This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft File: U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft (raw, json) Hash identifier: L9G8tiXqZ5JMUNz+KtO2wxm1ntemvnimC/OdUVA/22c= Subject key identifier: C6:59:CF:EE:30:BA:26:67:19:0C:87:1C:06:2D:B3:8F:AA:78:29:9B Authority key identifier: 53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1 Certificate issuer: /CN=5365d03fd8522674eb17ac767294cd11f72939d1 Certificate serial: 019AF5786DAF4EB1060533F768E093A189F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft Manifest number: A7 Signing time: Sat 06 Dec 2025 21:01:41 +0000 Manifest this update: Sat 06 Dec 2025 21:01:41 +0000 Manifest next update: Sun 07 Dec 2025 21:01:41 +0000 Files and hashes: 1: U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl (hash: atc6pSOIQBzNoapY90SsPAC5c9dBG8FTqCv/DkND+Lc=) 2: tfiH7BWA2nR2OChCX9UjtDlYY3Q.roa (hash: Nf7Xdo8U+iMEgw4lw6H1GywUDmKoW0FTEplT8uPlZJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:6d:af:4e:b1:06:05:33:f7:68:e0:93:a1:89:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5365d03fd8522674eb17ac767294cd11f72939d1 Validity Not Before: Dec 6 21:01:41 2025 GMT Not After : Dec 7 21:01:41 2025 GMT Subject: CN=c659cfee30ba2667190c871c062db38faa78299b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:9a:70:dd:49:bc:75:37:c7:8f:ae:7e:f8: 01:23:d6:dc:1f:89:1a:b6:7d:50:18:74:d4:9c:4b: a1:22:63:46:75:2c:07:4d:7c:3a:b1:fc:d1:f8:7d: 8b:2f:e1:24:cc:94:76:8d:59:52:a4:87:e0:c0:ab: ee:9c:93:4e:3a:ca:8f:9f:7f:83:83:90:a7:06:21: df:fb:09:47:72:59:b1:84:df:f8:70:25:a0:f1:9d: 94:c7:0b:45:86:fd:f6:eb:07:52:0f:77:b0:37:e5: 0a:59:5d:d4:e5:ce:ef:83:70:cd:29:8c:5c:b8:bb: 8e:b9:bc:16:5b:7b:57:03:ea:a8:65:f5:e3:09:1c: 43:c6:4c:bf:9b:fa:f1:8d:8f:c9:17:a3:01:31:2e: 72:ef:ad:30:2a:b8:00:65:81:f6:43:99:a1:ef:d4: e0:39:f5:ec:ec:89:37:d9:6b:24:4b:1b:e3:79:d9: d0:4b:5e:3c:0d:b7:1f:ff:a3:78:1d:5e:27:90:99: 61:92:db:c7:8f:81:a2:f1:30:e3:dd:42:92:0b:00: 56:5b:1a:90:71:ec:7a:35:a5:24:ff:7e:4f:08:42: d9:1b:f3:9f:36:52:f8:dc:2d:3e:04:b0:8b:60:45: bc:42:43:15:0c:a6:1a:bb:c9:d3:e1:09:1e:39:5f: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:CF:EE:30:BA:26:67:19:0C:87:1C:06:2D:B3:8F:AA:78:29:9B X509v3 Authority Key Identifier: keyid:53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6e:12:b9:a2:4f:01:41:ad:c1:e3:53:86:d0:e2:ff:cb:f3: b3:63:fd:c5:0f:b9:88:bb:6c:e1:48:8b:37:9d:be:12:f7:2d: f2:c9:c9:57:74:dd:2c:7b:41:5d:c8:b0:b1:26:b7:fa:62:72: bc:f2:ae:35:4a:5c:df:91:06:0a:82:ca:e6:f8:64:1c:a6:b7: 0e:d6:25:05:a8:0c:20:23:58:eb:74:9e:7c:47:b8:4d:70:2f: e6:bc:cd:21:c4:b2:15:95:09:7b:ed:08:32:07:9a:5a:00:41: 38:98:cc:06:01:12:0d:25:81:8c:e7:c6:2b:20:be:ce:1d:95: 03:d8:04:2c:8d:1e:17:39:e2:3e:b0:3f:83:37:d5:fc:fc:ae: 25:9b:eb:d0:68:2b:a1:cf:84:57:29:34:68:92:6d:a3:78:57: cd:7e:82:dd:2b:2a:15:ad:90:7a:07:fc:7f:fa:2a:18:14:69: 67:80:21:c6:42:3b:0a:8e:d7:8d:39:61:8e:1e:2f:51:64:1a: cc:12:66:7f:97:c0:c6:a2:92:b2:cc:b0:ae:b6:4e:38:dd:3c: 99:9a:91:8d:65:b3:97:e2:bf:5f:82:a4:4b:1e:16:93:21:2e: c2:58:c3:16:22:c1:85:00:5f:20:57:42:e9:3f:1a:7a:7f:2a: 94:30:36:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eG2vTrEGBTP3aOCToYnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNjVkMDNmZDg1MjI2NzRlYjE3YWM3NjcyOTRjZDExZjcy OTM5ZDEwHhcNMjUxMjA2MjEwMTQxWhcNMjUxMjA3MjEwMTQxWjAzMTEwLwYDVQQD EyhjNjU5Y2ZlZTMwYmEyNjY3MTkwYzg3MWMwNjJkYjM4ZmFhNzgyOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz66acN1JvHU3x4+ufvgBI9bcH4ka tn1QGHTUnEuhImNGdSwHTXw6sfzR+H2LL+EkzJR2jVlSpIfgwKvunJNOOsqPn3+D g5CnBiHf+wlHclmxhN/4cCWg8Z2UxwtFhv326wdSD3ewN+UKWV3U5c7vg3DNKYxc uLuOubwWW3tXA+qoZfXjCRxDxky/m/rxjY/JF6MBMS5y760wKrgAZYH2Q5mh79Tg OfXs7Ik32WskSxvjednQS148Dbcf/6N4HV4nkJlhktvHj4Gi8TDj3UKSCwBWWxqQ cex6NaUk/35PCELZG/OfNlL43C0+BLCLYEW8QkMVDKYau8nT4QkeOV9YRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZZz+4wuiZnGQyHHAYts4+qeCmbMB8GA1UdIwQY MBaAFFNl0D/YUiZ06xesdnKUzRH3KTnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTJYUVA5aFNKblRyRjZ4MmNwVE5FZmNwT2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMGI1NzEtMzI3Ni00MTc3LTgxNjMt MDA2OTAzMDc2M2RiLzEvVTJYUVA5aFNKblRyRjZ4MmNwVE5FZmNwT2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kMGI1NzEtMzI3Ni00MTc3LTgxNjMtMDA2OTAzMDc2M2Ri LzEvVTJYUVA5aFNKblRyRjZ4MmNwVE5FZmNwT2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEW4SuaJP AUGtweNThtDi/8vzs2P9xQ+5iLts4UiLN52+Evct8snJV3TdLHtBXciwsSa3+mJy vPKuNUpc35EGCoLK5vhkHKa3DtYlBagMICNY63SefEe4TXAv5rzNIcSyFZUJe+0I MgeaWgBBOJjMBgESDSWBjOfGKyC+zh2VA9gELI0eFzniPrA/gzfV/PyuJZvr0Ggr oc+EVyk0aJJto3hXzX6C3SsqFa2Qegf8f/oqGBRpZ4AhxkI7Co7XjTlhjh4vUWQa zBJmf5fAxqKSssywrrZOON08mZqRjWWzl+K/X4KkSx4WkyEuwljDFiLBhQBfIFdC 6T8aen8qlDA2EA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:59 2025 by rpki-client