This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json) Hash identifier: qAgLjv1zcyoMOsz9da+wa0YUBWrVdfXwhAUGwhyMNGU= Subject key identifier: FA:82:34:F2:6A:B6:31:80:40:32:E7:32:9F:97:CE:AD:1D:B4:09:4F Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100 Certificate serial: 019AF0BF6C513147A97743652E0AA4D302AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft Manifest number: 0622 Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: xAJ6w7gYZz1ZMWezk5iP6vHhAz2ocI+5kBaGC2h4Dt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6c:51:31:47:a9:77:43:65:2e:0a:a4:d3:02:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100 Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=fa8234f26ab631804032e7329f97cead1db4094f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:41:52:9c:06:2f:61:9c:18:c3:f6:b1:61: c7:78:d7:7c:f3:d6:2a:11:b2:30:39:1e:5d:f2:41: 12:e6:ee:39:1b:7f:6e:41:58:ba:ef:43:19:5f:96: 94:bd:97:cd:ca:79:fd:97:97:1b:b1:10:eb:18:24: 2e:71:c0:01:af:59:e7:72:34:70:bd:5e:14:b7:af: bd:3a:13:18:07:b5:d0:4e:b9:6b:2f:6a:12:d8:fa: dd:4f:07:04:3c:7a:a3:8f:34:83:bb:1c:1a:a9:b7: 87:73:ef:fc:8e:d0:e0:6f:e2:1f:7a:c6:9f:1f:59: 8e:0b:a0:a2:28:51:02:78:d4:fd:c7:4a:dd:21:e7: 39:9f:2a:82:a0:e5:33:7c:5a:b1:f5:e4:a3:08:83: 7a:10:a8:7b:af:cc:85:6e:5d:8d:03:db:8d:81:25: 8c:da:6d:42:c5:80:42:74:ff:8e:63:61:e3:c3:5f: ff:f2:2a:44:bb:4b:6f:3d:54:d8:8b:ef:e6:ed:db: 90:c8:d7:19:cd:2d:bc:d6:40:2f:0f:4a:87:60:3d: 2f:90:bd:b9:39:be:04:a5:4b:20:a9:96:18:45:3c: e5:e3:9b:29:22:de:50:5a:7e:6a:0a:17:88:24:87: 3d:54:19:a8:0f:a9:48:bc:13:13:60:d3:41:28:97: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:82:34:F2:6A:B6:31:80:40:32:E7:32:9F:97:CE:AD:1D:B4:09:4F X509v3 Authority Key Identifier: keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:14:9f:c4:e0:24:a9:2a:1f:1f:af:43:3d:79:04:96:55:c2: 97:6d:50:3d:d3:52:7b:fe:71:ab:f1:1f:8d:30:66:ff:ab:11: 05:6a:e1:20:6b:f2:aa:78:15:48:f4:cc:25:e6:a9:0e:9c:42: 84:b3:49:c3:88:24:16:4c:11:e7:73:e5:5b:36:a0:ed:5f:f3: 95:5d:9f:0d:13:c2:3e:31:12:de:b4:ad:49:73:53:39:c7:d2: b5:d2:b1:ab:e3:0c:23:73:5f:f6:0f:1a:2e:02:50:1f:a6:35: 3c:53:58:e0:6d:8e:36:b4:2d:64:6d:10:55:dd:b7:2a:f8:de: 19:2b:91:06:d4:45:e1:ae:fe:d9:83:54:32:e2:46:df:06:34: d1:df:04:1d:ae:fb:cc:ea:39:56:a0:53:9e:2d:a6:9f:0b:8f: 0b:8e:05:cf:63:09:08:cb:ac:56:c9:3a:12:6f:27:2d:38:07: 52:26:6b:63:5f:2e:ac:a0:81:dc:7a:53:76:c4:82:08:8e:7a: dd:14:64:6b:b7:50:2a:03:0a:f3:ce:df:6f:ed:3d:23:bb:61: 52:e6:90:2f:f9:0a:b6:1f:aa:cc:1e:25:21:bd:15:02:5c:b4: 59:97:1b:1d:8c:db:4e:66:87:25:80:b5:0a:36:77:55:f5:a9: c5:9d:c0:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2xRMUepd0NlLgqk0wKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTUwNjA5Y2E4ZGQ3ZjZjNmZhM2NlY2FjNzc5NDIxZWM2 YzAxMDAwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD EyhmYTgyMzRmMjZhYjYzMTgwNDAzMmU3MzI5Zjk3Y2VhZDFkYjQwOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtExBUpwGL2GcGMP2sWHHeNd889Yq EbIwOR5d8kES5u45G39uQVi670MZX5aUvZfNynn9l5cbsRDrGCQuccABr1nncjRw vV4Ut6+9OhMYB7XQTrlrL2oS2PrdTwcEPHqjjzSDuxwaqbeHc+/8jtDgb+Ifesaf H1mOC6CiKFECeNT9x0rdIec5nyqCoOUzfFqx9eSjCIN6EKh7r8yFbl2NA9uNgSWM 2m1CxYBCdP+OY2Hjw1//8ipEu0tvPVTYi+/m7duQyNcZzS281kAvD0qHYD0vkL25 Ob4EpUsgqZYYRTzl45spIt5QWn5qCheIJIc9VBmoD6lIvBMTYNNBKJdvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqCNPJqtjGAQDLnMp+Xzq0dtAlPMB8GA1UdIwQY MBaAFFOVBgnKjdf2xvo87Kx3lCHsbAEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84NzZhNjUtYmY1NC00NjUyLTg5NzAt ODAxY2Y0ZmVjNzRlLzEvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84NzZhNjUtYmY1NC00NjUyLTg5NzAtODAxY2Y0ZmVjNzRl LzEvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhSfxOAk qSofH69DPXkEllXCl21QPdNSe/5xq/EfjTBm/6sRBWrhIGvyqngVSPTMJeapDpxC hLNJw4gkFkwR53PlWzag7V/zlV2fDRPCPjES3rStSXNTOcfStdKxq+MMI3Nf9g8a LgJQH6Y1PFNY4G2ONrQtZG0QVd23KvjeGSuRBtRF4a7+2YNUMuJG3wY00d8EHa77 zOo5VqBTni2mnwuPC44Fz2MJCMusVsk6Em8nLTgHUiZrY18urKCB3HpTdsSCCI56 3RRka7dQKgMK887fb+09I7thUuaQL/kKth+qzB4lIb0VAly0WZcbHYzbTmaHJYC1 CjZ3VfWpxZ3A1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:48:52 2025 by rpki-client