This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json) Hash identifier: AKCh2P1QipIVfFGRsEPvRmzVH9xUBp33IFbxzvaSYtc= Subject key identifier: AA:D7:33:92:E0:ED:16:8A:02:49:3C:B4:9F:0D:10:26:E3:A6:1F:63 Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Certificate serial: 019AF23F63677606E06F4A5A7D87F182D331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft Manifest number: 0240 Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: mm7GVC9wycrDpp1bkEOOgI9ccADQeJbXjeFh/jpNv28=) 2: us8vS6jTclCEmBfDUU3o3m6Yn-k.roa (hash: mAUclWVBVl5pM/tgk/IIx+fX18hAwqFUbm2hLAhaOL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:63:67:76:06:e0:6f:4a:5a:7d:87:f1:82:d3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=aad73392e0ed168a02493cb49f0d1026e3a61f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:70:9e:71:06:a5:5a:c3:a7:8b:07:da:02: 3d:00:24:a0:6a:22:99:00:4f:e4:2b:9e:71:bb:10: 3a:be:81:7b:44:20:2a:55:b6:6e:02:b0:64:8c:19: eb:7a:d3:63:c9:82:72:43:6c:bf:fd:e7:c9:07:d1: a2:84:9c:cb:4b:a8:6f:4e:91:a5:fc:f8:3e:15:a1: fc:65:35:e7:36:00:f3:ac:e5:01:7f:8b:20:90:a9: 0d:17:1b:9b:a0:7e:71:db:3e:61:3c:a8:d1:c1:44: e5:7f:1a:0c:2d:7a:06:53:9c:1e:9f:ce:00:45:c6: 5d:65:34:78:a6:3f:34:39:9c:00:8b:40:11:93:4b: be:fd:8a:b6:ed:b9:aa:16:ab:e8:4c:18:6f:76:c0: ed:a3:1d:46:9f:a0:c4:12:0b:c8:f6:0c:83:ba:8d: 9b:e4:10:27:de:5d:6e:3f:b3:00:af:91:fe:49:9d: 18:45:e6:40:af:b3:8a:ac:9e:34:ff:aa:65:fb:98: fe:6e:76:ea:09:33:49:ca:53:6d:60:78:7f:3d:c8: b4:7c:e9:84:9e:de:ad:74:8c:c9:d3:05:57:a1:7c: 04:e3:6c:64:32:d1:52:33:06:c2:57:e9:8b:c4:f3: 20:55:80:dd:46:b3:0a:0c:11:86:dc:44:40:72:1f: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:33:92:E0:ED:16:8A:02:49:3C:B4:9F:0D:10:26:E3:A6:1F:63 X509v3 Authority Key Identifier: keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:16:ca:0c:35:cf:89:9b:e2:7d:0e:d4:e7:40:13:7a:eb:c8: fb:0c:0a:ac:90:9f:32:91:69:85:b9:9a:08:8a:b4:58:4b:77: 8b:e6:b3:a8:d6:84:2b:39:36:f3:8a:bd:20:41:e3:a2:65:b4: c2:da:4a:71:69:73:a7:6e:da:b4:a9:a4:80:3d:a2:3e:12:2f: cb:89:0b:39:ca:cf:75:7e:62:bb:58:3a:21:8f:a2:b4:ea:10: 05:f3:b6:0f:44:d8:b0:00:de:27:26:35:0f:4d:74:b5:73:67: 24:7d:99:40:c5:94:e5:11:1e:2f:b5:06:fd:4d:32:66:be:d3: ed:13:5f:82:29:ac:ba:aa:ed:41:c3:39:c3:62:7b:6f:3e:eb: b5:7b:9f:a4:93:5e:65:86:9f:b6:fb:19:5c:7f:4e:6d:e1:7c: e1:f7:d0:3b:bb:43:2d:a8:b8:6b:be:c0:fc:1f:f5:35:37:9c: 8b:70:24:59:13:55:aa:fe:1b:c4:35:c3:65:d9:35:ca:ab:00: 86:61:a9:64:be:ca:1b:20:5b:31:1d:b8:3a:5d:2e:ca:64:61: b7:59:40:5f:c7:8b:2f:60:47:7a:27:d2:5c:6b:c4:6c:51:f3: 00:f7:a8:5a:bc:5e:e5:10:ef:6c:b6:3f:c4:fc:f1:b5:79:45: cb:1c:1f:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2Nndgbgb0pafYfxgtMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw YWU2NmMwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD EyhhYWQ3MzM5MmUwZWQxNjhhMDI0OTNjYjQ5ZjBkMTAyNmUzYTYxZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWRwnnEGpVrDp4sH2gI9ACSgaiKZ AE/kK55xuxA6voF7RCAqVbZuArBkjBnretNjyYJyQ2y//efJB9GihJzLS6hvTpGl /Pg+FaH8ZTXnNgDzrOUBf4sgkKkNFxuboH5x2z5hPKjRwUTlfxoMLXoGU5wen84A RcZdZTR4pj80OZwAi0ARk0u+/Yq27bmqFqvoTBhvdsDtox1Gn6DEEgvI9gyDuo2b 5BAn3l1uP7MAr5H+SZ0YReZAr7OKrJ40/6pl+5j+bnbqCTNJylNtYHh/Pci0fOmE nt6tdIzJ0wVXoXwE42xkMtFSMwbCV+mLxPMgVYDdRrMKDBGG3ERAch+vCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrXM5Lg7RaKAkk8tJ8NECbjph9jMB8GA1UdIwQY MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt MmViNzBhMzYwMmU5LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5 LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBbKDDXP iZvifQ7U50ATeuvI+wwKrJCfMpFphbmaCIq0WEt3i+azqNaEKzk284q9IEHjomW0 wtpKcWlzp27atKmkgD2iPhIvy4kLOcrPdX5iu1g6IY+itOoQBfO2D0TYsADeJyY1 D010tXNnJH2ZQMWU5REeL7UG/U0yZr7T7RNfgimsuqrtQcM5w2J7bz7rtXufpJNe ZYaftvsZXH9ObeF84ffQO7tDLai4a77A/B/1NTeci3AkWRNVqv4bxDXDZdk1yqsA hmGpZL7KGyBbMR24Ol0uymRht1lAX8eLL2BHeifSXGvEbFHzAPeoWrxe5RDvbLY/ xPzxtXlFyxwfAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:07 2025 by rpki-client