This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json) Hash identifier: seZsD+IdyQmy3WRReirwfGF2TEcmbwVZOq//JcHeN/Q= Subject key identifier: 5A:14:26:A5:BB:88:52:46:04:A0:0F:92:54:5E:9C:AF:3D:84:25:20 Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Certificate serial: 019B31C3CAD31941F01F05E38743A2D5D4F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft Manifest number: 0BE2 Signing time: Thu 18 Dec 2025 14:01:13 +0000 Manifest this update: Thu 18 Dec 2025 14:01:13 +0000 Manifest next update: Fri 19 Dec 2025 14:01:13 +0000 Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=) 2: 7La-XtrD4ICECjNRbJUhIiiRnLs.asa (hash: wZ15akcqN9GVHDKumXc8j8JGV1U6ZmvopBISyG0HrcI=) 3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: q6sJqFyDinKXZ12TJeZRAcxIS3v/s8fRgM+n852VN98=) 4: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=) 5: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=) 6: kfd0B7YUXjP5BkiSga_I2bFGDjE.roa (hash: BHoHm0FgI/hNJZj/ps+lj0bhjSOg0FxpXV30jd+oQxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:ca:d3:19:41:f0:1f:05:e3:87:43:a2:d5:d4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Validity Not Before: Dec 18 14:01:13 2025 GMT Not After : Dec 19 14:01:13 2025 GMT Subject: CN=5a1426a5bb88524604a00f92545e9caf3d842520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:da:93:b3:fa:a0:93:56:de:b8:7c:1e:f3: 7d:8d:8f:bf:bc:34:ae:09:ee:65:a7:c1:7d:b9:e7: 92:e3:c5:d0:82:36:24:ce:a0:3b:83:d9:d8:4c:9e: 56:e2:3e:77:4f:8b:52:82:2b:89:39:d1:d9:63:d6: d6:5a:ac:28:51:83:3b:75:4f:f9:fe:5c:ce:5c:a2: 3a:40:9d:b6:41:22:d2:82:b8:8d:c7:fd:74:1b:89: 8a:d5:1d:8b:dc:10:4a:85:b7:13:4c:dc:34:b3:46: bf:81:7c:2e:c7:c5:4a:38:25:99:32:ea:39:ef:1a: 51:1c:3e:2b:0a:22:4d:d2:06:e7:dc:ad:f5:f0:cd: e1:28:d9:14:fb:95:c4:ea:04:9f:6e:25:00:39:eb: 57:f1:51:bf:d2:54:7c:0c:76:d3:7f:01:a8:70:53: 8f:64:17:14:83:e2:a3:27:ce:0b:d5:a2:9b:69:ee: b5:a0:c8:cf:53:ec:d1:e6:2c:2f:32:5b:f5:70:67: bc:01:21:21:27:91:00:03:3d:33:e2:b0:72:c5:14: aa:22:16:d5:d4:28:22:84:7a:5f:83:39:67:44:1a: b5:c5:82:5d:dc:b3:0d:3f:46:b4:6d:f9:ec:47:d3: 36:9f:43:46:07:7f:55:dd:d2:b6:12:78:98:41:f9: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:26:A5:BB:88:52:46:04:A0:0F:92:54:5E:9C:AF:3D:84:25:20 X509v3 Authority Key Identifier: keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:17:d5:1d:7a:88:bb:89:62:7e:ab:9e:0b:9d:17:ac:a6:52: 05:90:c2:7b:e8:0c:d2:85:f3:6d:d0:53:4a:91:e7:d7:cd:18: b0:64:17:2b:f3:2a:13:fc:8c:4e:95:19:9a:c8:b8:00:8b:99: d9:86:b2:0b:4e:09:d6:94:90:47:ef:b8:11:59:2d:a5:7d:7b: ba:1d:cf:3d:08:f6:57:0a:cc:94:ce:e3:4d:1e:e8:8a:cd:6b: c7:dd:c6:4c:7f:d9:87:e6:8c:53:40:a0:49:fc:25:d9:21:85: 69:fd:88:6b:c1:3c:ef:d3:82:73:7f:b8:a4:7f:0a:32:3d:57: 7e:25:cd:50:98:0d:95:e0:3e:fb:f6:c3:ce:23:d6:41:d1:53: 22:cb:19:75:c9:a5:f3:7e:9f:2c:27:55:f4:95:9e:8c:ec:3b: 28:b0:b2:8f:ae:8c:98:20:b3:63:5f:37:bc:f6:24:33:dc:bb: 8b:28:4d:e6:89:e2:67:26:53:f5:01:cc:14:b8:46:1f:60:48: b4:de:82:d4:4a:ed:61:98:a6:0d:68:27:d2:82:17:39:bc:6a: ca:e6:bc:5b:72:0b:f9:c5:0f:ca:34:bc:50:80:4e:a1:9b:ef: 4d:3f:49:68:5f:45:66:60:f4:57:76:48:07:ed:75:b5:1b:81: 82:ee:1e:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw8rTGUHwHwXjh0Oi1dTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj M2VkZGUwHhcNMjUxMjE4MTQwMTEzWhcNMjUxMjE5MTQwMTEzWjAzMTEwLwYDVQQD Eyg1YTE0MjZhNWJiODg1MjQ2MDRhMDBmOTI1NDVlOWNhZjNkODQyNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE7ak7P6oJNW3rh8HvN9jY+/vDSu Ce5lp8F9ueeS48XQgjYkzqA7g9nYTJ5W4j53T4tSgiuJOdHZY9bWWqwoUYM7dU/5 /lzOXKI6QJ22QSLSgriNx/10G4mK1R2L3BBKhbcTTNw0s0a/gXwux8VKOCWZMuo5 7xpRHD4rCiJN0gbn3K318M3hKNkU+5XE6gSfbiUAOetX8VG/0lR8DHbTfwGocFOP ZBcUg+KjJ84L1aKbae61oMjPU+zR5iwvMlv1cGe8ASEhJ5EAAz0z4rByxRSqIhbV 1CgihHpfgzlnRBq1xYJd3LMNP0a0bfnsR9M2n0NGB39V3dK2EniYQflVSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoUJqW7iFJGBKAPklRenK89hCUgMB8GA1UdIwQY MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt MDYwYTQ3MzgwOTFkLzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRfVHXqI u4lifqueC50XrKZSBZDCe+gM0oXzbdBTSpHn180YsGQXK/MqE/yMTpUZmsi4AIuZ 2YayC04J1pSQR++4EVktpX17uh3PPQj2VwrMlM7jTR7ois1rx93GTH/Zh+aMU0Cg Sfwl2SGFaf2Ia8E879OCc3+4pH8KMj1XfiXNUJgNleA++/bDziPWQdFTIssZdcml 836fLCdV9JWejOw7KLCyj66MmCCzY183vPYkM9y7iyhN5oniZyZT9QHMFLhGH2BI tN6C1ErtYZimDWgn0oIXObxqyua8W3IL+cUPyjS8UIBOoZvvTT9JaF9FZmD0V3ZI B+11tRuBgu4eZw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:33:02 2025 by rpki-client