This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json) Hash identifier: 6XXFKMS+VmA774u0wmDLNM9v//I8Of26DITbiXCp3wI= Subject key identifier: 6C:7B:48:E6:96:0E:CF:8E:1A:7B:74:39:6B:4F:40:5C:D9:21:AF:FA Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Certificate serial: 019AF1D187D8824DD85D1D2A768FC2F3AF9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft Manifest number: 14A5 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: 2kc/wX5woHBpuUifEsw1W3Nna/PRk0E8s1R6dJIxnig=) 2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:87:d8:82:4d:d8:5d:1d:2a:76:8f:c2:f3:af:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=6c7b48e6960ecf8e1a7b74396b4f405cd921affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:ad:34:7b:c8:d4:d0:a1:84:9d:a3:de:b5: 00:40:e9:48:2f:7c:cc:8c:f3:de:6a:95:f9:a7:50: 7a:9c:68:e1:3e:ec:f5:02:de:f1:52:ae:cf:25:f2: 59:5d:70:84:d7:f5:0e:0f:ec:0a:25:19:23:4a:db: c4:05:71:b8:94:2c:34:8a:af:aa:9a:af:25:1e:9e: fa:38:b1:80:84:cd:1d:36:1e:ab:25:14:fd:b2:39: 95:25:af:5e:a5:01:a9:44:14:0d:23:92:6b:0d:fa: 6a:c7:40:92:c8:1f:b3:33:f0:cf:cd:15:ca:0c:1a: 62:41:5e:2b:99:af:90:23:06:ae:3c:04:b2:52:33: 8f:09:19:32:49:19:0a:4d:e8:c0:00:b3:c5:03:0c: a6:0b:f4:49:54:ad:71:97:33:4e:ba:78:3b:48:45: 73:27:7a:d9:90:15:83:20:28:f1:23:81:75:7f:3e: 03:21:44:b6:62:f9:c7:a5:d8:a6:5e:ca:77:bb:bf: c3:48:4a:70:39:68:07:f3:62:01:97:26:9c:77:d3: 51:b9:0d:67:df:bb:1e:45:ac:57:8e:ae:72:19:32: 55:dc:51:e7:2d:11:c1:6f:87:a6:8d:b6:e3:fa:a3: d1:62:67:c3:e4:da:18:de:25:03:8b:50:a6:13:8e: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:48:E6:96:0E:CF:8E:1A:7B:74:39:6B:4F:40:5C:D9:21:AF:FA X509v3 Authority Key Identifier: keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ef:b2:60:4a:b3:bd:55:54:9d:6e:03:39:86:36:34:24:f1: 92:96:de:66:42:f1:8a:7b:a3:69:f8:ca:95:b6:ff:12:05:d5: 34:7d:ab:ff:15:12:cc:1f:71:c1:fe:7f:9b:9b:65:f2:3f:01: d2:02:6b:54:c6:e2:9b:27:18:63:8f:93:8d:9c:03:ba:51:05: 47:20:d4:0d:86:11:a0:bb:57:ec:a9:aa:16:74:53:af:9c:ef: 1c:27:96:44:bd:a2:0f:8a:6d:5c:29:7a:99:0c:34:09:bf:62: 4c:4d:40:60:54:d1:51:e2:8b:b2:45:5f:d4:f1:05:ee:b9:41: 80:1a:fc:94:09:9a:c4:90:47:d7:c9:34:8a:c1:0b:7e:40:bb: 48:5d:59:53:f1:96:f0:0d:60:96:43:36:63:c4:cf:8c:71:6f: 10:f2:9e:a8:5f:82:5a:77:87:81:dd:7b:fb:e3:a8:1c:05:a1: 7b:2f:9e:1a:c0:0d:a3:96:2e:3b:67:1d:8c:66:e8:39:1b:f8: 54:db:3c:f4:3f:77:cb:f1:60:34:97:a3:0a:7f:30:97:78:2a: b3:c6:7e:dc:27:2f:b6:1f:8c:5d:e8:0f:97:fe:ad:a5:ae:60: 59:1b:06:9e:8a:62:7f:b1:92:c1:7b:c9:ab:f4:56:d1:ca:85: 12:c1:ce:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YfYgk3YXR0qdo/C86+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZGE5OWY5MzUxOGUyOWE5NDViMDdmNjBhMThlZjg2ZTli MzllNjUwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD Eyg2YzdiNDhlNjk2MGVjZjhlMWE3Yjc0Mzk2YjRmNDA1Y2Q5MjFhZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO+tNHvI1NChhJ2j3rUAQOlIL3zM jPPeapX5p1B6nGjhPuz1At7xUq7PJfJZXXCE1/UOD+wKJRkjStvEBXG4lCw0iq+q mq8lHp76OLGAhM0dNh6rJRT9sjmVJa9epQGpRBQNI5JrDfpqx0CSyB+zM/DPzRXK DBpiQV4rma+QIwauPASyUjOPCRkySRkKTejAALPFAwymC/RJVK1xlzNOung7SEVz J3rZkBWDICjxI4F1fz4DIUS2YvnHpdimXsp3u7/DSEpwOWgH82IBlyacd9NRuQ1n 37seRaxXjq5yGTJV3FHnLRHBb4emjbbj+qPRYmfD5NoY3iUDi1CmE467xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGx7SOaWDs+OGnt0OWtPQFzZIa/6MB8GA1UdIwQY MBaAFFPamfk1GOKalFsH9goY74bps55lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODkt OWYzMDJjMjBhZTcwLzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODktOWYzMDJjMjBhZTcw LzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv++yYEqz vVVUnW4DOYY2NCTxkpbeZkLxinujafjKlbb/EgXVNH2r/xUSzB9xwf5/m5tl8j8B 0gJrVMbimycYY4+TjZwDulEFRyDUDYYRoLtX7KmqFnRTr5zvHCeWRL2iD4ptXCl6 mQw0Cb9iTE1AYFTRUeKLskVf1PEF7rlBgBr8lAmaxJBH18k0isELfkC7SF1ZU/GW 8A1glkM2Y8TPjHFvEPKeqF+CWneHgd17++OoHAWhey+eGsANo5YuO2cdjGboORv4 VNs89D93y/FgNJejCn8wl3gqs8Z+3Ccvth+MXegPl/6tpa5gWRsGnopif7GSwXvJ q/RW0cqFEsHOHg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:01 2025 by rpki-client