This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft File: U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json) Hash identifier: 7c+WUCl6aJ0/UEBlYD5njMkJogTD/2B739k6qqsmJmw= Subject key identifier: 05:9E:24:88:56:30:E1:4E:21:9F:F3:A7:C5:8D:36:11:8D:C3:E2:A7 Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9 Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9 Certificate serial: 019AF08868CF0570147CFD589075B1F14054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft Manifest number: 0E37 Signing time: Fri 05 Dec 2025 22:01:02 +0000 Manifest this update: Fri 05 Dec 2025 22:01:02 +0000 Manifest next update: Sat 06 Dec 2025 22:01:02 +0000 Files and hashes: 1: GZldOEJkrutoTjn3MQnXcf09taM.roa (hash: vlltg4veeHpXkbEneS2WFuhIZv9HwJeSmQM3GzCbD1k=) 2: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: oFeIlamBSHcJNk04mwzxCgl0oknvXDRMuLWhGjKxtA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:68:cf:05:70:14:7c:fd:58:90:75:b1:f1:40:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9 Validity Not Before: Dec 5 22:01:02 2025 GMT Not After : Dec 6 22:01:02 2025 GMT Subject: CN=059e24885630e14e219ff3a7c58d36118dc3e2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:58:a2:9a:d4:a9:83:00:71:15:73:1e:14: 93:f0:24:c2:1a:f2:87:87:3b:c1:f0:6d:27:ea:42: 4b:db:bd:65:1a:12:7b:53:4b:d5:00:2f:95:f9:2a: 7f:76:cf:0b:46:7c:92:8a:be:5d:02:4c:40:3f:c5: 8e:ea:67:cc:8b:93:a1:74:82:4f:39:fa:42:6d:fd: d3:52:78:3a:01:43:24:c1:1b:82:ab:52:04:ae:19: f9:8b:e1:5b:d3:9e:ff:be:fe:6c:04:75:4a:08:ac: c4:1e:01:fc:1a:f3:53:b5:b3:86:d6:df:76:2f:ce: 08:a2:c6:6a:1c:7d:e4:67:2c:cc:12:09:fc:25:96: d4:19:03:ea:b7:07:e7:ec:f0:d8:e4:cb:6b:ae:d3: fd:fa:15:83:a0:32:27:2c:8f:f3:3b:f1:91:34:0e: f4:d5:f8:58:09:9b:0f:e8:72:8b:0e:37:4e:d5:81: 97:08:0a:ff:09:7e:cc:6d:83:21:10:32:ca:da:4c: 75:3b:70:50:9c:a3:6b:c0:fa:42:8f:7e:50:8e:d7: bb:8d:8e:d0:87:b9:84:14:59:96:53:49:50:c7:c5: 4b:d3:50:b0:f8:7c:10:55:3e:c8:ab:a8:ee:23:fc: 06:0f:61:7d:25:17:ee:a7:56:06:dc:8a:46:92:47: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:24:88:56:30:E1:4E:21:9F:F3:A7:C5:8D:36:11:8D:C3:E2:A7 X509v3 Authority Key Identifier: keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:39:42:40:66:cc:7b:3a:4e:e7:04:03:f3:42:83:a8:7c:78: 13:38:2c:f3:a0:a6:62:06:2c:5c:85:a4:08:48:9b:0a:94:66: d7:a9:f1:30:21:23:f7:d4:47:fc:eb:02:81:80:d8:1b:8c:9d: e8:56:19:23:c6:2b:57:b9:dc:70:41:41:d0:51:71:f1:2f:e5: 97:cf:cb:5d:e1:07:25:54:26:a4:e5:bf:9d:35:ee:d0:f7:35: ea:15:e2:e1:ef:61:5c:cc:48:f5:1b:b9:29:70:49:51:5d:9f: 70:59:0b:ac:72:24:59:a5:63:c0:84:63:7a:4f:15:9c:54:fd: 53:74:a1:08:36:4f:ad:8d:61:7b:0f:e4:2c:08:8f:f1:4b:06: 55:b6:17:81:7d:77:b5:86:75:e6:0b:90:e8:2b:4f:a2:fd:1e: ae:f7:75:6d:42:f8:e1:ce:38:a8:7c:0d:c4:76:b6:78:e0:73: 86:52:21:be:fa:b8:ca:36:ff:a5:81:8d:9e:24:62:09:e2:e5: 27:3b:77:54:70:28:05:b0:b8:b3:f9:3d:be:5e:b6:99:94:3c: 61:8f:36:18:72:80:51:b5:91:7a:ce:cb:18:5f:24:62:52:4d: f1:09:8f:18:bc:09:ca:5f:93:49:32:07:6b:59:aa:4d:6d:eb: a9:9c:b0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGjPBXAUfP1YkHWx8UBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYTg0YjUyM2RmZTMyYjhhODliOWNkZDMwYTlmODcxMTAw N2ZkYjkwHhcNMjUxMjA1MjIwMTAyWhcNMjUxMjA2MjIwMTAyWjAzMTEwLwYDVQQD EygwNTllMjQ4ODU2MzBlMTRlMjE5ZmYzYTdjNThkMzYxMThkYzNlMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurBYoprUqYMAcRVzHhST8CTCGvKH hzvB8G0n6kJL271lGhJ7U0vVAC+V+Sp/ds8LRnySir5dAkxAP8WO6mfMi5OhdIJP OfpCbf3TUng6AUMkwRuCq1IErhn5i+Fb057/vv5sBHVKCKzEHgH8GvNTtbOG1t92 L84IosZqHH3kZyzMEgn8JZbUGQPqtwfn7PDY5MtrrtP9+hWDoDInLI/zO/GRNA70 1fhYCZsP6HKLDjdO1YGXCAr/CX7MbYMhEDLK2kx1O3BQnKNrwPpCj35Qjte7jY7Q h7mEFFmWU0lQx8VL01Cw+HwQVT7Iq6juI/wGD2F9JRfup1YG3IpGkkfTbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWeJIhWMOFOIZ/zp8WNNhGNw+KnMB8GA1UdIwQY MBaAFFOoS1I9/jK4qJuc3TCp+HEQB/25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTZoTFVqMy1NcmlvbTV6ZE1LbjRjUkFIX2JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wN2UxMDUtNTY4MC00MGFhLThjOWQt MGQ2NmM3NWIwMjZkLzEvVTZoTFVqMy1NcmlvbTV6ZE1LbjRjUkFIX2JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wN2UxMDUtNTY4MC00MGFhLThjOWQtMGQ2NmM3NWIwMjZk LzEvVTZoTFVqMy1NcmlvbTV6ZE1LbjRjUkFIX2JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjlCQGbM ezpO5wQD80KDqHx4Ezgs86CmYgYsXIWkCEibCpRm16nxMCEj99RH/OsCgYDYG4yd 6FYZI8YrV7nccEFB0FFx8S/ll8/LXeEHJVQmpOW/nTXu0Pc16hXi4e9hXMxI9Ru5 KXBJUV2fcFkLrHIkWaVjwIRjek8VnFT9U3ShCDZPrY1hew/kLAiP8UsGVbYXgX13 tYZ15guQ6CtPov0ervd1bUL44c44qHwNxHa2eOBzhlIhvvq4yjb/pYGNniRiCeLl Jzt3VHAoBbC4s/k9vl62mZQ8YY82GHKAUbWRes7LGF8kYlJN8QmPGLwJyl+TSTIH a1mqTW3rqZyw4w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:13 2025 by rpki-client