This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json) Hash identifier: D8IOzyCMn+sfggPWMoC8KQp6F1L+UgiLeHBlM+U3QjY= Subject key identifier: 3C:CB:A3:00:E7:E7:6D:7A:C4:F9:FB:BA:29:59:6B:2C:DE:40:B0:E5 Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C Certificate issuer: /CN=5349c2d00ba46be9244b76194baa10f33ce3462c Certificate serial: 019B42B742A6D79AE6D122623EEDE0143281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft Manifest number: 0818 Signing time: Sun 21 Dec 2025 21:01:04 +0000 Manifest this update: Sun 21 Dec 2025 21:01:04 +0000 Manifest next update: Mon 22 Dec 2025 21:01:04 +0000 Files and hashes: 1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: 45oT8IJI37fztXNqj8jFGHfut/AUWDfhNo/dhvFApbs=) 2: kDLhfcy8YHG9d7r3ZyKyTCN67dU.roa (hash: FHssmQ805uZ/Wtb94rUn/bLQZUQ10hPffXrOYDXFnpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:42:a6:d7:9a:e6:d1:22:62:3e:ed:e0:14:32:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c Validity Not Before: Dec 21 21:01:04 2025 GMT Not After : Dec 22 21:01:04 2025 GMT Subject: CN=3ccba300e7e76d7ac4f9fbba29596b2cde40b0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:d1:83:c1:7c:fc:03:54:f1:f5:d2:3e:40: 13:e6:3c:0b:5f:9d:5c:81:ce:72:ed:bc:21:c8:ee: ba:f5:1a:3e:68:13:6b:da:58:8f:fe:3e:76:0d:f7: 26:96:79:47:09:f0:17:96:0e:55:9d:da:37:33:35: 6c:14:fa:6f:0e:38:90:74:a7:08:38:9f:77:fc:b0: 8c:ee:08:11:95:7b:8a:d7:2b:4d:38:53:f5:06:98: 5a:c8:df:c5:cc:1d:d3:4e:fb:8f:b8:d2:c7:f4:5a: fa:a8:97:25:37:d4:98:83:58:47:2a:77:02:29:f8: 61:f7:97:fc:f3:03:ea:21:61:30:ef:ad:ac:f7:51: 7a:d4:df:67:91:de:d8:97:cd:07:f9:90:b5:a8:ff: ef:dc:4d:40:03:6d:84:7d:e4:13:b2:1a:3d:86:61: 8e:3f:d5:fc:0a:19:50:63:12:70:49:a0:7d:f6:eb: f1:83:5c:9d:71:0d:16:0c:41:2c:9e:6a:7a:41:9a: cb:b8:82:2f:4c:fa:43:b1:97:41:8a:76:ae:b6:d6: 89:7e:b6:b1:b3:70:5e:e8:90:fe:75:c9:d9:d3:36: 69:a0:bf:a6:e0:ed:c0:c9:6c:eb:bf:52:88:50:cc: 9d:a9:33:2d:74:95:f4:7d:c6:4e:ec:4f:1b:51:45: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:A3:00:E7:E7:6D:7A:C4:F9:FB:BA:29:59:6B:2C:DE:40:B0:E5 X509v3 Authority Key Identifier: keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d7:be:ae:b0:a8:70:b4:59:7c:a6:dd:1f:ec:eb:6c:ce:a4: 11:c0:5a:91:1a:9c:f6:3d:35:2a:9f:04:75:0e:06:5b:78:b2: 6b:0e:82:fc:e4:50:ac:83:b3:21:f7:c1:cb:f2:9b:8c:28:50: 42:e4:d9:0f:5a:d9:dd:e7:5a:5b:24:75:47:9f:32:49:65:4e: 59:8d:42:72:5b:1d:3b:c5:e2:0d:7d:40:a7:c8:33:d9:71:4e: 1a:4e:f1:ca:c6:f1:07:50:76:b2:52:74:84:3e:56:44:56:cd: cf:da:ba:6e:01:fe:c4:18:a1:8f:a5:ba:c1:ca:5b:5f:e8:bf: 50:fe:fc:45:93:36:3e:d4:ed:70:08:a4:6b:a2:fb:54:2c:1f: db:85:0d:62:7c:92:1a:ae:6a:18:77:a1:3b:d7:b6:79:61:6e: 22:6c:8c:94:40:11:85:80:77:50:d4:0a:bd:4a:69:6d:fc:fa: fa:63:d1:e7:49:d7:9a:1a:90:a0:46:a5:f0:62:81:6c:f4:69: 75:bc:e8:e6:f1:b3:f0:c9:d6:f7:e5:61:d6:b7:a8:b1:09:f5: 35:19:fe:94:e5:7e:21:05:9b:67:a0:98:f0:31:7d:49:96:a4: 67:31:88:cd:bf:04:66:ae:a2:cf:cb:95:ce:47:f3:07:cd:cd: 27:cd:6b:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0Km15rm0SJiPu3gFDKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDljMmQwMGJhNDZiZTkyNDRiNzYxOTRiYWExMGYzM2Nl MzQ2MmMwHhcNMjUxMjIxMjEwMTA0WhcNMjUxMjIyMjEwMTA0WjAzMTEwLwYDVQQD EygzY2NiYTMwMGU3ZTc2ZDdhYzRmOWZiYmEyOTU5NmIyY2RlNDBiMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyzRg8F8/ANU8fXSPkAT5jwLX51c gc5y7bwhyO669Ro+aBNr2liP/j52DfcmlnlHCfAXlg5Vndo3MzVsFPpvDjiQdKcI OJ93/LCM7ggRlXuK1ytNOFP1BphayN/FzB3TTvuPuNLH9Fr6qJclN9SYg1hHKncC Kfhh95f88wPqIWEw762s91F61N9nkd7Yl80H+ZC1qP/v3E1AA22EfeQTsho9hmGO P9X8ChlQYxJwSaB99uvxg1ydcQ0WDEEsnmp6QZrLuIIvTPpDsZdBinauttaJfrax s3Be6JD+dcnZ0zZpoL+m4O3AyWzrv1KIUMydqTMtdJX0fcZO7E8bUUVcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzLowDn5216xPn7uilZayzeQLDlMB8GA1UdIwQY MBaAFFNJwtALpGvpJEt2GUuqEPM840YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTIt ZmExMjYwODUwNzA5LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTItZmExMjYwODUwNzA5 LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACte+rrCo cLRZfKbdH+zrbM6kEcBakRqc9j01Kp8EdQ4GW3iyaw6C/ORQrIOzIffBy/KbjChQ QuTZD1rZ3edaWyR1R58ySWVOWY1CclsdO8XiDX1Ap8gz2XFOGk7xysbxB1B2slJ0 hD5WRFbNz9q6bgH+xBihj6W6wcpbX+i/UP78RZM2PtTtcAika6L7VCwf24UNYnyS Gq5qGHehO9e2eWFuImyMlEARhYB3UNQKvUppbfz6+mPR50nXmhqQoEal8GKBbPRp dbzo5vGz8MnW9+Vh1reosQn1NRn+lOV+IQWbZ6CY8DF9SZakZzGIzb8EZq6iz8uV zkfzB83NJ81rxw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:42:06 2025 by rpki-client