This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json) Hash identifier: v9dXk9ks4mgv3VhAqb8WOACwCZ1s9vI9aQPiP5UUtOg= Subject key identifier: B8:F1:21:1A:59:8A:65:55:06:1C:AD:53:CA:E7:B1:77:93:43:E6:AE Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C Certificate issuer: /CN=5349c2d00ba46be9244b76194baa10f33ce3462c Certificate serial: 019AF577DAF9D74072ABE54E8207AAFAF3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft Manifest number: 07F0 Signing time: Sat 06 Dec 2025 21:01:03 +0000 Manifest this update: Sat 06 Dec 2025 21:01:03 +0000 Manifest next update: Sun 07 Dec 2025 21:01:03 +0000 Files and hashes: 1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: +qjfsA4YaSGyelsTkmADYlKzXgK/nWbuI586EnBl3VM=) 2: kDLhfcy8YHG9d7r3ZyKyTCN67dU.roa (hash: FHssmQ805uZ/Wtb94rUn/bLQZUQ10hPffXrOYDXFnpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:da:f9:d7:40:72:ab:e5:4e:82:07:aa:fa:f3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c Validity Not Before: Dec 6 21:01:03 2025 GMT Not After : Dec 7 21:01:03 2025 GMT Subject: CN=b8f1211a598a6555061cad53cae7b1779343e6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c9:fd:40:48:8d:04:42:62:d0:ac:02:fd:93: f2:6e:81:60:a0:f3:6e:6d:93:cc:43:25:12:34:fe: 4b:08:2b:f8:03:70:f5:7b:d9:29:99:cb:74:21:22: 84:a8:1f:3e:12:20:93:9a:6a:18:80:f8:b7:0a:4e: ca:a8:1c:49:05:64:22:b2:7b:46:c4:ac:1e:f9:51: ef:3a:6a:99:bc:33:bf:a8:64:cc:19:bd:8d:1c:17: 94:23:cb:77:f4:ce:0b:66:a7:7f:83:4f:a2:ac:3b: d5:41:8e:19:4c:38:ff:c3:ad:84:d2:85:4d:f1:23: 92:8c:4a:d4:fb:3d:f5:fb:d9:cd:dd:68:e9:0b:45: 12:6a:49:73:11:69:98:bb:ae:3e:65:20:3b:d4:04: 71:ca:42:8d:9f:ec:e0:9b:0e:87:39:80:71:96:c1: b8:e0:0b:8b:df:89:ac:bc:ae:d7:90:09:28:e1:a6: 63:59:02:8a:6b:b9:c7:6a:23:29:d9:84:74:39:47: e0:6c:b0:41:a0:ed:ad:69:e0:ec:17:9f:b9:45:4c: e9:8a:fd:30:61:96:df:e8:47:ce:c5:47:01:7f:59: 11:cb:1e:44:e2:17:67:d8:e8:9f:e2:4f:79:02:59: 2c:f0:9a:44:af:d8:e3:7b:1d:7b:3c:47:87:56:c7: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F1:21:1A:59:8A:65:55:06:1C:AD:53:CA:E7:B1:77:93:43:E6:AE X509v3 Authority Key Identifier: keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:85:aa:bc:12:41:9a:f4:57:43:5d:75:b5:6e:b2:8b:53:b8: 95:ed:4a:64:02:b0:ff:76:07:aa:31:b9:82:63:70:2c:f1:1b: 92:12:b2:ec:91:f0:55:f2:e8:96:07:53:57:2d:53:d5:77:50: 89:2f:c4:b0:6a:8b:f0:ed:d8:30:b3:93:0a:ee:93:f2:39:27: 4b:ee:f0:73:30:01:58:c0:89:db:1a:07:b9:61:40:b9:f5:7d: 8d:69:1f:dd:d2:28:e8:61:1c:1f:db:0b:75:df:5d:8c:52:07: cf:3c:e7:ef:b4:cd:f6:1e:64:b2:2b:46:82:38:c6:b6:11:24: f2:e8:de:27:84:4a:b6:7c:75:2f:8a:a1:3b:49:c2:e9:2a:cd: 47:4c:3e:51:e7:78:51:0f:f9:b8:88:75:1b:f9:23:0e:ad:84: cc:67:d1:19:98:27:8d:24:c9:0d:bb:67:e3:26:a8:19:7f:98: 99:e0:56:4a:08:29:2a:7c:59:75:6d:99:d6:b1:b9:4d:ca:9c: 1f:b7:a3:a2:07:52:f6:d6:e8:0a:35:df:72:cc:48:f4:de:78: 90:7b:b1:4b:bb:6d:96:73:b4:76:25:e6:31:fe:cb:0e:75:38: 08:1e:02:a4:1a:e3:11:64:68:b1:3e:a2:30:df:c4:d1:ed:15: ef:c1:83:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9r510Byq+VOggeq+vP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDljMmQwMGJhNDZiZTkyNDRiNzYxOTRiYWExMGYzM2Nl MzQ2MmMwHhcNMjUxMjA2MjEwMTAzWhcNMjUxMjA3MjEwMTAzWjAzMTEwLwYDVQQD EyhiOGYxMjExYTU5OGE2NTU1MDYxY2FkNTNjYWU3YjE3NzkzNDNlNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcn9QEiNBEJi0KwC/ZPyboFgoPNu bZPMQyUSNP5LCCv4A3D1e9kpmct0ISKEqB8+EiCTmmoYgPi3Ck7KqBxJBWQisntG xKwe+VHvOmqZvDO/qGTMGb2NHBeUI8t39M4LZqd/g0+irDvVQY4ZTDj/w62E0oVN 8SOSjErU+z31+9nN3WjpC0USaklzEWmYu64+ZSA71ARxykKNn+zgmw6HOYBxlsG4 4AuL34msvK7XkAko4aZjWQKKa7nHaiMp2YR0OUfgbLBBoO2taeDsF5+5RUzpiv0w YZbf6EfOxUcBf1kRyx5E4hdn2Oif4k95Alks8JpEr9jjex17PEeHVseb2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjxIRpZimVVBhytU8rnsXeTQ+auMB8GA1UdIwQY MBaAFFNJwtALpGvpJEt2GUuqEPM840YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTIt ZmExMjYwODUwNzA5LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTItZmExMjYwODUwNzA5 LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4WqvBJB mvRXQ111tW6yi1O4le1KZAKw/3YHqjG5gmNwLPEbkhKy7JHwVfLolgdTVy1T1XdQ iS/EsGqL8O3YMLOTCu6T8jknS+7wczABWMCJ2xoHuWFAufV9jWkf3dIo6GEcH9sL dd9djFIHzzzn77TN9h5ksitGgjjGthEk8ujeJ4RKtnx1L4qhO0nC6SrNR0w+Ued4 UQ/5uIh1G/kjDq2EzGfRGZgnjSTJDbtn4yaoGX+YmeBWSggpKnxZdW2Z1rG5Tcqc H7ejogdS9tboCjXfcsxI9N54kHuxS7ttlnO0diXmMf7LDnU4CB4CpBrjEWRosT6i MN/E0e0V78GD7A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:05 2025 by rpki-client