This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json) Hash identifier: 5Jwx7AddummwaU230ASf7PeXXE10ZJEfAWkJFGWQ1VU= Subject key identifier: 08:79:09:20:AD:89:20:76:E8:57:02:CF:DC:60:C8:06:48:2B:3A:29 Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99 Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399 Certificate serial: 019AF2ADC2508B0CA9F1FB4D7CADAB268DD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: V65czEjTrDEnOzSaQTKdkxhwMRxjVnb1bW3eE6iJJT8=) 2: ax8BOGm-GJfb7NvYozzZ62QdRvA.roa (hash: cIhLyiLj0Foy8DN1xACbtMKul9Di0Oi3YIqfjaju72U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c2:50:8b:0c:a9:f1:fb:4d:7c:ad:ab:26:8d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=08790920ad892076e85702cfdc60c806482b3a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:ea:8b:94:d5:cc:05:80:fd:35:bc:a7:63: c8:19:31:14:cd:de:bb:32:a0:1f:eb:b9:db:4f:8f: 6f:33:e7:90:c5:b6:c6:25:bd:d7:05:ff:f8:5d:d5: bd:7e:78:b4:8a:79:f8:55:0c:ab:bf:e5:77:0d:74: 0b:49:4d:b2:81:f8:c3:17:77:d3:10:1e:cf:73:e9: d6:5d:f8:b9:13:e8:62:53:2d:d5:32:3e:5a:bd:d3: 52:20:dd:0c:c6:a2:b9:f5:36:40:f8:15:87:d3:9f: 44:cf:12:8b:ee:6f:9d:92:90:a5:d0:c4:bd:3f:54: 9b:2d:35:64:62:ef:6a:74:b9:c4:f5:2a:3f:62:a4: 38:04:e2:db:53:95:21:16:8e:fe:23:e8:dc:77:9c: e7:02:d8:88:fb:e9:9e:7e:7b:66:c2:4f:a6:d4:e0: 30:9c:2c:cc:8e:7c:f4:41:55:ab:80:cd:13:53:4d: 60:8f:b1:89:06:b4:fc:c1:45:f9:87:33:42:23:b5: be:00:5c:a0:f8:74:ac:17:7a:cd:47:46:2b:c2:57: bd:c0:6b:71:a0:b0:23:57:be:d6:f7:e3:c8:3c:f0: 8d:a9:13:04:03:f1:10:a7:cf:3c:47:b3:a2:77:1b: 57:19:2c:d9:57:bd:4d:8a:fd:11:01:22:9c:31:68: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:79:09:20:AD:89:20:76:E8:57:02:CF:DC:60:C8:06:48:2B:3A:29 X509v3 Authority Key Identifier: keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1c:d4:00:56:b4:2c:bb:e5:7e:bd:b3:aa:7c:39:4c:b1:68: 27:af:26:72:48:d9:5c:3f:8f:2f:c7:05:d1:ae:4c:12:e9:c7: a5:70:4f:f7:4a:8b:6b:00:bf:86:7c:ee:10:4e:ff:34:08:20: ac:4b:a9:8c:e7:13:ba:d0:e5:ab:a9:02:51:66:9c:d9:65:2d: e0:7f:35:0d:3a:e9:4f:37:f2:bc:40:11:c0:97:47:7c:cc:fc: 7e:3a:1e:00:04:89:69:07:cd:d6:f5:51:2e:5a:2b:6f:3b:bc: e5:b9:8a:f3:15:fe:6e:ca:41:dc:25:fb:34:a2:5d:84:2f:a3: 48:db:0b:27:68:04:4b:3d:1d:5f:2f:4c:fa:c5:a5:9b:9e:8c: ff:e1:65:2b:2b:da:68:77:61:83:86:09:e8:65:e8:4f:64:c4: 92:f3:bc:64:aa:19:26:c4:01:e0:16:e8:1a:10:39:50:8b:35: c7:7f:cf:27:00:f7:2e:33:d9:69:ee:27:80:ea:1b:e7:67:66: a5:c1:c0:4f:fc:84:73:47:74:48:1c:6d:5d:d9:ba:8c:63:be: 35:a3:6f:04:e1:0e:35:e7:a2:40:60:42:07:28:31:f1:bf:c8: 6c:d2:54:96:27:b7:99:69:4a:c7:ac:b1:8d:80:cd:e3:90:3c: 96:7f:24:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcJQiwyp8ftNfK2rJo3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzc3MzEyZTBkMmNlYzg0NWEwNDYxMzg0NWY4YTFiZTI2 M2MzOTkwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD EygwODc5MDkyMGFkODkyMDc2ZTg1NzAyY2ZkYzYwYzgwNjQ4MmIzYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPvqi5TVzAWA/TW8p2PIGTEUzd67 MqAf67nbT49vM+eQxbbGJb3XBf/4XdW9fni0inn4VQyrv+V3DXQLSU2ygfjDF3fT EB7Pc+nWXfi5E+hiUy3VMj5avdNSIN0MxqK59TZA+BWH059EzxKL7m+dkpCl0MS9 P1SbLTVkYu9qdLnE9So/YqQ4BOLbU5UhFo7+I+jcd5znAtiI++mefntmwk+m1OAw nCzMjnz0QVWrgM0TU01gj7GJBrT8wUX5hzNCI7W+AFyg+HSsF3rNR0Yrwle9wGtx oLAjV77W9+PIPPCNqRMEA/EQp888R7OidxtXGSzZV71Niv0RASKcMWj4WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAh5CSCtiSB26FcCz9xgyAZIKzopMB8GA1UdIwQY MBaAFFPHcxLg0s7IRaBGE4RfihviY8OZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjct YzliZjU1ZDlkMWJhLzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjctYzliZjU1ZDlkMWJh LzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBzUAFa0 LLvlfr2zqnw5TLFoJ68mckjZXD+PL8cF0a5MEunHpXBP90qLawC/hnzuEE7/NAgg rEupjOcTutDlq6kCUWac2WUt4H81DTrpTzfyvEARwJdHfMz8fjoeAASJaQfN1vVR Llorbzu85bmK8xX+bspB3CX7NKJdhC+jSNsLJ2gESz0dXy9M+sWlm56M/+FlKyva aHdhg4YJ6GXoT2TEkvO8ZKoZJsQB4BboGhA5UIs1x3/PJwD3LjPZae4ngOob52dm pcHAT/yEc0d0SBxtXdm6jGO+NaNvBOEONeeiQGBCBygx8b/IbNJUlie3mWlKx6yx jYDN45A8ln8k/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:24:50 2025 by rpki-client