This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json) Hash identifier: QyAyTrMoM+iDhwkPqQfSxr1ilXa8ljIbHcWSjPgwfEs= Subject key identifier: AF:0B:32:A7:E3:22:D0:D3:17:60:15:56:3A:93:2D:B4:DA:1D:26:BA Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f Certificate serial: 019B5975EC1FC10FCAEA4986D8AE49935880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft Manifest number: 0E15 Signing time: Fri 26 Dec 2025 07:00:58 +0000 Manifest this update: Fri 26 Dec 2025 07:00:58 +0000 Manifest next update: Sat 27 Dec 2025 07:00:58 +0000 Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: RnA0r29sRNp5KKAMr3iK4uAZ781GdSfKzP4TfmeL/N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ec:1f:c1:0f:ca:ea:49:86:d8:ae:49:93:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f Validity Not Before: Dec 26 07:00:58 2025 GMT Not After : Dec 27 07:00:58 2025 GMT Subject: CN=af0b32a7e322d0d3176015563a932db4da1d26ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:80:0c:f2:57:09:5e:fc:91:ed:45:f3:70: 8e:ea:14:96:2f:16:09:65:d3:f0:d7:e0:b9:6a:7f: f8:e9:b7:dd:ad:4f:94:d0:ba:3a:fa:8f:3a:5e:4e: 89:f2:e8:8b:f2:19:e3:8d:1c:e6:06:71:c6:65:44: c2:29:cb:dc:41:7b:03:0f:51:86:f4:2e:71:ea:98: b9:ac:ae:35:5f:f0:49:5a:80:7c:3c:2f:4a:26:3a: 7f:3d:ad:56:e3:12:79:fc:3f:73:5f:d8:18:ac:6b: cd:ba:9f:46:26:bb:4a:0c:31:25:36:b8:90:1a:00: 46:12:64:65:21:e9:4f:00:b1:ff:cb:57:bb:28:44: 18:8e:7d:92:42:e6:d0:78:a2:79:d1:ce:0d:08:90: 59:82:b5:e8:55:d1:ab:4d:2f:6b:a0:1a:db:4e:93: d8:bc:6d:81:cb:85:e2:d0:f1:8a:5e:ba:32:61:5e: 08:c9:9e:37:dd:bc:d9:1d:7c:b5:7a:34:b1:a9:5b: 8d:a7:01:a7:e2:af:c2:73:e3:1e:e4:af:65:f4:27: 2f:58:db:0c:dc:1a:30:11:c1:61:27:e9:10:7c:7d: 40:37:56:e7:79:30:9f:97:14:a3:0f:ce:9b:45:03: cf:90:9c:9f:2a:bd:e7:00:6c:1b:64:4d:f0:94:eb: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0B:32:A7:E3:22:D0:D3:17:60:15:56:3A:93:2D:B4:DA:1D:26:BA X509v3 Authority Key Identifier: keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bf:f5:5b:b8:1f:8d:9f:55:b1:f2:d0:5a:2c:1b:09:ec:aa: f0:69:3d:a7:df:dd:85:db:c6:8b:e4:0e:46:3a:1f:9d:15:e1: c0:02:a8:46:bb:55:d2:96:55:95:4a:21:95:68:26:07:dd:64: d1:16:26:d9:0b:40:84:ea:80:e5:3b:be:1e:0a:f3:c3:f2:a6: 5a:3c:a4:c7:ed:35:32:6a:52:d8:1a:99:24:ae:d0:1f:54:ab: f8:b8:93:43:d6:3c:49:ad:82:5d:ae:64:01:4d:64:ca:2b:14: 00:c8:bb:30:9c:da:5f:91:42:c0:9d:03:7d:99:d4:8a:a6:95: 19:11:b4:24:a2:df:87:d7:4f:5b:ab:f9:fa:88:bf:b2:d8:f8: 97:95:e8:4e:99:e4:54:68:49:2d:da:1a:06:b7:22:6f:61:90: b8:d1:90:1d:f5:5e:ef:21:c8:d9:60:04:da:31:26:92:37:76: df:a2:f8:85:5f:b3:b9:19:95:68:a4:85:87:63:46:d6:27:5c: 2e:26:3d:e9:1e:a3:06:cb:67:28:d2:87:ed:f1:55:84:e0:cf: 07:7a:c1:2f:b9:b5:8d:4e:e9:9b:ec:8d:58:a6:ed:f8:b1:3f: 41:e5:3f:f8:ca:80:cb:dd:f3:41:b1:80:9f:51:c4:7b:f5:5e: e4:1b:9b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdewfwQ/K6kmG2K5Jk1iAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzYwOWU0NDg2MTIwZGI5ZjE3YjZkM2Q3NGJmODU1ZjI3 MTU3NWYwHhcNMjUxMjI2MDcwMDU4WhcNMjUxMjI3MDcwMDU4WjAzMTEwLwYDVQQD EyhhZjBiMzJhN2UzMjJkMGQzMTc2MDE1NTYzYTkzMmRiNGRhMWQyNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupuADPJXCV78ke1F83CO6hSWLxYJ ZdPw1+C5an/46bfdrU+U0Lo6+o86Xk6J8uiL8hnjjRzmBnHGZUTCKcvcQXsDD1GG 9C5x6pi5rK41X/BJWoB8PC9KJjp/Pa1W4xJ5/D9zX9gYrGvNup9GJrtKDDElNriQ GgBGEmRlIelPALH/y1e7KEQYjn2SQubQeKJ50c4NCJBZgrXoVdGrTS9roBrbTpPY vG2By4Xi0PGKXroyYV4IyZ433bzZHXy1ejSxqVuNpwGn4q/Cc+Me5K9l9CcvWNsM 3BowEcFhJ+kQfH1AN1bneTCflxSjD86bRQPPkJyfKr3nAGwbZE3wlOv+KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8LMqfjItDTF2AVVjqTLbTaHSa6MB8GA1UdIwQY MBaAFFN2CeRIYSDbnxe209dL+FXycVdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wNWRiODAtMWJhZi00MzdhLWE0OGYt ZDRkNDRiZDkxYWZlLzEvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wNWRiODAtMWJhZi00MzdhLWE0OGYtZDRkNDRiZDkxYWZl LzEvVTNZSjVFaGhJTnVmRjdiVDEwdjRWZkp4VjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASr/1W7gf jZ9VsfLQWiwbCeyq8Gk9p9/dhdvGi+QORjofnRXhwAKoRrtV0pZVlUohlWgmB91k 0RYm2QtAhOqA5Tu+Hgrzw/KmWjykx+01MmpS2BqZJK7QH1Sr+LiTQ9Y8Sa2CXa5k AU1kyisUAMi7MJzaX5FCwJ0DfZnUiqaVGRG0JKLfh9dPW6v5+oi/stj4l5XoTpnk VGhJLdoaBrcib2GQuNGQHfVe7yHI2WAE2jEmkjd236L4hV+zuRmVaKSFh2NG1idc LiY96R6jBstnKNKH7fFVhODPB3rBL7m1jU7pm+yNWKbt+LE/QeU/+MqAy93zQbGA n1HEe/Ve5BubOA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:19 2025 by rpki-client