This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json) Hash identifier: 4XqrEH0UkhcQ/VUn8kwzggaqy7DbYe4YjgpGQ5cyluc= Subject key identifier: 70:72:6D:B7:0D:7E:E0:F4:5F:D8:B7:DA:E2:95:FC:85:92:69:6B:0E Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Certificate serial: 019AF01A56FEE91A5CF73A0497D24081F6DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft Manifest number: 0BC0 Signing time: Fri 05 Dec 2025 20:00:49 +0000 Manifest this update: Fri 05 Dec 2025 20:00:49 +0000 Manifest next update: Sat 06 Dec 2025 20:00:49 +0000 Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=) 2: 7La-XtrD4ICECjNRbJUhIiiRnLs.asa (hash: wZ15akcqN9GVHDKumXc8j8JGV1U6ZmvopBISyG0HrcI=) 3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: NJTQoVpzutEFqBHwvdKi7OG5MrcxbNT7egLW+WbfuiI=) 4: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=) 5: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=) 6: kfd0B7YUXjP5BkiSga_I2bFGDjE.roa (hash: BHoHm0FgI/hNJZj/ps+lj0bhjSOg0FxpXV30jd+oQxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:56:fe:e9:1a:5c:f7:3a:04:97:d2:40:81:f6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Validity Not Before: Dec 5 20:00:49 2025 GMT Not After : Dec 6 20:00:49 2025 GMT Subject: CN=70726db70d7ee0f45fd8b7dae295fc8592696b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:00:1a:8f:5a:50:14:2c:51:88:02:a1:e8: 26:c4:b4:44:29:b4:f4:c0:03:06:0e:dd:8f:75:4c: 3c:6e:49:2b:3e:ae:c8:1b:a9:29:f1:02:58:42:61: a1:88:e6:c0:c7:c9:a8:ba:1b:56:96:b6:a4:2a:8f: 5a:5c:b7:a7:3a:cb:18:69:22:3d:35:58:1b:9e:df: c5:eb:cb:6a:54:a3:29:95:3e:f5:cf:d9:87:34:00: 73:52:f3:75:26:87:67:d5:30:d4:a7:08:f3:97:61: 9d:96:29:d5:bc:87:10:c4:2e:eb:66:f7:07:46:69: 35:72:cd:0e:f8:9d:11:76:fe:ef:ec:a4:46:12:b0: c7:dc:ac:e0:73:ed:b9:ab:7c:a6:d7:64:65:37:df: fa:0b:e2:82:f8:7a:cc:30:85:35:16:ce:9d:c7:73: 0c:4e:c0:76:24:88:17:64:e1:75:ad:99:15:65:5b: fe:aa:4b:b9:15:95:be:65:64:0c:90:be:07:24:d2: 84:98:e7:a1:36:b8:16:bb:68:28:d2:e8:f8:ae:7c: be:b9:06:49:24:6d:0c:12:3b:ea:16:25:a8:6d:da: 2d:9e:30:c1:84:ff:80:a6:61:35:ae:0c:57:b0:97: f7:a8:d8:86:72:9c:74:f4:07:7f:2e:9b:71:34:7f: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:6D:B7:0D:7E:E0:F4:5F:D8:B7:DA:E2:95:FC:85:92:69:6B:0E X509v3 Authority Key Identifier: keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f9:1a:1b:07:66:7c:5a:f7:3b:9d:32:10:ad:7d:5d:c1:bd: 65:0d:be:e7:d5:75:ce:d1:82:5f:de:63:0f:c6:86:eb:bd:a3: 2c:b6:52:88:23:db:a6:1a:16:a3:24:03:a9:6a:2c:2e:7a:f8: 11:36:61:51:c0:ff:ce:37:14:18:3a:1c:fd:f2:60:a8:98:4f: a7:44:11:05:2e:46:4b:09:d0:36:f2:9d:81:52:b1:c3:98:ae: 65:3f:b6:3e:cf:74:c5:ac:7f:d3:eb:1e:0a:13:34:52:44:ad: ac:95:67:f3:0b:98:89:43:27:d5:19:7a:49:0a:c7:a4:36:06: 37:37:1e:79:51:55:cd:98:6c:ee:df:9f:0c:25:20:17:d3:39: 8e:5b:55:5f:2b:0a:54:9b:90:28:47:4a:91:04:5f:9e:42:a6: 0d:73:71:37:f8:96:c4:1b:d7:c8:79:d2:45:f2:64:bc:23:eb: 2e:22:7d:37:5b:33:8a:22:11:71:39:9c:41:f6:67:17:40:fa: 88:80:4d:e3:3b:6f:a1:43:65:76:fa:12:bd:70:df:91:fc:64: 35:9a:d4:36:47:f8:21:b3:93:8d:10:41:ba:69:61:39:7f:1e: b1:26:9e:38:d6:aa:1f:e6:c7:db:be:cd:49:df:87:69:b5:c9: a3:a4:37:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGlb+6Rpc9zoEl9JAgfbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj M2VkZGUwHhcNMjUxMjA1MjAwMDQ5WhcNMjUxMjA2MjAwMDQ5WjAzMTEwLwYDVQQD Eyg3MDcyNmRiNzBkN2VlMGY0NWZkOGI3ZGFlMjk1ZmM4NTkyNjk2YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm8AGo9aUBQsUYgCoegmxLREKbT0 wAMGDt2PdUw8bkkrPq7IG6kp8QJYQmGhiObAx8mouhtWlrakKo9aXLenOssYaSI9 NVgbnt/F68tqVKMplT71z9mHNABzUvN1Jodn1TDUpwjzl2GdlinVvIcQxC7rZvcH Rmk1cs0O+J0Rdv7v7KRGErDH3Kzgc+25q3ym12RlN9/6C+KC+HrMMIU1Fs6dx3MM TsB2JIgXZOF1rZkVZVv+qku5FZW+ZWQMkL4HJNKEmOehNrgWu2go0uj4rny+uQZJ JG0MEjvqFiWobdotnjDBhP+ApmE1rgxXsJf3qNiGcpx09Ad/LptxNH/vxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBybbcNfuD0X9i32uKV/IWSaWsOMB8GA1UdIwQY MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt MDYwYTQ3MzgwOTFkLzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/kaGwdm fFr3O50yEK19XcG9ZQ2+59V1ztGCX95jD8aG672jLLZSiCPbphoWoyQDqWosLnr4 ETZhUcD/zjcUGDoc/fJgqJhPp0QRBS5GSwnQNvKdgVKxw5iuZT+2Ps90xax/0+se ChM0UkStrJVn8wuYiUMn1Rl6SQrHpDYGNzceeVFVzZhs7t+fDCUgF9M5jltVXysK VJuQKEdKkQRfnkKmDXNxN/iWxBvXyHnSRfJkvCPrLiJ9N1sziiIRcTmcQfZnF0D6 iIBN4ztvoUNldvoSvXDfkfxkNZrUNkf4IbOTjRBBumlhOX8esSaeONaqH+bH277N Sd+HabXJo6Q3lw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:59:21 2025 by rpki-client