This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json) Hash identifier: 6lFAuKwta8WcfpaJVWR+Z02xbT5c+NSDbfuSSt0R3gE= Subject key identifier: 08:C5:24:A5:60:2D:12:F7:F5:6E:5C:AB:80:4B:D7:BE:F9:B9:3F:AC Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff Certificate serial: 019AF19B3BB5E611A377DDADAD048D1F239E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft Manifest number: 0EFD Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: y0MRD9bkNjYb62+C/T7YoTG8yJvsQnMU3AIPEKbv6WM=) 2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3b:b5:e6:11:a3:77:dd:ad:ad:04:8d:1f:23:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=08c524a5602d12f7f56e5cab804bd7bef9b93fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:6e:51:24:9c:99:78:02:55:3d:3b:4e:f2: d1:43:e1:ab:af:72:0f:62:54:33:72:57:36:8f:21: 57:4f:c2:00:15:c7:60:f6:90:36:5c:d3:9a:3f:6a: 47:d5:0d:de:62:5c:f4:b4:80:1b:3b:4e:8f:a4:05: 0e:a9:c1:5c:7d:74:1f:78:9d:c2:71:9d:1f:38:94: 15:87:8a:22:c6:cc:66:7e:4c:ba:8c:2e:57:30:20: 66:9e:b5:b9:76:84:30:ed:b6:9a:37:f6:c7:bc:ad: 2b:ad:55:f8:00:6d:09:80:30:f0:5d:f5:cc:e1:df: fd:4a:88:0c:9d:69:6a:f8:22:83:20:57:96:b9:6f: 4b:b2:76:ad:ec:ef:92:34:b8:e4:fa:dc:e0:65:d5: 0c:9c:1b:5f:f4:7f:6a:f7:16:c8:1f:3a:07:fc:c8: 3d:a1:61:6b:1d:ec:10:e6:5d:3f:8a:05:84:6f:37: b9:34:ec:30:b0:e2:87:ca:f7:8f:02:fb:3f:e4:e3: 73:e3:7e:64:a9:84:27:93:e4:7e:99:85:2e:92:7c: dd:95:5a:05:30:fb:5f:83:44:67:e6:5c:8c:6e:56: b4:d1:44:dc:0f:65:8b:0e:5b:f0:2a:4d:bd:ea:21: 39:22:6b:63:ae:72:65:e2:17:ba:16:0d:39:94:ce: fb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C5:24:A5:60:2D:12:F7:F5:6E:5C:AB:80:4B:D7:BE:F9:B9:3F:AC X509v3 Authority Key Identifier: keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7e:8d:3e:02:a4:91:9a:d5:07:40:85:fb:78:b1:cb:8c:6e: ce:23:8a:0b:fc:63:0d:d7:a8:65:45:62:12:f3:77:6b:c1:57: 04:20:89:ae:7c:b0:f9:7e:aa:05:95:79:24:3e:34:cb:77:cd: 8a:32:89:f9:95:5c:63:39:bd:da:4c:e6:12:52:ce:dc:b2:61: 26:c3:4e:7e:8d:42:3d:a8:56:e2:2c:d3:06:43:0d:f7:cd:3e: e3:80:06:10:d2:a2:23:b1:9d:9e:ea:5a:54:ce:f7:08:b6:91: d5:0a:78:26:8c:e7:c8:0a:6c:8e:0a:08:db:8d:fa:cc:14:42: e6:1a:fa:99:5c:85:e0:1e:6f:ba:2d:7b:b1:5e:93:c0:9d:85: b9:52:ce:92:5c:1c:ba:1d:ce:77:ac:15:56:1a:4d:e5:ec:c8: 2a:49:92:06:15:9b:09:da:e2:dc:07:09:79:00:08:50:15:38: 72:36:cd:c1:d6:c0:69:ee:e0:c8:a7:1b:b1:63:87:e4:99:39: 47:a2:fd:77:02:35:6a:cc:86:e2:3d:ee:2e:ee:d9:20:77:b7: 01:09:c6:18:9e:23:35:da:2a:b2:02:97:7f:35:bf:aa:6c:f0: 19:72:7d:19:64:01:92:93:ed:40:49:7c:99:ec:fd:4a:8f:8a: 45:1e:80:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzu15hGjd92trQSNHyOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTUwYjIzODJlMDBmYTdkZjE5NGU2NDg1ZmUxNDI1ODM2 MjEzZmYwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD EygwOGM1MjRhNTYwMmQxMmY3ZjU2ZTVjYWI4MDRiZDdiZWY5YjkzZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAketuUSScmXgCVT07TvLRQ+Grr3IP YlQzclc2jyFXT8IAFcdg9pA2XNOaP2pH1Q3eYlz0tIAbO06PpAUOqcFcfXQfeJ3C cZ0fOJQVh4oixsxmfky6jC5XMCBmnrW5doQw7baaN/bHvK0rrVX4AG0JgDDwXfXM 4d/9SogMnWlq+CKDIFeWuW9Lsnat7O+SNLjk+tzgZdUMnBtf9H9q9xbIHzoH/Mg9 oWFrHewQ5l0/igWEbze5NOwwsOKHyvePAvs/5ONz435kqYQnk+R+mYUuknzdlVoF MPtfg0Rn5lyMbla00UTcD2WLDlvwKk296iE5ImtjrnJl4he6Fg05lM77NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjFJKVgLRL39W5cq4BL1775uT+sMB8GA1UdIwQY MBaAFFNVCyOC4A+n3xlOZIX+FCWDYhP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDIt ODljNTNkNjMwNzY1LzEvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDItODljNTNkNjMwNzY1 LzEvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO36NPgKk kZrVB0CF+3ixy4xuziOKC/xjDdeoZUViEvN3a8FXBCCJrnyw+X6qBZV5JD40y3fN ijKJ+ZVcYzm92kzmElLO3LJhJsNOfo1CPahW4izTBkMN980+44AGENKiI7Gdnupa VM73CLaR1Qp4JoznyApsjgoI2436zBRC5hr6mVyF4B5vui17sV6TwJ2FuVLOklwc uh3Od6wVVhpN5ezIKkmSBhWbCdri3AcJeQAIUBU4cjbNwdbAae7gyKcbsWOH5Jk5 R6L9dwI1asyG4j3uLu7ZIHe3AQnGGJ4jNdoqsgKXfzW/qmzwGXJ9GWQBkpPtQEl8 mez9So+KRR6APQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:17 2025 by rpki-client