This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json) Hash identifier: zTmL+PiLd3lxqhwwln/6kN8HfZzcTk/v/AAcZ4WNQ2I= Subject key identifier: 03:04:4B:1D:4A:0B:EC:7F:F5:61:9D:9A:D5:82:E5:38:68:F0:89:2D Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc Certificate serial: 019AF3524E7E1AB2A56CA1EA3148C2E957DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft Manifest number: 0448 Signing time: Sat 06 Dec 2025 11:00:48 +0000 Manifest this update: Sat 06 Dec 2025 11:00:48 +0000 Manifest next update: Sun 07 Dec 2025 11:00:48 +0000 Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: uod1j8OdAzMXn2w9r5lUxreJJLtk8NAjL5cF3yfZrIc=) 2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4e:7e:1a:b2:a5:6c:a1:ea:31:48:c2:e9:57:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc Validity Not Before: Dec 6 11:00:48 2025 GMT Not After : Dec 7 11:00:48 2025 GMT Subject: CN=03044b1d4a0bec7ff5619d9ad582e53868f0892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:3b:d5:d4:f6:e1:6e:4a:87:14:ab:a1:bf: dc:62:b2:8b:ac:1e:f7:60:9b:9e:20:46:bf:68:5f: fe:07:41:ca:5f:83:96:ca:04:e8:32:df:a5:eb:04: 54:fd:9c:3d:7b:2b:39:10:e5:b2:d1:06:a3:a2:c4: 3e:64:68:59:f3:9f:03:e3:49:dd:86:e5:41:07:a6: 18:9c:fe:83:d4:f4:24:7b:43:92:25:9a:8c:86:b9: 4f:6b:d8:4d:d5:95:29:9a:1e:cb:8b:64:a7:7c:53: 15:ae:9a:6f:b3:89:5a:2b:90:ba:a5:e6:89:b7:46: 1f:e0:23:f1:b5:a8:fb:7b:20:56:ed:9e:d2:38:d6: d5:ff:06:23:e3:0a:c5:8d:ef:2d:d9:6b:19:c3:b3: ee:c2:64:bf:de:5b:56:8b:41:1e:ec:31:5b:1d:31: fb:25:46:c3:5d:fa:fa:cc:83:fb:e1:9d:60:00:51: a6:b9:ce:4b:09:10:71:b8:a0:ab:5c:5d:ab:85:f9: a2:f0:ea:eb:0a:56:66:d5:cf:6c:70:30:62:2c:ba: e2:c3:2d:37:45:76:55:97:d3:77:77:14:cc:0e:a7: aa:7b:2a:b7:6c:f9:37:87:2c:af:4c:ba:90:be:b1: f2:2f:38:d2:04:32:e3:cb:3b:fa:c7:3d:df:36:ff: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:04:4B:1D:4A:0B:EC:7F:F5:61:9D:9A:D5:82:E5:38:68:F0:89:2D X509v3 Authority Key Identifier: keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3f:4f:0c:43:16:5f:d5:65:75:cd:8c:84:80:12:bd:82:c5: f0:04:bb:cc:97:b0:1b:0a:63:3b:8c:b2:23:aa:6b:66:09:5e: c0:7c:98:04:19:2b:ac:87:e9:a1:6c:b0:13:7f:a1:bd:bd:00: f7:c0:08:3a:19:ec:41:ab:db:99:13:d0:e7:c0:2b:80:e9:a7: c5:86:08:d3:cd:6c:9a:67:49:5d:74:17:88:0a:78:ce:ef:10: 98:58:d1:1c:ce:c6:c1:f0:e9:38:57:21:3e:0e:b0:93:a2:7c: 4d:c6:c7:6b:25:21:7f:16:a7:6f:3c:ca:5f:0b:6f:b6:fd:d1: 8c:cc:88:35:d5:57:19:e1:0e:03:a1:d1:25:cd:9f:2b:e2:1d: c0:e3:ea:ba:2c:36:8a:45:93:11:a0:4b:f5:2a:4f:89:83:81: c3:b8:a3:6e:10:01:18:fb:50:5f:63:9a:0e:d5:2f:dc:62:ae: 69:61:66:5e:65:e6:9b:ce:29:c0:ab:bc:7c:bc:46:8d:5e:c4: a6:34:3e:a4:ec:9c:fd:78:26:e4:bb:df:43:02:41:47:8f:b7: 04:51:24:e4:2e:65:29:e9:27:72:fd:a5:50:fa:ac:7d:1e:cb: 5f:a0:cc:97:c8:c3:25:c1:25:da:4f:a2:11:6d:5b:54:79:46: 34:91:58:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUk5+GrKlbKHqMUjC6VfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWIxY2Q1ZWU1ZWIwM2RmYmY2ZDQyNWQ2OTc5ZThkNTM1 MDE1YmMwHhcNMjUxMjA2MTEwMDQ4WhcNMjUxMjA3MTEwMDQ4WjAzMTEwLwYDVQQD EygwMzA0NGIxZDRhMGJlYzdmZjU2MTlkOWFkNTgyZTUzODY4ZjA4OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R871dT24W5KhxSrob/cYrKLrB73 YJueIEa/aF/+B0HKX4OWygToMt+l6wRU/Zw9eys5EOWy0QajosQ+ZGhZ858D40nd huVBB6YYnP6D1PQke0OSJZqMhrlPa9hN1ZUpmh7Li2SnfFMVrppvs4laK5C6peaJ t0Yf4CPxtaj7eyBW7Z7SONbV/wYj4wrFje8t2WsZw7PuwmS/3ltWi0Ee7DFbHTH7 JUbDXfr6zIP74Z1gAFGmuc5LCRBxuKCrXF2rhfmi8OrrClZm1c9scDBiLLriwy03 RXZVl9N3dxTMDqeqeyq3bPk3hyyvTLqQvrHyLzjSBDLjyzv6xz3fNv+LUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMESx1KC+x/9WGdmtWC5Tho8IktMB8GA1UdIwQY MBaAFFNbHNXuXrA9+/bUJdaXno1TUBW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2Zjkt ZTJiOWY2ZGJlMDAwLzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2ZjktZTJiOWY2ZGJlMDAw LzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj9PDEMW X9Vldc2MhIASvYLF8AS7zJewGwpjO4yyI6prZglewHyYBBkrrIfpoWywE3+hvb0A 98AIOhnsQavbmRPQ58ArgOmnxYYI081smmdJXXQXiAp4zu8QmFjRHM7GwfDpOFch Pg6wk6J8TcbHayUhfxanbzzKXwtvtv3RjMyINdVXGeEOA6HRJc2fK+IdwOPquiw2 ikWTEaBL9SpPiYOBw7ijbhABGPtQX2OaDtUv3GKuaWFmXmXmm84pwKu8fLxGjV7E pjQ+pOyc/Xgm5LvfQwJBR4+3BFEk5C5lKekncv2lUPqsfR7LX6DMl8jDJcEl2k+i EW1bVHlGNJFYVw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:54:12 2025 by rpki-client