This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json) Hash identifier: 4ltXbHGW9KJpWt3C1M2dZv3glW5zl1BojUW2fYVU+sc= Subject key identifier: 44:7B:E6:E7:7B:E3:62:10:3F:3A:CC:6D:66:3A:C9:A7:D6:70:F0:FB Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628 Certificate serial: 019AF19AE0EE588ED8D1A6108AD644684446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft Manifest number: 115E Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: Zls0NJArxuCxPwu/EKuVUMKMTszaek47inkGuDygQK8=) 2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e0:ee:58:8e:d8:d1:a6:10:8a:d6:44:68:44:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628 Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=447be6e77be362103f3acc6d663ac9a7d670f0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:73:a7:3d:0c:c1:be:de:3f:25:a6:ba:41: b0:1a:e6:e4:36:80:82:7a:e9:16:5b:60:45:93:df: 4b:a8:c8:84:02:de:4a:57:2d:8a:c8:3c:07:97:76: b3:73:96:9a:4b:0b:94:74:65:52:3e:d4:0c:b3:3f: c0:04:a5:c9:2a:5a:7c:ab:98:3a:5a:c0:66:2e:6b: 98:db:2b:fc:05:a1:34:5f:ce:9c:52:e7:ab:ff:87: eb:73:49:57:a6:b4:46:54:e3:a0:78:82:65:f8:0e: bc:14:08:a0:f4:57:6a:5a:e8:44:da:05:e8:7d:7d: 23:0f:95:e5:e9:44:b8:35:c9:64:8a:2b:ac:39:29: 21:ce:6d:b4:95:04:27:76:43:97:e7:40:06:45:82: 45:6e:c8:21:aa:5e:f2:de:09:8a:70:be:ef:4b:c4: 25:cd:ab:d9:41:8b:8b:25:06:ae:06:48:71:c3:3f: 47:0d:91:95:3b:c9:74:7b:1e:de:a8:3b:33:ae:76: 99:12:7c:45:a1:c2:fc:9e:0c:a5:10:d6:b4:2d:d9: 7b:ec:22:74:aa:2e:b8:ec:95:1f:56:4e:b5:fe:90: d2:a2:7f:c8:95:30:51:b8:fe:83:da:cd:46:98:09: 51:43:aa:d2:67:23:ba:29:97:c1:9d:98:90:3e:b9: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7B:E6:E7:7B:E3:62:10:3F:3A:CC:6D:66:3A:C9:A7:D6:70:F0:FB X509v3 Authority Key Identifier: keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d8:9b:61:af:66:bc:dd:64:2c:19:06:9b:82:5d:3e:b6:4b: fc:ee:af:53:20:1d:b9:6b:08:95:be:9d:46:b2:78:bb:9b:1f: ef:03:23:43:29:4f:84:53:c0:fa:14:13:d5:b7:06:6f:b9:f1: 59:fb:14:66:14:ff:8e:2f:fb:b7:43:cd:16:65:dc:d9:c7:ec: cf:93:4b:c2:ea:3d:35:fc:7c:a6:f5:46:da:28:15:6f:b0:99: 7d:5e:aa:21:88:c7:4d:95:7c:d0:9d:a5:5e:5a:47:e2:2b:3c: 37:06:29:cd:2f:7d:bb:53:58:b5:fb:c4:ff:3b:af:a0:92:61: 5e:7b:d4:c0:43:a2:76:d4:33:e4:58:93:43:11:97:03:fd:6c: 94:69:88:c3:1f:d8:70:08:1f:b6:cf:84:30:fc:f2:55:da:99: b6:be:7f:1b:87:49:1f:a8:56:c4:bd:d0:0e:3f:a9:c4:bc:0f: fc:ee:67:a6:d9:cd:35:c9:ed:c4:26:4c:f7:86:d3:dd:2c:89: 46:6a:41:23:81:ad:7b:8b:7d:53:e5:cc:6e:f9:6a:76:10:f4: 01:70:6a:81:70:3a:a7:b9:a7:8d:fb:46:6d:9c:2a:5e:c4:56: 86:9a:da:e1:77:85:4d:61:a6:de:29:9e:40:25:d1:47:8f:7b: 13:24:9e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuDuWI7Y0aYQitZEaERGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzBlMjA3OGU0ZjNlYmE1Zjg3OTUwM2ZkZDgwOWMzODNi Yjc2MjgwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD Eyg0NDdiZTZlNzdiZTM2MjEwM2YzYWNjNmQ2NjNhYzlhN2Q2NzBmMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUNzpz0Mwb7ePyWmukGwGubkNoCC eukWW2BFk99LqMiEAt5KVy2KyDwHl3azc5aaSwuUdGVSPtQMsz/ABKXJKlp8q5g6 WsBmLmuY2yv8BaE0X86cUuer/4frc0lXprRGVOOgeIJl+A68FAig9FdqWuhE2gXo fX0jD5Xl6US4NclkiiusOSkhzm20lQQndkOX50AGRYJFbsghql7y3gmKcL7vS8Ql zavZQYuLJQauBkhxwz9HDZGVO8l0ex7eqDszrnaZEnxFocL8ngylENa0Ldl77CJ0 qi647JUfVk61/pDSon/IlTBRuP6D2s1GmAlRQ6rSZyO6KZfBnZiQPrn9awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER75ud742IQPzrMbWY6yafWcPD7MB8GA1UdIwQY MBaAFFPA4geOTz66X4eVA/3YCcODu3YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2Yt NTY0ODJiMzkwNjc4LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2YtNTY0ODJiMzkwNjc4 LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9ibYa9m vN1kLBkGm4JdPrZL/O6vUyAduWsIlb6dRrJ4u5sf7wMjQylPhFPA+hQT1bcGb7nx WfsUZhT/ji/7t0PNFmXc2cfsz5NLwuo9Nfx8pvVG2igVb7CZfV6qIYjHTZV80J2l XlpH4is8NwYpzS99u1NYtfvE/zuvoJJhXnvUwEOidtQz5FiTQxGXA/1slGmIwx/Y cAgfts+EMPzyVdqZtr5/G4dJH6hWxL3QDj+pxLwP/O5nptnNNcntxCZM94bT3SyJ RmpBI4Gte4t9U+XMbvlqdhD0AXBqgXA6p7mnjftGbZwqXsRWhpra4XeFTWGm3ime QCXRR497EySeJw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:38 2025 by rpki-client