This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json) Hash identifier: v5WE05vWVAbB0ws5tn0oRPdPn0inQlIjCO8Acz1pQHE= Subject key identifier: 2E:AD:26:7D:D1:55:45:8D:C3:C5:50:85:99:9F:32:01:BC:5F:1F:52 Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d Certificate serial: 019AF0BEE665FB7E4DF6925DBC67903F1C5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=) 2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=) 3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=) 4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: rcNictmlDm43YlvAM4qLe+J0Yq49YR0lzXoF1yPMpAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e6:65:fb:7e:4d:f6:92:5d:bc:67:90:3f:1c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=2ead267dd155458dc3c55085999f3201bc5f1f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:30:24:34:a4:6d:3c:aa:ae:d4:0d:46:96: 4e:95:d2:f2:93:42:22:3f:15:2b:12:db:2f:69:84: 7a:4c:41:12:21:53:01:94:a9:60:3a:9c:bf:2e:ca: bc:db:e7:8d:79:87:6d:fe:dd:a4:93:ac:b9:07:ed: 8b:58:af:af:26:7a:a7:30:73:1e:4d:00:88:c7:cb: 47:35:80:c6:7a:e8:e6:4e:e6:5a:00:6a:8d:ef:30: 68:63:39:22:55:da:d6:30:de:57:8e:f2:28:72:92: 90:c1:b5:fb:59:cb:d6:83:f8:48:e5:dd:b0:6a:82: 31:81:e5:5e:b9:73:46:52:ba:75:17:d6:e8:12:de: 79:67:02:a9:b6:66:38:38:96:bf:3e:c7:ef:3c:0f: 09:68:3b:6d:32:92:10:7c:37:d9:6e:72:2c:a4:6e: 64:82:f3:26:50:37:e8:96:3a:d3:7e:f5:6f:78:ab: ad:74:f4:4a:91:63:83:9e:be:2e:52:2e:09:b4:c6: 86:cf:9c:9f:1d:e1:88:86:3c:a9:18:8d:e7:f3:09: 24:00:00:32:34:a2:ad:61:d4:36:1c:f3:a2:1b:37: 35:c7:fe:31:23:b5:09:33:f5:d8:fc:2c:1e:86:38: 07:e4:6b:1c:b7:3f:36:1b:60:f1:a9:bf:92:9f:a8: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:26:7D:D1:55:45:8D:C3:C5:50:85:99:9F:32:01:BC:5F:1F:52 X509v3 Authority Key Identifier: keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a4:41:11:7e:52:12:c8:dc:49:fb:5d:6d:cb:9a:a7:5a:02: c1:f8:1e:bb:6b:85:9f:09:a6:e9:f4:cc:44:52:04:bd:b7:a5: 0c:7e:f7:49:99:05:92:f1:9a:bf:82:0d:11:51:9a:f6:11:dc: 0e:dd:94:5b:0c:4c:0a:e3:06:95:e6:d3:ee:55:44:7a:06:61: 18:a4:cc:35:96:8f:32:b7:13:a6:20:de:d3:98:6a:6e:f5:c9: 2a:f1:be:f6:2b:ac:15:85:f6:11:50:10:b9:1b:c9:4c:7b:8e: fa:03:41:2a:cc:af:ac:1e:e8:e6:67:48:a7:51:67:7e:35:9e: 4d:4b:fa:cd:81:eb:b7:d6:5c:e6:aa:40:95:77:08:94:f8:db: f7:28:72:73:5f:17:bd:20:93:8e:0d:ce:b1:cf:73:91:e0:db: 2c:77:a6:38:2f:02:61:32:0b:29:c5:00:ae:c9:aa:b1:cc:b4: dc:b2:35:c0:6e:fe:73:b7:2f:a4:7b:09:0d:61:f4:34:5d:de: 06:3a:c0:96:57:ac:e9:1f:0e:d1:75:28:76:35:80:1d:c6:d8: 83:ab:20:76:d6:03:b0:c5:f6:ce:5b:77:5a:4a:95:64:bd:dc: 62:25:68:34:e2:5a:88:ad:50:e3:d4:63:5b:e4:63:da:01:54: 6c:5b:9d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuZl+35N9pJdvGeQPxxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MjEyNzdmM2U3OTU0YTRhZjU1MjBhOTkwNDJmYjA4OTNh ZjgwNGQwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD EygyZWFkMjY3ZGQxNTU0NThkYzNjNTUwODU5OTlmMzIwMWJjNWYxZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJMwJDSkbTyqrtQNRpZOldLyk0Ii PxUrEtsvaYR6TEESIVMBlKlgOpy/Lsq82+eNeYdt/t2kk6y5B+2LWK+vJnqnMHMe TQCIx8tHNYDGeujmTuZaAGqN7zBoYzkiVdrWMN5XjvIocpKQwbX7WcvWg/hI5d2w aoIxgeVeuXNGUrp1F9boEt55ZwKptmY4OJa/PsfvPA8JaDttMpIQfDfZbnIspG5k gvMmUDfoljrTfvVveKutdPRKkWODnr4uUi4JtMaGz5yfHeGIhjypGI3n8wkkAAAy NKKtYdQ2HPOiGzc1x/4xI7UJM/XY/CwehjgH5Gsctz82G2Dxqb+Sn6h4VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6tJn3RVUWNw8VQhZmfMgG8Xx9SMB8GA1UdIwQY MBaAFLkhJ38+eVSkr1UgqZBC+wiTr4BNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUt MzZmZDIzMzUxNGY5LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUtMzZmZDIzMzUxNGY5 LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqRBEX5S EsjcSftdbcuap1oCwfgeu2uFnwmm6fTMRFIEvbelDH73SZkFkvGav4INEVGa9hHc Dt2UWwxMCuMGlebT7lVEegZhGKTMNZaPMrcTpiDe05hqbvXJKvG+9iusFYX2EVAQ uRvJTHuO+gNBKsyvrB7o5mdIp1FnfjWeTUv6zYHrt9Zc5qpAlXcIlPjb9yhyc18X vSCTjg3Osc9zkeDbLHemOC8CYTILKcUArsmqscy03LI1wG7+c7cvpHsJDWH0NF3e BjrAlles6R8O0XUodjWAHcbYg6sgdtYDsMX2zlt3WkqVZL3cYiVoNOJaiK1Q49Rj W+Rj2gFUbFud0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:29 2025 by rpki-client