This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json) Hash identifier: u7GZAHc49LsLt6WTZchcV5xNj1atg6T+vtZketSzqtA= Subject key identifier: 76:67:56:E0:02:76:BC:FB:C0:3C:3A:2E:54:BB:9C:ED:C6:BA:11:FA Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b Certificate serial: 019AF6538F4A71792D15E895517E1363C710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft Manifest number: 0812 Signing time: Sun 07 Dec 2025 01:01:02 +0000 Manifest this update: Sun 07 Dec 2025 01:01:02 +0000 Manifest next update: Mon 08 Dec 2025 01:01:02 +0000 Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: XAW3iQ+Lh/AoHatAtiiHHnyCJg6fWkaubTD6CvVCrig=) 2: gB1MwA1mtIVkiFQ2EqzsfbYOK18.roa (hash: xnYJIQNoCXwxomDZp5xDNLGopiNTka87rzFXVihnDvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:8f:4a:71:79:2d:15:e8:95:51:7e:13:63:c7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b Validity Not Before: Dec 7 01:01:02 2025 GMT Not After : Dec 8 01:01:02 2025 GMT Subject: CN=766756e00276bcfbc03c3a2e54bb9cedc6ba11fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:b0:3c:fb:62:5c:fc:91:0d:72:bf:59:f9: d6:c1:4b:78:f1:25:77:f1:32:65:8a:c0:f3:22:86: db:f1:3a:a8:05:09:31:52:2f:12:ed:49:25:3f:69: c4:16:e6:39:aa:2d:9f:63:51:96:98:14:46:bc:e2: 98:5c:3a:2c:54:bc:e3:ed:d9:a0:93:22:0d:b6:3a: 32:c8:77:63:d4:a8:0c:6f:da:6b:49:31:ed:b6:f1: d5:94:ce:93:ec:97:fa:c7:67:66:06:89:c0:17:50: 9e:e1:e9:ed:2e:ef:95:71:be:4d:de:81:87:c1:00: 3a:26:3e:65:5b:0b:fb:e3:47:60:ca:0c:11:9a:7e: 88:aa:c1:7e:64:02:c9:af:70:cb:e1:54:d6:1d:67: a3:41:70:70:f1:b2:1f:4d:3e:b8:fa:71:f9:63:08: 6a:81:09:43:a3:1d:72:fc:42:28:b4:df:40:91:fe: 9b:65:70:b5:f0:3b:ee:26:33:8f:49:ac:a7:80:8e: 13:48:e7:06:55:06:d7:26:0a:70:c9:08:53:ba:24: 5a:68:83:01:d4:4d:01:9a:30:55:04:27:e6:26:2e: 58:f9:e6:5f:06:71:85:df:87:db:78:ce:69:5e:4b: 90:3e:49:be:5e:f6:cc:c9:e8:7a:61:fd:94:61:33: 34:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:67:56:E0:02:76:BC:FB:C0:3C:3A:2E:54:BB:9C:ED:C6:BA:11:FA X509v3 Authority Key Identifier: keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:29:4e:cd:2e:ac:ee:fa:d5:a7:54:0f:fb:91:ca:e8:c2:45: cd:a3:6c:6c:96:1c:b9:b2:6e:b1:64:26:91:08:ea:56:7a:e1: 12:25:ad:87:17:0d:90:e8:27:e5:1b:f1:46:13:49:51:a4:56: 19:43:d2:b1:ee:53:0d:76:09:63:e5:9d:e0:66:2b:97:b3:9d: 85:9d:f2:83:f6:72:fc:59:b8:d0:8c:11:d6:ed:ab:d9:b2:65: 33:80:6e:31:0d:84:93:14:92:66:a6:a9:93:c4:af:d2:c9:89: 86:19:4d:56:c3:0d:d0:a6:be:84:f1:51:82:62:d9:28:f4:f1: 41:10:ba:c7:9a:99:c7:d8:02:f3:cd:63:ca:3c:83:f5:0d:94: ca:52:9a:83:d1:0f:a9:df:9b:5c:cf:c1:80:fa:8e:e3:cf:dd: 22:0e:ab:2c:bb:96:cd:5d:b5:1e:6f:f2:6d:9c:d1:87:fc:3f: 66:71:2f:53:cb:a6:14:2f:5e:89:ee:cb:39:03:e2:58:6d:79: a0:81:65:d6:68:db:78:63:61:58:e8:a6:c6:b0:0d:6a:4c:9a: d0:85:c4:95:e4:1d:fd:0d:95:a7:87:a7:cd:8f:29:cd:65:45: 6c:30:40:a7:b3:1b:41:12:97:2f:ec:9f:e1:f6:36:34:ea:83: 2e:98:db:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U49KcXktFeiVUX4TY8cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDk3Mjk1NmJkZmY4M2IwZDg4MWUwMWFmZDNkNmM1MjY1 MWUwNGIwHhcNMjUxMjA3MDEwMTAyWhcNMjUxMjA4MDEwMTAyWjAzMTEwLwYDVQQD Eyg3NjY3NTZlMDAyNzZiY2ZiYzAzYzNhMmU1NGJiOWNlZGM2YmExMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXmwPPtiXPyRDXK/WfnWwUt48SV3 8TJlisDzIobb8TqoBQkxUi8S7UklP2nEFuY5qi2fY1GWmBRGvOKYXDosVLzj7dmg kyINtjoyyHdj1KgMb9prSTHttvHVlM6T7Jf6x2dmBonAF1Ce4entLu+Vcb5N3oGH wQA6Jj5lWwv740dgygwRmn6IqsF+ZALJr3DL4VTWHWejQXBw8bIfTT64+nH5Ywhq gQlDox1y/EIotN9Akf6bZXC18DvuJjOPSayngI4TSOcGVQbXJgpwyQhTuiRaaIMB 1E0BmjBVBCfmJi5Y+eZfBnGF34fbeM5pXkuQPkm+XvbMyeh6Yf2UYTM04QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZnVuACdrz7wDw6LlS7nO3GuhH6MB8GA1UdIwQY MBaAFFNJcpVr3/g7DYgeAa/T1sUmUeBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80YzA0MTMtY2U4MS00ZGM4LThhNGQt YTcwZWVlM2RiNWU1LzEvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80YzA0MTMtY2U4MS00ZGM4LThhNGQtYTcwZWVlM2RiNWU1 LzEvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArylOzS6s 7vrVp1QP+5HK6MJFzaNsbJYcubJusWQmkQjqVnrhEiWthxcNkOgn5RvxRhNJUaRW GUPSse5TDXYJY+Wd4GYrl7OdhZ3yg/Zy/Fm40IwR1u2r2bJlM4BuMQ2EkxSSZqap k8Sv0smJhhlNVsMN0Ka+hPFRgmLZKPTxQRC6x5qZx9gC881jyjyD9Q2UylKag9EP qd+bXM/BgPqO48/dIg6rLLuWzV21Hm/ybZzRh/w/ZnEvU8umFC9eie7LOQPiWG15 oIFl1mjbeGNhWOimxrANakya0IXEleQd/Q2Vp4enzY8pzWVFbDBAp7MbQRKXL+yf 4fY2NOqDLpjbZA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:45 2025 by rpki-client