This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft File: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft (raw, json) Hash identifier: XWoGt0TLHLsvSe55pyzIBm7DZTeQNYjyv8PLFrdf8UE= Subject key identifier: 98:FD:85:39:39:F5:99:E3:A0:8D:5C:07:6C:9E:58:4E:71:71:C8:CF Authority key identifier: FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05 Certificate issuer: /CN=fd4d6f06bb1237e26907e6402d2bd0d889372505 Certificate serial: 019AF12D10F5E8553CDAB11C48FD5E45F69F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft Manifest number: 78 Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl (hash: KvU/Eo0PCdYF1ZBPSq1KpzaVLAdO3YpahxRFzi8tIUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:10:f5:e8:55:3c:da:b1:1c:48:fd:5e:45:f6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd4d6f06bb1237e26907e6402d2bd0d889372505 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=98fd853939f599e3a08d5c076c9e584e7171c8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:c9:46:06:35:dd:54:31:fd:cb:e9:18:10: 71:a2:3f:ef:9b:55:b6:2d:f2:f3:32:cb:0a:17:df: 30:bc:37:64:b8:aa:5b:16:a1:b1:e1:9d:cc:95:d8: dc:7a:38:e3:8e:e5:b7:2a:0a:06:94:7c:ad:f8:a1: 82:fc:16:da:c3:64:ac:f5:5b:f2:a6:af:d2:66:32: 3a:eb:5d:b0:43:a7:cd:8e:a6:f9:fd:b2:dc:5c:7c: ce:14:ce:0c:54:cd:ce:9d:0d:cf:2f:b2:45:9c:f7: 46:3f:3e:a6:ab:96:ff:9c:ed:9d:2e:00:ca:67:bb: 7f:0e:c2:31:51:43:01:71:86:7c:7f:2e:af:b5:36: 37:d0:ae:ce:67:58:8e:96:d9:08:46:19:54:72:fc: 7c:ef:92:6f:95:ae:a0:08:64:68:40:dd:29:52:62: 10:92:3b:d4:af:47:5d:c2:05:06:df:fa:5f:38:33: ff:19:14:7d:52:65:49:fc:a6:4c:20:e3:df:5f:f6: cb:97:1c:c9:5a:e4:42:aa:de:e2:1f:1d:3a:75:74: 5e:fa:ff:52:28:c2:f8:9e:36:c9:69:0a:07:e4:99: 53:3f:08:d7:83:1b:c5:76:ab:ce:17:18:b5:ed:44: e9:30:88:63:71:a3:80:f4:4c:d6:3e:dd:04:a3:5f: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FD:85:39:39:F5:99:E3:A0:8D:5C:07:6C:9E:58:4E:71:71:C8:CF X509v3 Authority Key Identifier: keyid:FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:3f:d5:de:40:89:1f:92:69:84:c5:30:18:b6:45:21:7f:2c: 81:bf:64:12:0e:50:ea:31:05:ae:bb:1d:53:a7:29:6b:89:1e: e4:91:a6:e8:aa:e3:26:1f:b9:d0:96:26:54:41:0c:96:de:39: 7d:e3:11:c7:b6:ae:c6:7f:73:80:77:f6:93:3c:2b:75:5c:cc: d2:9c:c4:4f:77:39:f8:be:81:36:01:58:a2:37:5a:f6:44:7a: 3b:30:fe:31:72:84:96:4c:ed:fb:74:13:6d:94:65:c2:46:72: b0:8b:e0:95:65:2e:6e:b5:3c:ca:fb:8d:82:95:e0:e3:39:7f: 76:6e:2c:f6:dd:b9:5a:17:a3:31:8d:fd:a1:aa:ef:d7:79:4d: 7a:fd:99:5c:3f:f0:99:61:71:2e:52:34:10:94:6b:b7:63:54: b7:de:a8:68:96:18:33:e4:1c:7e:ed:cf:b1:a6:fe:0d:a8:a2: 45:e0:ee:d2:a2:59:54:e0:bb:1d:2a:83:82:47:d9:9a:7d:46: 73:2e:2b:40:dc:43:1f:c5:81:1f:3d:13:86:21:aa:3b:89:77: 7b:5a:66:d4:04:79:6a:b2:10:47:91:f2:e7:f3:b9:8a:2a:d6: b6:45:6e:60:db:43:99:16:90:2b:d8:b4:68:de:fd:5e:9c:db: 6a:61:a7:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRD16FU82rEcSP1eRfafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNGQ2ZjA2YmIxMjM3ZTI2OTA3ZTY0MDJkMmJkMGQ4ODkz NzI1MDUwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD Eyg5OGZkODUzOTM5ZjU5OWUzYTA4ZDVjMDc2YzllNTg0ZTcxNzFjOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcnJRgY13VQx/cvpGBBxoj/vm1W2 LfLzMssKF98wvDdkuKpbFqGx4Z3MldjcejjjjuW3KgoGlHyt+KGC/Bbaw2Ss9Vvy pq/SZjI6612wQ6fNjqb5/bLcXHzOFM4MVM3OnQ3PL7JFnPdGPz6mq5b/nO2dLgDK Z7t/DsIxUUMBcYZ8fy6vtTY30K7OZ1iOltkIRhlUcvx875Jvla6gCGRoQN0pUmIQ kjvUr0ddwgUG3/pfODP/GRR9UmVJ/KZMIOPfX/bLlxzJWuRCqt7iHx06dXRe+v9S KML4njbJaQoH5JlTPwjXgxvFdqvOFxi17UTpMIhjcaOA9EzWPt0Eo1+wjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJj9hTk59ZnjoI1cB2yeWE5xccjPMB8GA1UdIwQY MBaAFP1Nbwa7EjfiaQfmQC0r0NiJNyUFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1UxdkJyc1NOLUpwQi1aQUxTdlEySWszSlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lNTM1ZWMtODA1Mi00M2Y1LTg4ZGQt Y2IyNWEzMWRiN2ZiLzEvX1UxdkJyc1NOLUpwQi1aQUxTdlEySWszSlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lNTM1ZWMtODA1Mi00M2Y1LTg4ZGQtY2IyNWEzMWRiN2Zi LzEvX1UxdkJyc1NOLUpwQi1aQUxTdlEySWszSlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuD/V3kCJ H5JphMUwGLZFIX8sgb9kEg5Q6jEFrrsdU6cpa4ke5JGm6KrjJh+50JYmVEEMlt45 feMRx7auxn9zgHf2kzwrdVzM0pzET3c5+L6BNgFYojda9kR6OzD+MXKElkzt+3QT bZRlwkZysIvglWUubrU8yvuNgpXg4zl/dm4s9t25WhejMY39oarv13lNev2ZXD/w mWFxLlI0EJRrt2NUt96oaJYYM+Qcfu3Psab+DaiiReDu0qJZVOC7HSqDgkfZmn1G cy4rQNxDH8WBHz0ThiGqO4l3e1pm1AR5arIQR5Hy5/O5iirWtkVuYNtDmRaQK9i0 aN79XpzbamGnyw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:36 2025 by rpki-client