This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft File: U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json) Hash identifier: u+IAT7ndMvn9Ckhe4po90qBWqBT7bcaQEbCCtC0W76w= Subject key identifier: 33:FE:72:F9:B0:12:94:F0:6C:F8:48:31:17:8D:22:36:D5:59:2D:1D Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29 Certificate issuer: /CN=53a8b7bca8b11d27850e918ca599669880162929 Certificate serial: 019AF163D3161AF5DCDBCCC0D5BAB44A117A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft Manifest number: 0371 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: gaXQMe9EGINN0QZLDbp9qzoTG+mUal5krynbUs9Kdsk=) 2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d3:16:1a:f5:dc:db:cc:c0:d5:ba:b4:4a:11:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=33fe72f9b01294f06cf84831178d2236d5592d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:40:1a:98:36:18:a8:bc:56:05:29:df:c9: a3:2c:d1:ea:d0:26:6b:9b:bb:b5:d0:cf:b3:87:e4: 14:7c:92:b5:05:fb:e6:d5:2b:51:fb:e6:f3:c1:f4: 4a:c4:8b:cb:33:8b:c7:f1:39:22:48:3e:e7:5b:15: b9:6d:ea:ab:1e:4a:4b:a4:f0:eb:c5:bb:79:85:a4: 51:d2:5b:fc:68:d1:d0:2d:a2:4c:c0:a1:c5:88:1c: 7f:bb:db:cb:79:30:89:db:be:90:12:91:a8:14:77: 7c:32:c3:d1:89:2c:90:8d:b9:8e:41:fc:5a:1d:60: a4:68:ba:f3:a6:e6:8a:09:a4:af:62:2b:1b:fc:12: 55:b1:c6:d1:14:77:e2:f6:31:c2:47:59:c2:b4:11: 10:86:66:8d:50:99:5c:2b:05:16:ac:1b:c6:fd:6f: be:1a:c9:18:4d:d4:87:ad:aa:e4:9c:ef:60:42:ea: b0:04:c1:3d:b1:9f:a5:84:3d:47:49:ce:96:b2:2b: 10:a5:b3:ce:0b:0e:6a:96:0b:9a:be:93:8a:4a:aa: fc:f2:2a:01:a1:2a:cd:46:20:48:4f:7e:b0:ae:37: 42:cb:f4:84:f9:fb:6a:56:30:af:05:dc:eb:b5:82: 66:a5:5e:f2:90:b9:58:27:10:3f:b7:a6:d6:2f:2f: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FE:72:F9:B0:12:94:F0:6C:F8:48:31:17:8D:22:36:D5:59:2D:1D X509v3 Authority Key Identifier: keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:51:9c:c6:bd:39:2b:a3:7f:78:6a:2a:ed:cb:16:77:39:8f: b0:fc:44:0d:35:87:40:88:6d:13:c5:37:07:6a:1f:28:a9:e9: f1:5d:8e:be:a8:4b:d8:46:9c:1a:07:e0:ab:db:42:1f:3f:1b: fe:fe:21:ee:85:a4:7e:e6:9a:25:99:3c:cb:69:66:11:87:b2: c8:42:4e:98:48:c2:5d:d1:a6:72:8e:e8:a7:8a:f3:19:05:49: 1a:d3:b5:da:df:d4:72:0e:61:33:05:aa:e6:04:9a:dd:3c:0e: db:f3:38:4e:21:53:d8:fb:34:45:ce:8f:a8:d3:4c:e2:1b:ed: 67:cd:b8:ae:d3:fe:ed:ad:c9:72:1e:2f:ea:c6:8b:00:31:a8: 28:56:28:ba:0b:25:42:3d:45:86:87:62:84:84:c2:2a:08:d3: 53:dd:2c:9e:a9:87:54:b1:82:3c:ce:3d:67:4b:03:87:53:27: 64:bd:e1:db:76:37:31:99:b9:d1:69:bd:f6:6f:01:80:aa:1f: 6c:61:45:49:2f:b6:15:75:d9:37:cb:dd:2f:84:89:72:d1:c0: 7e:36:6a:48:53:0b:01:12:23:ec:aa:f5:b4:54:1a:9e:bc:9c: 3b:06:f1:35:ba:f6:ee:30:22:27:3c:83:2d:96:2a:d1:d7:68: 11:5e:40:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9MWGvXc28zA1bq0ShF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYThiN2JjYThiMTFkMjc4NTBlOTE4Y2E1OTk2Njk4ODAx NjI5MjkwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EygzM2ZlNzJmOWIwMTI5NGYwNmNmODQ4MzExNzhkMjIzNmQ1NTkyZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUBAGpg2GKi8VgUp38mjLNHq0CZr m7u10M+zh+QUfJK1Bfvm1StR++bzwfRKxIvLM4vH8TkiSD7nWxW5beqrHkpLpPDr xbt5haRR0lv8aNHQLaJMwKHFiBx/u9vLeTCJ276QEpGoFHd8MsPRiSyQjbmOQfxa HWCkaLrzpuaKCaSvYisb/BJVscbRFHfi9jHCR1nCtBEQhmaNUJlcKwUWrBvG/W++ GskYTdSHrarknO9gQuqwBME9sZ+lhD1HSc6WsisQpbPOCw5qlguavpOKSqr88ioB oSrNRiBIT36wrjdCy/SE+ftqVjCvBdzrtYJmpV7ykLlYJxA/t6bWLy8swwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP+cvmwEpTwbPhIMReNIjbVWS0dMB8GA1UdIwQY MBaAFFOot7yosR0nhQ6RjKWZZpiAFikpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81MDZkYjktMTJhYS00NjNjLWE3ZWEt ZDNjZGQ1YzMzOTJjLzEvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81MDZkYjktMTJhYS00NjNjLWE3ZWEtZDNjZGQ1YzMzOTJj LzEvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVGcxr05 K6N/eGoq7csWdzmPsPxEDTWHQIhtE8U3B2ofKKnp8V2OvqhL2EacGgfgq9tCHz8b /v4h7oWkfuaaJZk8y2lmEYeyyEJOmEjCXdGmco7op4rzGQVJGtO12t/Ucg5hMwWq 5gSa3TwO2/M4TiFT2Ps0Rc6PqNNM4hvtZ824rtP+7a3Jch4v6saLADGoKFYougsl Qj1FhodihITCKgjTU90snqmHVLGCPM49Z0sDh1MnZL3h23Y3MZm50Wm99m8BgKof bGFFSS+2FXXZN8vdL4SJctHAfjZqSFMLARIj7Kr1tFQanrycOwbxNbr27jAiJzyD LZYq0ddoEV5A+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:17 2025 by rpki-client