This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json) Hash identifier: fTsks9QMWZkmJnKrqdmlnA9Kb9GAJnEhl9UhXnVs7xk= Subject key identifier: 83:E1:E9:10:A7:86:D2:FC:E2:A4:4F:B3:AF:1E:39:71:7B:C6:09:9B Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001 Certificate serial: 019AF1D1EB3D112D20F60FE3A6A051EADA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=) 2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: 1pW2K//LqDVXmk1L7YDdkjVoI/ldiEmkxmp9Br1/UcU=) 3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:eb:3d:11:2d:20:f6:0f:e3:a6:a0:51:ea:da:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535a0905ad5684f414182c99e1ed998163093001 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=83e1e910a786d2fce2a44fb3af1e39717bc6099b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:fe:09:61:7e:40:27:aa:3f:42:0a:82:97: 6d:66:14:f0:42:d0:57:e1:b3:f4:81:10:5b:90:b8: 98:fc:56:01:03:e8:44:7c:b8:67:c3:39:b7:7b:ec: bb:c7:ba:70:4e:40:dd:51:c9:e7:2d:0a:82:51:31: fc:f6:9a:ec:31:76:be:f7:fa:4f:9e:28:bb:32:d2: 98:b7:c2:f3:5f:7b:6b:ca:0f:d7:2a:27:a0:04:7b: ad:62:4b:02:ee:ef:66:1d:de:50:29:57:41:65:32: 0b:01:6b:1b:4b:51:74:53:18:60:fe:6d:32:f1:4d: 73:bd:24:22:12:58:3e:84:54:e6:7e:22:21:5e:20: 09:ec:69:ed:85:05:2e:11:43:23:57:73:5c:38:57: 36:43:be:d8:ff:be:8b:34:0d:55:4c:54:4f:a2:c3: d3:d3:46:d9:00:f8:4a:ee:8a:ae:e4:6f:10:20:ff: 58:1f:84:13:22:ac:5a:f5:c5:65:18:14:b9:91:70: f8:b8:8e:d2:bb:5c:37:4d:90:75:08:00:2c:ff:d7: 77:30:05:5e:54:a3:55:79:55:ac:83:00:7e:e8:85: ef:e1:5d:5e:b9:7f:cc:a8:15:06:12:6a:39:ec:0c: 8e:41:c3:39:68:43:41:14:32:a9:e6:13:5e:e2:3c: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:E9:10:A7:86:D2:FC:E2:A4:4F:B3:AF:1E:39:71:7B:C6:09:9B X509v3 Authority Key Identifier: keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:16:1d:fb:d0:52:f3:83:e5:3a:a0:72:61:40:fa:33:55:ac: dc:76:3c:55:d2:69:6a:c6:4a:ba:45:43:a3:95:be:ff:dd:20: ae:e0:5b:c5:f4:80:b2:a9:3a:db:bc:92:8c:84:3b:07:37:a3: e6:da:a4:e4:76:b9:fa:c4:d0:0c:9d:e8:f8:b9:00:f1:ef:18: af:2f:e9:18:e7:9a:aa:53:d0:32:1d:a2:f3:5f:3d:4e:ce:60: e8:e0:b7:30:c8:65:07:19:9b:05:3a:83:9f:6f:95:26:83:a4: 7c:7e:78:86:a5:3a:65:36:d5:ea:35:65:19:1f:a3:b2:36:e0: 68:3c:02:6b:4c:a5:d2:9d:28:37:67:42:b0:18:68:57:40:05: 50:88:63:00:3d:f3:b2:34:42:8f:df:c9:cc:cf:58:ba:51:5f: 17:bb:80:25:62:4d:e6:07:e6:92:56:41:5a:ae:bd:d9:47:f3: 1a:7e:d7:ff:c3:a3:a6:99:03:5b:09:f5:f4:96:2f:78:00:34: 54:60:10:e7:eb:4b:d3:c3:c4:50:90:e7:4e:03:c2:be:b4:b2: 28:17:60:bc:c6:16:76:58:a5:a4:84:3e:68:c2:e4:ce:89:55: 0b:66:dc:cb:6d:53:a9:c6:68:f2:38:41:4f:b8:a8:ce:da:a6: 07:53:82:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0es9ES0g9g/jpqBR6tpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWEwOTA1YWQ1Njg0ZjQxNDE4MmM5OWUxZWQ5OTgxNjMw OTMwMDEwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD Eyg4M2UxZTkxMGE3ODZkMmZjZTJhNDRmYjNhZjFlMzk3MTdiYzYwOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzb+CWF+QCeqP0IKgpdtZhTwQtBX 4bP0gRBbkLiY/FYBA+hEfLhnwzm3e+y7x7pwTkDdUcnnLQqCUTH89prsMXa+9/pP nii7MtKYt8LzX3tryg/XKiegBHutYksC7u9mHd5QKVdBZTILAWsbS1F0Uxhg/m0y 8U1zvSQiElg+hFTmfiIhXiAJ7GnthQUuEUMjV3NcOFc2Q77Y/76LNA1VTFRPosPT 00bZAPhK7oqu5G8QIP9YH4QTIqxa9cVlGBS5kXD4uI7Su1w3TZB1CAAs/9d3MAVe VKNVeVWsgwB+6IXv4V1euX/MqBUGEmo57AyOQcM5aENBFDKp5hNe4jyF6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPh6RCnhtL84qRPs68eOXF7xgmbMB8GA1UdIwQY MBaAFFNaCQWtVoT0FBgsmeHtmYFjCTABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMt NmExMGM2ZTMyMjJkLzEvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMtNmExMGM2ZTMyMjJk LzEvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBYd+9BS 84PlOqByYUD6M1Ws3HY8VdJpasZKukVDo5W+/90gruBbxfSAsqk627ySjIQ7Bzej 5tqk5Ha5+sTQDJ3o+LkA8e8Yry/pGOeaqlPQMh2i8189Ts5g6OC3MMhlBxmbBTqD n2+VJoOkfH54hqU6ZTbV6jVlGR+jsjbgaDwCa0yl0p0oN2dCsBhoV0AFUIhjAD3z sjRCj9/JzM9YulFfF7uAJWJN5gfmklZBWq692UfzGn7X/8OjppkDWwn19JYveAA0 VGAQ5+tL08PEUJDnTgPCvrSyKBdgvMYWdlilpIQ+aMLkzolVC2bcy21TqcZo8jhB T7ioztqmB1OCSg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:36 2025 by rpki-client