This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json) Hash identifier: ncFpZVpx+sNRxXictSGVO9un3Nkfi4nEVtgmKE39z4s= Subject key identifier: D2:09:92:74:80:90:28:B6:C2:DA:46:C3:02:D3:7C:F7:6F:0C:00:51 Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3 Certificate serial: 019AF08822E981904B126A1EC66304CD5AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 22:00:44 +0000 Manifest this update: Fri 05 Dec 2025 22:00:44 +0000 Manifest next update: Sat 06 Dec 2025 22:00:44 +0000 Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: vFY3fNq3doyhaAqm0Lyqb+dH+jlNUeVtQaEAJr0s6ek=) 2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=) 3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:22:e9:81:90:4b:12:6a:1e:c6:63:04:cd:5a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3 Validity Not Before: Dec 5 22:00:44 2025 GMT Not After : Dec 6 22:00:44 2025 GMT Subject: CN=d2099274809028b6c2da46c302d37cf76f0c0051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:a7:44:88:5d:65:46:db:66:72:7f:46:af: 8b:38:ca:48:d4:04:be:79:96:ac:e7:9d:04:b3:03: 56:6f:49:d9:81:ec:9b:34:5f:0c:c5:92:90:a1:99: 19:1c:cc:f4:26:fa:d1:2a:46:74:28:9e:f2:61:c2: ae:50:ed:99:ee:b8:f9:b4:26:12:de:21:82:bc:99: 54:36:c1:64:38:49:b0:97:0d:12:65:6b:69:6a:66: 96:0b:84:9b:68:32:9b:16:e9:83:31:b1:72:74:11: ff:31:85:4d:5d:fc:21:7f:8e:4c:96:c7:76:15:cd: af:7a:62:92:f2:43:27:53:14:1f:da:f3:bf:86:e6: ad:c9:30:30:e9:ad:b4:8e:81:ba:e5:b0:9b:a9:ac: 73:be:15:2e:4c:4d:f8:69:3a:3d:18:6e:2a:88:8b: 32:57:70:3c:09:d1:d8:a8:97:11:18:9d:1b:c6:27: 17:27:ba:34:09:b6:3a:7f:03:80:da:5f:3e:7b:80: 1b:b4:ba:04:86:65:63:f4:a0:e4:84:11:7c:90:22: 16:05:db:2b:1f:4e:97:b3:11:8c:6c:8e:4c:a6:42: 8a:2b:d9:57:3b:f5:f8:9b:1b:4c:db:44:98:85:75: 41:a8:86:ed:14:08:35:7b:a2:89:42:7f:1e:f8:6b: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:92:74:80:90:28:B6:C2:DA:46:C3:02:D3:7C:F7:6F:0C:00:51 X509v3 Authority Key Identifier: keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0e:18:03:e7:6b:5a:e4:3a:16:b5:0b:3d:77:27:a1:19:3e: 94:27:6b:b3:b8:3e:bc:40:dd:ae:d8:22:5e:24:21:32:90:ee: aa:90:b6:de:22:ef:89:82:c4:83:31:1b:2c:83:5f:b3:07:50: 1b:cd:d8:9b:e6:14:94:be:eb:0c:3c:53:72:e1:48:cc:94:70: f3:74:43:9a:8a:c3:81:3d:c0:46:25:c1:e6:86:5f:cf:ce:b5: c6:9f:08:25:85:2c:aa:9b:d1:69:0a:c8:80:fd:bf:28:19:fa: b6:f7:91:c0:10:76:59:bd:eb:b2:66:03:8c:2b:31:cc:8a:6d: 54:5f:c0:a9:c6:a2:b2:b4:ff:31:a8:4c:0a:f9:3a:3b:4e:aa: 88:7d:6c:6d:30:3f:a0:40:1d:4e:fd:8b:a0:95:60:66:89:96: 74:1d:e7:97:b9:b9:b7:83:41:4a:6c:ed:a8:98:4c:70:ba:38: 97:0b:3b:c5:4f:7f:b6:ee:35:05:f5:16:1f:ce:9d:71:60:a7: 4a:ff:48:49:83:f1:c9:8b:98:1b:cc:3d:80:8c:92:f6:b3:bf: 2b:68:5e:5a:ee:14:b8:df:db:d8:9d:86:f0:fc:e3:06:ef:f0: d2:5c:34:9d:2b:c3:35:38:f0:45:23:eb:e4:e6:68:04:e5:9f: 1e:9c:80:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCLpgZBLEmoexmMEzVr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNmM0Yzk0ZmVkNGZhOGI5MDNmNmY2ZmI1MzQwNDg0YzBl NGE0ZDMwHhcNMjUxMjA1MjIwMDQ0WhcNMjUxMjA2MjIwMDQ0WjAzMTEwLwYDVQQD EyhkMjA5OTI3NDgwOTAyOGI2YzJkYTQ2YzMwMmQzN2NmNzZmMGMwMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMynRIhdZUbbZnJ/Rq+LOMpI1AS+ eZas550EswNWb0nZgeybNF8MxZKQoZkZHMz0JvrRKkZ0KJ7yYcKuUO2Z7rj5tCYS 3iGCvJlUNsFkOEmwlw0SZWtpamaWC4SbaDKbFumDMbFydBH/MYVNXfwhf45Mlsd2 Fc2vemKS8kMnUxQf2vO/huatyTAw6a20joG65bCbqaxzvhUuTE34aTo9GG4qiIsy V3A8CdHYqJcRGJ0bxicXJ7o0CbY6fwOA2l8+e4AbtLoEhmVj9KDkhBF8kCIWBdsr H06XsxGMbI5MpkKKK9lXO/X4mxtM20SYhXVBqIbtFAg1e6KJQn8e+GsoBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIJknSAkCi2wtpGwwLTfPdvDABRMB8GA1UdIwQY MBaAFFNsTJT+1PqLkD9vb7U0BITA5KTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYt YTY3Zjk1ZjJkZTVlLzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYtYTY3Zjk1ZjJkZTVl LzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQ4YA+dr WuQ6FrULPXcnoRk+lCdrs7g+vEDdrtgiXiQhMpDuqpC23iLviYLEgzEbLINfswdQ G83Ym+YUlL7rDDxTcuFIzJRw83RDmorDgT3ARiXB5oZfz861xp8IJYUsqpvRaQrI gP2/KBn6tveRwBB2Wb3rsmYDjCsxzIptVF/AqcaisrT/MahMCvk6O06qiH1sbTA/ oEAdTv2LoJVgZomWdB3nl7m5t4NBSmztqJhMcLo4lws7xU9/tu41BfUWH86dcWCn Sv9ISYPxyYuYG8w9gIyS9rO/K2heWu4UuN/b2J2G8PzjBu/w0lw0nSvDNTjwRSPr 5OZoBOWfHpyAXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:34 2025 by rpki-client