This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json) Hash identifier: SvzltvoBswJO8jCy03sIDFkz7zm6H4zgSMgMHA7Xv/A= Subject key identifier: 3A:AE:EF:79:B9:42:72:50:7D:AD:2D:B6:A0:69:C2:5E:32:9E:35:4B Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Certificate serial: 019AF12DC597FCBB956766EF8124ECFF967E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=) 2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: COwTxC/MMu0wCkdrBmSDT3myXvUG4Od2BZTHvqsMjg0=) 3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c5:97:fc:bb:95:67:66:ef:81:24:ec:ff:96:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=3aaeef79b94272507dad2db6a069c25e329e354b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:97:76:d6:f9:4f:18:61:25:40:93:de:85: 9b:24:93:06:2f:37:16:df:f6:27:8b:45:9c:9c:92: 4b:23:ac:89:32:7c:20:2f:60:a7:2c:16:68:1a:86: bc:ee:5b:97:64:93:f9:49:33:3d:aa:dc:ca:ed:b0: 8a:39:9c:1e:37:28:88:94:c3:8d:7e:53:60:92:a0: f1:e7:56:df:94:67:0c:20:96:6d:83:a5:3f:81:34: 3c:e3:2c:6c:f7:89:c5:32:38:c8:3c:ca:a9:f3:1f: 7b:ff:04:ec:79:33:77:47:02:f4:cc:ac:01:21:ad: e9:76:fc:8e:16:95:e7:1a:8b:80:79:1d:92:ea:a8: 5a:36:54:a6:74:59:3f:a4:29:8b:12:f7:64:87:39: 2c:99:8f:75:27:b3:fd:ce:2d:00:84:ab:12:f5:df: 4c:7b:81:4b:54:9d:04:24:d5:e0:f4:db:8f:7a:5f: c6:7e:69:0a:f0:2b:7e:be:4d:4e:72:a8:a9:ca:61: 19:72:cf:45:55:c8:30:98:70:66:78:84:5a:5c:6e: 04:50:4d:d3:f5:21:7e:33:8e:30:94:9f:4a:28:6c: 94:18:49:cc:68:4d:3c:4b:c3:57:6f:e2:d8:10:2c: 55:16:20:09:fb:51:fb:65:ee:0a:d8:65:fc:9c:44: fd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AE:EF:79:B9:42:72:50:7D:AD:2D:B6:A0:69:C2:5E:32:9E:35:4B X509v3 Authority Key Identifier: keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:30:d4:dc:3a:c4:0f:23:2e:2d:da:6b:a3:54:82:f0:3d:64: 97:07:1a:42:c3:e2:c7:86:21:0b:8b:34:c3:e2:8d:58:d9:9c: 09:e9:68:7d:2e:ec:ab:a2:12:d7:4a:2f:5f:12:f4:9e:13:32: 01:1f:66:9f:2d:38:42:ef:d1:a8:de:33:05:67:f9:7b:6a:16: 45:c9:e2:3c:aa:af:d1:69:82:22:1b:3e:c1:7f:98:3a:c9:68: c5:90:74:08:ab:10:b4:a8:4e:3c:23:61:ef:a2:d6:3b:f4:47: 4b:d2:c5:6c:6e:74:7b:aa:68:37:1d:d5:12:a4:70:80:ec:99: a9:8d:1a:ad:51:c3:f6:d1:14:36:05:67:c6:a5:81:dc:9c:34: a2:94:a2:d3:84:d1:77:fb:0b:00:a4:5b:aa:78:29:df:81:2c: de:87:23:70:93:e1:7a:25:f8:7f:65:bb:63:d5:19:57:29:cc: d1:4d:e5:f2:9c:73:01:8f:6e:f4:28:e4:98:6b:d3:89:94:d9: 8e:c8:38:07:f3:6f:19:f8:90:8b:8b:6c:24:18:7c:93:5e:1b: 74:ad:61:b1:d0:f3:5e:3b:d4:b0:30:86:80:d1:f8:22:5c:da: 2b:80:4b:39:60:74:42:5a:b2:bc:62:53:f5:8d:c9:31:79:54: 0c:92:e4:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcWX/LuVZ2bvgSTs/5Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1 YWU4YjQwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EygzYWFlZWY3OWI5NDI3MjUwN2RhZDJkYjZhMDY5YzI1ZTMyOWUzNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BuXdtb5TxhhJUCT3oWbJJMGLzcW 3/Yni0WcnJJLI6yJMnwgL2CnLBZoGoa87luXZJP5STM9qtzK7bCKOZweNyiIlMON flNgkqDx51bflGcMIJZtg6U/gTQ84yxs94nFMjjIPMqp8x97/wTseTN3RwL0zKwB Ia3pdvyOFpXnGouAeR2S6qhaNlSmdFk/pCmLEvdkhzksmY91J7P9zi0AhKsS9d9M e4FLVJ0EJNXg9NuPel/GfmkK8Ct+vk1OcqipymEZcs9FVcgwmHBmeIRaXG4EUE3T 9SF+M44wlJ9KKGyUGEnMaE08S8NXb+LYECxVFiAJ+1H7Ze4K2GX8nET99wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqu73m5QnJQfa0ttqBpwl4ynjVLMB8GA1UdIwQY MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTDU3DrE DyMuLdpro1SC8D1klwcaQsPix4YhC4s0w+KNWNmcCelofS7sq6IS10ovXxL0nhMy AR9mny04Qu/RqN4zBWf5e2oWRcniPKqv0WmCIhs+wX+YOsloxZB0CKsQtKhOPCNh 76LWO/RHS9LFbG50e6poNx3VEqRwgOyZqY0arVHD9tEUNgVnxqWB3Jw0opSi04TR d/sLAKRbqngp34Es3ocjcJPheiX4f2W7Y9UZVynM0U3l8pxzAY9u9CjkmGvTiZTZ jsg4B/NvGfiQi4tsJBh8k14bdK1hsdDzXjvUsDCGgNH4IlzaK4BLOWB0QlqyvGJT 9Y3JMXlUDJLkvw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:57 2025 by rpki-client