This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json) Hash identifier: Ct72B9wHxsTih9KZUrMCwidWUEWHM2fQy+mz2AdovDo= Subject key identifier: E8:16:3B:11:06:49:D4:0E:7B:E4:67:8B:88:FC:A1:4D:4A:07:5A:37 Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8 Certificate serial: 019AF31BE954DFE378379250F279634F59C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft Manifest number: 1260 Signing time: Sat 06 Dec 2025 10:01:23 +0000 Manifest this update: Sat 06 Dec 2025 10:01:23 +0000 Manifest next update: Sun 07 Dec 2025 10:01:23 +0000 Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=) 2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: cdDbmyXTycgnXClf0R6O9TwCG9ih/3IEQYAp6WTWK7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e9:54:df:e3:78:37:92:50:f2:79:63:4f:59:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8 Validity Not Before: Dec 6 10:01:23 2025 GMT Not After : Dec 7 10:01:23 2025 GMT Subject: CN=e8163b110649d40e7be4678b88fca14d4a075a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:32:22:c4:5e:d2:67:74:08:0e:a4:ac:ad:cd: 8d:2c:01:d3:0c:bd:02:53:60:e7:d1:03:e1:a2:31: 71:dc:08:94:42:d5:55:d1:17:3a:c2:54:c9:12:4b: 7e:94:d9:ab:26:51:c4:3a:89:b9:7e:03:2b:68:fd: 9b:c7:1e:63:dc:95:19:53:d7:78:90:ce:90:7f:32: e9:09:93:50:25:a3:b1:08:fc:ab:18:82:fd:9c:54: 34:37:6f:b3:c7:9f:5e:5b:a0:18:f7:db:0a:83:d9: bf:7a:0c:f6:e3:aa:27:85:71:7d:4a:72:bc:2d:52: 13:48:fe:36:71:3f:83:34:df:43:82:78:e3:69:c4: d8:e5:e5:8a:17:24:39:81:4f:0d:1a:5b:fb:0c:d8: 66:c0:1e:61:26:f0:74:48:2e:8b:65:e9:9a:fb:2a: a9:94:38:0d:cc:b0:b2:89:89:1b:d6:33:94:40:c1: 12:75:b3:c6:20:d4:62:95:40:ab:b0:ed:47:17:4b: 20:7f:09:99:4d:0c:65:ec:23:08:f6:de:1e:4d:51: a6:9b:3a:dc:81:64:49:a5:9d:be:b9:28:69:04:61: a8:e0:e6:c2:39:fa:bf:87:9c:f4:3c:24:5f:02:d8: 84:9c:9c:e0:bf:0a:b0:e6:a4:bd:47:50:bb:34:dc: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:16:3B:11:06:49:D4:0E:7B:E4:67:8B:88:FC:A1:4D:4A:07:5A:37 X509v3 Authority Key Identifier: keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:68:96:45:e7:12:38:28:98:42:6c:90:f0:d9:b1:07:3a:72: 6c:41:01:6c:e9:0a:b3:f7:ff:a5:1d:d7:2a:a7:22:5d:3c:72: de:2a:b7:c4:96:c5:4c:79:2c:0d:a9:89:36:8f:f6:58:0e:22: 3f:bd:1d:89:db:51:ee:0a:01:9e:24:d8:70:0a:21:5b:0c:bc: 06:b2:1f:74:c0:c9:e7:c9:ed:ff:98:9f:86:d8:b0:d4:c3:6a: 7a:b6:5c:2f:8f:c9:91:7c:04:ce:46:78:9f:74:92:81:20:55: df:4a:5a:6a:88:4e:1e:98:e3:54:a3:11:a8:6d:5d:22:8a:2f: 10:d1:3f:15:bc:c9:4f:9c:86:e1:11:2e:16:81:84:b0:38:f0: d5:75:18:ed:40:1c:5c:b6:53:98:18:8f:84:d8:12:98:c1:cf: 7f:5f:39:54:2b:52:15:6c:ee:e9:90:53:d2:7f:4f:c5:ae:26: bf:b5:2a:86:d6:52:60:b2:a2:e4:b7:61:3e:89:93:44:f9:62: 01:89:c4:c9:1b:38:f5:41:b8:56:3a:b2:08:ec:43:0c:4f:16: 71:5b:a0:5b:15:e9:bc:e8:c3:8c:c2:3f:b8:89:f3:5a:98:06: 95:08:8d:b3:4e:70:a0:e6:cc:24:8b:29:72:fe:ac:2e:42:d7: 68:af:91:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+lU3+N4N5JQ8nljT1nEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4 OTczYjgwHhcNMjUxMjA2MTAwMTIzWhcNMjUxMjA3MTAwMTIzWjAzMTEwLwYDVQQD EyhlODE2M2IxMTA2NDlkNDBlN2JlNDY3OGI4OGZjYTE0ZDRhMDc1YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jIixF7SZ3QIDqSsrc2NLAHTDL0C U2Dn0QPhojFx3AiUQtVV0Rc6wlTJEkt+lNmrJlHEOom5fgMraP2bxx5j3JUZU9d4 kM6QfzLpCZNQJaOxCPyrGIL9nFQ0N2+zx59eW6AY99sKg9m/egz246onhXF9SnK8 LVITSP42cT+DNN9DgnjjacTY5eWKFyQ5gU8NGlv7DNhmwB5hJvB0SC6LZema+yqp lDgNzLCyiYkb1jOUQMESdbPGINRilUCrsO1HF0sgfwmZTQxl7CMI9t4eTVGmmzrc gWRJpZ2+uShpBGGo4ObCOfq/h5z0PCRfAtiEnJzgvwqw5qS9R1C7NNxd4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgWOxEGSdQOe+Rni4j8oU1KB1o3MB8GA1UdIwQY MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5 LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmiWRecS OCiYQmyQ8NmxBzpybEEBbOkKs/f/pR3XKqciXTxy3iq3xJbFTHksDamJNo/2WA4i P70didtR7goBniTYcAohWwy8BrIfdMDJ58nt/5ifhtiw1MNqerZcL4/JkXwEzkZ4 n3SSgSBV30paaohOHpjjVKMRqG1dIoovENE/FbzJT5yG4REuFoGEsDjw1XUY7UAc XLZTmBiPhNgSmMHPf185VCtSFWzu6ZBT0n9Pxa4mv7UqhtZSYLKi5LdhPomTRPli AYnEyRs49UG4VjqyCOxDDE8WcVugWxXpvOjDjMI/uInzWpgGlQiNs05woObMJIsp cv6sLkLXaK+RFA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:45:49 2025 by rpki-client