This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json) Hash identifier: 34QdZn8lKyBo8ep1fRMd3Bf30b81BADf4cBYMMxIVqE= Subject key identifier: FE:E6:4E:61:EB:7A:02:39:6B:0F:96:00:44:B5:56:75:F7:6C:9E:26 Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100 Certificate serial: 019B59081522CD73EADD115BBF6B6DB07ADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft Manifest number: 0658 Signing time: Fri 26 Dec 2025 05:01:00 +0000 Manifest this update: Fri 26 Dec 2025 05:01:00 +0000 Manifest next update: Sat 27 Dec 2025 05:01:00 +0000 Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: MIclMSRL8cxjHFa39rMMAuMd5YtSSuTZdi1E1k3lzQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:15:22:cd:73:ea:dd:11:5b:bf:6b:6d:b0:7a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100 Validity Not Before: Dec 26 05:01:00 2025 GMT Not After : Dec 27 05:01:00 2025 GMT Subject: CN=fee64e61eb7a02396b0f960044b55675f76c9e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:6b:42:46:b3:bd:32:bc:e2:69:08:9f:51: 94:f6:8c:32:3e:6c:b0:07:21:61:93:97:d4:b6:29: b7:96:c1:d4:2e:ad:f7:84:49:bf:0c:4f:e8:cd:ef: 2d:74:4c:8e:e1:e0:8f:86:86:68:14:88:a0:80:be: 2d:90:08:0c:43:ae:8d:de:5e:31:5e:83:2c:c6:fc: b6:6a:51:2c:49:5c:51:66:8a:c3:4b:53:04:2b:a6: ff:f3:3d:18:a2:49:d4:92:f5:26:05:64:b8:7e:55: c8:a2:2c:57:56:e5:25:40:af:68:93:51:6a:5b:87: 55:2d:35:c7:2e:fa:55:d2:e2:44:75:4f:c1:72:93: fb:65:79:a2:3b:66:2c:e2:d2:db:16:36:83:b2:7d: 8b:65:38:fb:5f:54:6e:86:b9:64:56:19:49:8d:e7: 0e:75:34:8b:fd:14:61:b6:f6:e1:c3:e7:4e:a1:69: 41:47:3c:4b:d0:6e:0d:4c:dc:eb:c5:f0:f2:36:fa: c9:35:b4:36:e4:32:a3:e3:3f:85:c1:22:ef:6f:14: 80:d7:b4:62:01:8e:54:8f:cf:8a:c0:26:d1:a8:17: d4:25:3a:34:db:c5:ad:61:73:29:fb:5d:11:18:e3: 74:5c:9c:0a:32:8b:86:16:76:be:43:13:01:ac:ed: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:4E:61:EB:7A:02:39:6B:0F:96:00:44:B5:56:75:F7:6C:9E:26 X509v3 Authority Key Identifier: keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1f:f2:e0:d1:d8:76:a9:82:3a:1e:42:0d:94:c7:25:11:44: 33:3e:ab:35:b3:3f:85:14:4e:14:39:94:85:53:da:58:26:f1: 46:0b:cd:d7:f4:b0:c6:a5:5d:7e:ac:6c:99:31:fc:75:2e:d2: a6:35:97:c2:08:01:e0:d0:34:7b:94:12:b1:ce:94:66:0f:96: 5c:2b:d2:e8:9e:84:9b:87:53:26:af:5f:dd:ee:ff:e4:ba:5f: 09:8e:97:f5:fc:55:89:09:f8:c0:6b:24:e4:64:e5:68:77:0c: 50:d6:74:6c:b9:7d:0f:59:75:07:31:c5:35:13:dd:2a:3d:a6: 89:91:da:39:16:1e:7a:6c:68:c7:d0:f4:08:a8:ba:61:f7:c7: 3b:f6:c1:bd:81:73:f0:4e:8d:9d:15:e1:4c:d3:39:18:cd:f7: fb:b2:89:15:0a:ec:18:62:ba:65:aa:d2:a5:53:f3:b9:fe:11: 7d:19:9a:c2:e7:ef:b5:d1:91:5a:75:c7:da:67:f8:1c:46:e8: b5:92:6d:9a:84:30:e8:25:f5:b1:f3:24:29:b8:18:f6:7a:7c: e3:0b:f1:f8:67:9b:a2:9c:ab:a0:df:b7:1b:cf:13:c7:3a:36: be:c3:17:9a:3e:9c:77:3d:41:7b:54:04:05:93:ba:73:85:2d: 90:44:fd:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCBUizXPq3RFbv2ttsHreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTUwNjA5Y2E4ZGQ3ZjZjNmZhM2NlY2FjNzc5NDIxZWM2 YzAxMDAwHhcNMjUxMjI2MDUwMTAwWhcNMjUxMjI3MDUwMTAwWjAzMTEwLwYDVQQD EyhmZWU2NGU2MWViN2EwMjM5NmIwZjk2MDA0NGI1NTY3NWY3NmM5ZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KhrQkazvTK84mkIn1GU9owyPmyw ByFhk5fUtim3lsHULq33hEm/DE/oze8tdEyO4eCPhoZoFIiggL4tkAgMQ66N3l4x XoMsxvy2alEsSVxRZorDS1MEK6b/8z0YoknUkvUmBWS4flXIoixXVuUlQK9ok1Fq W4dVLTXHLvpV0uJEdU/BcpP7ZXmiO2Ys4tLbFjaDsn2LZTj7X1RuhrlkVhlJjecO dTSL/RRhtvbhw+dOoWlBRzxL0G4NTNzrxfDyNvrJNbQ25DKj4z+FwSLvbxSA17Ri AY5Uj8+KwCbRqBfUJTo028WtYXMp+10RGON0XJwKMouGFna+QxMBrO26QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7mTmHregI5aw+WAES1VnX3bJ4mMB8GA1UdIwQY MBaAFFOVBgnKjdf2xvo87Kx3lCHsbAEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84NzZhNjUtYmY1NC00NjUyLTg5NzAt ODAxY2Y0ZmVjNzRlLzEvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84NzZhNjUtYmY1NC00NjUyLTg5NzAtODAxY2Y0ZmVjNzRl LzEvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx/y4NHY dqmCOh5CDZTHJRFEMz6rNbM/hRROFDmUhVPaWCbxRgvN1/SwxqVdfqxsmTH8dS7S pjWXwggB4NA0e5QSsc6UZg+WXCvS6J6Em4dTJq9f3e7/5LpfCY6X9fxViQn4wGsk 5GTlaHcMUNZ0bLl9D1l1BzHFNRPdKj2miZHaORYeemxox9D0CKi6YffHO/bBvYFz 8E6NnRXhTNM5GM33+7KJFQrsGGK6ZarSpVPzuf4RfRmawufvtdGRWnXH2mf4HEbo tZJtmoQw6CX1sfMkKbgY9np84wvx+GebopyroN+3G88Txzo2vsMXmj6cdz1Be1QE BZO6c4UtkET9Bw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:10 2025 by rpki-client