This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json) Hash identifier: 21HXlVtkCrofuud+jC1e/F+xH/p4wjgqVaevhnpjxm4= Subject key identifier: 09:8A:0D:B2:F7:41:7B:88:2D:B8:50:F9:1F:03:FD:04:1B:0D:54:68 Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8 Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8 Certificate serial: 019AF31B2AE55CE35C7A2CFE7E3C4C90056F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft Manifest number: 02BA Signing time: Sat 06 Dec 2025 10:00:35 +0000 Manifest this update: Sat 06 Dec 2025 10:00:35 +0000 Manifest next update: Sun 07 Dec 2025 10:00:35 +0000 Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: KeWc03zKkWGBVMZdDImyKyxPr+mAUGt+ib47+PLFNsg=) 2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:2a:e5:5c:e3:5c:7a:2c:fe:7e:3c:4c:90:05:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8 Validity Not Before: Dec 6 10:00:35 2025 GMT Not After : Dec 7 10:00:35 2025 GMT Subject: CN=098a0db2f7417b882db850f91f03fd041b0d5468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ae:3a:eb:92:e3:88:52:df:37:e1:7c:73:6d: 55:79:cc:ca:ba:52:9a:19:6d:da:0a:8e:e9:75:87: 5f:a7:66:6d:53:2e:3a:63:05:bb:f8:c2:42:ac:a0: 88:c4:59:76:43:78:83:13:c2:45:97:a9:b4:3f:aa: e3:18:68:e7:1e:c5:62:38:06:e3:c5:9a:02:d0:38: 43:67:b5:cd:63:79:92:76:3f:09:ab:56:c7:73:ba: 51:bb:38:36:90:41:60:80:b6:6c:03:a2:60:0c:a6: 1d:92:5e:e7:a5:89:c6:e2:c0:fe:b2:e9:90:b6:b9: f2:e9:8a:57:20:96:7d:5f:ec:b9:49:82:53:85:74: 17:c6:89:70:e6:43:e5:20:16:5b:f2:d5:c1:40:d3: 05:6f:30:90:4b:31:ed:f3:6f:8e:c5:fe:ff:07:51: 2c:1c:06:f6:6a:13:fa:a0:3c:6d:4c:5b:4d:20:2d: ff:51:3b:1d:fb:6e:9e:49:95:f7:ab:e6:4d:27:f6: 4b:51:e3:c6:25:3b:d4:42:fe:32:c4:3d:c5:ab:8f: 16:11:4b:40:c1:b0:20:7c:68:30:0a:a9:f9:e0:43: b0:c9:64:b7:cf:eb:f7:e6:58:6a:54:e4:a3:87:81: ee:fd:01:ad:56:d3:3d:55:91:c9:89:77:3d:65:68: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8A:0D:B2:F7:41:7B:88:2D:B8:50:F9:1F:03:FD:04:1B:0D:54:68 X509v3 Authority Key Identifier: keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0e:92:34:e6:95:8e:7d:89:99:6a:e3:14:20:c9:ad:79:3c: 24:3b:67:78:fb:12:78:bb:45:15:fe:35:2e:0f:67:9a:cc:e7: 1f:f1:f9:60:65:aa:11:57:52:6d:df:bd:87:5a:fb:c5:3c:03: 96:14:32:ba:09:36:22:00:72:fc:02:f5:39:75:c7:9c:9c:4c: f2:4e:00:77:3d:bf:bb:2d:0c:45:7e:fd:d4:7a:05:85:27:b0: 22:e2:81:c0:43:14:5d:77:90:7a:28:94:db:d0:89:d2:71:7e: 32:c7:7f:30:0c:cc:88:c8:fe:84:c2:68:b9:cd:2f:c6:01:73: 4f:4a:03:3e:e6:34:37:6d:9b:cb:86:87:2d:5b:fa:ce:27:f9: 34:93:9e:3c:4e:17:c3:0c:80:05:39:39:bd:a7:04:7f:5d:b2: 2a:67:cb:ec:99:a3:7e:33:1e:d4:9a:f2:85:31:c9:5b:ab:41: 60:3a:f2:94:5c:d3:ba:65:ae:35:c9:e8:f9:6f:f4:16:a3:36: 10:8d:e1:a0:92:82:db:43:f2:16:12:b0:d6:70:8c:d3:14:98: eb:cc:e2:ce:de:e7:4f:07:b7:88:e2:f0:51:07:0a:b9:62:bf: 1b:c6:0f:e8:c1:02:66:0c:e8:23:f3:10:ed:0c:83:d8:7a:30: 5e:6d:3f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyrlXONceiz+fjxMkAVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl ZDkxYzgwHhcNMjUxMjA2MTAwMDM1WhcNMjUxMjA3MTAwMDM1WjAzMTEwLwYDVQQD EygwOThhMGRiMmY3NDE3Yjg4MmRiODUwZjkxZjAzZmQwNDFiMGQ1NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm64665LjiFLfN+F8c21VeczKulKa GW3aCo7pdYdfp2ZtUy46YwW7+MJCrKCIxFl2Q3iDE8JFl6m0P6rjGGjnHsViOAbj xZoC0DhDZ7XNY3mSdj8Jq1bHc7pRuzg2kEFggLZsA6JgDKYdkl7npYnG4sD+sumQ trny6YpXIJZ9X+y5SYJThXQXxolw5kPlIBZb8tXBQNMFbzCQSzHt82+Oxf7/B1Es HAb2ahP6oDxtTFtNIC3/UTsd+26eSZX3q+ZNJ/ZLUePGJTvUQv4yxD3Fq48WEUtA wbAgfGgwCqn54EOwyWS3z+v35lhqVOSjh4Hu/QGtVtM9VZHJiXc9ZWiuBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmKDbL3QXuILbhQ+R8D/QQbDVRoMB8GA1UdIwQY MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA6SNOaV jn2JmWrjFCDJrXk8JDtnePsSeLtFFf41Lg9nmsznH/H5YGWqEVdSbd+9h1r7xTwD lhQyugk2IgBy/AL1OXXHnJxM8k4Adz2/uy0MRX791HoFhSewIuKBwEMUXXeQeiiU 29CJ0nF+Msd/MAzMiMj+hMJouc0vxgFzT0oDPuY0N22by4aHLVv6zif5NJOePE4X wwyABTk5vacEf12yKmfL7JmjfjMe1JryhTHJW6tBYDrylFzTumWuNcno+W/0FqM2 EI3hoJKC20PyFhKw1nCM0xSY68zizt7nTwe3iOLwUQcKuWK/G8YP6MECZgzoI/MQ 7QyD2HowXm0/rg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:00:11 2025 by rpki-client