This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json) Hash identifier: BvuUtCrYjL4GPN5SeOuVP3bOOBeWO/s4Dzntj+fZxMc= Subject key identifier: 99:A7:DD:67:6F:E2:49:79:22:D8:CA:AE:9E:12:E2:A8:A8:B4:7A:A8 Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9 Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9 Certificate serial: 019AF19AA3B797CE970A92D0E70F789BC6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: uupnOSI3J9lbx/YBH59bFkPHA2Cg2ftA+NS4cdgdHUI=) 2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a3:b7:97:ce:97:0a:92:d0:e7:0f:78:9b:c6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=99a7dd676fe2497922d8caae9e12e2a8a8b47aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:5a:91:60:4a:ae:ff:c3:67:e3:72:84:1c: f2:2a:d3:0a:18:88:1e:66:69:1e:d7:cb:e0:ed:7f: 4d:b9:94:52:5c:63:e2:cf:b5:26:89:bb:a3:58:fc: 73:e5:8e:25:69:b2:e7:a6:fb:b0:b0:61:ef:6a:20: b4:7c:13:fb:7b:42:cd:67:df:de:25:95:25:43:9a: 4a:e7:35:96:2c:d3:c7:d0:04:2b:c1:4e:8b:55:f8: 4f:02:2f:6d:40:36:cc:ad:8b:6b:ce:32:08:a5:cc: ad:42:52:3f:89:9e:11:f0:c4:4f:0d:07:b9:66:6c: 06:71:36:d0:dd:89:65:50:b4:ab:a3:30:05:59:6b: 1d:36:48:0a:fc:9d:25:28:3f:26:c9:cf:ee:97:2e: f3:fe:76:76:97:63:0d:9d:5f:4a:4c:1b:6a:39:80: 83:8d:37:4d:2f:f7:15:29:65:8d:74:63:a7:00:ff: 38:3c:86:a8:7f:c4:62:25:69:65:21:5d:fb:7a:14: 80:64:d1:9a:6b:73:60:8d:8f:cf:69:2c:00:f1:b6: b0:a3:3a:73:9f:4d:9c:a9:9d:f4:3c:da:80:3e:93: 01:7c:36:d5:90:8f:87:94:41:55:ec:fe:c4:cd:c6: 11:85:c6:3b:c0:d0:2c:35:e3:1c:ef:5d:59:61:1d: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A7:DD:67:6F:E2:49:79:22:D8:CA:AE:9E:12:E2:A8:A8:B4:7A:A8 X509v3 Authority Key Identifier: keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:00:9a:8a:02:90:3c:1a:fe:c8:3c:6d:91:80:08:c2:6e:0d: f8:3e:57:28:8b:3b:c5:07:4e:0c:2a:54:cf:89:f2:18:9a:d6: 01:d2:f5:10:90:c2:38:93:0e:0f:3f:11:36:af:99:80:12:5d: d4:f2:60:1f:02:ef:fd:d5:9f:9a:33:e2:86:0b:6f:58:b1:40: b9:09:15:20:7a:8b:e5:0a:57:6f:3e:ae:ed:55:c2:7b:08:3a: 0c:fc:95:b3:b1:ac:f7:b1:c0:bd:3d:97:b3:ef:a8:ab:af:94: 5d:fd:97:a1:66:5f:a6:98:51:2a:b5:8d:fc:a4:6d:19:f1:10: a7:94:1d:b2:c8:7e:e6:95:a5:09:c5:6a:8e:7f:e6:3f:cf:59: 25:93:72:6b:88:74:15:26:d4:f5:03:9d:03:38:47:2e:67:7c: 9a:1d:1c:31:8f:2c:79:e0:2e:e0:8a:82:07:a7:00:26:26:bf: 0a:0e:93:27:a7:ee:59:d2:b7:b8:34:4c:02:b4:95:e6:42:1c: 7e:27:ee:78:c4:f9:78:87:40:c6:8f:bb:95:d8:4d:7f:3b:c5: 09:37:44:f5:15:b2:dc:01:28:3c:cc:b4:3f:c6:64:80:d3:a1: 5c:31:6e:c9:44:b1:17:0b:d8:c8:94:3f:da:48:b3:cc:16:c8: c8:d3:82:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqO3l86XCpLQ5w94m8asMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1 ZDY2ZjkwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD Eyg5OWE3ZGQ2NzZmZTI0OTc5MjJkOGNhYWU5ZTEyZTJhOGE4YjQ3YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KNakWBKrv/DZ+NyhBzyKtMKGIge Zmke18vg7X9NuZRSXGPiz7UmibujWPxz5Y4labLnpvuwsGHvaiC0fBP7e0LNZ9/e JZUlQ5pK5zWWLNPH0AQrwU6LVfhPAi9tQDbMrYtrzjIIpcytQlI/iZ4R8MRPDQe5 ZmwGcTbQ3YllULSrozAFWWsdNkgK/J0lKD8myc/uly7z/nZ2l2MNnV9KTBtqOYCD jTdNL/cVKWWNdGOnAP84PIaof8RiJWllIV37ehSAZNGaa3NgjY/PaSwA8bawozpz n02cqZ30PNqAPpMBfDbVkI+HlEFV7P7EzcYRhcY7wNAsNeMc711ZYR3+UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmn3Wdv4kl5ItjKrp4S4qiotHqoMB8GA1UdIwQY MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt NzlkOTM0ZTRhOTlhLzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQCaigKQ PBr+yDxtkYAIwm4N+D5XKIs7xQdODCpUz4nyGJrWAdL1EJDCOJMODz8RNq+ZgBJd 1PJgHwLv/dWfmjPihgtvWLFAuQkVIHqL5QpXbz6u7VXCewg6DPyVs7Gs97HAvT2X s++oq6+UXf2XoWZfpphRKrWN/KRtGfEQp5Qdssh+5pWlCcVqjn/mP89ZJZNya4h0 FSbU9QOdAzhHLmd8mh0cMY8seeAu4IqCB6cAJia/Cg6TJ6fuWdK3uDRMArSV5kIc fifueMT5eIdAxo+7ldhNfzvFCTdE9RWy3AEoPMy0P8ZkgNOhXDFuyUSxFwvYyJQ/ 2kizzBbIyNOCdw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:48 2025 by rpki-client