This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json) Hash identifier: pHRRmpItGhY/zXdqZGhY64Ch3FbzYRCSoUdlYvHJYms= Subject key identifier: 2C:B6:15:8A:B5:DC:FB:23:D9:BD:85:3D:91:5C:AA:16:65:76:BC:39 Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e Certificate serial: 019B32D5FF6077F7CB430B2DA369A5D9EBED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:00:43 +0000 Manifest this update: Thu 18 Dec 2025 19:00:43 +0000 Manifest next update: Fri 19 Dec 2025 19:00:43 +0000 Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=) 2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: OCzsfcOfxpFA4HQBtPNE+0HMQObVMus/5Jy8T+NeEe0=) 3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:ff:60:77:f7:cb:43:0b:2d:a3:69:a5:d9:eb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e Validity Not Before: Dec 18 19:00:43 2025 GMT Not After : Dec 19 19:00:43 2025 GMT Subject: CN=2cb6158ab5dcfb23d9bd853d915caa166576bc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:24:f0:de:3e:01:49:11:45:68:4c:5c:91: ff:95:6e:2d:3d:d1:dd:d1:33:64:6c:8a:28:24:3e: 36:1f:7a:dd:16:06:cd:ca:43:1f:ed:21:2c:d6:16: 86:96:0a:40:36:f7:9b:db:90:9b:f4:2e:08:cc:8d: 2d:6c:92:99:4b:54:9a:63:2c:13:a7:24:66:92:23: d9:a1:16:4b:a3:22:89:10:a1:0e:9e:9f:3b:05:be: 1e:3d:23:4c:22:e6:df:94:ab:b1:2d:d1:d9:d6:4b: 44:0d:cc:3b:05:41:6b:ba:44:c1:72:c9:7b:9e:1b: 49:03:6c:b2:93:4f:6b:07:18:e1:fc:63:dc:08:f8: eb:0f:d7:dc:91:f6:b7:64:42:f2:c2:d9:fc:ee:c9: f7:a0:45:90:e1:93:91:f5:d6:e7:ec:25:4e:fb:f2: c2:46:a4:23:8c:a1:fc:65:53:14:3a:4f:be:5a:2b: f3:96:fa:b8:10:f1:c4:86:f7:05:75:3c:b4:95:5e: e6:e9:26:f3:c8:21:11:52:4a:f6:f3:8e:6e:5f:04: b1:66:9a:5c:62:ea:83:d8:b9:f0:8a:4b:dc:83:dc: 69:bb:f1:ed:df:ad:e7:3e:a3:13:71:fe:a4:2b:0b: b7:e0:56:2c:76:e8:e4:81:60:b6:82:7d:dc:55:66: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B6:15:8A:B5:DC:FB:23:D9:BD:85:3D:91:5C:AA:16:65:76:BC:39 X509v3 Authority Key Identifier: keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7c:c4:3a:a4:87:65:a8:61:79:1a:7c:2f:ad:18:0d:ab:6a: 76:29:be:7d:83:9d:bb:06:dd:bb:86:c7:96:96:7d:f7:fa:4d: 9b:98:f4:ff:14:4e:78:97:dd:3c:07:7f:4e:74:f0:30:36:a8: 48:bd:30:91:1c:e7:58:d7:d8:d1:e6:af:92:64:ae:e4:95:b7: f1:54:7f:5e:30:32:15:fa:18:91:7c:e1:1c:4f:6f:5c:17:e4: dc:30:83:29:bc:4d:39:da:e1:b4:1d:84:a3:e3:3f:ba:04:ff: 63:46:a1:65:4a:62:54:c7:b9:46:74:5f:61:13:c0:ac:71:ea: 54:50:83:83:33:0d:60:3b:d9:b3:20:d9:17:c8:c8:54:85:06: bd:0f:d8:f5:a3:b2:1e:e2:7d:59:d9:b9:dd:62:9e:28:bb:aa: 71:db:6e:6b:3a:98:0a:7a:8b:df:86:6d:16:0a:26:e3:65:3c: d7:88:39:75:d2:d9:a0:7d:0a:92:6e:81:51:30:6c:89:de:93: a7:04:d3:44:31:33:15:01:11:88:46:84:19:f4:85:62:3f:83: 34:4b:20:e8:03:af:06:29:82:90:ab:20:18:d2:b1:66:81:89: b1:5b:c1:6d:d1:96:7e:08:7b:8d:fa:b3:71:b4:11:dc:a1:fe: bc:04:27:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1f9gd/fLQwsto2ml2evtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZDljOTY5Njc1YTI3ZDUxNWQ4ZmFiMmM2M2NkZTBlZDA1 NjQ5MWUwHhcNMjUxMjE4MTkwMDQzWhcNMjUxMjE5MTkwMDQzWjAzMTEwLwYDVQQD EygyY2I2MTU4YWI1ZGNmYjIzZDliZDg1M2Q5MTVjYWExNjY1NzZiYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wk8N4+AUkRRWhMXJH/lW4tPdHd 0TNkbIooJD42H3rdFgbNykMf7SEs1haGlgpANveb25Cb9C4IzI0tbJKZS1SaYywT pyRmkiPZoRZLoyKJEKEOnp87Bb4ePSNMIubflKuxLdHZ1ktEDcw7BUFrukTBcsl7 nhtJA2yyk09rBxjh/GPcCPjrD9fckfa3ZELywtn87sn3oEWQ4ZOR9dbn7CVO+/LC RqQjjKH8ZVMUOk++Wivzlvq4EPHEhvcFdTy0lV7m6SbzyCERUkr2845uXwSxZppc YuqD2Lnwikvcg9xpu/Ht363nPqMTcf6kKwu34FYsdujkgWC2gn3cVWZGAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCy2FYq13Psj2b2FPZFcqhZldrw5MB8GA1UdIwQY MBaAFFPZyWlnWifVFdj6ssY83g7QVkkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUt Zjk1YzYwYjQ2NmEwLzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUtZjk1YzYwYjQ2NmEw LzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXzEOqSH ZahheRp8L60YDatqdim+fYOduwbdu4bHlpZ99/pNm5j0/xROeJfdPAd/TnTwMDao SL0wkRznWNfY0eavkmSu5JW38VR/XjAyFfoYkXzhHE9vXBfk3DCDKbxNOdrhtB2E o+M/ugT/Y0ahZUpiVMe5RnRfYRPArHHqVFCDgzMNYDvZsyDZF8jIVIUGvQ/Y9aOy HuJ9Wdm53WKeKLuqcdtuazqYCnqL34ZtFgom42U814g5ddLZoH0Kkm6BUTBsid6T pwTTRDEzFQERiEaEGfSFYj+DNEsg6AOvBimCkKsgGNKxZoGJsVvBbdGWfgh7jfqz cbQR3KH+vAQnkQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:53 2025 by rpki-client