This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json) Hash identifier: GFexK1j6WcKjSlefGQNQb7jzSKxXnRmPSkYVtqA5Vp8= Subject key identifier: 62:E7:9C:59:A2:62:D5:45:10:48:B6:5B:A4:E9:0E:7D:D3:38:6C:46 Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Certificate serial: 019AF16471CCD64DED88C3F247D9DCA25811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: qSrzwOGJGoAxDnOtXbgmcaRTnmkHAw0HvTVd/dy3tk8=) 2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:71:cc:d6:4d:ed:88:c3:f2:47:d9:dc:a2:58:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=62e79c59a262d5451048b65ba4e90e7dd3386c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:61:4d:af:c7:24:a8:c9:34:c1:fc:89:eb: 22:7f:5c:68:ea:1d:8c:6b:7f:d6:1a:64:bc:b7:54: 58:b8:3e:36:73:07:af:f9:e2:ae:29:91:7e:62:77: 35:74:9c:e1:20:ef:89:27:64:05:a1:45:38:40:d7: f6:a2:69:8e:c8:97:43:9a:bf:c5:30:13:3c:b8:cd: 37:7d:f0:a1:7b:64:e9:08:45:a3:f3:e3:8f:72:b2: 29:5d:81:82:dd:16:30:0f:c7:a5:02:65:0e:ab:6e: 2c:0f:e0:53:7a:bd:c3:75:4c:d9:3e:b4:bd:25:da: 15:3f:7a:6c:7b:e9:0b:43:52:df:ad:4a:df:a9:b5: 1d:77:7e:a4:b0:ac:d7:56:98:b5:7f:74:79:34:a4: c3:05:ef:08:e1:48:19:a8:85:33:19:00:0e:e7:49: bd:ad:87:bf:9a:bc:92:14:36:6e:77:8b:ac:86:4b: 9f:cb:6c:d5:d0:40:51:4c:31:da:c0:9e:e0:8c:7b: 7a:07:66:fa:51:48:65:11:15:73:a4:af:a9:d0:70: 70:26:ab:8d:0c:12:60:6c:71:2e:df:05:c1:08:dd: 56:ea:3a:30:79:17:f0:55:20:91:47:c9:b5:82:4c: 39:19:46:b9:e9:d1:3f:80:40:70:d4:9c:7a:62:ec: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E7:9C:59:A2:62:D5:45:10:48:B6:5B:A4:E9:0E:7D:D3:38:6C:46 X509v3 Authority Key Identifier: keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2b:a2:6f:20:2a:29:c8:c2:87:0f:00:2f:13:16:59:93:c1: bb:57:66:83:75:4a:38:f8:90:8a:08:06:d6:72:10:dc:18:0c: 3a:12:56:d9:fa:dd:aa:48:be:2b:d2:02:00:07:2b:80:18:90: 21:bb:5d:7e:7b:b5:47:08:ee:8c:e9:28:2b:c7:8f:a2:07:b1: 4d:7c:47:c4:d8:a1:10:06:cd:1f:75:06:c5:a7:de:c9:4d:da: 7a:b4:e4:11:6d:a6:7e:c3:29:62:41:02:cb:b4:90:31:2b:56: c7:b7:90:05:a2:3d:46:96:6c:06:11:ef:a7:59:5d:cd:78:f1: 8a:e4:41:d8:6b:5a:16:db:80:f4:a8:27:83:74:eb:c7:a6:a3: 41:53:2c:03:65:06:8d:4d:d0:7b:62:67:26:59:a0:99:f2:43: 24:ad:da:ca:a4:1f:42:3e:fc:a4:78:1b:86:47:e1:04:81:c1: 98:b6:88:22:44:fa:1d:98:1f:60:e0:23:5c:5e:11:72:d8:61: fb:a4:0a:3b:74:47:ca:3f:4a:e0:ae:6c:58:db:0d:4e:07:dd: 04:d9:b0:e4:0d:b9:0a:0c:40:7e:d2:52:15:eb:f9:7d:c0:6f: 66:ab:8b:a2:86:44:f7:0d:b1:1f:59:6d:a3:29:cc:11:0c:38: e7:0e:f3:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHHM1k3tiMPyR9ncolgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl OWMxOWYwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg2MmU3OWM1OWEyNjJkNTQ1MTA0OGI2NWJhNGU5MGU3ZGQzMzg2YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x5hTa/HJKjJNMH8iesif1xo6h2M a3/WGmS8t1RYuD42cwev+eKuKZF+Ync1dJzhIO+JJ2QFoUU4QNf2ommOyJdDmr/F MBM8uM03ffChe2TpCEWj8+OPcrIpXYGC3RYwD8elAmUOq24sD+BTer3DdUzZPrS9 JdoVP3pse+kLQ1LfrUrfqbUdd36ksKzXVpi1f3R5NKTDBe8I4UgZqIUzGQAO50m9 rYe/mrySFDZud4ushkufy2zV0EBRTDHawJ7gjHt6B2b6UUhlERVzpK+p0HBwJquN DBJgbHEu3wXBCN1W6joweRfwVSCRR8m1gkw5GUa56dE/gEBw1Jx6YuzGtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLnnFmiYtVFEEi2W6TpDn3TOGxGMB8GA1UdIwQY MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5 LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSuibyAq KcjChw8ALxMWWZPBu1dmg3VKOPiQiggG1nIQ3BgMOhJW2frdqki+K9ICAAcrgBiQ Ibtdfnu1RwjujOkoK8ePogexTXxHxNihEAbNH3UGxafeyU3aerTkEW2mfsMpYkEC y7SQMStWx7eQBaI9RpZsBhHvp1ldzXjxiuRB2GtaFtuA9Kgng3Trx6ajQVMsA2UG jU3Qe2JnJlmgmfJDJK3ayqQfQj78pHgbhkfhBIHBmLaIIkT6HZgfYOAjXF4Rcthh +6QKO3RHyj9K4K5sWNsNTgfdBNmw5A25CgxAftJSFev5fcBvZquLooZE9w2xH1lt oynMEQw45w7ztA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:15 2025 by rpki-client