This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json) Hash identifier: 6hK92E99ECFTY31P4eSmFQQJjdKI0LJbYkbg8CjXQQ0= Subject key identifier: 03:74:24:79:4B:78:02:96:4E:EE:E3:45:77:D9:2C:71:0E:37:35:81 Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1 Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1 Certificate serial: 019B37FC439E1CC4DB06DFCA40D924D0E77D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 19:00:37 +0000 Manifest this update: Fri 19 Dec 2025 19:00:37 +0000 Manifest next update: Sat 20 Dec 2025 19:00:37 +0000 Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: g7I7w0BrbQ/S8nYvJIn9pJM0uijaQx43GuEBmKLddbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:43:9e:1c:c4:db:06:df:ca:40:d9:24:d0:e7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1 Validity Not Before: Dec 19 19:00:37 2025 GMT Not After : Dec 20 19:00:37 2025 GMT Subject: CN=037424794b7802964eeee34577d92c710e373581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:53:4d:ab:da:2a:69:a7:14:6d:10:0d:03: 85:fb:e9:7c:2f:b9:d7:48:f3:fb:5d:1f:3d:15:82: d4:c3:c3:a1:66:ee:17:75:91:a8:23:f6:fd:51:75: e6:3f:fe:d1:bc:de:f6:f3:00:45:cc:f8:b2:e8:e3: f0:13:27:48:e0:08:50:31:65:1d:e3:87:97:b9:1f: 76:ce:fb:62:97:3c:29:34:30:ad:3d:9e:61:0f:53: 4b:41:f8:fd:dd:c2:7d:56:64:38:10:fb:b2:62:2f: f4:c2:ff:be:b0:ea:29:f6:a2:0c:b4:cb:8e:bb:f6: 22:dc:cd:06:95:b7:4c:f9:2e:b5:d6:ce:9a:50:6a: 68:83:3a:7f:c6:f4:23:ea:af:5e:35:d5:fd:00:2c: 23:6a:e8:19:4f:76:98:fa:d3:10:a1:bc:3d:77:72: b9:a1:f5:3d:f5:5d:2c:9b:f6:c3:1b:d2:2e:b1:fb: 46:06:dd:0f:cd:73:fc:16:4d:4b:b3:e7:33:86:ef: b4:37:99:c6:16:42:44:6d:1a:07:45:cb:54:4e:ed: d4:2a:3d:0c:6c:0a:ae:cc:9e:d1:31:f0:ca:83:e8: 27:f3:f7:13:54:8e:78:07:54:59:09:22:ed:0f:dc: b1:35:81:66:aa:24:f7:ca:97:c8:52:31:38:5c:c7: b2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:24:79:4B:78:02:96:4E:EE:E3:45:77:D9:2C:71:0E:37:35:81 X509v3 Authority Key Identifier: keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8c:f3:97:c2:21:1f:22:93:23:36:f5:9f:78:c6:32:49:a9: a8:44:d5:3a:a4:45:0a:96:0f:b8:0a:20:fe:e7:4b:95:8e:91: 00:24:9b:a4:dd:1f:d3:81:83:77:86:c2:0f:4f:52:65:c3:52: 9c:31:0d:f7:76:8c:13:df:50:6a:5a:6f:9f:d2:1b:f0:cb:5b: 4e:0b:b4:b4:57:38:e3:20:fc:0e:f5:7a:49:e5:b2:d7:97:38: 65:51:b6:40:66:b6:4b:5d:30:ab:fb:ed:21:87:b5:68:3e:13: d5:85:2e:2c:26:fd:c6:ec:f1:82:f3:d1:a6:45:14:ac:4c:ba: 88:80:1e:db:30:f3:6c:f6:91:82:aa:d8:d0:4f:94:7b:68:62: 37:0c:42:88:9e:87:2b:9d:82:4e:7b:2b:bc:6a:7c:9e:90:e4: d5:90:9a:08:bc:00:eb:ef:74:44:e3:e1:90:15:7e:e5:4c:c8: 8a:46:6d:d1:1d:84:98:de:cd:7e:fa:56:7d:e6:1d:cc:5e:39: 44:fc:c8:89:25:96:5f:73:d7:87:32:e3:32:09:69:a4:9d:a8: ce:fd:9a:24:8d:78:5d:ea:af:7e:43:92:ef:e8:88:4f:cd:44: 3a:35:71:14:83:c4:cb:e3:3f:a5:82:2e:7b:1e:c8:6f:f3:1a: 6f:a3:f7:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/EOeHMTbBt/KQNkk0Od9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNjU4M2RlODM2ZmNjMjhlNzBiZjY2ZWFkYjhkMzhmM2Y2 NGY0ZTEwHhcNMjUxMjE5MTkwMDM3WhcNMjUxMjIwMTkwMDM3WjAzMTEwLwYDVQQD EygwMzc0MjQ3OTRiNzgwMjk2NGVlZWUzNDU3N2Q5MmM3MTBlMzczNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMhTTavaKmmnFG0QDQOF++l8L7nX SPP7XR89FYLUw8OhZu4XdZGoI/b9UXXmP/7RvN728wBFzPiy6OPwEydI4AhQMWUd 44eXuR92zvtilzwpNDCtPZ5hD1NLQfj93cJ9VmQ4EPuyYi/0wv++sOop9qIMtMuO u/Yi3M0GlbdM+S611s6aUGpogzp/xvQj6q9eNdX9ACwjaugZT3aY+tMQobw9d3K5 ofU99V0sm/bDG9IusftGBt0PzXP8Fk1Ls+czhu+0N5nGFkJEbRoHRctUTu3UKj0M bAquzJ7RMfDKg+gn8/cTVI54B1RZCSLtD9yxNYFmqiT3ypfIUjE4XMeyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAN0JHlLeAKWTu7jRXfZLHEONzWBMB8GA1UdIwQY MBaAFFNlg96Db8wo5wv2bq24048/ZPThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZjI2M2EtNDE5My00MzA5LTljN2Et ODJhNjk5MGRmMzhkLzEvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82ZjI2M2EtNDE5My00MzA5LTljN2EtODJhNjk5MGRmMzhk LzEvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4zzl8Ih HyKTIzb1n3jGMkmpqETVOqRFCpYPuAog/udLlY6RACSbpN0f04GDd4bCD09SZcNS nDEN93aME99Qalpvn9Ib8MtbTgu0tFc44yD8DvV6SeWy15c4ZVG2QGa2S10wq/vt IYe1aD4T1YUuLCb9xuzxgvPRpkUUrEy6iIAe2zDzbPaRgqrY0E+Ue2hiNwxCiJ6H K52CTnsrvGp8npDk1ZCaCLwA6+90ROPhkBV+5UzIikZt0R2EmN7NfvpWfeYdzF45 RPzIiSWWX3PXhzLjMglppJ2ozv2aJI14XeqvfkOS7+iIT81EOjVxFIPEy+M/pYIu ex7Ib/Mab6P3sw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:47 2025 by rpki-client