This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json) Hash identifier: /XdCnNE7Yk9Vuh/FHhq2GKDY2p7awNk2Z3ShTo0j+Hw= Subject key identifier: 36:C6:0A:CE:3B:52:21:4F:5D:1E:9B:3A:FD:25:D1:2D:DF:09:24:10 Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53 Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53 Certificate serial: 019B0DB753A1EFA10C84F836F0E89E06DB35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 14:01:16 +0000 Manifest this update: Thu 11 Dec 2025 14:01:16 +0000 Manifest next update: Fri 12 Dec 2025 14:01:16 +0000 Files and hashes: 1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=) 2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=) 3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: sgKfcsILbNNsR8id+8qbARsXksXSmtvPOFBoBhdzuIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:53:a1:ef:a1:0c:84:f8:36:f0:e8:9e:06:db:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53 Validity Not Before: Dec 11 14:01:16 2025 GMT Not After : Dec 12 14:01:16 2025 GMT Subject: CN=36c60ace3b52214f5d1e9b3afd25d12ddf092410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:14:f0:9b:1b:c8:8f:ea:5b:ad:ba:f6:c8: 8d:2f:f5:29:e8:85:e9:9e:4e:cb:28:7b:86:53:69: 1b:17:c3:03:b6:6e:69:0b:56:89:ee:ad:64:1f:3b: ed:85:14:82:4b:c5:16:3e:40:77:1f:b9:5b:eb:b5: c4:b9:1c:e1:97:41:f6:9c:97:04:6f:c1:0f:b2:d0: e9:47:ab:fe:e1:81:d9:c7:35:d8:12:03:a0:a6:96: f6:82:45:36:2f:9b:85:a4:d8:15:fc:98:91:01:c0: ba:58:21:3b:3a:56:0b:26:53:ae:f5:09:d1:65:28: ea:82:de:7d:ea:07:13:52:9a:a5:56:73:b4:4c:23: 15:03:71:b2:63:df:23:c0:1c:b6:09:ef:e9:20:0f: 5a:1d:e5:50:f2:ed:92:2c:af:81:48:20:c9:98:d5: a3:ad:d9:ad:8d:2c:11:df:f5:24:9a:01:13:d6:27: 52:0f:6b:d4:8a:4f:f1:af:e4:13:35:fe:c9:4e:eb: 1f:28:d4:ad:01:dc:dd:4d:72:7c:a9:fe:c9:ec:00: 70:26:20:cc:f4:4f:34:94:5e:37:f0:46:ce:a8:61: e3:2e:1b:02:11:09:74:77:39:06:33:fc:99:42:4e: 82:e4:47:d3:9b:18:e1:a1:18:87:b6:4a:5a:d5:47: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:0A:CE:3B:52:21:4F:5D:1E:9B:3A:FD:25:D1:2D:DF:09:24:10 X509v3 Authority Key Identifier: keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:28:77:73:9e:f3:10:ed:cd:67:83:0c:b7:99:c0:6a:0a:a3: 94:a2:d8:84:6d:da:2a:c7:24:a1:b8:82:41:74:22:9b:9a:5a: 5d:3f:6d:77:e8:a7:fd:1e:6a:68:15:fa:75:5f:55:ce:14:74: f5:62:2e:4e:f7:52:18:ee:d5:ca:4e:2a:25:4b:74:af:11:71: c1:7c:03:b6:ba:95:26:cd:77:61:6f:03:a3:ee:31:8e:c6:44: 87:82:b9:bb:b0:e0:f3:4f:82:12:6b:c9:75:69:31:e3:ea:13: be:b5:a2:53:4b:b4:1d:ef:d3:12:dc:a2:15:5f:1e:47:9f:a5: 44:28:4f:79:0f:d1:b1:c0:fb:29:4c:65:07:43:af:2c:d2:0c: 84:ae:8f:8c:fb:66:60:f1:4f:45:96:93:9d:8f:a1:b3:34:15: 0f:dd:66:d6:8b:7b:b2:19:25:97:0b:89:79:55:cc:e0:6d:02: 0a:11:96:2e:af:d4:ab:7d:a7:ce:e8:e5:b4:37:7a:92:65:6a: b6:73:8f:f2:f7:77:31:b6:56:9f:bd:d0:80:02:2a:68:f9:1a: e3:56:22:d2:4d:4c:58:c5:60:6a:3f:e5:04:48:f1:d7:5e:d0: b0:5b:8f:ed:8e:95:e9:cd:95:8b:7f:f7:28:d8:8f:d4:9e:b2: ae:90:d3:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNt1Oh76EMhPg28OieBts1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmQwOTkyODcyMTUyYTg2ZDYwZDk2M2I4N2QwMTgxN2Mw MGZjNTMwHhcNMjUxMjExMTQwMTE2WhcNMjUxMjEyMTQwMTE2WjAzMTEwLwYDVQQD EygzNmM2MGFjZTNiNTIyMTRmNWQxZTliM2FmZDI1ZDEyZGRmMDkyNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/8U8JsbyI/qW6269siNL/Up6IXp nk7LKHuGU2kbF8MDtm5pC1aJ7q1kHzvthRSCS8UWPkB3H7lb67XEuRzhl0H2nJcE b8EPstDpR6v+4YHZxzXYEgOgppb2gkU2L5uFpNgV/JiRAcC6WCE7OlYLJlOu9QnR ZSjqgt596gcTUpqlVnO0TCMVA3GyY98jwBy2Ce/pIA9aHeVQ8u2SLK+BSCDJmNWj rdmtjSwR3/UkmgET1idSD2vUik/xr+QTNf7JTusfKNStAdzdTXJ8qf7J7ABwJiDM 9E80lF438EbOqGHjLhsCEQl0dzkGM/yZQk6C5EfTmxjhoRiHtkpa1Ue9VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbGCs47UiFPXR6bOv0l0S3fCSQQMB8GA1UdIwQY MBaAFFO9CZKHIVKobWDZY7h9AYF8APxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQt ZTE1ZjRmODQwOWU2LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQtZTE1ZjRmODQwOWU2 LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyh3c57z EO3NZ4MMt5nAagqjlKLYhG3aKsckobiCQXQim5paXT9td+in/R5qaBX6dV9VzhR0 9WIuTvdSGO7Vyk4qJUt0rxFxwXwDtrqVJs13YW8Do+4xjsZEh4K5u7Dg80+CEmvJ dWkx4+oTvrWiU0u0He/TEtyiFV8eR5+lRChPeQ/RscD7KUxlB0OvLNIMhK6PjPtm YPFPRZaTnY+hszQVD91m1ot7shkllwuJeVXM4G0CChGWLq/Uq32nzujltDd6kmVq tnOP8vd3MbZWn73QgAIqaPka41Yi0k1MWMVgaj/lBEjx117QsFuP7Y6V6c2Vi3/3 KNiP1J6yrpDTsw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:23:36 2025 by rpki-client