 17:00:48 +0000 Manifest this update: Tue 23 Dec 2025 17:00:48 +0000 Manifest next update: Wed 24 Dec 2025 17:00:48 +0000 Files and hashes: 1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=) 2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: 4TROlkiHojMZlnrYSlbPwwQTn1/y4wcNLipxrD8cFEM=) 3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=) 4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:00:b8:e6:ee:ac:ae:1e:3c:65:11:31:bc:3d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f Validity Not Before: Dec 23 17:00:48 2025 GMT Not After : Dec 24 17:00:48 2025 GMT Subject: CN=e9011a936c000b28a3669f05efe9d9898a875be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:bf:17:03:27:2a:e6:23:b7:d4:52:17:da: af:7d:46:76:a5:ae:be:eb:a4:ee:e7:45:88:87:04: 00:69:24:e9:31:c5:35:ef:e6:5d:cb:64:d7:e7:1d: 4b:ee:e1:fa:31:ea:82:11:84:cb:dc:92:62:dd:d6: c9:de:e3:55:8c:e9:a0:29:2e:6f:ef:9a:f8:21:f0: c5:b7:36:c1:6f:7b:35:38:ad:81:a7:2c:24:a2:f4: 8c:1b:3b:6f:65:05:50:b0:b2:a5:eb:25:5f:d6:5f: bb:a7:66:4a:7f:5e:a5:ef:e3:e8:36:dc:07:f0:b8: bc:10:84:57:8f:ef:df:72:4d:bc:55:00:cc:da:73: b9:09:0f:46:e1:54:0b:a7:2f:8d:24:0a:5f:3f:79: 0e:79:68:ac:b9:97:14:b8:04:3b:64:ea:b0:a2:c1: 6e:c7:b2:9b:8d:d6:04:f6:b8:e2:7f:96:c4:ca:b7: 50:d6:20:53:43:db:3b:d5:63:c9:67:53:a4:ff:23: 94:04:0e:ef:36:34:17:aa:f5:d6:7e:27:44:7d:5e: 22:07:ac:0d:fa:18:2d:06:ea:ae:d3:14:2b:79:93: 13:62:a8:1d:c3:d1:b7:72:67:4e:b8:d6:ae:6a:b2: c8:4a:95:fd:c3:a5:cb:00:55:dd:43:c1:cb:7e:f0: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:01:1A:93:6C:00:0B:28:A3:66:9F:05:EF:E9:D9:89:8A:87:5B:E0 X509v3 Authority Key Identifier: keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8f:26:11:68:a4:56:2e:c0:fc:e5:c6:10:c6:81:4c:cc:36: 1f:83:37:a7:e6:d4:9c:62:4b:2e:7f:a7:b1:10:94:d7:84:4b: 5a:d9:a5:9f:30:77:9c:ba:23:40:0c:5d:ce:58:c1:6f:ff:29: b7:01:33:a7:23:ba:b2:b4:5a:7d:2b:89:97:55:94:e5:4b:03: a9:0c:18:c7:4b:47:f0:a5:02:57:12:ae:1f:39:a8:be:26:fe: a4:b2:cd:60:8b:b7:b4:6a:04:49:15:7b:a1:e2:01:b5:dd:bc: d3:d6:48:ad:83:ac:43:92:63:4e:5b:6a:15:c1:a1:38:47:1d: 73:f1:45:a4:82:ac:4b:c3:1c:da:b5:bf:94:0c:a2:4a:9a:72: da:4f:be:4f:50:6f:dc:d4:a5:ea:20:62:75:3d:78:ef:cb:05: f1:8b:36:dd:9e:a5:25:a4:84:59:6e:46:c1:67:a2:53:48:0e: 7a:be:7c:c9:a7:e5:5a:6a:6c:aa:5a:79:af:64:ce:fa:81:51: 49:2d:c9:91:47:8a:30:ce:41:c5:75:a5:96:ef:de:f7:0e:65: 7e:85:da:2b:41:cd:0c:e9:5a:43:aa:35:d9:86:e1:e3:86:1d: cb:23:a2:f0:6f:d8:69:39:49:14:29:da:d8:a0:9f:9c:ae:c9: a7:eb:5d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKAC45u6srh48ZRExvD01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk ODI2OGYwHhcNMjUxMjIzMTcwMDQ4WhcNMjUxMjI0MTcwMDQ4WjAzMTEwLwYDVQQD EyhlOTAxMWE5MzZjMDAwYjI4YTM2NjlmMDVlZmU5ZDk4OThhODc1YmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyG/FwMnKuYjt9RSF9qvfUZ2pa6+ 66Tu50WIhwQAaSTpMcU17+Zdy2TX5x1L7uH6MeqCEYTL3JJi3dbJ3uNVjOmgKS5v 75r4IfDFtzbBb3s1OK2BpywkovSMGztvZQVQsLKl6yVf1l+7p2ZKf16l7+PoNtwH 8Li8EIRXj+/fck28VQDM2nO5CQ9G4VQLpy+NJApfP3kOeWisuZcUuAQ7ZOqwosFu x7KbjdYE9rjif5bEyrdQ1iBTQ9s71WPJZ1Ok/yOUBA7vNjQXqvXWfidEfV4iB6wN +hgtBuqu0xQreZMTYqgdw9G3cmdOuNauarLISpX9w6XLAFXdQ8HLfvClgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkBGpNsAAsoo2afBe/p2YmKh1vgMB8GA1UdIwQY MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADY8mEWik Vi7A/OXGEMaBTMw2H4M3p+bUnGJLLn+nsRCU14RLWtmlnzB3nLojQAxdzljBb/8p twEzpyO6srRafSuJl1WU5UsDqQwYx0tH8KUCVxKuHzmovib+pLLNYIu3tGoESRV7 oeIBtd2809ZIrYOsQ5JjTltqFcGhOEcdc/FFpIKsS8Mc2rW/lAyiSppy2k++T1Bv 3NSl6iBidT1478sF8Ys23Z6lJaSEWW5GwWeiU0gOer58yaflWmpsqlp5r2TO+oFR SS3JkUeKMM5BxXWllu/e9w5lfoXaK0HNDOlaQ6o12Ybh44YdyyOi8G/YaTlJFCna 2KCfnK7Jp+td/A== -----END CERTIFICATE-----Generated at Wed Dec 24 00:16:55 2025 by rpki-client