This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json) Hash identifier: FrI6KVueDjga9PfZ/3Gz+aNlTyGtRxNC2aye2lXYPbQ= Subject key identifier: B4:4E:CF:67:2B:A7:74:30:CF:05:2E:12:5C:17:30:F4:75:C2:99:10 Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Certificate serial: 019AF50A1B7CA43A7649F49CA9D8B5551B38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft Manifest number: 0E20 Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:11 +0000 Manifest next update: Sun 07 Dec 2025 19:01:11 +0000 Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=) 2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=) 3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: X1SmapFxG5OYVCVTBrEm/LuS2xFDlXL0gYLol/EtYTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1b:7c:a4:3a:76:49:f4:9c:a9:d8:b5:55:1b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Validity Not Before: Dec 6 19:01:11 2025 GMT Not After : Dec 7 19:01:11 2025 GMT Subject: CN=b44ecf672ba77430cf052e125c1730f475c29910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:0e:b7:9c:18:22:83:47:8a:e6:3d:4f:34: 6c:b5:90:63:7c:4e:3b:ba:2b:01:20:ad:2f:3c:6a: 32:88:82:d6:3c:b5:9e:9b:1f:bf:ff:d0:cb:15:76: e6:56:a6:38:ad:aa:7d:ae:fc:a0:e1:8b:13:c0:1d: fc:f7:ef:6d:9e:47:bd:59:3f:e5:7f:7e:0c:ce:5d: 07:da:a8:0d:4d:e6:12:8b:75:cc:e5:db:f8:4f:b7: 76:4b:98:89:2f:04:31:5d:22:c2:5e:4f:8e:f2:3a: d1:a0:7e:75:9e:bc:e6:a5:a3:e5:84:ab:66:bb:9d: a7:8d:fc:16:43:4e:f3:9b:1b:60:71:e7:42:b8:e8: c5:bb:50:b2:f8:ec:e6:25:ef:b1:68:73:71:be:28: fe:4e:b2:24:a8:e9:25:e7:4c:1a:41:4f:b3:b1:7c: 88:aa:e3:87:93:4b:b1:e2:7d:aa:6e:b2:dc:17:ad: 81:e2:38:23:f4:6b:31:35:4d:d2:e0:1c:dc:aa:a5: d8:f4:95:e2:90:60:0d:8c:1b:25:5b:16:68:aa:85: 30:80:c2:a0:a2:a0:d5:6e:61:46:2e:65:97:d8:14: c4:39:b0:0b:7a:28:eb:48:a8:12:06:8b:66:ec:82: 04:44:9c:41:ab:bc:93:5f:df:90:28:7d:2b:1c:f2: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:CF:67:2B:A7:74:30:CF:05:2E:12:5C:17:30:F4:75:C2:99:10 X509v3 Authority Key Identifier: keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4b:ab:59:f5:e7:03:bf:88:cf:f0:fe:31:53:d5:d7:84:67: 5b:7c:ea:70:7f:ec:5e:22:ff:9e:e2:24:a5:97:80:ec:60:54: 3a:49:8f:86:da:23:23:9e:24:c7:61:0d:81:0c:cc:de:11:43: b4:c0:1b:6b:ba:08:e0:ab:85:3b:19:c8:2f:97:cc:39:94:a3: 5d:e9:cb:6b:9f:88:93:0b:2c:fc:bf:2c:c9:58:e2:1b:40:6d: 0e:91:a1:43:9e:a0:18:13:5c:77:7f:ad:13:d4:d6:0e:68:d3: f8:88:9c:ff:27:3a:9c:59:2b:35:90:03:cd:ba:ce:68:70:2b: 66:a9:37:37:78:a0:27:ac:d2:82:34:ca:51:d6:f3:37:53:d2: bb:e1:33:f5:d2:3a:b0:47:86:9e:38:ca:93:d3:80:e2:97:96: 01:99:48:02:4e:6c:63:5c:33:63:51:4c:3f:f3:54:f9:bd:05: ca:2b:e7:74:30:33:88:f7:c0:1a:0f:71:49:2e:16:d0:b5:bc: 00:7b:45:a3:a0:05:b7:52:1e:14:d7:aa:ac:1c:ae:7c:92:f6: a8:50:60:d9:97:b1:3e:8b:13:ba:4c:03:47:c0:66:0d:fd:ff: c2:ae:82:14:21:ea:2a:a6:84:4e:60:1d:28:a0:b2:1c:b2:82: 0c:18:0c:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cht8pDp2SfScqdi1VRs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5 MzczOTQwHhcNMjUxMjA2MTkwMTExWhcNMjUxMjA3MTkwMTExWjAzMTEwLwYDVQQD EyhiNDRlY2Y2NzJiYTc3NDMwY2YwNTJlMTI1YzE3MzBmNDc1YzI5OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzsOt5wYIoNHiuY9TzRstZBjfE47 uisBIK0vPGoyiILWPLWemx+//9DLFXbmVqY4rap9rvyg4YsTwB389+9tnke9WT/l f34Mzl0H2qgNTeYSi3XM5dv4T7d2S5iJLwQxXSLCXk+O8jrRoH51nrzmpaPlhKtm u52njfwWQ07zmxtgcedCuOjFu1Cy+OzmJe+xaHNxvij+TrIkqOkl50waQU+zsXyI quOHk0ux4n2qbrLcF62B4jgj9GsxNU3S4BzcqqXY9JXikGANjBslWxZoqoUwgMKg oqDVbmFGLmWX2BTEObALeijrSKgSBotm7IIERJxBq7yTX9+QKH0rHPKKswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLROz2crp3QwzwUuElwXMPR1wpkQMB8GA1UdIwQY MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUurWfXn A7+Iz/D+MVPV14RnW3zqcH/sXiL/nuIkpZeA7GBUOkmPhtojI54kx2ENgQzM3hFD tMAba7oI4KuFOxnIL5fMOZSjXenLa5+Ikwss/L8syVjiG0BtDpGhQ56gGBNcd3+t E9TWDmjT+Iic/yc6nFkrNZADzbrOaHArZqk3N3igJ6zSgjTKUdbzN1PSu+Ez9dI6 sEeGnjjKk9OA4peWAZlIAk5sY1wzY1FMP/NU+b0FyivndDAziPfAGg9xSS4W0LW8 AHtFo6AFt1IeFNeqrByufJL2qFBg2ZexPosTukwDR8BmDf3/wq6CFCHqKqaETmAd KKCyHLKCDBgMMQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:20 2025 by rpki-client