This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json) Hash identifier: XM7vfLKkcrcbPdU2HibTV2TiGtn+f5qcu0ZtQPBbeus= Subject key identifier: F6:FC:CD:E3:E4:7E:BC:77:67:EB:D5:DE:C3:66:81:F7:12:F4:03:D8 Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0 Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0 Certificate serial: 019AF5AE66E78B4E684C371B8F291CD7AB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft Manifest number: 13F6 Signing time: Sat 06 Dec 2025 22:00:38 +0000 Manifest this update: Sat 06 Dec 2025 22:00:38 +0000 Manifest next update: Sun 07 Dec 2025 22:00:38 +0000 Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=) 2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: AGEabyvhrGSB4PaR9nB3U9B1quYi6pEbOmaDJU8EQBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:66:e7:8b:4e:68:4c:37:1b:8f:29:1c:d7:ab:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0 Validity Not Before: Dec 6 22:00:38 2025 GMT Not After : Dec 7 22:00:38 2025 GMT Subject: CN=f6fccde3e47ebc7767ebd5dec36681f712f403d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:d8:13:c7:91:f3:23:02:e2:72:03:92:d1: 4f:9d:06:b1:9c:65:74:d2:f1:b5:dc:e3:ee:a0:f4: e4:31:2c:ad:98:5b:d7:34:de:1d:54:2b:71:dd:8a: 00:c3:b3:0d:f8:fb:2e:4d:c2:2c:22:5c:44:e7:b0: 9d:c0:c6:a9:78:a1:87:77:c0:7d:99:f9:8a:28:7b: be:2e:43:3b:cf:c1:0d:b1:fa:de:e0:0b:fc:89:fd: d9:3d:95:06:0d:15:a5:4e:f7:7e:11:6e:c9:42:46: 10:02:6a:c8:60:b3:37:a8:89:71:e7:72:e4:9b:98: a2:43:80:6c:e6:de:11:c5:bd:a8:c6:80:c9:b6:46: 60:0f:4a:bf:53:69:15:09:4b:85:42:bd:55:81:e8: c4:ab:ee:84:c7:19:6d:ec:77:79:b8:9f:47:75:c6: 60:b8:e0:e8:09:6a:05:e0:66:ac:87:bf:ab:60:3d: 5f:c6:cd:f2:d1:c8:65:e0:c2:5c:86:7e:f4:83:f3: 94:ea:2a:e6:79:53:83:0b:71:ff:2a:f5:4d:84:68: 07:a0:bd:b3:3d:27:2a:e4:4a:e1:29:90:6a:33:3d: dc:0d:de:9d:68:2c:b2:a2:26:fd:3b:6e:eb:7f:85: 22:bd:75:18:2b:c1:9d:b1:c8:d5:74:6f:20:d6:7b: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FC:CD:E3:E4:7E:BC:77:67:EB:D5:DE:C3:66:81:F7:12:F4:03:D8 X509v3 Authority Key Identifier: keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:20:b6:95:ce:2f:0f:85:ac:39:66:4e:85:ab:97:6d:83:f4: b5:e2:7b:a1:d8:0b:9e:69:f1:ef:92:97:dd:84:cd:5d:38:7d: 95:02:7e:03:fa:a8:bd:e6:15:58:0e:dc:c4:5b:14:aa:a5:b7: 1b:62:cf:14:40:93:1a:86:42:a8:e5:b9:88:69:f5:3e:e3:18: 11:91:28:d1:a2:02:81:4b:4e:a3:7d:57:80:81:92:e1:a8:7d: 4f:20:cc:28:6d:f3:89:60:ef:01:d9:35:88:b8:aa:f5:ab:9e: b9:a9:ca:b1:b9:09:27:3e:a6:92:95:08:ce:6b:ca:f1:1f:d3: 6a:c3:b1:f9:9e:23:b2:31:5b:3b:d5:4a:7c:6b:4b:50:8a:f7: 4b:ab:ed:2e:52:49:73:01:f5:e4:51:61:f3:72:18:58:ab:ce: 06:f3:60:e6:8a:01:4a:0c:ab:8b:71:da:43:40:b1:76:8f:64: 58:f4:b0:23:24:54:5e:bf:d4:77:e7:f3:92:9b:d6:7e:18:07: c8:a5:52:65:6a:95:ce:73:36:10:a0:36:ac:6b:28:15:3b:74: 74:78:c3:9c:d8:30:95:b3:6e:49:ce:99:fa:8f:50:6f:f7:f1: d3:65:81:7a:d6:32:2c:f0:c4:52:44:fa:71:e2:ca:36:d9:ea: 58:9b:cf:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmbni05oTDcbjykc16s+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODU1YzhlY2U5YmQ2ZjhlMzk0MDIwMjIxMmNlMDliMDVm NWY4YTAwHhcNMjUxMjA2MjIwMDM4WhcNMjUxMjA3MjIwMDM4WjAzMTEwLwYDVQQD EyhmNmZjY2RlM2U0N2ViYzc3NjdlYmQ1ZGVjMzY2ODFmNzEyZjQwM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPLYE8eR8yMC4nIDktFPnQaxnGV0 0vG13OPuoPTkMSytmFvXNN4dVCtx3YoAw7MN+PsuTcIsIlxE57CdwMapeKGHd8B9 mfmKKHu+LkM7z8ENsfre4Av8if3ZPZUGDRWlTvd+EW7JQkYQAmrIYLM3qIlx53Lk m5iiQ4Bs5t4Rxb2oxoDJtkZgD0q/U2kVCUuFQr1VgejEq+6Exxlt7Hd5uJ9HdcZg uODoCWoF4Gash7+rYD1fxs3y0chl4MJchn70g/OU6irmeVODC3H/KvVNhGgHoL2z PScq5ErhKZBqMz3cDd6daCyyoib9O27rf4UivXUYK8GdscjVdG8g1ntogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb8zePkfrx3Z+vV3sNmgfcS9APYMB8GA1UdIwQY MBaAFFOFXI7Om9b445QCAiEs4JsF9figMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWIt MWNlZmQxZmExMGE2LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWItMWNlZmQxZmExMGE2 LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSC2lc4v D4WsOWZOhauXbYP0teJ7odgLnmnx75KX3YTNXTh9lQJ+A/qoveYVWA7cxFsUqqW3 G2LPFECTGoZCqOW5iGn1PuMYEZEo0aICgUtOo31XgIGS4ah9TyDMKG3ziWDvAdk1 iLiq9aueuanKsbkJJz6mkpUIzmvK8R/TasOx+Z4jsjFbO9VKfGtLUIr3S6vtLlJJ cwH15FFh83IYWKvOBvNg5ooBSgyri3HaQ0Cxdo9kWPSwIyRUXr/Ud+fzkpvWfhgH yKVSZWqVznM2EKA2rGsoFTt0dHjDnNgwlbNuSc6Z+o9Qb/fx02WBetYyLPDEUkT6 ceLKNtnqWJvPng== -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:22 2025 by rpki-client