This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json) Hash identifier: IqjIzuzaaTgZmkLPbkNBpG3L8zoLMNc3nKI/spODwH8= Subject key identifier: D1:96:58:EA:87:99:FC:63:86:0F:ED:9B:E3:26:DA:2A:2C:C5:04:74 Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Certificate serial: 019B5A889B0893C81823A4D26BB134D36135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft Manifest number: 0EFE Signing time: Fri 26 Dec 2025 12:01:00 +0000 Manifest this update: Fri 26 Dec 2025 12:01:00 +0000 Manifest next update: Sat 27 Dec 2025 12:01:00 +0000 Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=) 2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: /NRUqsDf0nRbd+XNypdjw2H9urjmL2oV6m86e/4hdFA=) 3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:9b:08:93:c8:18:23:a4:d2:6b:b1:34:d3:61:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Validity Not Before: Dec 26 12:01:00 2025 GMT Not After : Dec 27 12:01:00 2025 GMT Subject: CN=d19658ea8799fc63860fed9be326da2a2cc50474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:bc:89:6d:18:88:c5:87:b0:31:d8:53:fa: 48:d7:42:69:dd:43:c8:5f:2d:ee:99:83:60:56:d6: f8:a0:b9:b6:cf:b2:75:60:c3:29:22:d3:10:2b:16: d0:41:ea:de:c5:80:b0:fc:e2:1e:33:d3:d0:4f:ba: 60:9a:26:36:84:70:dc:cd:47:02:d0:09:45:83:8a: 7b:f9:ed:38:ac:72:73:b3:ac:cb:9e:bc:78:53:a4: 15:70:6d:12:cb:96:32:1e:12:d1:b0:67:8a:04:98: 43:49:81:92:7e:51:94:3d:1d:30:7f:26:c2:8f:d5: 98:57:4b:57:3c:08:63:64:e0:9c:e4:18:4c:72:83: 6e:1a:ad:e9:3b:c4:5a:5f:75:67:2c:0c:e1:95:54: c0:56:b7:54:4f:17:ea:87:45:77:98:6e:9d:94:3d: 14:5b:c2:3d:65:6e:2f:8a:1a:fc:89:70:00:74:17: 46:13:d7:89:a7:0b:41:08:2d:2c:33:4f:3b:a0:4f: 37:a2:77:28:8c:96:c4:7c:11:97:7a:f9:57:f2:c7: 56:b4:1e:24:13:f7:7f:85:4c:ad:6d:f8:c9:97:e0: 5d:ab:3d:11:8c:a0:7c:80:ec:d8:19:68:46:69:fe: a1:bf:5d:8a:9e:35:72:f5:50:65:d7:18:80:d7:8c: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:96:58:EA:87:99:FC:63:86:0F:ED:9B:E3:26:DA:2A:2C:C5:04:74 X509v3 Authority Key Identifier: keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:80:00:dc:80:1d:91:9e:1a:e1:1f:ed:bc:c5:b1:63:62:85: fc:27:68:36:b2:4c:69:cd:d3:29:6d:2c:0d:7f:02:07:6a:d3: 8e:3f:7b:76:4e:b1:39:56:ed:fc:df:ef:f5:57:db:0d:61:4a: c3:a0:ee:23:be:1d:24:26:c6:af:61:5f:bb:33:d6:c6:c4:55: 6c:bd:8c:6b:3c:7c:75:87:42:b2:e8:02:60:11:2e:ff:14:81: d8:59:b6:f2:d7:53:e2:e0:43:b4:be:8c:9d:f9:64:e2:95:b5: 67:cf:ab:0e:b9:ab:f3:8e:ff:7c:5d:e4:76:8d:07:14:6c:5f: 1a:a1:dd:a5:0e:30:0a:52:b4:1d:a3:e1:99:5b:ce:60:e6:07: be:7f:a4:e3:5d:2f:aa:69:e9:7f:5c:87:11:1b:fe:ad:68:de: ae:43:ee:0b:ff:1e:9e:00:d0:2f:13:b6:bc:4f:99:59:86:66: a9:4c:99:4a:43:d6:bd:28:bc:b3:f7:83:d4:16:4e:88:6a:a0: 2d:50:a8:e4:d5:49:65:5d:41:ce:50:60:cd:75:a6:b7:f2:31: 90:d1:f6:93:2e:4d:b3:1e:c4:f5:bf:09:c8:06:03:c0:6d:21: d9:a2:d1:09:7f:f2:30:12:6a:69:86:de:ee:d6:47:15:78:3e: 7a:4e:f4:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJsIk8gYI6TSa7E002E1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5 NWFmM2QwHhcNMjUxMjI2MTIwMTAwWhcNMjUxMjI3MTIwMTAwWjAzMTEwLwYDVQQD EyhkMTk2NThlYTg3OTlmYzYzODYwZmVkOWJlMzI2ZGEyYTJjYzUwNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRa8iW0YiMWHsDHYU/pI10Jp3UPI Xy3umYNgVtb4oLm2z7J1YMMpItMQKxbQQerexYCw/OIeM9PQT7pgmiY2hHDczUcC 0AlFg4p7+e04rHJzs6zLnrx4U6QVcG0Sy5YyHhLRsGeKBJhDSYGSflGUPR0wfybC j9WYV0tXPAhjZOCc5BhMcoNuGq3pO8RaX3VnLAzhlVTAVrdUTxfqh0V3mG6dlD0U W8I9ZW4vihr8iXAAdBdGE9eJpwtBCC0sM087oE83oncojJbEfBGXevlX8sdWtB4k E/d/hUytbfjJl+Bdqz0RjKB8gOzYGWhGaf6hv12KnjVy9VBl1xiA14yo9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGWWOqHmfxjhg/tm+Mm2iosxQR0MB8GA1UdIwQY MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt NjlkNDA2ZTE4NjUzLzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIAA3IAd kZ4a4R/tvMWxY2KF/CdoNrJMac3TKW0sDX8CB2rTjj97dk6xOVbt/N/v9VfbDWFK w6DuI74dJCbGr2FfuzPWxsRVbL2Mazx8dYdCsugCYBEu/xSB2Fm28tdT4uBDtL6M nflk4pW1Z8+rDrmr847/fF3kdo0HFGxfGqHdpQ4wClK0HaPhmVvOYOYHvn+k410v qmnpf1yHERv+rWjerkPuC/8engDQLxO2vE+ZWYZmqUyZSkPWvSi8s/eD1BZOiGqg LVCo5NVJZV1BzlBgzXWmt/IxkNH2ky5Nsx7E9b8JyAYDwG0h2aLRCX/yMBJqaYbe 7tZHFXg+ek70Tg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:50 2025 by rpki-client