This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json) Hash identifier: ecPGG/fciCoLXvuX390JEDHDXxTWN+GgKJUtLNB5sTg= Subject key identifier: ED:21:C3:53:21:B4:20:47:B1:24:76:59:FC:8A:66:4A:CE:DB:16:5C Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec Certificate serial: 019AF12EB70E1062A70E785BFA652AB5DC85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: cHl/iV3yLa0XaX8oyUlGm5mtJ3B3l2noWQMT7zh2VDE=) 2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b7:0e:10:62:a7:0e:78:5b:fa:65:2a:b5:dc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=ed21c35321b42047b1247659fc8a664acedb165c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:1e:36:a6:35:6d:c6:d6:67:28:73:9d:0c: 35:24:f8:4e:43:9d:e5:78:3f:2d:8b:e5:e7:9e:36: 36:63:9a:b5:d9:31:ce:13:05:5d:63:66:6c:ec:08: 33:49:1c:4a:47:a0:96:ed:ab:30:50:e9:d2:2b:90: 6d:12:ca:7f:c4:cd:a6:bb:18:41:e7:0e:f9:ce:a4: b3:70:cb:80:af:79:5d:cd:4d:cf:92:33:e4:d5:2b: ea:99:05:c1:27:c5:ee:97:01:17:ea:aa:b4:01:1e: 07:ad:2b:92:e9:38:45:1a:99:2f:a4:7b:de:ee:85: a7:f5:4b:74:78:d7:17:b8:1d:b9:4b:8c:d5:7f:53: ba:6c:24:6a:e2:96:d4:97:dd:fd:77:d9:38:61:05: df:13:c3:7e:86:6c:81:ed:41:d4:ec:d0:0b:9b:02: 6f:ff:83:d3:67:07:a1:6e:d7:d4:55:d8:4b:b4:04: 6a:10:cf:13:79:4f:01:29:49:d3:53:af:9a:29:6d: 0e:3f:6e:29:e1:19:78:fc:fd:fb:e8:ce:da:32:93: d2:91:f2:e2:eb:b0:f2:b6:bd:b3:c4:6c:a0:9e:86: 1b:ea:01:f7:16:87:49:61:a1:8b:c7:f1:75:f9:d9: 81:3f:45:26:9c:cc:07:97:11:59:8b:16:32:1f:88: 24:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:C3:53:21:B4:20:47:B1:24:76:59:FC:8A:66:4A:CE:DB:16:5C X509v3 Authority Key Identifier: keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b5:6a:94:20:e6:1b:be:bf:b2:a7:59:3c:e1:65:49:e9:fc: 7f:46:5b:f5:5c:3c:e3:3f:07:5c:82:94:2e:dc:ec:73:3f:60: 42:bd:89:e2:0f:06:bb:3f:f8:9b:ef:9f:87:f5:13:71:e4:7b: 06:89:c8:cf:bc:3c:a5:07:5b:0d:15:60:db:0f:68:54:01:b7: b9:95:f3:f0:25:94:eb:30:ca:0d:e4:0b:f4:42:dd:9d:ce:f3: 46:f3:54:a4:6d:ab:b4:98:ca:ca:62:d0:70:fc:ff:5d:e2:ed: 3a:74:74:6c:e8:e4:8b:de:ba:65:7f:e5:bc:d7:0b:65:8e:f4: ab:39:09:2b:d6:5d:ba:e4:d2:2d:6c:e3:9a:70:3c:0f:9c:2a: 6e:c1:c6:27:96:b4:fc:5c:ad:ae:31:aa:b4:78:3e:21:c8:bb: 47:49:4c:42:bb:47:44:70:c1:d1:22:a0:a4:ff:b7:b8:92:4c: b5:ae:1f:b7:be:67:c6:5e:1f:da:1c:0b:03:d5:76:ea:03:f1: fb:82:e1:c1:96:32:ce:07:18:66:20:b2:07:14:bf:90:6e:bd: 75:ed:32:78:1b:52:2d:55:4f:8f:37:65:0f:3c:79:77:90:29: 96:e6:03:a2:17:e2:ce:a1:07:28:61:f3:c1:dc:d7:ae:1f:c9: de:72:29:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrcOEGKnDnhb+mUqtdyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWVmNDBmYWY0ODM0MzNiM2UzMzY5OGU0ZDFlZTk1ZjNj OTRiZWMwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhlZDIxYzM1MzIxYjQyMDQ3YjEyNDc2NTlmYzhhNjY0YWNlZGIxNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNEeNqY1bcbWZyhznQw1JPhOQ53l eD8ti+XnnjY2Y5q12THOEwVdY2Zs7AgzSRxKR6CW7aswUOnSK5BtEsp/xM2muxhB 5w75zqSzcMuAr3ldzU3PkjPk1SvqmQXBJ8XulwEX6qq0AR4HrSuS6ThFGpkvpHve 7oWn9Ut0eNcXuB25S4zVf1O6bCRq4pbUl939d9k4YQXfE8N+hmyB7UHU7NALmwJv /4PTZwehbtfUVdhLtARqEM8TeU8BKUnTU6+aKW0OP24p4Rl4/P376M7aMpPSkfLi 67Dytr2zxGygnoYb6gH3FodJYaGLx/F1+dmBP0UmnMwHlxFZixYyH4gkdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0hw1MhtCBHsSR2WfyKZkrO2xZcMB8GA1UdIwQY MBaAFFNe9A+vSDQzs+M2mOTR7pXzyUvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2Yt N2MzNzg5NDA1YmQ2LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2YtN2MzNzg5NDA1YmQ2 LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7VqlCDm G76/sqdZPOFlSen8f0Zb9Vw84z8HXIKULtzscz9gQr2J4g8Guz/4m++fh/UTceR7 BonIz7w8pQdbDRVg2w9oVAG3uZXz8CWU6zDKDeQL9ELdnc7zRvNUpG2rtJjKymLQ cPz/XeLtOnR0bOjki966ZX/lvNcLZY70qzkJK9ZduuTSLWzjmnA8D5wqbsHGJ5a0 /FytrjGqtHg+Ici7R0lMQrtHRHDB0SKgpP+3uJJMta4ft75nxl4f2hwLA9V26gPx +4LhwZYyzgcYZiCyBxS/kG69de0yeBtSLVVPjzdlDzx5d5ApluYDohfizqEHKGHz wdzXrh/J3nIpDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:37 2025 by rpki-client