This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json) Hash identifier: E99W43OXHaKWU8lAxmpZPKNemT8GHt45UO0bt68PmuM= Subject key identifier: 84:64:CA:08:87:A8:6B:04:9F:F3:96:44:3E:C9:55:37:F8:7A:0B:60 Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Certificate serial: 019B2776F4067C4D877DD27283BB6D0182A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 14:01:05 +0000 Manifest this update: Tue 16 Dec 2025 14:01:05 +0000 Manifest next update: Wed 17 Dec 2025 14:01:05 +0000 Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: b05/iEySMmP5CB3Q972cNiFFqllgAU8M2LKXKQxNhhA=) 2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:f4:06:7c:4d:87:7d:d2:72:83:bb:6d:01:82:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Validity Not Before: Dec 16 14:01:05 2025 GMT Not After : Dec 17 14:01:05 2025 GMT Subject: CN=8464ca0887a86b049ff396443ec95537f87a0b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b5:98:9a:7d:dc:47:ca:e3:1d:7b:14:63:a7: 5c:df:7a:b8:5c:f9:4a:b3:df:8c:ab:da:43:52:82: b8:f4:6e:7c:64:bc:72:a5:1d:b7:26:61:30:75:da: 55:e4:8a:a4:6d:9c:2c:0f:40:71:c8:a8:cf:b8:34: 2e:66:4a:7d:bd:3b:76:aa:f8:3f:48:b1:a0:8f:2a: 81:11:f3:07:cf:9c:6e:33:07:e1:b6:c4:6d:7e:d2: c8:59:05:1f:35:10:93:ae:fa:3b:31:ee:fe:6b:8c: 37:ca:59:3f:35:2d:77:ef:8a:60:00:c4:6b:d7:10: 02:0a:b2:d2:bb:d5:8f:8f:52:a8:03:53:f7:43:02: 14:84:93:bd:1b:18:47:c6:f6:95:c0:1b:5a:7f:ad: 02:1a:a6:30:43:a3:1a:77:30:24:65:b4:c8:df:ce: 32:0f:2a:14:25:d9:1f:ee:df:e2:89:45:e0:16:6c: 39:d8:27:81:8d:17:59:2b:e6:65:56:b2:2d:19:ce: cc:cb:4d:64:c2:8a:86:83:73:58:f7:41:77:71:a2: 03:03:21:e1:28:d4:bd:dc:e2:fe:ca:ad:a6:d6:de: da:74:8b:e0:85:c0:8a:3b:b8:34:9f:0d:6e:cb:93: 0a:0b:70:bd:b3:7b:79:f8:22:fc:91:ff:d5:88:4b: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:CA:08:87:A8:6B:04:9F:F3:96:44:3E:C9:55:37:F8:7A:0B:60 X509v3 Authority Key Identifier: keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:27:2d:09:ed:03:45:95:fe:36:9b:10:dc:ee:12:ea:65:76: 44:56:23:58:b4:af:13:4c:94:55:f3:5f:71:67:bc:e9:cf:ad: 71:f6:18:34:28:7b:52:d4:b3:16:eb:f4:b6:88:f5:d1:41:0d: 6c:c1:0e:91:78:d4:83:d9:39:3c:66:0e:14:18:a0:5c:5d:31: 13:12:6d:00:2b:c6:74:20:6a:27:83:75:aa:9b:57:05:f1:6e: 42:79:6e:1b:aa:ef:50:28:7a:d4:7d:f4:d7:28:e4:42:34:10: c3:c4:2e:02:1e:41:1a:c3:cb:ce:ee:99:80:d5:d5:ac:e2:11: 92:3d:f2:b3:49:58:75:26:dd:af:9b:b7:ed:b8:3c:0f:b3:d2: f8:93:cf:18:3c:3d:5c:8b:bc:e5:c5:ab:ef:8f:af:9e:2c:2b: d7:0d:c4:6f:8c:a3:61:fd:18:53:2b:45:b7:70:77:bb:9e:18: 82:ee:bd:b2:d5:07:ba:bb:7e:83:c6:30:6a:68:66:1f:b1:67: 8c:49:91:21:e1:ec:89:9e:35:bc:fe:a2:69:91:1b:94:2f:a5: 79:0a:dd:15:ce:be:b4:f4:81:a6:d7:f2:72:f2:00:66:71:1a: d4:ed:e2:47:0f:f7:be:a0:19:bb:e7:f3:c3:28:a1:37:38:54: e6:8c:79:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndvQGfE2HfdJyg7ttAYKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl OWMxOWYwHhcNMjUxMjE2MTQwMTA1WhcNMjUxMjE3MTQwMTA1WjAzMTEwLwYDVQQD Eyg4NDY0Y2EwODg3YTg2YjA0OWZmMzk2NDQzZWM5NTUzN2Y4N2EwYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77WYmn3cR8rjHXsUY6dc33q4XPlK s9+Mq9pDUoK49G58ZLxypR23JmEwddpV5IqkbZwsD0BxyKjPuDQuZkp9vTt2qvg/ SLGgjyqBEfMHz5xuMwfhtsRtftLIWQUfNRCTrvo7Me7+a4w3ylk/NS1374pgAMRr 1xACCrLSu9WPj1KoA1P3QwIUhJO9GxhHxvaVwBtaf60CGqYwQ6MadzAkZbTI384y DyoUJdkf7t/iiUXgFmw52CeBjRdZK+ZlVrItGc7My01kwoqGg3NY90F3caIDAyHh KNS93OL+yq2m1t7adIvghcCKO7g0nw1uy5MKC3C9s3t5+CL8kf/ViEsLiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRkygiHqGsEn/OWRD7JVTf4egtgMB8GA1UdIwQY MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5 LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCctCe0D RZX+NpsQ3O4S6mV2RFYjWLSvE0yUVfNfcWe86c+tcfYYNCh7UtSzFuv0toj10UEN bMEOkXjUg9k5PGYOFBigXF0xExJtACvGdCBqJ4N1qptXBfFuQnluG6rvUCh61H30 1yjkQjQQw8QuAh5BGsPLzu6ZgNXVrOIRkj3ys0lYdSbdr5u37bg8D7PS+JPPGDw9 XIu85cWr74+vniwr1w3Eb4yjYf0YUytFt3B3u54Ygu69stUHurt+g8YwamhmH7Fn jEmRIeHsiZ41vP6iaZEblC+leQrdFc6+tPSBptfycvIAZnEa1O3iRw/3vqAZu+fz wyihNzhU5ox5GQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:44:10 2025 by rpki-client