This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json) Hash identifier: 4X4XkWLj8/4quL+iDvewSoP+y3qI4xWmaOOXtfb6NZA= Subject key identifier: 86:2A:21:A7:EB:BA:ED:03:62:75:32:7C:74:A2:4E:1E:92:D3:94:E7 Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2 Certificate serial: 019AF5E5D268A7A3885121D64BA4F4B50199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 23:01:10 +0000 Manifest this update: Sat 06 Dec 2025 23:01:10 +0000 Manifest next update: Sun 07 Dec 2025 23:01:10 +0000 Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=) 2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: o76OGIo4xEkbwdjU1oS0L23KdKF/TUgeV5k66Cb6HJc=) 3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:d2:68:a7:a3:88:51:21:d6:4b:a4:f4:b5:01:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2 Validity Not Before: Dec 6 23:01:10 2025 GMT Not After : Dec 7 23:01:10 2025 GMT Subject: CN=862a21a7ebbaed036275327c74a24e1e92d394e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:06:c1:6f:6b:4a:0d:f2:55:0a:39:4b:17: a0:81:02:a2:68:a7:60:07:ea:0d:82:c8:55:dc:34: 38:c5:a7:08:e5:ae:3a:7b:08:0f:c9:a6:9a:f7:f0: 3d:aa:08:24:bc:68:a2:28:41:af:40:2d:ce:17:7b: ef:c1:a8:58:45:87:3d:44:14:c2:ba:05:b1:24:76: e4:a1:c9:e0:89:e1:5a:29:47:6d:f1:e3:ff:0a:08: 09:03:3e:83:44:8c:dd:64:ee:3c:6b:b2:12:64:99: df:8c:43:50:fe:2a:e2:5d:ab:b2:a8:35:98:f4:07: 52:18:f3:2f:13:c7:7c:d7:87:62:5e:fa:b4:37:34: 65:86:1c:7c:62:fc:48:14:cf:62:cd:3c:76:23:69: 50:e1:39:92:51:02:86:93:b9:00:54:a8:9b:9b:bc: 72:d2:03:9c:1d:24:5e:98:44:ae:1e:3b:c7:e6:07: c6:fe:ca:e6:37:73:cb:76:fe:48:17:c1:28:2c:a3: d1:e6:5f:24:fa:0a:67:99:4d:03:88:0d:56:50:7e: b0:28:6b:45:d1:ae:98:ce:e1:c6:a2:fc:0e:be:67: 56:b9:d9:a9:be:22:9a:5f:5b:91:ac:96:00:4f:55: 6d:ed:60:21:9f:b2:f6:5d:73:fd:23:c8:d2:72:c7: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2A:21:A7:EB:BA:ED:03:62:75:32:7C:74:A2:4E:1E:92:D3:94:E7 X509v3 Authority Key Identifier: keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:99:7e:f6:25:8e:c2:d2:cb:0a:ce:4a:b0:4d:75:16:78:af: ef:b8:5e:5f:b5:53:46:e6:fc:1d:32:a7:c9:f9:77:5f:b5:09: 8d:7a:d7:0f:c5:c7:d0:fd:41:15:45:91:6e:37:4f:72:b1:7c: f3:af:be:67:ba:9c:fa:46:fb:4d:c8:cd:ac:89:40:c2:1d:35: ac:4c:26:1c:4e:cd:df:aa:a9:9b:5e:77:c5:9f:bf:35:f8:54: 11:7c:a4:5f:0c:28:72:ce:cc:77:7e:fb:68:50:83:e0:e6:c4: 90:b8:96:85:63:5a:49:99:20:bf:7f:d1:71:a1:55:ca:2b:e6: d8:c8:12:af:f3:a8:48:79:e4:c7:e4:66:42:1a:df:13:c5:cd: c8:a3:c7:61:78:eb:de:85:b7:f6:5e:68:1e:e8:38:bc:5a:b9: 5c:d4:0c:86:69:d6:b6:22:85:9d:51:01:4a:de:7c:ef:74:09: 1a:a8:4c:51:24:32:0a:60:73:62:c4:3f:1d:45:0b:5c:ea:09: b4:b4:df:74:76:0d:78:08:ba:70:72:86:fe:67:5f:15:49:50: 42:df:67:8e:04:9e:85:10:de:87:d2:d3:a2:a1:e2:07:65:bf: a4:54:22:74:e3:14:7f:42:58:c8:48:78:09:cd:26:14:63:70: 64:80:c9:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15dJop6OIUSHWS6T0tQGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3 ZjAyYTIwHhcNMjUxMjA2MjMwMTEwWhcNMjUxMjA3MjMwMTEwWjAzMTEwLwYDVQQD Eyg4NjJhMjFhN2ViYmFlZDAzNjI3NTMyN2M3NGEyNGUxZTkyZDM5NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWoGwW9rSg3yVQo5SxeggQKiaKdg B+oNgshV3DQ4xacI5a46ewgPyaaa9/A9qggkvGiiKEGvQC3OF3vvwahYRYc9RBTC ugWxJHbkocngieFaKUdt8eP/CggJAz6DRIzdZO48a7ISZJnfjENQ/iriXauyqDWY 9AdSGPMvE8d814diXvq0NzRlhhx8YvxIFM9izTx2I2lQ4TmSUQKGk7kAVKibm7xy 0gOcHSRemESuHjvH5gfG/srmN3PLdv5IF8EoLKPR5l8k+gpnmU0DiA1WUH6wKGtF 0a6YzuHGovwOvmdWudmpviKaX1uRrJYAT1Vt7WAhn7L2XXP9I8jScsfqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYqIafruu0DYnUyfHSiTh6S05TnMB8GA1UdIwQY MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1 LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpl+9iWO wtLLCs5KsE11Fniv77heX7VTRub8HTKnyfl3X7UJjXrXD8XH0P1BFUWRbjdPcrF8 86++Z7qc+kb7TcjNrIlAwh01rEwmHE7N36qpm153xZ+/NfhUEXykXwwocs7Md377 aFCD4ObEkLiWhWNaSZkgv3/RcaFVyivm2MgSr/OoSHnkx+RmQhrfE8XNyKPHYXjr 3oW39l5oHug4vFq5XNQMhmnWtiKFnVEBSt5873QJGqhMUSQyCmBzYsQ/HUULXOoJ tLTfdHYNeAi6cHKG/mdfFUlQQt9njgSehRDeh9LToqHiB2W/pFQidOMUf0JYyEh4 Cc0mFGNwZIDJdg== -----END CERTIFICATE-----Generated at Sun Dec 7 09:26:31 2025 by rpki-client