This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json) Hash identifier: uZvUNzcN2auYwdzR3gVNqF6tdrXUCK+vYO5BeMd2j6k= Subject key identifier: A3:66:6A:DB:3D:F4:1F:A4:B2:51:02:C2:99:23:7B:86:AA:BC:48:6A Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06 Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06 Certificate serial: 019AF3F7D8216BF666A15DB329B2FB9EB8D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft Manifest number: 079F Signing time: Sat 06 Dec 2025 14:01:37 +0000 Manifest this update: Sat 06 Dec 2025 14:01:37 +0000 Manifest next update: Sun 07 Dec 2025 14:01:37 +0000 Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: ViBpCvIV4dndTfxYf0zA0JgrM/HTfEc8GPsYqm827+o=) 2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d8:21:6b:f6:66:a1:5d:b3:29:b2:fb:9e:b8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06 Validity Not Before: Dec 6 14:01:37 2025 GMT Not After : Dec 7 14:01:37 2025 GMT Subject: CN=a3666adb3df41fa4b25102c299237b86aabc486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:9d:f8:e3:11:46:49:d4:1b:28:b3:28:7a: 11:9e:b6:f3:98:14:07:8e:34:cf:76:45:ce:d3:d4: 28:9c:67:f4:b2:38:01:8f:f5:5e:50:b2:d7:9d:12: d0:91:bd:e6:dc:bb:3f:16:f7:e9:c8:06:10:9f:68: e4:71:56:a6:65:fc:06:e8:4c:67:0a:f7:2a:18:88: e3:44:22:0e:6b:b4:2f:69:e8:e3:90:f1:c4:e5:92: c3:8b:0b:76:39:4b:04:84:2d:4a:c6:58:5f:36:87: 50:cd:c5:43:8b:c3:a9:75:0f:61:9f:24:93:73:dd: 91:58:e0:cc:60:74:bf:71:77:a5:2c:d1:21:14:5c: fa:76:b0:16:22:b4:3b:e5:72:77:a8:2a:47:4a:ab: db:b1:2d:2a:c4:6d:1f:de:1b:4f:45:35:33:be:11: e3:a4:19:25:a4:91:8e:e3:8c:32:bd:ac:86:f4:ba: b1:3b:02:f0:0d:ee:c4:fc:ee:45:bf:41:aa:91:4a: a3:bb:f5:72:80:e2:b8:97:95:73:b3:4b:09:79:8e: 8d:99:49:3d:1b:04:74:48:1a:b1:a4:69:30:42:95: 81:97:e4:31:6e:1a:4f:82:3b:15:66:2c:25:2c:86: 1d:29:64:5a:3f:29:fa:c5:73:36:85:b3:aa:7c:bc: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:6A:DB:3D:F4:1F:A4:B2:51:02:C2:99:23:7B:86:AA:BC:48:6A X509v3 Authority Key Identifier: keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5f:c7:8b:50:a4:0f:dd:60:87:da:5f:e1:4b:24:ff:91:d6: 33:8b:06:0e:ac:e9:9a:6c:d7:e9:53:b0:03:d1:69:5d:90:5a: 85:2d:9b:3f:2e:cb:74:a5:9f:06:f6:80:54:cd:9a:8d:63:b5: 99:b3:4a:7c:e5:0b:49:21:57:43:3a:2e:80:65:30:b0:db:e2: c1:6c:5b:29:98:9c:9b:04:df:25:3e:fb:f0:ae:90:06:93:ce: 1d:6a:a9:28:d9:e2:66:ad:ac:8c:93:1e:bb:a1:ef:2e:a3:9e: 74:f3:6f:88:ce:8f:a1:a2:82:8e:09:0b:75:b2:4c:6f:c4:ed: 2b:17:a1:58:dc:2f:69:e8:3c:e4:1a:5c:19:56:d8:d4:0f:71: 38:6a:e8:6b:e0:13:2d:87:11:22:ed:64:88:55:94:76:34:98: a3:5d:6c:4c:20:8b:ca:3e:25:11:23:2a:d0:83:f2:c9:39:3f: 41:9c:9f:f1:f5:5f:04:b7:17:6a:58:3f:89:59:6b:e8:f8:9c: de:ee:f8:57:6e:b1:24:6a:a9:61:ff:ad:25:27:e7:aa:d7:61: a3:b2:96:42:07:a7:f2:1a:b4:76:8f:90:af:0d:55:9c:78:3c: 1c:fb:44:82:32:30:5b:7c:ad:54:8d:b2:15:a4:04:8f:01:cb: c6:a7:c0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99gha/ZmoV2zKbL7nrjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4 NTJjMDYwHhcNMjUxMjA2MTQwMTM3WhcNMjUxMjA3MTQwMTM3WjAzMTEwLwYDVQQD EyhhMzY2NmFkYjNkZjQxZmE0YjI1MTAyYzI5OTIzN2I4NmFhYmM0ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJyd+OMRRknUGyizKHoRnrbzmBQH jjTPdkXO09QonGf0sjgBj/VeULLXnRLQkb3m3Ls/FvfpyAYQn2jkcVamZfwG6Exn CvcqGIjjRCIOa7QvaejjkPHE5ZLDiwt2OUsEhC1KxlhfNodQzcVDi8OpdQ9hnyST c92RWODMYHS/cXelLNEhFFz6drAWIrQ75XJ3qCpHSqvbsS0qxG0f3htPRTUzvhHj pBklpJGO44wyvayG9LqxOwLwDe7E/O5Fv0GqkUqju/VygOK4l5Vzs0sJeY6NmUk9 GwR0SBqxpGkwQpWBl+QxbhpPgjsVZiwlLIYdKWRaPyn6xXM2hbOqfLyjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNmats99B+kslECwpkje4aqvEhqMB8GA1UdIwQY MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt YzM4MzMwY2JkOTY1LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1 LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApl/Hi1Ck D91gh9pf4Usk/5HWM4sGDqzpmmzX6VOwA9FpXZBahS2bPy7LdKWfBvaAVM2ajWO1 mbNKfOULSSFXQzougGUwsNviwWxbKZicmwTfJT778K6QBpPOHWqpKNniZq2sjJMe u6HvLqOedPNviM6PoaKCjgkLdbJMb8TtKxehWNwvaeg85BpcGVbY1A9xOGroa+AT LYcRIu1kiFWUdjSYo11sTCCLyj4lESMq0IPyyTk/QZyf8fVfBLcXalg/iVlr6Pic 3u74V26xJGqpYf+tJSfnqtdho7KWQgen8hq0do+Qrw1VnHg8HPtEgjIwW3ytVI2y FaQEjwHLxqfA4g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:08 2025 by rpki-client