This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json) Hash identifier: SsXvMcN3CoQ+ZgFBp/cU3yFIZTn7Y88yj9U2T56P4dY= Subject key identifier: C0:23:4C:35:69:A7:7A:5E:4F:06:3F:DF:55:C6:97:1A:82:14:D9:1C Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Certificate serial: 019B462734B7658F9861B0ED2A6FE8620018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft Manifest number: 0E4A Signing time: Mon 22 Dec 2025 13:02:13 +0000 Manifest this update: Mon 22 Dec 2025 13:02:13 +0000 Manifest next update: Tue 23 Dec 2025 13:02:13 +0000 Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=) 2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=) 3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: Cvn8YJGR/8XvtEKA2xNjiRuHsBmsix14ktREIBJCuuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:34:b7:65:8f:98:61:b0:ed:2a:6f:e8:62:00:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Validity Not Before: Dec 22 13:02:13 2025 GMT Not After : Dec 23 13:02:13 2025 GMT Subject: CN=c0234c3569a77a5e4f063fdf55c6971a8214d91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:1c:9f:26:d8:8f:d0:c1:fc:23:60:eb:45: 6b:33:99:ad:3f:33:5e:fe:bc:70:e4:3d:33:d8:97: de:7d:6e:be:f1:04:f6:25:48:92:7e:60:9f:15:48: fa:56:1a:94:90:de:b6:2a:b7:52:2e:08:b5:5f:31: b5:53:bc:24:37:0f:e6:45:a8:66:06:30:9a:20:e7: e0:c4:ba:b1:47:07:37:04:4d:d0:64:5a:b0:97:3b: b6:f2:dd:7a:31:89:f5:a1:b3:98:8f:fd:38:c2:2e: a0:4c:a1:53:36:35:29:e7:6c:70:d1:a0:5b:07:c2: 17:55:fb:d2:1f:89:55:48:34:01:60:a6:4e:35:ab: 23:53:a0:e0:86:f7:85:a2:18:8c:c7:18:40:ab:a6: e5:07:59:46:90:ee:7e:71:38:25:06:9a:d3:7d:de: 0a:20:c6:da:87:95:e1:15:36:cf:6c:54:38:18:08: c0:a7:55:ea:eb:d9:2b:b6:49:b5:2e:3c:99:bf:ee: 2d:6c:5b:b0:8c:57:5b:5e:e3:98:f2:b7:62:24:de: fb:42:6e:4f:9e:b7:e7:be:21:c6:89:51:4e:10:d8: 14:65:91:bd:54:06:df:13:74:c0:fc:5b:3a:7f:da: 76:30:55:88:3b:eb:97:20:0d:c2:75:7c:25:34:cd: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:4C:35:69:A7:7A:5E:4F:06:3F:DF:55:C6:97:1A:82:14:D9:1C X509v3 Authority Key Identifier: keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:72:21:21:e7:11:fe:a9:0d:c8:b6:04:f5:42:d3:2b:87:e1: 42:1c:bb:77:9c:1c:fc:57:2a:47:d4:cc:c0:c2:ea:1a:6a:de: 84:2f:b0:3f:52:88:43:69:91:e0:94:38:c1:17:d8:0a:9e:1c: 4d:d7:77:0b:6d:05:79:0a:4a:67:ef:3f:35:54:4c:e2:d5:2a: e8:bb:93:aa:fd:81:64:fb:97:88:a0:48:d5:e6:7b:e6:c3:18: 45:3a:40:9e:1b:38:2a:04:dc:f1:83:2c:38:27:bb:8e:b1:5e: 47:2f:a3:23:5f:b7:a3:e5:8b:7c:c9:d6:0f:b0:a1:83:31:05: 10:e0:1c:aa:9d:99:16:a7:b7:e6:10:e0:4d:f4:f5:60:6c:65: 29:75:2e:a7:e8:4f:e4:79:f0:58:42:5c:2d:dc:d7:13:9d:f2: bb:77:3f:d5:14:e5:02:ec:6e:02:ea:85:a2:c8:4c:e2:09:4e: 39:7a:05:6b:0f:54:5e:65:df:2e:e4:f5:46:65:6e:f3:e9:59: 8c:05:be:b6:65:5e:6f:fd:25:c9:b4:f6:bc:2a:c5:a9:77:2c: ce:aa:db:fb:d9:b2:d2:fb:1c:cf:f6:b9:59:c6:cc:0c:f5:b3: 8b:bf:94:fa:01:bf:b7:a7:e4:13:38:26:5e:ed:79:2d:68:07: b1:3e:88:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJzS3ZY+YYbDtKm/oYgAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5 MzczOTQwHhcNMjUxMjIyMTMwMjEzWhcNMjUxMjIzMTMwMjEzWjAzMTEwLwYDVQQD EyhjMDIzNGMzNTY5YTc3YTVlNGYwNjNmZGY1NWM2OTcxYTgyMTRkOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24kcnybYj9DB/CNg60VrM5mtPzNe /rxw5D0z2JfefW6+8QT2JUiSfmCfFUj6VhqUkN62KrdSLgi1XzG1U7wkNw/mRahm BjCaIOfgxLqxRwc3BE3QZFqwlzu28t16MYn1obOYj/04wi6gTKFTNjUp52xw0aBb B8IXVfvSH4lVSDQBYKZONasjU6DghveFohiMxxhAq6blB1lGkO5+cTglBprTfd4K IMbah5XhFTbPbFQ4GAjAp1Xq69krtkm1LjyZv+4tbFuwjFdbXuOY8rdiJN77Qm5P nrfnviHGiVFOENgUZZG9VAbfE3TA/Fs6f9p2MFWIO+uXIA3CdXwlNM0KQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAjTDVpp3peTwY/31XGlxqCFNkcMB8GA1UdIwQY MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHIhIecR /qkNyLYE9ULTK4fhQhy7d5wc/FcqR9TMwMLqGmrehC+wP1KIQ2mR4JQ4wRfYCp4c Tdd3C20FeQpKZ+8/NVRM4tUq6LuTqv2BZPuXiKBI1eZ75sMYRTpAnhs4KgTc8YMs OCe7jrFeRy+jI1+3o+WLfMnWD7ChgzEFEOAcqp2ZFqe35hDgTfT1YGxlKXUup+hP 5HnwWEJcLdzXE53yu3c/1RTlAuxuAuqFoshM4glOOXoFaw9UXmXfLuT1RmVu8+lZ jAW+tmVeb/0lybT2vCrFqXcszqrb+9my0vscz/a5WcbMDPWzi7+U+gG/t6fkEzgm Xu15LWgHsT6IuA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:43:01 2025 by rpki-client