This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json) Hash identifier: r7Do36joxspR+rJftu5apYewTjmQZ7Tk+F1wZXU9IdI= Subject key identifier: 8D:00:BB:D4:BE:65:A2:CA:E3:D1:A4:3C:09:5C:F7:BE:88:2C:76:3F Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0 Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0 Certificate serial: 019AF12E1870CA993CC9C155FA18A44D0149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: B4WLDJveFZVT_m8u5hStR6xu-pU.roa (hash: Nm6S6CMIoGZCCHyW+OnF60p//0+/EWirysqpstDuGNc=) 2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: +zkNZhm3eTTNZAHG4zWRLGlPC2zUPTXPYl1D1zkSK2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:18:70:ca:99:3c:c9:c1:55:fa:18:a4:4d:01:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0 Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=8d00bbd4be65a2cae3d1a43c095cf7be882c763f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:f0:50:33:82:b9:d5:11:c0:9e:52:5b:94: 8c:df:af:d2:81:1a:a9:53:3d:13:ff:94:28:8f:0f: 3a:a7:cd:ae:84:0d:e9:98:4f:c4:78:77:13:9b:e1: 2b:a0:ac:14:e7:51:8d:b3:6a:cd:d1:ff:1d:38:2d: 03:e6:ff:78:0b:de:42:79:77:56:39:a6:16:e4:2c: 52:78:00:a6:56:4f:6c:29:d1:e3:ec:e6:d2:a5:04: 5a:49:6e:1b:10:04:07:02:dd:64:f9:ab:5a:9a:a8: c6:b1:b4:39:9e:6a:69:4b:d6:b6:d3:a5:0d:cb:59: f3:bb:a6:0d:74:0e:88:2a:a7:21:c2:22:f3:d1:e5: 9f:82:9a:4a:52:9a:01:1c:81:9b:2a:ed:90:0d:de: 43:eb:ad:91:c0:84:4a:73:fa:1a:93:31:4b:16:46: 12:21:07:7e:7a:5b:dc:31:5f:70:40:99:ec:77:b7: 27:f9:6d:9f:4e:c4:8f:26:bc:d3:1b:f6:94:94:30: 7f:b7:f0:2e:51:58:7a:0d:f3:8f:39:88:8b:8c:33: 19:c9:55:3b:91:04:60:60:82:0b:c6:87:79:07:83: d4:1c:e4:d0:65:31:24:36:0a:e4:d2:22:d3:22:93: 13:40:90:d2:eb:41:cf:f7:84:68:b7:ef:31:79:fb: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:00:BB:D4:BE:65:A2:CA:E3:D1:A4:3C:09:5C:F7:BE:88:2C:76:3F X509v3 Authority Key Identifier: keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:52:bb:97:64:fa:ab:d3:b3:73:94:4a:99:9b:99:57:88: 82:a2:43:32:d1:4c:5f:53:50:65:25:1a:62:fd:1c:d4:17:8b: 2b:0f:1f:24:87:70:99:93:5d:80:87:2b:5d:f3:1d:d3:d6:ef: 09:64:cd:8d:c0:f7:e2:bd:8a:d7:0a:10:57:55:26:5f:95:f9: 0a:4e:08:8f:d6:0e:e6:eb:48:37:be:ae:69:68:a9:0a:f8:33: 28:3e:de:9c:bb:6c:f6:6a:b6:bc:16:e9:ba:80:70:e0:b2:c6: 49:da:4c:f8:61:7b:e3:42:ec:8a:e2:77:c4:3a:40:71:db:92: e3:f2:cd:63:84:32:e7:92:34:9c:1d:b3:75:9d:1c:33:bd:d1: 1f:be:d1:70:aa:17:7c:95:6d:e6:31:e8:25:14:cf:4c:3a:e0: 2b:6b:98:8a:de:2d:b8:f3:d3:c5:aa:42:c7:01:85:a2:bb:d2: 1c:5c:d2:00:51:ce:74:d2:a8:c6:c8:fb:89:34:07:ec:2c:9c: 03:1b:25:52:2a:5c:b9:ba:80:64:81:2f:35:bf:f4:e5:5f:bf: d3:5c:5f:05:6b:95:4b:0d:63:60:f1:a9:6b:5d:aa:29:0f:d1: c4:ba:f5:9d:10:0f:b5:30:4e:cb:83:7b:e1:b4:f6:f5:1e:e4: dd:53:a6:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhhwypk8ycFV+hikTQFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDc4MjE5MjE1NThmNjZhMDM3ZmU5Y2EwZGNjMTA0NmNm NDg0ZTAwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD Eyg4ZDAwYmJkNGJlNjVhMmNhZTNkMWE0M2MwOTVjZjdiZTg4MmM3NjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bnwUDOCudURwJ5SW5SM36/SgRqp Uz0T/5Qojw86p82uhA3pmE/EeHcTm+EroKwU51GNs2rN0f8dOC0D5v94C95CeXdW OaYW5CxSeACmVk9sKdHj7ObSpQRaSW4bEAQHAt1k+atamqjGsbQ5nmppS9a206UN y1nzu6YNdA6IKqchwiLz0eWfgppKUpoBHIGbKu2QDd5D662RwIRKc/oakzFLFkYS IQd+elvcMV9wQJnsd7cn+W2fTsSPJrzTG/aUlDB/t/AuUVh6DfOPOYiLjDMZyVU7 kQRgYIILxod5B4PUHOTQZTEkNgrk0iLTIpMTQJDS60HP94Rot+8xefvDWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0Au9S+ZaLK49GkPAlc976ILHY/MB8GA1UdIwQY MBaAFFNHghkhVY9moDf+nKDcwQRs9ITgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQt ZWQxNzc0YWRiZjJmLzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQtZWQxNzc0YWRiZjJm LzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6FSu5dk +qvTs3OUSpmbmVeIgqJDMtFMX1NQZSUaYv0c1BeLKw8fJIdwmZNdgIcrXfMd09bv CWTNjcD34r2K1woQV1UmX5X5Ck4Ij9YO5utIN76uaWipCvgzKD7enLts9mq2vBbp uoBw4LLGSdpM+GF740LsiuJ3xDpAcduS4/LNY4Qy55I0nB2zdZ0cM73RH77RcKoX fJVt5jHoJRTPTDrgK2uYit4tuPPTxapCxwGForvSHFzSAFHOdNKoxsj7iTQH7Cyc AxslUipcubqAZIEvNb/05V+/01xfBWuVSw1jYPGpa12qKQ/RxLr1nRAPtTBOy4N7 4bT29R7k3VOmxA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:09 2025 by rpki-client