This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json) Hash identifier: TTxAe0bMNHIVh2ikx0GfGeetjxcMURfRp4+EpxNor4E= Subject key identifier: F3:C8:98:A9:4F:96:29:F4:0D:3E:8B:9B:A2:CE:7E:4D:58:64:72:10 Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Certificate serial: 019B0A48FEF02A5CC67B3B9398D162D0D8EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft Manifest number: 1770 Signing time: Wed 10 Dec 2025 22:01:54 +0000 Manifest this update: Wed 10 Dec 2025 22:01:54 +0000 Manifest next update: Thu 11 Dec 2025 22:01:54 +0000 Files and hashes: 1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=) 2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: 9lms0WXLzALsa8NrRbtWhQsgviY8VIWVMkJKHpOFCRI=) 3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:48:fe:f0:2a:5c:c6:7b:3b:93:98:d1:62:d0:d8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Validity Not Before: Dec 10 22:01:54 2025 GMT Not After : Dec 11 22:01:54 2025 GMT Subject: CN=f3c898a94f9629f40d3e8b9ba2ce7e4d58647210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:f7:cc:2f:bc:a5:e4:10:12:ec:6b:a6:2c: 40:45:71:d1:10:81:19:d8:62:74:7b:a7:6c:0d:91: 60:72:56:44:40:19:c9:5d:5e:fe:ba:f2:f1:01:0b: 27:95:b4:83:98:79:c2:9c:8f:de:e6:23:c4:e1:ef: f0:67:a4:c5:7d:00:bf:16:6f:08:a4:0b:c5:0b:74: f0:82:39:5d:7e:65:d0:6e:03:72:d9:56:02:dc:a5: 08:62:3e:d2:82:13:bd:7f:25:d7:50:ac:2f:03:51: ce:9e:29:af:49:f0:52:e9:f7:d5:ee:e0:ec:9f:6c: fa:f3:af:c2:84:b8:74:d3:15:f8:1a:16:40:11:cf: ea:5e:1e:1d:70:27:90:bb:1d:b2:27:0c:54:a5:06: 93:85:ce:c9:92:29:56:c7:9b:fe:38:6d:8d:c4:63: d8:74:a1:19:89:8e:39:0c:f0:be:5a:df:0f:ae:0a: 0e:8c:21:46:c7:b7:7e:19:2b:e3:53:a9:79:4c:0a: 94:77:fb:33:b7:fb:64:ad:73:1a:50:e8:c5:2b:9b: 78:6e:26:b2:eb:e3:6f:55:1e:f9:b1:aa:16:54:bc: 0e:61:b4:ff:32:93:1f:77:c1:59:a6:ba:8b:a8:a5: a2:7c:52:6e:79:ea:c5:cf:35:6d:20:a7:d5:95:af: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C8:98:A9:4F:96:29:F4:0D:3E:8B:9B:A2:CE:7E:4D:58:64:72:10 X509v3 Authority Key Identifier: keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:36:f2:c1:06:6d:77:e3:6c:52:16:3e:b1:1d:5d:3f:fe:b7: 92:fd:e6:63:f2:c0:36:4b:a7:99:4f:b7:97:7c:b8:1c:55:6a: 48:5f:b9:58:6d:75:b2:df:05:05:b6:a9:4c:f1:71:62:2b:24: f7:31:b3:eb:ee:6d:6c:98:b2:93:fe:e1:42:90:7c:23:b1:f7: 8c:9c:a6:c6:67:ee:df:cf:00:49:e9:5a:79:36:90:19:23:5b: 87:1a:02:d6:82:ae:08:29:3e:c9:b5:c6:bc:db:d3:45:74:7a: d3:cf:8e:07:89:9f:87:e8:d3:a4:59:b3:86:a7:18:ec:39:d4: 00:bf:75:79:ff:66:b8:4a:d2:de:4d:e4:0d:5b:1b:37:39:5c: f3:c0:02:11:4b:63:ac:62:c9:67:94:e0:f8:6c:fd:cc:08:d4: 46:5a:32:17:3a:dd:c7:ec:d5:53:82:4d:fc:1c:a7:17:0c:65: 66:cd:1c:39:87:49:7b:a2:d9:43:7c:6a:48:3e:40:e0:72:42: ea:ce:64:b4:0f:4e:24:84:5f:7e:37:f5:94:6b:34:8b:1d:4c: 1d:d9:44:11:59:d9:da:db:f0:58:a7:ab:c1:52:09:24:64:ce: 4e:7f:e9:72:74:d1:ee:96:c6:ca:58:4b:e9:fb:88:f7:80:5f: 1b:f8:0c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKSP7wKlzGezuTmNFi0NjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1 YWU4YjQwHhcNMjUxMjEwMjIwMTU0WhcNMjUxMjExMjIwMTU0WjAzMTEwLwYDVQQD EyhmM2M4OThhOTRmOTYyOWY0MGQzZThiOWJhMmNlN2U0ZDU4NjQ3MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ73zC+8peQQEuxrpixARXHREIEZ 2GJ0e6dsDZFgclZEQBnJXV7+uvLxAQsnlbSDmHnCnI/e5iPE4e/wZ6TFfQC/Fm8I pAvFC3TwgjldfmXQbgNy2VYC3KUIYj7SghO9fyXXUKwvA1HOnimvSfBS6ffV7uDs n2z686/ChLh00xX4GhZAEc/qXh4dcCeQux2yJwxUpQaThc7JkilWx5v+OG2NxGPY dKEZiY45DPC+Wt8PrgoOjCFGx7d+GSvjU6l5TAqUd/szt/tkrXMaUOjFK5t4biay 6+NvVR75saoWVLwOYbT/MpMfd8FZprqLqKWifFJueerFzzVtIKfVla/YLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPImKlPlin0DT6Lm6LOfk1YZHIQMB8GA1UdIwQY MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxjbywQZt d+NsUhY+sR1dP/63kv3mY/LANkunmU+3l3y4HFVqSF+5WG11st8FBbapTPFxYisk 9zGz6+5tbJiyk/7hQpB8I7H3jJymxmfu388ASelaeTaQGSNbhxoC1oKuCCk+ybXG vNvTRXR608+OB4mfh+jTpFmzhqcY7DnUAL91ef9muErS3k3kDVsbNzlc88ACEUtj rGLJZ5Tg+Gz9zAjURloyFzrdx+zVU4JN/BynFwxlZs0cOYdJe6LZQ3xqSD5A4HJC 6s5ktA9OJIRffjf1lGs0ix1MHdlEEVnZ2tvwWKerwVIJJGTOTn/pcnTR7pbGylhL 6fuI94BfG/gMaQ== -----END CERTIFICATE-----Generated at Thu Dec 11 01:50:39 2025 by rpki-client