This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json) Hash identifier: Cped5ofyEATvopgqqQ6bjRUxlvgybXErrdYM6P8lkbE= Subject key identifier: F7:CA:AB:41:B6:B2:E1:0B:DA:29:69:7F:A8:41:17:37:27:17:8B:56 Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b Certificate serial: 019AF2AD7936C9EC6BA35E06852197074083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft Manifest number: 14AF Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: Mym9d5dVDoOmCDQV51AwB-FfpCc.roa (hash: w5OUNkmnrUSeDRW2ANklyuAzFVL6KyBf5AcPHxY8618=) 2: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: UvhQJIWYinEzAa9SqvSN/WDKfGy7uNgj9LmFAIpcGhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:79:36:c9:ec:6b:a3:5e:06:85:21:97:07:40:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=f7caab41b6b2e10bda29697fa841173727178b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e7:3d:68:49:e7:24:3a:97:52:ed:03:4c:b2: 5d:5f:20:79:d0:e0:27:15:c7:81:73:54:7a:af:b3: a6:e9:5f:e3:bf:f2:02:4a:e6:2f:02:7f:a5:1c:e3: e0:a9:79:b9:b4:30:ad:43:83:1a:ab:0f:34:cc:97: ae:fa:30:9f:c4:5e:d2:20:36:97:ca:aa:1e:65:60: 88:e7:81:10:c7:61:cc:45:a7:c9:c4:2b:94:da:ac: 9c:8d:b4:57:88:52:9d:e8:1f:2c:dd:ac:c7:a2:75: a3:14:f7:1b:0a:e7:ff:f4:87:ca:2a:ef:16:6d:56: c2:c0:39:21:df:20:7a:6f:19:95:c2:6a:19:f4:b0: dc:48:ea:b2:ce:bb:8a:d8:7c:51:82:51:c7:49:5b: 06:bf:60:74:a4:17:ca:75:59:72:93:ba:0c:fb:00: 63:14:17:48:f5:4f:8f:79:3e:d8:c3:6c:ad:79:46: 19:fd:d7:ee:60:59:1c:2f:83:8e:fd:47:92:86:6b: d1:62:47:36:33:22:3d:47:06:9c:22:6a:a1:be:08: ba:e8:b7:fe:14:ca:f5:43:28:f2:2e:2d:39:74:d3: e8:cb:e2:8f:48:6c:fe:88:38:ca:18:8c:94:f3:f7: 5d:07:a8:03:a2:f4:93:89:48:da:a8:3d:9e:bf:4c: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CA:AB:41:B6:B2:E1:0B:DA:29:69:7F:A8:41:17:37:27:17:8B:56 X509v3 Authority Key Identifier: keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ec:07:88:5a:dc:b5:c4:1a:9e:75:8d:62:c9:93:d0:6f:b8: 86:2e:bd:05:84:3a:23:8d:cc:e8:14:71:f3:85:6b:c9:9a:7f: 74:c6:98:c6:64:e5:08:05:a3:5a:92:2e:cf:15:47:e5:be:26: c5:f2:e0:47:70:7c:d1:f7:f7:b8:7e:34:82:06:be:0c:90:7a: 31:bd:25:1b:1e:77:ef:14:da:c6:44:6b:9b:14:8d:63:49:a9: 7a:13:e3:f7:52:1b:9a:d3:e1:a8:67:7d:65:13:0e:49:db:98: 8f:d8:1f:5c:55:46:52:12:5b:6f:5f:8f:de:1a:be:bf:07:c4: 5c:c4:fb:99:04:22:86:cd:4d:78:c2:d1:a7:a0:fa:7a:d8:e9: e4:f5:33:80:78:a7:ca:a1:13:05:ed:34:ae:85:53:38:12:f5: f9:b8:ba:ac:35:0a:11:c3:74:02:d0:32:f4:95:49:63:d8:30: 24:74:01:b5:16:75:44:b8:47:13:d8:be:2e:05:cd:65:39:15: 36:c1:88:fa:62:cb:00:d2:b6:72:23:4e:ce:13:ec:fd:48:88: 93:2a:48:bc:a9:78:b9:52:34:26:21:9a:2c:10:6a:6f:67:35: c4:10:ca:01:87:f7:a3:28:11:34:b3:44:c2:ea:0e:14:82:4f: 6b:e1:b2:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXk2yexro14GhSGXB0CDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjhiNGNlYTk0Yzg2N2QzNGMyYmZmOWFjZTc2NDBiZmY1 MWQwNmIwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD EyhmN2NhYWI0MWI2YjJlMTBiZGEyOTY5N2ZhODQxMTczNzI3MTc4YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ec9aEnnJDqXUu0DTLJdXyB50OAn FceBc1R6r7Om6V/jv/ICSuYvAn+lHOPgqXm5tDCtQ4Maqw80zJeu+jCfxF7SIDaX yqoeZWCI54EQx2HMRafJxCuU2qycjbRXiFKd6B8s3azHonWjFPcbCuf/9IfKKu8W bVbCwDkh3yB6bxmVwmoZ9LDcSOqyzruK2HxRglHHSVsGv2B0pBfKdVlyk7oM+wBj FBdI9U+PeT7Yw2yteUYZ/dfuYFkcL4OO/UeShmvRYkc2MyI9RwacImqhvgi66Lf+ FMr1QyjyLi05dNPoy+KPSGz+iDjKGIyU8/ddB6gDovSTiUjaqD2ev0zMSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfKq0G2suEL2ilpf6hBFzcnF4tWMB8GA1UdIwQY MBaAFFO4tM6pTIZ9NMK/+aznZAv/UdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQt OTY1ZjE3NjM3ODJjLzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQtOTY1ZjE3NjM3ODJj LzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApewHiFrc tcQannWNYsmT0G+4hi69BYQ6I43M6BRx84VryZp/dMaYxmTlCAWjWpIuzxVH5b4m xfLgR3B80ff3uH40gga+DJB6Mb0lGx537xTaxkRrmxSNY0mpehPj91IbmtPhqGd9 ZRMOSduYj9gfXFVGUhJbb1+P3hq+vwfEXMT7mQQihs1NeMLRp6D6etjp5PUzgHin yqETBe00roVTOBL1+bi6rDUKEcN0AtAy9JVJY9gwJHQBtRZ1RLhHE9i+LgXNZTkV NsGI+mLLANK2ciNOzhPs/UiIkypIvKl4uVI0JiGaLBBqb2c1xBDKAYf3oygRNLNE wuoOFIJPa+GyyA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:26 2025 by rpki-client