This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json) Hash identifier: THcyOMqqaBvs2Ulu9R4q9k21O4Yu7iLgQcvdP1+dnxk= Subject key identifier: 5C:74:93:DC:79:5D:A3:F2:AC:36:5F:EC:94:1B:76:F7:05:A2:C7:28 Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3 Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3 Certificate serial: 019AF276CDABBDE4978F155A15B3F1E29A57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: IU7eG2CRtM4t8oTGIrT6XPWUIXCRkAXZHK3JXKviPSc=) 2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cd:ab:bd:e4:97:8f:15:5a:15:b3:f1:e2:9a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=5c7493dc795da3f2ac365fec941b76f705a2c728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:75:1d:84:a7:88:eb:44:9a:a5:e2:36:6a: 2a:7d:5a:7e:a1:c5:8e:15:de:70:9f:ca:05:ce:2f: 25:e4:1d:5b:e1:04:5b:bf:ff:29:1e:86:4e:2b:d8: 7c:1f:2f:32:c5:6b:a1:0a:3e:98:66:d5:bf:0b:83: 2d:31:f8:a5:be:0d:e7:27:6f:6d:9e:c7:83:cd:0c: f6:2d:8c:e8:d9:24:f1:a9:2f:e9:7a:b4:f9:da:65: 86:4a:f9:5b:75:c5:87:4e:c9:99:0c:5e:ef:cb:d2: 72:ce:a3:3b:63:8e:4c:ef:23:be:01:c4:7a:e4:4c: 21:a7:72:dc:b9:8a:34:9a:04:f6:d7:50:7e:a1:7b: 33:4b:2b:0f:0f:34:da:6a:ae:14:0b:b6:87:13:b4: c1:98:58:b4:39:3e:a6:cb:11:8f:da:6e:8c:8e:61: 47:07:74:d3:19:be:78:6f:6f:cf:87:1b:c5:88:0a: c6:c8:d1:60:d8:d7:39:7f:f9:e3:fd:11:60:f1:49: 47:0a:7e:42:12:8d:f2:7f:f6:f5:e7:d7:5d:17:84: 82:fe:d0:e8:ff:2d:76:bf:da:02:5b:9c:0e:76:a0: ab:02:d9:44:1e:3f:a3:ec:ef:e4:36:6a:21:d4:a3: d2:b6:cd:b3:05:92:09:8d:9f:6f:89:b4:f1:28:4f: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:74:93:DC:79:5D:A3:F2:AC:36:5F:EC:94:1B:76:F7:05:A2:C7:28 X509v3 Authority Key Identifier: keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a4:39:3b:13:82:34:05:29:d6:e2:f0:8f:2f:5f:87:11:3d: d5:d8:f7:0b:de:da:ab:ce:0f:e3:27:01:51:b9:ca:6e:0d:b5: 19:cf:20:9a:22:09:b1:75:8b:92:be:18:dd:eb:f3:f6:6b:83: ec:ad:03:b9:d3:0d:15:12:ea:0f:e6:54:20:58:fd:b1:cc:55: 8c:5e:d9:52:18:60:e9:e4:5c:5e:39:c0:6b:a6:ac:68:e5:13: 73:c7:3a:28:6f:a8:3d:58:94:b3:cc:56:45:ee:07:37:47:39: 26:2a:60:48:98:84:5d:92:fe:e2:fa:74:43:2b:93:4f:87:35: c8:2d:17:08:99:2b:dd:72:2b:21:ac:88:e3:10:09:ab:99:5a: 5d:c3:f7:08:97:78:f2:44:20:30:6d:01:50:cd:d9:dc:fa:d2: 9a:ab:97:7d:bd:22:65:17:dc:93:4f:58:d1:72:82:55:e8:69: 98:f5:a0:79:44:31:c6:b7:30:0b:39:4e:7e:8c:8b:43:f0:d8: 06:15:76:3c:ff:b2:90:0a:4a:66:17:a1:c5:cd:04:63:63:9d: 54:02:36:87:20:ea:7b:25:75:26:cf:54:a9:8a:fa:ef:1a:fe: 6b:f1:be:98:61:52:5e:7e:9e:7b:aa:54:43:19:21:43:97:63: 90:59:d0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds2rveSXjxVaFbPx4ppXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDYzM2YxOWY2MWQ2NTQ2ZWJhYmY3ZGU5ZmI3YWE5ODdl ZDViZjMwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD Eyg1Yzc0OTNkYzc5NWRhM2YyYWMzNjVmZWM5NDFiNzZmNzA1YTJjNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7F1HYSniOtEmqXiNmoqfVp+ocWO Fd5wn8oFzi8l5B1b4QRbv/8pHoZOK9h8Hy8yxWuhCj6YZtW/C4MtMfilvg3nJ29t nseDzQz2LYzo2STxqS/perT52mWGSvlbdcWHTsmZDF7vy9JyzqM7Y45M7yO+AcR6 5Ewhp3LcuYo0mgT211B+oXszSysPDzTaaq4UC7aHE7TBmFi0OT6myxGP2m6MjmFH B3TTGb54b2/PhxvFiArGyNFg2Nc5f/nj/RFg8UlHCn5CEo3yf/b159ddF4SC/tDo /y12v9oCW5wOdqCrAtlEHj+j7O/kNmoh1KPSts2zBZIJjZ9vibTxKE9E/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx0k9x5XaPyrDZf7JQbdvcFoscoMB8GA1UdIwQY MBaAFFNGM/GfYdZUbrq/fen7eqmH7VvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt ZjBjYWQ5ZmY2NWJlLzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl LzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6Q5OxOC NAUp1uLwjy9fhxE91dj3C97aq84P4ycBUbnKbg21Gc8gmiIJsXWLkr4Y3evz9muD 7K0DudMNFRLqD+ZUIFj9scxVjF7ZUhhg6eRcXjnAa6asaOUTc8c6KG+oPViUs8xW Re4HN0c5JipgSJiEXZL+4vp0QyuTT4c1yC0XCJkr3XIrIayI4xAJq5laXcP3CJd4 8kQgMG0BUM3Z3PrSmquXfb0iZRfck09Y0XKCVehpmPWgeUQxxrcwCzlOfoyLQ/DY BhV2PP+ykApKZhehxc0EY2OdVAI2hyDqeyV1Js9UqYr67xr+a/G+mGFSXn6ee6pU QxkhQ5djkFnQ0A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:30 2025 by rpki-client