This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json) Hash identifier: HaG47bWkofqT8MS1/nepaDfxbZ2ZbK5nsSeJIM85O3o= Subject key identifier: FB:50:8A:2A:15:65:38:0E:89:C5:D0:E3:B3:4D:F3:9B:7F:9A:FF:02 Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea Certificate serial: 019AF19B3D775226BAEF58EC3EF7CA930AB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft Manifest number: 0744 Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=) 2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: PRT8dWQPd/0gRQ9MsA/yTM2eQkPzSduxgoi3jK9loz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3d:77:52:26:ba:ef:58:ec:3e:f7:ca:93:0a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=fb508a2a1565380e89c5d0e3b34df39b7f9aff02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:11:41:46:98:0e:74:e4:bf:eb:ab:09:f0:10: 68:0a:04:60:db:9f:d0:96:84:4a:77:b1:a2:d4:ae: 8d:c7:ba:ce:35:99:3a:cd:e7:07:a7:2e:a6:25:20: 40:17:40:d2:bb:31:f2:1d:9b:f1:a2:b3:27:09:e3: 5a:bf:fc:99:03:32:41:0b:18:f4:bc:3a:32:85:ce: 56:ed:bb:a8:c8:06:52:84:3d:5c:44:d1:20:fa:7f: 07:26:48:46:3e:11:29:10:62:3e:ba:e9:9a:1d:36: 2c:37:9d:2d:81:5c:ce:b2:8b:11:51:af:d6:54:df: 19:5e:ba:bb:29:49:f6:10:ba:84:91:c2:12:ec:cb: 74:db:aa:62:0f:e3:0b:26:82:e8:7b:25:de:ab:f9: ea:41:bc:30:c3:f4:35:8b:7d:b5:9d:f7:54:7a:18: 18:5d:ad:d9:01:95:0b:8f:d4:96:95:08:10:40:44: a2:4e:4c:a3:dc:dd:75:e3:96:dd:22:22:f8:6d:e4: f7:ac:6e:22:fe:04:67:e1:b4:f1:57:b1:90:54:7b: 27:c9:e6:18:0a:3d:98:5e:cb:6a:c3:71:0d:77:0d: 49:a4:21:d8:95:55:18:05:fe:dd:4f:ec:53:a4:08: 3d:8f:c3:bb:5f:81:83:12:b9:1f:d0:33:88:54:c2: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:50:8A:2A:15:65:38:0E:89:C5:D0:E3:B3:4D:F3:9B:7F:9A:FF:02 X509v3 Authority Key Identifier: keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fd:de:6c:77:86:21:9b:6c:fe:ba:fe:b8:27:43:1c:c3:31: 4b:51:87:7a:59:c4:2d:11:9e:73:2e:fe:bf:40:7b:23:0f:0a: b3:0e:91:01:2d:04:d4:df:bd:29:98:76:4c:60:4b:3a:b0:ed: a7:0d:ed:4f:73:8c:c0:36:89:94:2f:50:bb:63:6b:bd:b6:ee: 97:b8:57:f4:f2:19:34:8f:50:8a:a8:ae:77:a5:9a:00:d4:27: fc:0f:d2:25:99:88:30:2d:46:95:b4:2e:cc:d3:de:65:d1:57: e7:4f:61:58:36:12:65:97:5f:09:fe:1f:a4:6b:34:11:32:56: e4:55:99:a5:2e:40:3f:5d:29:c4:87:dd:b4:5b:ba:da:29:c4: 8d:9b:93:9f:93:1b:9f:6e:1b:f4:96:3d:69:ab:86:93:d1:f9: 56:ea:25:fe:5b:4d:88:d8:76:df:b5:72:90:0c:6a:1f:db:5a: 6c:64:d4:c6:ad:c3:ea:80:5f:3d:a2:84:90:40:be:c5:aa:44: ed:7f:11:49:dd:fe:67:c9:69:a6:64:54:f0:7e:fc:32:4c:7b: 4d:b8:00:16:9a:75:9f:90:7e:58:0b:8c:ff:cd:40:4e:64:11: a5:60:a3:d7:d4:a5:47:96:7e:f7:00:98:6c:04:98:a2:a6:08: 86:7f:98:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmz13Uia671jsPvfKkwq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZWFhMTljYTI3YTZmNTdmMmNiYjRlNDYzNzIwYjQzNmFm MTdkZWEwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD EyhmYjUwOGEyYTE1NjUzODBlODljNWQwZTNiMzRkZjM5YjdmOWFmZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RFBRpgOdOS/66sJ8BBoCgRg25/Q loRKd7Gi1K6Nx7rONZk6zecHpy6mJSBAF0DSuzHyHZvxorMnCeNav/yZAzJBCxj0 vDoyhc5W7buoyAZShD1cRNEg+n8HJkhGPhEpEGI+uumaHTYsN50tgVzOsosRUa/W VN8ZXrq7KUn2ELqEkcIS7Mt026piD+MLJoLoeyXeq/nqQbwww/Q1i321nfdUehgY Xa3ZAZULj9SWlQgQQESiTkyj3N1145bdIiL4beT3rG4i/gRn4bTxV7GQVHsnyeYY Cj2YXstqw3ENdw1JpCHYlVUYBf7dT+xTpAg9j8O7X4GDErkf0DOIVMI/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtQiioVZTgOicXQ47NN85t/mv8CMB8GA1UdIwQY MBaAFFPqoZyiem9X8su05GNyC0Nq8X3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAt MjdlOGY0ZjFjNjg0LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAtMjdlOGY0ZjFjNjg0 LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav3ebHeG IZts/rr+uCdDHMMxS1GHelnELRGecy7+v0B7Iw8Ksw6RAS0E1N+9KZh2TGBLOrDt pw3tT3OMwDaJlC9Qu2Nrvbbul7hX9PIZNI9Qiqiud6WaANQn/A/SJZmIMC1GlbQu zNPeZdFX509hWDYSZZdfCf4fpGs0ETJW5FWZpS5AP10pxIfdtFu62inEjZuTn5Mb n24b9JY9aauGk9H5Vuol/ltNiNh237VykAxqH9tabGTUxq3D6oBfPaKEkEC+xapE 7X8RSd3+Z8lppmRU8H78Mkx7TbgAFpp1n5B+WAuM/81ATmQRpWCj19SlR5Z+9wCY bASYoqYIhn+YkA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:26 2025 by rpki-client