This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json) Hash identifier: 10TixSSadXgAu9yBt1Dzw/hURshqthi2ESb/vzbxp/Q= Subject key identifier: 85:3C:FE:AA:C2:60:A4:99:D2:8F:25:45:97:8A:4B:0F:8E:B5:35:7C Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724 Certificate serial: 019B20D01595E8E693FBBFC16EFC5D2868D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft Manifest number: 0529 Signing time: Mon 15 Dec 2025 07:01:06 +0000 Manifest this update: Mon 15 Dec 2025 07:01:06 +0000 Manifest next update: Tue 16 Dec 2025 07:01:06 +0000 Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: 4zjwR+Q6eTykGD+YFUigY8UIH6coxK0ma/4QO+nTtD4=) 2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=) 3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:15:95:e8:e6:93:fb:bf:c1:6e:fc:5d:28:68:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724 Validity Not Before: Dec 15 07:01:06 2025 GMT Not After : Dec 16 07:01:06 2025 GMT Subject: CN=853cfeaac260a499d28f2545978a4b0f8eb5357c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:7d:94:81:bf:bc:40:9a:a0:a8:77:30:8b: f6:9f:42:b7:cc:e7:5a:4e:7a:73:de:c7:cb:7a:89: d2:46:d7:d5:ca:ed:12:bb:30:b6:7b:28:32:75:2d: 3b:e3:4f:dd:9c:b0:61:59:d6:57:57:53:4d:cb:35: 15:3b:36:c9:5b:9b:fa:8c:34:77:38:4c:68:2e:29: 81:5b:83:e8:8e:69:66:3e:43:02:b3:b4:14:ee:89: bc:15:ef:a7:df:a1:69:5b:2e:3c:86:a9:dc:a3:7b: e9:ae:9d:fa:88:13:25:c6:40:6a:e9:22:60:3a:59: 1f:11:bd:6b:0e:b0:5a:7e:af:e3:ff:4d:f0:3e:d0: f2:2d:be:bd:96:5e:51:c7:b5:d4:9b:47:f3:b7:c3: db:4a:e1:1d:d4:d3:85:1e:d8:8b:50:bb:13:84:fd: 46:2b:d2:3c:56:a3:4b:ce:7b:69:31:0d:54:d9:b5: eb:4c:c7:8c:6c:3e:b3:23:34:99:b5:03:f1:6f:56: b4:fd:00:91:70:7b:8e:49:59:37:15:f5:b1:d7:03: 11:13:b1:f6:bd:c7:21:84:9c:b5:cc:4d:70:ea:d5: 0a:d7:d0:00:1b:97:b4:76:cb:f1:28:d0:e3:70:c3: 7d:8c:e7:18:62:45:eb:71:3c:83:8c:8b:06:34:08: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3C:FE:AA:C2:60:A4:99:D2:8F:25:45:97:8A:4B:0F:8E:B5:35:7C X509v3 Authority Key Identifier: keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:35:31:18:08:18:dc:c9:ff:1c:dd:a0:b5:2f:fb:ee:32:af: a9:89:b0:6a:f0:cf:f9:91:5d:dd:9c:e8:3b:89:61:cd:22:a2: c3:71:a3:39:df:aa:b7:a9:e2:69:f7:ed:31:2c:16:8e:b2:17: 9e:55:30:b5:e9:21:5f:bd:72:06:49:be:6d:08:d4:14:fb:4d: f1:d2:ab:38:ed:43:49:de:35:3b:20:a8:55:6b:0a:7b:ce:86: 8a:b8:90:28:ef:68:46:69:38:82:9b:f5:14:2c:91:0a:3d:08: ef:04:64:1e:06:44:5e:93:f1:de:76:93:41:db:60:37:e5:8f: 88:9c:f6:35:78:4a:d8:5d:a6:57:eb:5d:69:da:df:47:3a:ef: 56:c7:c2:b6:32:99:5e:89:4a:6f:cc:01:60:63:b1:32:b6:c8: 60:f3:77:41:a2:42:17:e4:3c:93:b9:01:78:9f:e9:ab:63:c5: 24:74:0d:ae:09:5b:02:c9:3f:56:4f:b4:ff:f7:a5:70:4a:9b: 38:1a:03:80:b6:f9:56:d7:45:40:f9:21:f7:ad:11:9f:b7:f4: 30:ba:2f:39:8c:de:d1:03:ac:f0:df:38:c5:0a:30:88:12:88: 37:1e:84:49:2c:41:96:df:56:58:41:38:0f:d4:d3:63:1f:25: 4c:4a:88:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0BWV6OaT+7/BbvxdKGjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5 OWE3MjQwHhcNMjUxMjE1MDcwMTA2WhcNMjUxMjE2MDcwMTA2WjAzMTEwLwYDVQQD Eyg4NTNjZmVhYWMyNjBhNDk5ZDI4ZjI1NDU5NzhhNGIwZjhlYjUzNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnR9lIG/vECaoKh3MIv2n0K3zOda Tnpz3sfLeonSRtfVyu0SuzC2eygydS0740/dnLBhWdZXV1NNyzUVOzbJW5v6jDR3 OExoLimBW4PojmlmPkMCs7QU7om8Fe+n36FpWy48hqnco3vprp36iBMlxkBq6SJg OlkfEb1rDrBafq/j/03wPtDyLb69ll5Rx7XUm0fzt8PbSuEd1NOFHtiLULsThP1G K9I8VqNLzntpMQ1U2bXrTMeMbD6zIzSZtQPxb1a0/QCRcHuOSVk3FfWx1wMRE7H2 vcchhJy1zE1w6tUK19AAG5e0dsvxKNDjcMN9jOcYYkXrcTyDjIsGNAhKkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIU8/qrCYKSZ0o8lRZeKSw+OtTV8MB8GA1UdIwQY MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2 LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjUxGAgY 3Mn/HN2gtS/77jKvqYmwavDP+ZFd3ZzoO4lhzSKiw3GjOd+qt6niafftMSwWjrIX nlUwtekhX71yBkm+bQjUFPtN8dKrOO1DSd41OyCoVWsKe86GiriQKO9oRmk4gpv1 FCyRCj0I7wRkHgZEXpPx3naTQdtgN+WPiJz2NXhK2F2mV+tdadrfRzrvVsfCtjKZ XolKb8wBYGOxMrbIYPN3QaJCF+Q8k7kBeJ/pq2PFJHQNrglbAsk/Vk+0//elcEqb OBoDgLb5VtdFQPkh960Rn7f0MLovOYze0QOs8N84xQowiBKINx6ESSxBlt9WWEE4 D9TTYx8lTEqIOA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:57 2025 by rpki-client