This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json) Hash identifier: D5Y/sE38Lcg9tZctDjFTdnWBJaKW5SPDuAQXrG5r4vI= Subject key identifier: F0:F9:61:66:8D:9E:48:5F:0A:75:BA:A4:22:88:D2:E3:CA:E3:01:65 Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b Certificate serial: 019AF1D1EADFB572A34E1D6A40EEB26B29EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=) 2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: nAVniZa37pCiZ2JoolKsrW6kld4L+9o2uSAw9QuapSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ea:df:b5:72:a3:4e:1d:6a:40:ee:b2:6b:29:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=f0f961668d9e485f0a75baa42288d2e3cae30165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:6d:63:dc:d5:58:1d:16:df:05:01:ff:c6: 31:65:d0:b3:0a:df:63:39:3e:3c:20:68:bd:13:0d: 19:b7:65:1c:8c:4f:df:19:c4:d8:9f:1c:79:ed:71: da:f8:82:86:5e:8e:e4:b0:b9:21:09:a1:11:36:f2: 8e:40:3c:b7:f3:12:19:8e:90:72:3c:75:48:38:7f: be:42:f1:61:c9:e6:13:c9:38:35:d1:28:b5:39:7e: 5b:fd:b8:8b:bb:74:96:b7:af:7c:fe:5e:37:50:e7: 83:76:eb:a2:66:6a:a8:04:7e:2c:90:6d:e7:da:97: 46:5f:f7:76:85:a6:62:58:72:b8:36:61:9c:a8:43: 0d:20:13:4c:10:3c:cd:8b:58:14:5f:0b:5f:9f:f3: 66:4f:b7:4d:5b:63:64:ff:2e:9b:47:6a:b8:a2:92: bf:e2:96:a2:03:04:ba:94:df:f4:ca:f2:d9:6c:f1: df:ef:35:a8:ab:0d:11:4f:89:14:31:f3:18:4b:5e: 27:a9:a9:fa:80:92:04:e1:5b:c8:45:9d:d4:a9:9a: e8:dc:c3:ab:28:cf:53:c5:91:2c:22:51:6f:99:bf: b9:37:f8:14:26:b1:0e:75:f3:99:c1:f4:a2:08:fd: c6:de:c9:c3:23:b1:39:ae:ee:5e:9d:6f:c4:de:d3: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F9:61:66:8D:9E:48:5F:0A:75:BA:A4:22:88:D2:E3:CA:E3:01:65 X509v3 Authority Key Identifier: keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:37:b9:32:0e:8c:91:93:86:e1:d0:79:cf:a8:d8:2e:c3:27: cb:14:48:ce:58:a1:00:db:3f:e1:e3:80:cc:e5:fb:35:fb:6d: 7d:5b:e1:a4:af:1a:00:b4:e4:f0:3d:bc:fe:47:98:8a:5d:4b: 99:93:2f:a2:d3:01:60:07:bf:22:08:45:d1:0b:b4:fc:2a:ef: 8d:85:b9:85:bc:93:62:c8:35:c7:39:f9:86:32:a0:5f:0c:b5: 1b:5d:ae:e4:3d:19:ee:f7:b0:f7:86:f1:e1:9e:0c:89:36:5e: 7b:d1:79:11:31:88:2a:d4:18:69:9a:78:95:88:c5:39:d3:33: 33:76:a2:78:37:67:9f:cb:47:29:e2:eb:b5:11:b9:34:a8:af: 04:8d:d1:d4:3d:4e:8a:9f:8d:92:d2:49:cb:23:92:bd:37:90: b9:5d:57:ac:d0:43:8a:06:6a:b3:85:98:fa:ce:bf:b5:24:2a: 28:b0:dc:29:e5:94:2c:62:81:b7:1b:e8:a2:71:fe:7e:b9:b7: 6a:e3:74:9f:4e:2d:e5:79:53:2e:b8:20:49:e2:6e:ac:39:59: 34:93:9a:1b:86:73:73:36:39:f9:46:e1:75:ea:8d:45:2f:4a: fa:27:a2:7f:5c:10:88:67:33:db:fe:7e:ff:32:50:6c:eb:43: 7a:76:ac:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0erftXKjTh1qQO6yaynvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWRiMTQzZTkwNmFhMjBlNTc4MjkwN2Y4NDVkNGE3Njk2 MmZmN2IwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EyhmMGY5NjE2NjhkOWU0ODVmMGE3NWJhYTQyMjg4ZDJlM2NhZTMwMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a9tY9zVWB0W3wUB/8YxZdCzCt9j OT48IGi9Ew0Zt2UcjE/fGcTYnxx57XHa+IKGXo7ksLkhCaERNvKOQDy38xIZjpBy PHVIOH++QvFhyeYTyTg10Si1OX5b/biLu3SWt698/l43UOeDduuiZmqoBH4skG3n 2pdGX/d2haZiWHK4NmGcqEMNIBNMEDzNi1gUXwtfn/NmT7dNW2Nk/y6bR2q4opK/ 4paiAwS6lN/0yvLZbPHf7zWoqw0RT4kUMfMYS14nqan6gJIE4VvIRZ3UqZro3MOr KM9TxZEsIlFvmb+5N/gUJrEOdfOZwfSiCP3G3snDI7E5ru5enW/E3tPa6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD5YWaNnkhfCnW6pCKI0uPK4wFlMB8GA1UdIwQY MBaAFFNdsUPpBqog5XgpB/hF1KdpYv97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMt NDg3MzFiM2MwM2E0LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMtNDg3MzFiM2MwM2E0 LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDe5Mg6M kZOG4dB5z6jYLsMnyxRIzlihANs/4eOAzOX7NfttfVvhpK8aALTk8D28/keYil1L mZMvotMBYAe/IghF0Qu0/CrvjYW5hbyTYsg1xzn5hjKgXwy1G12u5D0Z7vew94bx 4Z4MiTZee9F5ETGIKtQYaZp4lYjFOdMzM3aieDdnn8tHKeLrtRG5NKivBI3R1D1O ip+NktJJyyOSvTeQuV1XrNBDigZqs4WY+s6/tSQqKLDcKeWULGKBtxvoonH+frm3 auN0n04t5XlTLrggSeJurDlZNJOaG4ZzczY5+UbhdeqNRS9K+ieif1wQiGcz2/5+ /zJQbOtDenasaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:16 2025 by rpki-client