This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json) Hash identifier: 72kmuF18Rp+dizVsHdmvQlhk2ndMhffC4HThOHARWvE= Subject key identifier: AF:FD:8A:43:7B:DA:2F:69:2C:54:15:DA:29:2A:CB:58:98:42:4E:32 Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019AF2AD9199DFECA74E869455EBB08C3BE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft Manifest number: 0D57 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: 29SLMo34FhaAnpTCRG4-JhzaoEU.roa (hash: 2fi9WOSprxmNRnuIjRed7XskP0Ewr4AfYM3eX1Xq9nE=) 2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: JTMUDnoxSK8CY1sie7TE6pushEz8U8ONNsf1I7CsAWs=) 3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=) 4: gC44VWnXdqeRgBq7XFfpWF95Q6M.roa (hash: ZlFvQ0FdcQWc6LDQd+RgeJur3FpyWFSWGQsV0siREzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:91:99:df:ec:a7:4e:86:94:55:eb:b0:8c:3b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=affd8a437bda2f692c5415da292acb5898424e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:5b:cf:a7:7d:1f:61:f8:cd:63:b3:f8:e6: 03:3a:a4:a1:95:71:e0:30:67:9d:03:b5:ad:1b:b8: ea:3a:8b:8e:93:eb:84:a8:b3:23:09:03:8c:89:53: 95:ed:d6:3f:2d:d0:77:0b:82:b2:56:aa:28:25:fd: 8d:a0:6e:95:f2:3d:4e:7f:d2:02:df:61:5c:b5:c3: c1:b4:10:9a:6c:26:62:7e:c4:3f:3f:38:d4:d1:ce: e9:3a:cb:96:40:43:48:4f:ad:92:8d:46:9e:51:1c: c5:e9:00:03:39:2f:ee:8e:7a:2a:32:ac:14:b5:f5: cb:43:46:b1:d8:a8:07:ed:11:b8:84:fd:78:4c:52: 9f:04:3f:82:78:0b:98:3e:66:f8:71:31:08:7d:8e: 08:2b:93:7e:32:78:c7:62:62:56:05:04:ce:f9:d7: 6a:99:d9:60:a5:18:49:14:d0:0f:da:21:e2:ab:77: 6c:ff:aa:37:bb:4a:87:79:67:be:57:34:f4:6c:23: 69:f2:29:d0:13:cf:6f:94:2a:c6:bc:70:50:02:e5: 82:21:e4:b0:0d:17:1e:72:cb:f0:ba:ef:17:da:a9: 14:20:ea:c4:f2:6e:c3:7a:8f:14:d3:73:fa:7e:64: 71:16:a3:ac:0b:e5:b1:0f:6e:7b:cd:3e:1a:7b:c1: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FD:8A:43:7B:DA:2F:69:2C:54:15:DA:29:2A:CB:58:98:42:4E:32 X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4f:e4:fc:ec:f1:5e:f9:4d:5c:e7:80:45:ba:7c:6f:51:03: fc:83:d4:1f:48:d3:4d:14:6e:9f:15:a8:d1:d1:d5:92:4e:ca: 01:07:ce:d6:df:a2:66:ae:22:fd:a2:1a:73:22:1d:e6:86:67: 36:d0:74:3b:34:04:de:5a:cd:93:6b:79:63:e8:fc:ed:a1:fe: 2c:c4:ae:bb:bf:da:91:93:53:34:db:9d:c1:58:8b:75:8d:67: c6:1b:d1:97:f3:22:ac:3b:1f:14:5a:35:05:93:1c:6c:74:71: f0:74:23:1b:98:8c:ea:8a:d8:f1:f9:1f:9c:48:d0:98:2d:99: 12:e1:0e:10:b8:73:0a:7e:06:98:8a:44:91:64:79:bb:7d:2d: d6:93:82:c1:ea:66:1c:65:98:7a:3e:c5:70:35:0f:7c:ac:fc: 19:4d:56:88:94:e3:13:2b:94:6d:89:78:00:cc:5e:90:4c:a6: 09:b0:c2:38:83:ef:83:74:5b:f5:c6:5a:cb:21:c9:28:b0:14: bb:d1:da:ad:45:10:26:4b:6f:68:ed:4f:ce:00:ea:e1:ae:39: f6:f0:6d:de:d8:53:90:12:1f:c7:ac:5c:a3:e5:de:06:9b:f4: a5:7c:9a:3a:5f:11:5f:4d:8c:3e:df:32:f2:0f:d2:79:32:1a: 3b:b0:18:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZGZ3+ynToaUVeuwjDvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD EyhhZmZkOGE0MzdiZGEyZjY5MmM1NDE1ZGEyOTJhY2I1ODk4NDI0ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhxbz6d9H2H4zWOz+OYDOqShlXHg MGedA7WtG7jqOouOk+uEqLMjCQOMiVOV7dY/LdB3C4KyVqooJf2NoG6V8j1Of9IC 32FctcPBtBCabCZifsQ/PzjU0c7pOsuWQENIT62SjUaeURzF6QADOS/ujnoqMqwU tfXLQ0ax2KgH7RG4hP14TFKfBD+CeAuYPmb4cTEIfY4IK5N+MnjHYmJWBQTO+ddq mdlgpRhJFNAP2iHiq3ds/6o3u0qHeWe+VzT0bCNp8inQE89vlCrGvHBQAuWCIeSw DRcecsvwuu8X2qkUIOrE8m7Deo8U03P6fmRxFqOsC+WxD257zT4ae8FXEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/9ikN72i9pLFQV2ikqy1iYQk4yMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU/k/Ozx XvlNXOeARbp8b1ED/IPUH0jTTRRunxWo0dHVkk7KAQfO1t+iZq4i/aIacyId5oZn NtB0OzQE3lrNk2t5Y+j87aH+LMSuu7/akZNTNNudwViLdY1nxhvRl/MirDsfFFo1 BZMcbHRx8HQjG5iM6orY8fkfnEjQmC2ZEuEOELhzCn4GmIpEkWR5u30t1pOCwepm HGWYej7FcDUPfKz8GU1WiJTjEyuUbYl4AMxekEymCbDCOIPvg3Rb9cZayyHJKLAU u9HarUUQJktvaO1PzgDq4a459vBt3thTkBIfx6xco+XeBpv0pXyaOl8RX02MPt8y 8g/SeTIaO7AYdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:02 2025 by rpki-client