This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json) Hash identifier: 2woynm9vE9A+TuI5vr/sAhWSzb8UIpQ9OnBBezeIbfk= Subject key identifier: 4B:63:5D:6C:D0:D7:18:5B:98:AF:44:E4:7C:35:82:2B:C9:F4:2B:7A Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019AF1647A95642189633C7D0B253176C7E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft Manifest number: 0445 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=) 2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: ANjbduBJ71jhwLjQyu6duYr0gEzBCzCYfa9DhEsWH/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7a:95:64:21:89:63:3c:7d:0b:25:31:76:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=4b635d6cd0d7185b98af44e47c35822bc9f42b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:02:55:a9:8e:25:3e:ea:23:ca:ce:47:80: bf:74:60:17:cb:e4:d1:c3:ad:38:a5:9d:07:71:53: e0:22:ac:c5:99:c2:dd:21:41:ae:e0:04:3b:7c:0e: 9d:5e:4c:35:ae:39:ec:ce:68:d1:aa:38:86:47:88: 9c:a8:14:b0:f7:92:56:d0:2e:2d:d9:c6:35:57:ba: c3:9a:3f:03:7f:99:1a:fe:7c:f0:8a:75:9f:01:10: b0:cc:7c:de:c3:57:b2:8b:ed:c7:0d:d0:9a:88:c8: 86:7c:59:fc:d8:d0:93:de:22:00:a1:72:ca:c0:23: 99:46:24:34:c9:80:50:18:26:21:18:70:33:ea:96: 38:71:7b:8a:ee:94:32:9e:af:e4:12:f6:00:36:9e: 25:36:2c:c4:b7:90:f2:e5:0c:08:5f:f2:65:2a:c6: b4:5b:f7:5e:1a:1d:ed:3a:0a:39:dc:dd:0f:fa:b3: f7:f8:07:26:b1:52:dc:da:3d:67:a5:34:e8:ff:34: d4:0f:74:55:8c:c0:ef:97:8a:c5:1c:e8:66:c3:62: 93:7a:b5:6c:b6:ec:cd:86:46:7d:bb:11:98:0e:a9: 48:36:f2:f5:26:37:e7:bb:aa:6b:3c:6c:89:7a:d6: 86:3f:b3:d1:63:dd:53:cb:cc:d0:06:19:cd:7e:3d: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:5D:6C:D0:D7:18:5B:98:AF:44:E4:7C:35:82:2B:C9:F4:2B:7A X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f6:0a:20:2d:0c:ad:7d:d9:24:4a:d1:39:a0:70:85:84:3c: 44:f3:2f:9d:f0:99:4b:61:60:80:9e:d9:90:da:4c:d6:a0:fe: 4a:47:e2:bb:da:f1:28:3d:ef:96:66:91:50:c1:35:d6:6d:e3: d2:4e:45:44:53:b7:d1:06:d6:02:80:a4:0a:9e:55:b7:42:ce: 9e:f7:e5:63:d5:65:62:ad:80:01:ce:55:f5:9e:f5:7c:b8:aa: c9:57:d9:26:49:94:3c:6c:37:29:14:99:28:8d:fc:c9:f5:17: 2a:87:e8:2f:96:7b:27:50:fa:b5:cb:cb:24:0f:6a:d9:40:05: 71:76:11:77:46:9e:d4:71:c8:dc:33:ec:eb:22:5d:e7:23:2a: 01:04:94:25:95:eb:9e:a3:73:83:ba:c6:77:94:75:53:49:66: 33:d6:a3:a1:74:08:17:5c:7c:e6:f2:e4:e9:12:2b:80:29:ef: 61:19:22:55:3b:07:f3:85:8b:e9:b1:af:b6:7f:88:b8:78:6f: 0c:7a:e8:36:3e:a6:12:6e:db:77:1e:5e:36:31:64:79:10:55: 12:3d:25:d8:f3:70:25:5e:08:6a:11:94:4e:95:c6:78:44:c4: 6a:9f:58:f6:b4:e8:c7:17:0f:02:ca:89:84:7c:9d:99:1e:61: 81:80:dc:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHqVZCGJYzx9CyUxdsfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD Eyg0YjYzNWQ2Y2QwZDcxODViOThhZjQ0ZTQ3YzM1ODIyYmM5ZjQyYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J0CVamOJT7qI8rOR4C/dGAXy+TR w604pZ0HcVPgIqzFmcLdIUGu4AQ7fA6dXkw1rjnszmjRqjiGR4icqBSw95JW0C4t 2cY1V7rDmj8Df5ka/nzwinWfARCwzHzew1eyi+3HDdCaiMiGfFn82NCT3iIAoXLK wCOZRiQ0yYBQGCYhGHAz6pY4cXuK7pQynq/kEvYANp4lNizEt5Dy5QwIX/JlKsa0 W/deGh3tOgo53N0P+rP3+AcmsVLc2j1npTTo/zTUD3RVjMDvl4rFHOhmw2KTerVs tuzNhkZ9uxGYDqlINvL1Jjfnu6prPGyJetaGP7PRY91Ty8zQBhnNfj3yEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtjXWzQ1xhbmK9E5Hw1givJ9Ct6MB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvYKIC0M rX3ZJErROaBwhYQ8RPMvnfCZS2FggJ7ZkNpM1qD+Skfiu9rxKD3vlmaRUME11m3j 0k5FRFO30QbWAoCkCp5Vt0LOnvflY9VlYq2AAc5V9Z71fLiqyVfZJkmUPGw3KRSZ KI38yfUXKofoL5Z7J1D6tcvLJA9q2UAFcXYRd0ae1HHI3DPs6yJd5yMqAQSUJZXr nqNzg7rGd5R1U0lmM9ajoXQIF1x85vLk6RIrgCnvYRkiVTsH84WL6bGvtn+IuHhv DHroNj6mEm7bdx5eNjFkeRBVEj0l2PNwJV4IahGUTpXGeETEap9Y9rToxxcPAsqJ hHydmR5hgYDcQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:35 2025 by rpki-client