This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft File: US7HYztuWDv6P6f_eEjxqp8oAIU.mft (raw, json) Hash identifier: 5xMaprBhXzKVcYgkH96DUp0SWwr45Hk4LsD7gLPR5/4= Subject key identifier: 17:BF:07:C1:F0:37:41:F0:EE:07:BF:CF:A2:94:48:BA:EC:42:8C:84 Authority key identifier: 51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85 Certificate issuer: /CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085 Certificate serial: 019AF0BF9F52A419FA75FB7F4A3E7A49593E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: US7HYztuWDv6P6f_eEjxqp8oAIU.crl (hash: L9eggDiJ4G5Zvf7ANMOSUuJln/U4BTnb1E0r8OmeC60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9f:52:a4:19:fa:75:fb:7f:4a:3e:7a:49:59:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085 Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=17bf07c1f03741f0ee07bfcfa29448baec428c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:f6:94:aa:48:f0:17:fb:83:ec:41:e5:78: 70:48:1a:ce:2b:e4:6e:27:2d:86:a3:d0:e7:2f:74: b6:3d:b2:20:7e:f5:57:64:ac:6b:00:3d:e8:0e:6a: 3a:2e:a2:37:e5:1c:95:81:b3:78:d1:15:83:2e:aa: f3:f0:ea:c6:e0:50:0d:b9:0c:ac:81:2a:bd:3b:e3: 81:bb:06:20:de:34:71:46:4e:60:49:ec:28:c9:a9: 4c:b8:0e:78:9e:4c:fb:e4:44:7c:55:f2:c7:0e:d1: c7:16:8e:bf:c3:34:4b:87:d8:a0:42:2a:24:8f:60: 44:36:21:3b:66:4e:e5:16:31:79:87:59:ca:cb:9e: 11:28:45:38:6a:76:9a:4b:0d:a3:7a:ba:09:0b:f1: 53:9e:4e:d7:8f:b0:a5:9d:1a:5a:ab:6e:91:dc:01: 44:68:e0:45:d4:0e:cb:29:3d:99:7d:e9:73:2f:de: 41:d8:0c:6f:33:d1:1a:8a:7c:6b:e8:9d:3d:b0:23: 5c:48:0b:8a:8c:0e:4f:9e:e3:00:0d:4d:be:9e:97: ff:13:fe:94:44:fb:7a:24:85:33:4a:b3:d0:29:0a: 0b:83:88:46:18:6f:59:18:a9:c8:db:d3:b8:54:82: d1:e3:88:01:e9:f1:01:59:bb:d5:09:8c:68:18:52: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BF:07:C1:F0:37:41:F0:EE:07:BF:CF:A2:94:48:BA:EC:42:8C:84 X509v3 Authority Key Identifier: keyid:51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f4:bb:9c:77:14:44:33:f7:9f:42:b1:ce:48:7e:5c:fe:f8: 71:25:04:80:1f:0f:19:9d:1a:7d:e9:f5:b0:09:3b:62:d6:7a: 97:5c:64:62:cb:ce:b3:48:62:07:33:9d:fa:7a:da:ce:7c:72: 06:6d:bc:5f:40:c9:82:36:d9:34:b1:4c:8b:22:d3:86:fc:bf: fa:e0:07:6c:23:e6:2e:58:d2:97:45:61:ee:ce:55:58:dd:e4: 0d:c0:e9:4f:be:95:00:8e:5b:06:68:5d:14:df:25:ef:22:e3: 31:7e:c1:f8:be:d7:21:3c:55:6b:95:e7:8e:ec:fa:72:aa:5a: 56:75:d3:3c:60:a8:88:4e:4c:67:93:0a:a9:50:7e:2e:9a:7c: 33:0c:c0:1e:2a:5f:fe:50:cf:1c:43:b7:91:32:84:40:61:50: e8:d7:c2:96:3c:62:73:5f:24:fc:84:3b:ac:19:5b:28:38:87: 44:45:f5:eb:d5:71:9b:46:74:6a:29:bb:cc:ed:24:0e:34:c1: 5a:a7:62:31:f2:4a:ff:b8:2e:67:6d:ab:d3:5a:27:ee:af:d0: f6:a6:ef:da:6b:65:82:97:2b:9b:57:03:d4:0a:2e:15:c2:62: 39:41:85:cc:6d:8a:65:af:67:dc:16:ce:5b:2d:9c:48:9e:07: da:ed:d2:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv59SpBn6dft/Sj56SVk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMmVjNzYzM2I2ZTU4M2JmYTNmYTdmZjc4NDhmMWFhOWYy ODAwODUwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD EygxN2JmMDdjMWYwMzc0MWYwZWUwN2JmY2ZhMjk0NDhiYWVjNDI4Yzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLP2lKpI8Bf7g+xB5XhwSBrOK+Ru Jy2Go9DnL3S2PbIgfvVXZKxrAD3oDmo6LqI35RyVgbN40RWDLqrz8OrG4FANuQys gSq9O+OBuwYg3jRxRk5gSewoyalMuA54nkz75ER8VfLHDtHHFo6/wzRLh9igQiok j2BENiE7Zk7lFjF5h1nKy54RKEU4anaaSw2jeroJC/FTnk7Xj7ClnRpaq26R3AFE aOBF1A7LKT2ZfelzL95B2AxvM9Eainxr6J09sCNcSAuKjA5PnuMADU2+npf/E/6U RPt6JIUzSrPQKQoLg4hGGG9ZGKnI29O4VILR44gB6fEBWbvVCYxoGFJuVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe/B8HwN0Hw7ge/z6KUSLrsQoyEMB8GA1UdIwQY MBaAFFEux2M7blg7+j+n/3hI8aqfKACFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81MjI0Y2MtZTc0My00YTZlLTk4YjUt NDFkM2E4NGFiY2NiLzEvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81MjI0Y2MtZTc0My00YTZlLTk4YjUtNDFkM2E4NGFiY2Ni LzEvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvS7nHcU RDP3n0Kxzkh+XP74cSUEgB8PGZ0afen1sAk7YtZ6l1xkYsvOs0hiBzOd+nraznxy Bm28X0DJgjbZNLFMiyLThvy/+uAHbCPmLljSl0Vh7s5VWN3kDcDpT76VAI5bBmhd FN8l7yLjMX7B+L7XITxVa5Xnjuz6cqpaVnXTPGCoiE5MZ5MKqVB+Lpp8MwzAHipf /lDPHEO3kTKEQGFQ6NfCljxic18k/IQ7rBlbKDiHREX169Vxm0Z0aim7zO0kDjTB WqdiMfJK/7guZ22r01on7q/Q9qbv2mtlgpcrm1cD1AouFcJiOUGFzG2KZa9n3BbO Wy2cSJ4H2u3S9A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:13 2025 by rpki-client