This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json) Hash identifier: XAbFn1hdjyzVDdnUBcPwyHF7xWCQ6pQMYDHdFG0wb6k= Subject key identifier: 22:9D:64:7A:21:68:7F:2A:3E:95:95:F8:F0:F0:A1:5A:FB:41:05:F6 Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Certificate serial: 019B3A906CDA9DB2C13CD7CEABEEA37D0662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft Manifest number: 0E44 Signing time: Sat 20 Dec 2025 07:01:42 +0000 Manifest this update: Sat 20 Dec 2025 07:01:42 +0000 Manifest next update: Sun 21 Dec 2025 07:01:42 +0000 Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=) 2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=) 3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: MgChBblQq7faJn9r3QdNFxu9iQwWUdtLNTCaK8QvBS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:6c:da:9d:b2:c1:3c:d7:ce:ab:ee:a3:7d:06:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Validity Not Before: Dec 20 07:01:42 2025 GMT Not After : Dec 21 07:01:42 2025 GMT Subject: CN=229d647a21687f2a3e9595f8f0f0a15afb4105f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:e3:01:df:f0:7c:02:ea:1f:0c:dc:f5:07: 7f:bb:bd:63:0d:f5:81:7e:b2:4d:19:c7:25:87:ee: 93:2e:34:c3:03:19:ad:5d:f4:b9:08:7e:42:26:56: 39:6d:21:ce:16:3a:0d:d3:84:2a:ac:b6:dd:30:43: 32:37:9a:d2:d6:b9:3d:98:2b:03:68:fb:aa:b8:21: 4e:49:0a:2e:69:7e:a8:31:dc:6a:0b:59:ca:de:c0: 77:10:e2:64:09:96:83:2a:e5:db:25:31:f4:f7:d6: 60:e1:57:29:e5:8d:d1:a6:56:0a:3f:7d:5a:87:ca: 54:f0:62:1b:0b:92:df:ea:39:7c:f0:5b:dd:15:55: 28:aa:d9:d4:b1:6f:17:b2:00:56:d5:cf:c7:e5:4a: 39:12:28:e5:1b:c3:b2:06:ae:44:91:ff:60:f8:57: 40:a0:87:05:92:5f:50:74:a0:71:11:4c:47:2b:2c: e4:df:85:5d:b3:1a:94:93:69:88:be:8e:0e:0e:10: 3b:b2:21:0d:52:97:1e:fc:34:32:71:c7:f9:3e:32: 6d:ef:bd:2a:8b:00:f5:02:1b:69:e8:05:e0:1e:f8: 4d:2b:d1:2f:49:0f:d0:a1:61:39:e8:aa:19:d3:0b: a2:38:65:25:fb:c2:21:33:b9:b3:c2:a0:f2:5d:c3: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:64:7A:21:68:7F:2A:3E:95:95:F8:F0:F0:A1:5A:FB:41:05:F6 X509v3 Authority Key Identifier: keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:79:7f:55:2f:31:24:fd:e3:dc:24:0e:5a:b3:d9:05:c9:a0: 7d:b2:88:f0:83:03:46:f5:4e:17:38:26:e9:9b:d9:1d:ff:95: b4:cc:67:73:32:d7:2a:92:3c:79:90:d6:31:3a:66:4f:84:9b: 16:ea:70:7a:f8:89:c2:16:f3:90:ac:91:68:e9:00:ca:94:9d: 91:d6:19:0c:87:1e:33:71:ed:12:35:d2:8c:6d:ac:f7:81:4f: 37:b3:00:ad:88:57:c2:b6:a4:69:85:d8:75:d0:5e:40:6a:ad: 2e:fa:6c:7a:d1:19:fa:d5:d0:72:74:da:77:02:29:bb:b5:b1: c6:11:93:4a:0f:05:c0:bd:9d:c7:8f:4f:ea:2f:ed:8b:7c:1c: 80:c7:9a:db:8b:07:80:7e:75:3a:a5:f6:d9:5c:02:4b:0e:7d: 65:1f:54:bd:5c:6a:93:cd:1b:dd:19:40:4a:88:4d:ee:89:a2: 05:97:1c:bc:f1:7e:b4:08:49:c8:95:46:d4:d8:14:89:da:05: cf:12:8d:da:bf:6b:68:6a:d7:ae:16:4b:45:d5:fc:65:9f:32: e1:c1:4d:cb:a6:a8:f7:e2:63:1e:5d:77:e1:53:38:3b:8d:a2: e4:80:bf:05:9f:7a:91:9a:2f:99:a1:a9:e1:ee:0e:cf:d7:98: 51:c4:75:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kGzanbLBPNfOq+6jfQZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5 MzczOTQwHhcNMjUxMjIwMDcwMTQyWhcNMjUxMjIxMDcwMTQyWjAzMTEwLwYDVQQD EygyMjlkNjQ3YTIxNjg3ZjJhM2U5NTk1ZjhmMGYwYTE1YWZiNDEwNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SjjAd/wfALqHwzc9Qd/u71jDfWB frJNGcclh+6TLjTDAxmtXfS5CH5CJlY5bSHOFjoN04QqrLbdMEMyN5rS1rk9mCsD aPuquCFOSQouaX6oMdxqC1nK3sB3EOJkCZaDKuXbJTH099Zg4Vcp5Y3RplYKP31a h8pU8GIbC5Lf6jl88FvdFVUoqtnUsW8XsgBW1c/H5Uo5EijlG8OyBq5Ekf9g+FdA oIcFkl9QdKBxEUxHKyzk34VdsxqUk2mIvo4ODhA7siENUpce/DQyccf5PjJt770q iwD1Ahtp6AXgHvhNK9EvSQ/QoWE56KoZ0wuiOGUl+8IhM7mzwqDyXcOQPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKdZHohaH8qPpWV+PDwoVr7QQX2MB8GA1UdIwQY MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3l/VS8x JP3j3CQOWrPZBcmgfbKI8IMDRvVOFzgm6ZvZHf+VtMxnczLXKpI8eZDWMTpmT4Sb FupweviJwhbzkKyRaOkAypSdkdYZDIceM3HtEjXSjG2s94FPN7MArYhXwrakaYXY ddBeQGqtLvpsetEZ+tXQcnTadwIpu7WxxhGTSg8FwL2dx49P6i/ti3wcgMea24sH gH51OqX22VwCSw59ZR9UvVxqk80b3RlASohN7omiBZccvPF+tAhJyJVG1NgUidoF zxKN2r9raGrXrhZLRdX8ZZ8y4cFNy6ao9+JjHl134VM4O42i5IC/BZ96kZovmaGp 4e4Oz9eYUcR1XA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:54:56 2025 by rpki-client