This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json) Hash identifier: voRDSvxfefEsBpTaoUFwKSNJBml6OHScqvivV9cKg3E= Subject key identifier: 6E:F0:CE:F1:A3:E8:E4:72:CC:10:C3:0F:47:FE:52:82:FC:AA:A8:31 Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af Certificate serial: 019AF2ADF2E03716D05F57678511882C437E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft Manifest number: 174A Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (hash: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=) 2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: p829wnYS2OU4NsauX831SdusN6wlTNEpipjiwBxEIq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f2:e0:37:16:d0:5f:57:67:85:11:88:2c:43:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=6ef0cef1a3e8e472cc10c30f47fe5282fcaaa831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:38:ea:67:6b:de:91:23:a1:d2:22:8a:a1: ef:45:55:bd:d5:d4:ac:bd:0c:3a:fb:b6:8a:45:3e: db:15:31:5c:87:f4:cc:5d:bf:ce:1d:63:97:a2:66: 49:8f:6e:0f:98:b5:f3:7e:73:44:25:31:4b:dc:11: a5:8c:6d:7b:93:08:4e:7a:f5:1f:93:f2:cc:76:f7: 4c:25:9d:4f:7d:a0:66:dc:d5:53:05:2e:60:23:ba: 72:53:72:7a:5a:cf:5c:6a:34:ce:92:c0:3f:c5:6e: 56:98:8a:f8:4d:36:40:8a:e9:b9:aa:ae:e7:67:2e: f1:72:0e:06:fa:12:bc:5b:fe:f3:55:ea:8c:78:ec: f2:93:24:a9:da:5a:5c:55:7b:6b:bb:c4:ba:0c:df: 31:df:e5:04:c1:04:f7:7b:59:f1:1e:b5:2b:bf:c2: 1c:df:7c:d4:f3:ba:85:1d:b7:bf:a8:7f:9a:c4:1d: 7f:ec:30:29:eb:72:1f:f8:1e:b4:1b:9d:cf:69:f1: fd:77:c6:6c:1d:6a:4b:7e:1f:c2:14:db:c7:ef:98: c5:bf:62:87:62:e7:97:e8:f7:49:0c:a4:5f:f7:c5: 36:83:68:95:b3:59:c6:01:11:64:6d:a6:34:d2:8e: d1:6d:e4:b2:a0:72:17:aa:0f:ad:1b:36:70:1c:f7: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F0:CE:F1:A3:E8:E4:72:CC:10:C3:0F:47:FE:52:82:FC:AA:A8:31 X509v3 Authority Key Identifier: keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:7d:04:84:59:30:f5:c1:42:74:7b:1f:73:d6:75:3a:a0:dc: 68:f8:7a:85:56:19:de:bd:ae:16:18:a1:64:9b:e8:68:7e:fc: 09:de:34:dc:82:30:b6:a9:44:2b:e8:2f:d5:ab:41:0e:14:7b: 6b:b7:52:17:a5:99:d3:2b:f0:d3:70:f0:64:d1:e9:5b:eb:4e: 06:27:ab:d6:6a:17:10:62:01:48:65:07:c3:a3:ca:da:e2:be: 6e:6a:4e:02:b2:43:bf:6d:6d:25:fe:be:82:62:65:1a:7b:83: 83:72:68:a1:bd:e7:a0:9d:e8:9c:97:08:df:93:7d:26:ee:91: 5b:01:fc:00:c8:5e:39:7d:f7:24:56:e2:b2:11:cf:26:32:73: 08:63:79:e7:68:0e:c4:a8:67:22:15:8a:80:32:50:a1:63:8a: 2c:7b:f1:db:6a:5b:33:4a:20:8c:2e:ad:e7:a8:10:96:4b:7b: 2f:ab:75:56:6c:9a:ca:e3:f0:a8:84:01:65:75:54:af:91:8f: 7f:dc:e3:71:ec:89:7b:b8:fb:2d:2d:65:ee:e6:fa:d2:e9:5a: b7:e2:a9:af:d4:76:9c:ab:9a:65:25:d0:3f:fc:a2:54:2b:f8: 31:5b:7b:5d:0e:d2:b3:2c:6d:64:ef:8d:f5:f5:e5:6b:54:49: f4:fb:23:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfLgNxbQX1dnhRGILEN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjhiYWNjMzY1OWRjYjMzODlhYTQ3ZTM2NjRhNWY4Mjg0 ZTAwYWYwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD Eyg2ZWYwY2VmMWEzZThlNDcyY2MxMGMzMGY0N2ZlNTI4MmZjYWFhODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Y46mdr3pEjodIiiqHvRVW91dSs vQw6+7aKRT7bFTFch/TMXb/OHWOXomZJj24PmLXzfnNEJTFL3BGljG17kwhOevUf k/LMdvdMJZ1PfaBm3NVTBS5gI7pyU3J6Ws9cajTOksA/xW5WmIr4TTZAium5qq7n Zy7xcg4G+hK8W/7zVeqMeOzykySp2lpcVXtru8S6DN8x3+UEwQT3e1nxHrUrv8Ic 33zU87qFHbe/qH+axB1/7DAp63If+B60G53PafH9d8ZsHWpLfh/CFNvH75jFv2KH YueX6PdJDKRf98U2g2iVs1nGARFkbaY00o7RbeSyoHIXqg+tGzZwHPeKmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7wzvGj6ORyzBDDD0f+UoL8qqgxMB8GA1UdIwQY MBaAFFP4usw2WdyzOJqkfjZkpfgoTgCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQt MTUxMDdiY2E0NWI1LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQtMTUxMDdiY2E0NWI1 LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvX0EhFkw 9cFCdHsfc9Z1OqDcaPh6hVYZ3r2uFhihZJvoaH78Cd403IIwtqlEK+gv1atBDhR7 a7dSF6WZ0yvw03DwZNHpW+tOBier1moXEGIBSGUHw6PK2uK+bmpOArJDv21tJf6+ gmJlGnuDg3Joob3noJ3onJcI35N9Ju6RWwH8AMheOX33JFbishHPJjJzCGN552gO xKhnIhWKgDJQoWOKLHvx22pbM0ogjC6t56gQlkt7L6t1VmyayuPwqIQBZXVUr5GP f9zjceyJe7j7LS1l7ub60ulat+Kpr9R2nKuaZSXQP/yiVCv4MVt7XQ7SsyxtZO+N 9fXla1RJ9PsjbA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:20 2025 by rpki-client