This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json) Hash identifier: eRNWLOnnmHP2KyVZkxorreJVp1BwndO1sLavvcCiqqo= Subject key identifier: CE:CA:EB:E3:28:67:DE:CB:45:A7:B3:E8:32:C6:0D:E3:23:7C:BC:5E Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Certificate serial: 019B1013FE20BA0E7D2668D14377F114066E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft Manifest number: 0E2E Signing time: Fri 12 Dec 2025 01:01:44 +0000 Manifest this update: Fri 12 Dec 2025 01:01:44 +0000 Manifest next update: Sat 13 Dec 2025 01:01:44 +0000 Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=) 2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=) 3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: Z1V58w+ya9o4EJWMrIzExuRqQBAtTVxvO/gR8+YNX8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:fe:20:ba:0e:7d:26:68:d1:43:77:f1:14:06:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Validity Not Before: Dec 12 01:01:44 2025 GMT Not After : Dec 13 01:01:44 2025 GMT Subject: CN=cecaebe32867decb45a7b3e832c60de3237cbc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:06:cb:0a:ef:c3:8a:8a:ed:5c:3b:e2:1d: 4d:c8:76:fd:c9:3b:8f:a4:4c:41:1f:1e:11:71:e7: bb:d7:e1:f3:d0:56:86:df:e1:37:3a:ba:aa:1e:87: 80:a1:f4:d6:1e:67:34:fe:1e:db:28:4c:1a:cb:9f: df:d8:0f:53:64:cb:d9:f4:84:e0:95:72:21:a7:6e: ac:8e:d9:aa:7b:82:09:f5:78:bb:6e:31:57:a8:3a: bc:26:00:00:e2:15:87:1f:ad:cf:89:69:98:ae:41: 02:0f:ee:ed:bc:1d:9f:d5:87:f3:51:f6:82:6f:fe: a7:ad:fb:38:b6:a4:74:1e:e8:96:90:6f:09:dd:c1: 86:b5:3a:a7:b2:e3:4a:23:09:28:38:79:52:a0:92: 63:14:2b:4c:00:e5:c0:5d:db:12:33:b8:7f:12:f9: c3:a3:9b:cf:7b:32:f6:06:3f:3b:19:9c:f7:15:d1: b9:0d:27:34:63:c3:70:3d:19:3d:8f:79:99:dc:54: de:11:08:ed:86:5d:f2:da:8d:19:0d:b2:ce:61:5e: 54:5b:02:97:ad:4a:81:79:77:ec:4c:4b:28:28:58: f9:53:8e:b0:c8:11:b4:d6:c7:8b:6c:be:cc:14:b4: f7:7b:46:55:8b:57:f6:5f:fd:f6:cb:4b:a7:79:f4: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:EB:E3:28:67:DE:CB:45:A7:B3:E8:32:C6:0D:E3:23:7C:BC:5E X509v3 Authority Key Identifier: keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:23:e9:2e:9c:06:2c:4d:0d:3f:37:ec:85:90:64:e9:0c:29: fd:8d:8b:80:73:29:15:f9:63:45:7c:48:4f:0a:ca:8c:4e:a6: 1f:a5:93:ed:fb:7c:9b:fe:af:52:19:e3:cc:85:51:4a:12:36: c8:00:9f:44:9a:b9:5c:0f:17:58:8e:6d:fe:fe:a5:e7:ef:4b: ed:ed:69:95:de:79:03:f7:54:9e:a7:ca:58:30:48:67:b7:81: a2:a6:9a:e1:27:02:f0:27:89:41:9d:58:5e:a7:2e:e5:b2:ff: cf:36:8d:08:9a:02:59:83:b2:f9:41:82:b6:a8:a6:b0:37:c5: 09:73:db:92:76:87:e9:51:f6:c6:9d:e7:e2:92:75:2a:11:47: 50:23:d3:20:4b:5d:4e:e1:c8:3e:5f:b9:9f:28:05:59:27:f5: 0a:65:25:3a:31:fc:da:8c:58:d1:e7:26:a6:43:80:25:89:1d: 04:60:1f:2e:aa:92:d9:69:9c:18:99:b2:6a:3d:d7:a0:0c:bc: 39:cb:b9:4a:40:e2:48:5b:07:a1:71:d3:ac:c0:45:2f:6b:b2: 6c:f8:5f:01:f3:76:e6:00:aa:89:d7:5c:40:7e:54:d3:72:19: 86:1a:7e:3c:f9:d8:60:fe:2d:27:80:06:f4:47:50:7c:c4:d7: c2:41:20:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/4gug59JmjRQ3fxFAZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5 MzczOTQwHhcNMjUxMjEyMDEwMTQ0WhcNMjUxMjEzMDEwMTQ0WjAzMTEwLwYDVQQD EyhjZWNhZWJlMzI4NjdkZWNiNDVhN2IzZTgzMmM2MGRlMzIzN2NiYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbgGywrvw4qK7Vw74h1NyHb9yTuP pExBHx4Rcee71+Hz0FaG3+E3OrqqHoeAofTWHmc0/h7bKEway5/f2A9TZMvZ9ITg lXIhp26sjtmqe4IJ9Xi7bjFXqDq8JgAA4hWHH63PiWmYrkECD+7tvB2f1YfzUfaC b/6nrfs4tqR0HuiWkG8J3cGGtTqnsuNKIwkoOHlSoJJjFCtMAOXAXdsSM7h/EvnD o5vPezL2Bj87GZz3FdG5DSc0Y8NwPRk9j3mZ3FTeEQjthl3y2o0ZDbLOYV5UWwKX rUqBeXfsTEsoKFj5U46wyBG01seLbL7MFLT3e0ZVi1f2X/32y0unefQvsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7K6+MoZ97LRaez6DLGDeMjfLxeMB8GA1UdIwQY MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCPpLpwG LE0NPzfshZBk6Qwp/Y2LgHMpFfljRXxITwrKjE6mH6WT7ft8m/6vUhnjzIVRShI2 yACfRJq5XA8XWI5t/v6l5+9L7e1pld55A/dUnqfKWDBIZ7eBoqaa4ScC8CeJQZ1Y Xqcu5bL/zzaNCJoCWYOy+UGCtqimsDfFCXPbknaH6VH2xp3n4pJ1KhFHUCPTIEtd TuHIPl+5nygFWSf1CmUlOjH82oxY0ecmpkOAJYkdBGAfLqqS2WmcGJmyaj3XoAy8 Ocu5SkDiSFsHoXHTrMBFL2uybPhfAfN25gCqiddcQH5U03IZhhp+PPnYYP4tJ4AG 9EdQfMTXwkEgSA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:36:50 2025 by rpki-client