This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json) Hash identifier: ykr+vNcwO6SnVNy3e5XZgXVB+eJKJ1Hvofmi7A2954g= Subject key identifier: 1E:29:17:DA:A6:EB:8E:DE:77:0E:E6:30:D0:9E:93:01:57:2A:BE:06 Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019B19F1DC45D2A1D6EC404B0E959241D0F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft Manifest number: 045A Signing time: Sat 13 Dec 2025 23:00:39 +0000 Manifest this update: Sat 13 Dec 2025 23:00:39 +0000 Manifest next update: Sun 14 Dec 2025 23:00:39 +0000 Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=) 2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: sVMYHdKMZ75DcF+4ZEd3YsSvF7LpJltcaroUsYVgJtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:dc:45:d2:a1:d6:ec:40:4b:0e:95:92:41:d0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Dec 13 23:00:39 2025 GMT Not After : Dec 14 23:00:39 2025 GMT Subject: CN=1e2917daa6eb8ede770ee630d09e9301572abe06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:50:c7:1f:c1:22:9f:02:3b:95:85:0d:de: cb:c8:fa:56:13:9c:99:ab:e8:d0:0b:b7:dd:af:97: 51:af:8b:51:54:55:84:a6:85:ca:94:00:e3:12:ad: e6:a2:cd:da:1b:69:8d:54:48:b8:d6:b5:44:e1:fb: 7b:8f:0f:e7:e7:d8:0d:13:b5:38:1c:9d:24:12:b1: c3:e9:63:8b:57:38:4e:54:45:eb:49:0c:f4:53:72: 09:95:e1:f1:6b:32:ce:44:48:70:1a:b3:85:05:53: 9d:a0:09:83:d3:aa:11:d1:74:6b:d0:67:45:38:2e: 63:a4:94:3c:15:b3:10:cb:e7:87:e4:e1:1f:11:a4: ee:d1:9f:f0:55:a9:e6:cd:65:1f:ac:3f:bf:5a:30: 84:fa:cd:6e:41:a5:91:65:a7:0c:e5:72:88:bc:93: 9c:d4:3b:e7:36:7f:ec:14:17:fe:69:19:52:f7:49: 0b:7b:76:73:60:63:58:9e:6b:22:26:4e:7b:75:08: 04:02:cb:db:00:c0:86:31:db:75:5c:b3:5f:77:bb: 9d:e9:c8:d7:a9:a7:6b:d3:be:c2:49:ab:ac:95:6c: e7:1d:f4:6b:72:e2:55:6a:62:fe:ce:ee:69:49:7c: bb:29:c2:a5:96:8e:99:ba:93:08:e1:26:5d:64:37: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:29:17:DA:A6:EB:8E:DE:77:0E:E6:30:D0:9E:93:01:57:2A:BE:06 X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:21:98:ff:a5:6c:0b:10:48:32:6a:f1:0d:fc:cd:01:09:97: 13:57:b1:91:0e:4b:b2:46:75:17:6b:7f:fb:8a:af:77:56:75: 20:48:88:ce:cf:fe:da:5a:56:c5:81:82:ac:1d:fb:1f:27:8a: be:dd:02:a3:a2:10:70:18:2f:dc:c9:51:3e:bf:73:19:30:76: 85:9e:14:7b:76:7e:e7:56:28:2c:c0:fa:7a:3f:b3:d4:33:25: 93:59:4d:26:94:87:16:30:8b:22:90:bb:58:66:86:84:a4:d3: ad:84:34:af:c6:66:d5:47:44:d3:6d:26:3d:af:a5:8b:17:19: 06:f6:84:c0:f7:d6:09:dc:cb:15:ac:d7:4e:46:46:c5:ce:a5: d0:d5:f3:04:7c:fb:ad:13:e9:14:77:7b:17:ff:c4:79:4c:9d: 69:be:36:6d:16:c0:de:a5:a0:23:7c:5e:18:79:d5:7c:7f:63: 56:a6:55:18:51:f6:f8:1c:13:71:87:7e:c5:29:f7:d1:55:84: 32:44:92:bc:d9:b1:fa:5e:05:ad:68:29:ed:fb:c8:9e:82:a9: 70:7a:49:6c:6f:54:03:08:83:05:dd:5e:ea:34:cb:d0:fe:fc: 6d:21:47:0f:50:34:68:52:ca:02:72:17:d9:59:ae:8d:8f:c2: ad:39:92:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8dxF0qHW7EBLDpWSQdD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjUxMjEzMjMwMDM5WhcNMjUxMjE0MjMwMDM5WjAzMTEwLwYDVQQD EygxZTI5MTdkYWE2ZWI4ZWRlNzcwZWU2MzBkMDllOTMwMTU3MmFiZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY9Qxx/BIp8CO5WFDd7LyPpWE5yZ q+jQC7fdr5dRr4tRVFWEpoXKlADjEq3mos3aG2mNVEi41rVE4ft7jw/n59gNE7U4 HJ0kErHD6WOLVzhOVEXrSQz0U3IJleHxazLOREhwGrOFBVOdoAmD06oR0XRr0GdF OC5jpJQ8FbMQy+eH5OEfEaTu0Z/wVanmzWUfrD+/WjCE+s1uQaWRZacM5XKIvJOc 1DvnNn/sFBf+aRlS90kLe3ZzYGNYnmsiJk57dQgEAsvbAMCGMdt1XLNfd7ud6cjX qadr077CSauslWznHfRrcuJVamL+zu5pSXy7KcKllo6ZupMI4SZdZDfDRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4pF9qm647edw7mMNCekwFXKr4GMB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyGY/6Vs CxBIMmrxDfzNAQmXE1exkQ5LskZ1F2t/+4qvd1Z1IEiIzs/+2lpWxYGCrB37HyeK vt0Co6IQcBgv3MlRPr9zGTB2hZ4Ue3Z+51YoLMD6ej+z1DMlk1lNJpSHFjCLIpC7 WGaGhKTTrYQ0r8Zm1UdE020mPa+lixcZBvaEwPfWCdzLFazXTkZGxc6l0NXzBHz7 rRPpFHd7F//EeUydab42bRbA3qWgI3xeGHnVfH9jVqZVGFH2+BwTcYd+xSn30VWE MkSSvNmx+l4FrWgp7fvInoKpcHpJbG9UAwiDBd1e6jTL0P78bSFHD1A0aFLKAnIX 2VmujY/CrTmSVA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:04:46 2025 by rpki-client