This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json) Hash identifier: GNwVqHTpsJs1z527mk0xvDRNYkMVexXr5FAmxCw0VlQ= Subject key identifier: 28:70:7E:2C:22:36:62:85:49:29:DE:16:1E:33:65:75:0F:13:C4:9B Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e Certificate serial: 019B1D97A59CDDC9ACECEFD8F05B532363EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 16:00:36 +0000 Manifest this update: Sun 14 Dec 2025 16:00:36 +0000 Manifest next update: Mon 15 Dec 2025 16:00:36 +0000 Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=) 2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: RDimot4Cp6BzyDjgtHALQB+nsDd55hVTqZR3v4h+s94=) 3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:97:a5:9c:dd:c9:ac:ec:ef:d8:f0:5b:53:23:63:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e Validity Not Before: Dec 14 16:00:36 2025 GMT Not After : Dec 15 16:00:36 2025 GMT Subject: CN=28707e2c223662854929de161e3365750f13c49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:bd:3f:68:ca:d1:62:87:0e:f9:64:fc:81: c0:e5:9f:0f:09:a9:4a:2f:47:aa:b4:78:f9:80:6d: 11:26:db:d4:48:66:db:a4:7f:8f:f9:fe:02:4b:01: 9a:e2:c9:e8:03:7b:f1:7f:96:be:12:7f:da:b0:11: 19:78:76:fb:03:8b:2d:75:b0:ec:10:3a:8b:af:9d: b4:71:5a:6d:ba:bf:61:01:6f:04:f7:21:e0:3a:7e: 00:8b:e9:cb:e0:09:8d:16:9d:b3:c4:b0:4e:09:aa: fb:84:4b:2c:5c:08:45:ae:83:a6:ec:02:bf:60:af: e3:b7:3b:cf:92:aa:eb:56:be:f9:61:b1:a3:98:c5: 62:6d:92:29:db:e0:94:5b:27:b4:9e:cf:61:d9:ea: 66:c1:ed:5c:88:52:c8:cd:87:ac:25:56:0d:3a:d8: 8b:b1:e0:b9:38:af:d8:0a:9b:5f:6e:97:8c:d4:c0: bf:76:4a:86:19:63:a5:29:00:e0:9d:d6:f1:c7:f6: 43:6c:05:b8:56:6b:5a:ce:a9:d3:ea:86:98:d1:d0: 1c:50:7b:0c:74:48:02:15:18:5a:ad:56:80:c2:c1: 81:78:2a:f4:f2:20:a0:33:77:8e:24:ac:04:a1:5d: b9:6f:02:a3:36:78:d3:fa:6e:4b:53:b5:2d:cd:d7: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:70:7E:2C:22:36:62:85:49:29:DE:16:1E:33:65:75:0F:13:C4:9B X509v3 Authority Key Identifier: keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:73:f7:e7:f0:d0:e8:4e:cd:5b:a6:10:70:d9:da:8f:3e:d5: 15:65:ed:13:04:34:97:46:6a:5f:d0:4c:03:7f:86:8b:2a:4f: 32:44:7f:99:b1:84:4a:7f:77:26:4a:0d:c5:69:78:dc:90:2e: 11:53:74:b4:79:4e:23:3a:2a:75:df:d2:bc:2b:1d:4f:ff:60: e8:4c:ff:7e:9a:c0:bf:79:cd:55:24:fb:51:e1:f1:45:62:39: 66:da:93:ad:58:f0:f4:e9:20:22:0b:29:95:52:c5:44:a2:5e: 4b:53:6b:0e:e4:f3:13:1c:0a:28:4f:5a:d1:e7:7b:c3:43:36: 40:00:a7:ed:d5:5b:17:8c:7f:23:50:eb:bf:d4:4e:de:5a:e5: fe:76:dd:11:bb:a1:e8:04:42:b1:82:ef:12:6e:bc:40:e2:0f: 61:42:04:11:51:b4:d6:29:6b:82:94:43:88:1d:93:9b:77:04: 78:75:12:06:83:92:b0:02:99:79:9d:d9:6e:4b:5f:81:17:79: 8d:85:36:12:11:91:d7:79:4a:8f:9f:ef:ba:24:8d:92:32:aa: b1:2d:7c:fe:19:95:f5:e5:12:01:33:ee:ff:a1:d1:f9:e5:6f: 50:75:64:01:34:bb:f6:cb:59:5f:e2:12:bc:13:65:a2:e9:19: c7:d9:28:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdl6Wc3cms7O/Y8FtTI2PsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZDljOTY5Njc1YTI3ZDUxNWQ4ZmFiMmM2M2NkZTBlZDA1 NjQ5MWUwHhcNMjUxMjE0MTYwMDM2WhcNMjUxMjE1MTYwMDM2WjAzMTEwLwYDVQQD EygyODcwN2UyYzIyMzY2Mjg1NDkyOWRlMTYxZTMzNjU3NTBmMTNjNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tq9P2jK0WKHDvlk/IHA5Z8PCalK L0eqtHj5gG0RJtvUSGbbpH+P+f4CSwGa4snoA3vxf5a+En/asBEZeHb7A4stdbDs EDqLr520cVptur9hAW8E9yHgOn4Ai+nL4AmNFp2zxLBOCar7hEssXAhFroOm7AK/ YK/jtzvPkqrrVr75YbGjmMVibZIp2+CUWye0ns9h2epmwe1ciFLIzYesJVYNOtiL seC5OK/YCptfbpeM1MC/dkqGGWOlKQDgndbxx/ZDbAW4VmtazqnT6oaY0dAcUHsM dEgCFRharVaAwsGBeCr08iCgM3eOJKwEoV25bwKjNnjT+m5LU7UtzdchDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChwfiwiNmKFSSneFh4zZXUPE8SbMB8GA1UdIwQY MBaAFFPZyWlnWifVFdj6ssY83g7QVkkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUt Zjk1YzYwYjQ2NmEwLzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUtZjk1YzYwYjQ2NmEw LzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXP35/DQ 6E7NW6YQcNnajz7VFWXtEwQ0l0ZqX9BMA3+GiypPMkR/mbGESn93JkoNxWl43JAu EVN0tHlOIzoqdd/SvCsdT/9g6Ez/fprAv3nNVST7UeHxRWI5ZtqTrVjw9OkgIgsp lVLFRKJeS1NrDuTzExwKKE9a0ed7w0M2QACn7dVbF4x/I1Drv9RO3lrl/nbdEbuh 6ARCsYLvEm68QOIPYUIEEVG01ilrgpRDiB2Tm3cEeHUSBoOSsAKZeZ3ZbktfgRd5 jYU2EhGR13lKj5/vuiSNkjKqsS18/hmV9eUSATPu/6HR+eVvUHVkATS79stZX+IS vBNloukZx9kogA== -----END CERTIFICATE-----Generated at Sun Dec 14 19:27:23 2025 by rpki-client