This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json) Hash identifier: reu7seUbj3oH8atXyuiJmd7k7Fk7cqe0B94Ku9gX9oQ= Subject key identifier: 52:A7:90:87:C5:11:83:46:B8:71:F4:EC:F9:6D:8B:40:0F:EC:30:F5 Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Certificate serial: 019B33E9074635D6F539163B327497ED214E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft Manifest number: 0EEA Signing time: Fri 19 Dec 2025 00:01:08 +0000 Manifest this update: Fri 19 Dec 2025 00:01:08 +0000 Manifest next update: Sat 20 Dec 2025 00:01:08 +0000 Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=) 2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: 7g/IF3EDHFWruOvWQeVrxM8X1G3q3Xcm+P7xSIyAMvQ=) 3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:07:46:35:d6:f5:39:16:3b:32:74:97:ed:21:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Validity Not Before: Dec 19 00:01:08 2025 GMT Not After : Dec 20 00:01:08 2025 GMT Subject: CN=52a79087c5118346b871f4ecf96d8b400fec30f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:da:c9:4f:a4:c7:62:dd:81:58:23:a2:a6: 59:ba:f7:5c:d8:82:c9:4c:f7:45:8f:1d:ab:03:f7: 8e:c5:c5:8e:6f:d2:37:65:bc:52:3f:ad:e4:24:bf: df:d5:fb:44:97:ca:e5:34:b5:bc:d8:ea:10:11:47: e9:ad:bc:26:a0:78:ee:86:dc:38:df:0b:cd:95:d8: f2:8e:64:a9:9b:7f:7d:59:a4:9a:86:ad:52:6f:49: 38:c1:13:9a:be:08:5e:fb:25:92:60:a0:7a:e6:4b: 53:b9:d6:70:01:5a:86:47:05:2c:da:0c:7a:34:e0: ab:8c:3e:6b:84:e8:b9:15:cf:6a:0b:d6:8a:92:b3: 3f:a8:dc:ba:dd:4b:2e:b1:98:0f:b2:cc:51:ea:6c: bf:1e:9f:0b:e1:6f:6a:7a:d6:1f:6f:5a:30:68:c7: ac:5e:b2:9b:54:5b:84:d8:43:f0:86:05:07:51:40: 81:d6:0e:da:fe:7c:be:10:7c:e1:a3:68:5b:75:b8: 77:a4:be:af:4d:59:08:d1:5c:5d:91:c9:62:cd:cd: 73:72:f8:62:d7:40:80:84:a3:bb:a2:43:22:b7:96: 3a:a4:e0:05:8d:68:f7:58:0b:77:cd:eb:10:cf:25: 85:fc:65:02:e2:56:16:d4:d4:d9:9c:80:33:09:8e: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A7:90:87:C5:11:83:46:B8:71:F4:EC:F9:6D:8B:40:0F:EC:30:F5 X509v3 Authority Key Identifier: keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:19:74:4a:93:11:55:e4:f7:e4:50:1a:c0:ba:e8:42:05:a4: 90:b8:dd:d3:4c:54:7c:38:85:93:84:dd:89:d9:c0:79:25:91: e8:98:1c:02:43:61:33:da:48:71:41:e1:3c:59:13:5b:79:62: 00:22:ff:15:c3:01:bd:0c:48:bd:21:e2:60:f6:c8:ec:b7:31: 4d:78:f8:e5:e7:c4:34:76:b4:ad:8c:65:cf:8c:10:b4:b4:ff: e2:77:24:3a:a5:f3:3d:49:fe:de:cf:c0:12:cc:62:9a:fd:6c: ef:dc:41:d7:5e:94:64:09:d7:24:6d:73:bd:bc:02:8a:6e:03: ae:c0:c1:c3:38:e1:90:4b:99:13:9b:79:d4:e9:a5:a2:8e:24: 2b:20:7f:e4:de:fc:1f:09:89:82:d2:75:8a:09:e2:3f:f4:f1: 7b:a5:bb:b1:b9:1b:04:9b:53:66:61:36:c7:82:19:0e:1b:b7: 16:2c:9c:ab:52:3b:f9:c4:30:45:b1:9f:5d:5b:c8:fe:05:10: 8e:11:e9:51:8e:55:32:72:38:d0:c9:d7:94:35:cd:0e:01:09: 90:b3:28:31:24:a7:79:0f:40:b5:70:71:6d:46:db:6c:75:6c: e9:35:78:4d:2a:46:39:24:7b:ce:62:83:2d:7d:cf:c4:0e:d5: e0:1d:f1:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6QdGNdb1ORY7MnSX7SFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5 NWFmM2QwHhcNMjUxMjE5MDAwMTA4WhcNMjUxMjIwMDAwMTA4WjAzMTEwLwYDVQQD Eyg1MmE3OTA4N2M1MTE4MzQ2Yjg3MWY0ZWNmOTZkOGI0MDBmZWMzMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3jayU+kx2LdgVgjoqZZuvdc2ILJ TPdFjx2rA/eOxcWOb9I3ZbxSP63kJL/f1ftEl8rlNLW82OoQEUfprbwmoHjuhtw4 3wvNldjyjmSpm399WaSahq1Sb0k4wROavghe+yWSYKB65ktTudZwAVqGRwUs2gx6 NOCrjD5rhOi5Fc9qC9aKkrM/qNy63UsusZgPssxR6my/Hp8L4W9qetYfb1owaMes XrKbVFuE2EPwhgUHUUCB1g7a/ny+EHzho2hbdbh3pL6vTVkI0Vxdkclizc1zcvhi 10CAhKO7okMit5Y6pOAFjWj3WAt3zesQzyWF/GUC4lYW1NTZnIAzCY57ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKnkIfFEYNGuHH07Plti0AP7DD1MB8GA1UdIwQY MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt NjlkNDA2ZTE4NjUzLzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhl0SpMR VeT35FAawLroQgWkkLjd00xUfDiFk4TdidnAeSWR6JgcAkNhM9pIcUHhPFkTW3li ACL/FcMBvQxIvSHiYPbI7LcxTXj45efENHa0rYxlz4wQtLT/4nckOqXzPUn+3s/A Esximv1s79xB116UZAnXJG1zvbwCim4DrsDBwzjhkEuZE5t51Omloo4kKyB/5N78 HwmJgtJ1igniP/Txe6W7sbkbBJtTZmE2x4IZDhu3Fiycq1I7+cQwRbGfXVvI/gUQ jhHpUY5VMnI40MnXlDXNDgEJkLMoMSSneQ9AtXBxbUbbbHVs6TV4TSpGOSR7zmKD LX3PxA7V4B3xtA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:21:10 2025 by rpki-client