This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json) Hash identifier: lTtPePZg2ZXh4L9lA+23S6RZD5EQDTvJ1hpx9j5oCP0= Subject key identifier: C1:67:8E:BE:F4:47:07:D9:9A:F2:B4:65:13:A6:65:85:94:6D:54:1F Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8 Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8 Certificate serial: 019AF0883B5DF436E2D2A34FE313136DA902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft Manifest number: 65 Signing time: Fri 05 Dec 2025 22:00:51 +0000 Manifest this update: Fri 05 Dec 2025 22:00:51 +0000 Manifest next update: Sat 06 Dec 2025 22:00:51 +0000 Files and hashes: 1: 1-QTEJ1tnj6PYEN8SAYsXC1oCWLM.roa (hash: RZ0FyQhUAPr9frorsTkk/S6+v/m4Q2SNiKtWlYqEBpk=) 2: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: s68xuoWgcAD9MZZlhY8d2VYPJkFmokVaaAYLHv4lggE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:3b:5d:f4:36:e2:d2:a3:4f:e3:13:13:6d:a9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8 Validity Not Before: Dec 5 22:00:51 2025 GMT Not After : Dec 6 22:00:51 2025 GMT Subject: CN=c1678ebef44707d99af2b46513a66585946d541f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:58:57:fe:f3:ca:a2:85:54:02:cb:06:2d: b8:d2:95:93:31:c8:fe:3e:91:33:9c:97:60:c5:62: 8f:af:a3:0f:58:ae:f0:83:38:71:34:97:8f:af:cb: f8:0b:79:c3:36:50:74:f4:41:ba:a8:7b:39:a9:f6: 2b:09:ce:94:cb:20:02:95:ab:c4:07:29:b7:bb:56: 4d:8b:3c:0b:00:4e:77:1d:2d:e8:34:6d:e1:82:87: 47:89:17:fb:b2:e7:e0:fd:3c:f7:64:33:b1:1f:f0: 51:92:9a:d8:f6:7f:74:b0:6a:5f:47:68:ae:be:fb: 06:31:4e:1a:71:f1:41:0b:88:fd:02:ea:84:ec:04: 56:cf:e1:98:58:d2:de:1a:07:dc:01:c8:aa:aa:ed: 0a:41:23:75:65:83:9c:26:e0:04:c8:8e:c2:2a:ef: 8b:66:43:d4:de:eb:9e:f8:61:cf:32:3a:7c:8e:1b: a5:e8:dc:66:3f:0f:e7:39:d0:10:e3:aa:c3:a5:5c: 08:25:9a:d8:43:4f:85:c2:a1:5d:2e:70:78:66:73: 86:06:e3:be:fa:c8:95:04:eb:97:42:6f:a3:b0:fb: a2:a9:21:62:55:1e:a9:58:6b:4c:83:ae:cc:44:c4: 13:56:e6:b9:eb:7d:64:e4:19:09:c5:4d:6c:3e:65: 78:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:67:8E:BE:F4:47:07:D9:9A:F2:B4:65:13:A6:65:85:94:6D:54:1F X509v3 Authority Key Identifier: keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:aa:62:36:73:49:18:3a:19:7c:f3:ee:ee:19:e0:08:e8:33: 18:34:66:a6:17:25:c4:fb:4b:52:c7:d2:3d:4b:01:7a:e4:b0: 2f:58:01:b2:a9:0b:89:33:af:fa:8e:78:d1:6b:0d:86:a2:5e: 7c:da:62:5a:8d:5e:86:2b:a8:a7:20:24:32:db:3d:58:c4:32: b0:3b:43:bd:36:ed:21:e1:b5:5b:ea:05:85:ca:2e:11:16:83: 7c:73:1b:c1:ee:da:b8:1f:0d:69:2c:ad:56:0c:74:06:8e:d1: f9:84:bc:aa:dd:a7:54:1b:b3:12:1c:7d:fa:ff:0e:81:a2:89: 97:ba:c9:b4:10:df:44:07:c1:eb:57:1f:f6:75:35:de:82:4d: 15:c0:fd:40:b7:da:f0:75:8c:51:3d:68:41:12:26:f7:df:0e: a1:4b:f8:a8:e4:c4:83:6d:07:dd:86:7d:76:ad:cf:dd:fc:81: a1:ee:c5:97:e4:3f:b3:eb:f3:1c:db:af:74:c6:24:d6:dc:fe: 40:0f:e7:d2:90:ba:30:7e:47:58:3e:43:db:b7:83:61:f6:b8: 83:57:bd:3e:e1:77:e3:38:1c:97:52:17:91:80:08:d9:fa:91: d1:48:51:c0:81:ae:8b:d4:7a:ca:32:b8:08:dc:c7:50:64:25: 94:fb:74:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDtd9Dbi0qNP4xMTbakCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZmFkN2M5YTQ4NWZlYjI5MTc5M2ViOWUyZGI5OGY0MThl NWM0YjgwHhcNMjUxMjA1MjIwMDUxWhcNMjUxMjA2MjIwMDUxWjAzMTEwLwYDVQQD EyhjMTY3OGViZWY0NDcwN2Q5OWFmMmI0NjUxM2E2NjU4NTk0NmQ1NDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjBYV/7zyqKFVALLBi240pWTMcj+ PpEznJdgxWKPr6MPWK7wgzhxNJePr8v4C3nDNlB09EG6qHs5qfYrCc6UyyAClavE Bym3u1ZNizwLAE53HS3oNG3hgodHiRf7sufg/Tz3ZDOxH/BRkprY9n90sGpfR2iu vvsGMU4acfFBC4j9AuqE7ARWz+GYWNLeGgfcAciqqu0KQSN1ZYOcJuAEyI7CKu+L ZkPU3uue+GHPMjp8jhul6NxmPw/nOdAQ46rDpVwIJZrYQ0+FwqFdLnB4ZnOGBuO+ +siVBOuXQm+jsPuiqSFiVR6pWGtMg67MRMQTVua5631k5BkJxU1sPmV4dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFnjr70RwfZmvK0ZROmZYWUbVQfMB8GA1UdIwQY MBaAFFP618mkhf6ykXk+ueLbmPQY5cS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81MTQwZTgtYzdmYy00OGJmLTk2MGUt MGYwNGM2YTk5NWZkLzEvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi81MTQwZTgtYzdmYy00OGJmLTk2MGUtMGYwNGM2YTk5NWZk LzEvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKpiNnNJ GDoZfPPu7hngCOgzGDRmphclxPtLUsfSPUsBeuSwL1gBsqkLiTOv+o540WsNhqJe fNpiWo1ehiuopyAkMts9WMQysDtDvTbtIeG1W+oFhcouERaDfHMbwe7auB8NaSyt Vgx0Bo7R+YS8qt2nVBuzEhx9+v8OgaKJl7rJtBDfRAfB61cf9nU13oJNFcD9QLfa 8HWMUT1oQRIm998OoUv4qOTEg20H3YZ9dq3P3fyBoe7Fl+Q/s+vzHNuvdMYk1tz+ QA/n0pC6MH5HWD5D27eDYfa4g1e9PuF34zgcl1IXkYAI2fqR0UhRwIGui9R6yjK4 CNzHUGQllPt0Xw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:18 2025 by rpki-client