This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json) Hash identifier: IQ61Ju7FaTa2hJjdP/KQCBUqhJPX2RL2Y795LFObQcY= Subject key identifier: 0F:F1:20:08:2B:F9:FA:69:A4:03:D5:64:64:D4:B4:91:C4:EA:C9:0F Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c Certificate serial: 019B3D90A14AE98B067630CA461F42DB9C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 21:00:47 +0000 Manifest this update: Sat 20 Dec 2025 21:00:47 +0000 Manifest next update: Sun 21 Dec 2025 21:00:47 +0000 Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=) 2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: B1o/yKkxYbBfR3s2frYwoGAcxjhdC1J+1G2rm+SLJ1o=) 3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=) 4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a1:4a:e9:8b:06:76:30:ca:46:1f:42:db:9c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c Validity Not Before: Dec 20 21:00:47 2025 GMT Not After : Dec 21 21:00:47 2025 GMT Subject: CN=0ff120082bf9fa69a403d56464d4b491c4eac90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d5:08:2b:d3:f9:a4:b8:20:70:f4:ea:2c:04: 4c:2d:47:8a:ba:06:79:1e:b3:40:9a:fa:bc:e5:8a: 6c:e3:93:4b:7e:37:2f:65:69:2a:b2:00:81:38:06: eb:9b:a2:06:30:99:00:78:97:aa:6c:ab:22:44:a3: ab:8f:37:b0:c6:6a:83:46:58:c4:aa:42:12:fa:f6: e6:64:4f:08:87:93:18:34:c8:7b:a2:5b:9f:4c:79: fd:30:ee:dc:a3:6f:1d:c9:0d:9c:b8:ed:ff:1a:d8: d6:fc:b6:77:d9:91:bc:17:4d:b7:a8:b9:47:b4:3e: 34:a9:36:c6:8e:8c:ac:51:8e:5c:8f:3d:46:57:bb: 5f:53:4e:1e:66:1e:a7:eb:14:78:6a:df:6f:dc:8e: 16:b9:22:e3:b7:0b:88:67:42:f2:4f:09:c4:f9:20: b7:e2:a1:d2:78:66:87:6e:0b:9b:cf:e4:44:16:5e: f8:48:ca:20:31:49:b4:bc:b6:1b:b3:04:d8:23:70: b7:8c:32:b1:74:17:cf:4a:1a:d0:ac:3e:71:c5:60: 50:ab:8b:03:dd:73:7a:55:33:1b:57:cf:d4:92:2a: 4a:de:1e:8b:7c:4b:a4:dc:55:25:70:62:e6:21:ff: 27:63:f8:0e:cb:5d:50:c5:e8:48:57:0b:5e:79:64: 46:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F1:20:08:2B:F9:FA:69:A4:03:D5:64:64:D4:B4:91:C4:EA:C9:0F X509v3 Authority Key Identifier: keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:36:f6:e2:e5:45:b7:95:f2:ed:9f:8d:3a:3f:e7:9e:18:92: 61:60:4d:9d:45:bf:58:6d:a3:62:da:dd:ea:fe:80:95:7c:e8: c9:83:24:86:0b:1f:01:b6:87:81:d6:6f:70:32:6a:01:2b:83: cf:a6:bd:c0:88:6a:2b:0c:18:72:42:20:bc:61:02:9f:b3:d9: 60:c5:ea:0e:55:cb:23:7e:66:28:06:cb:1f:61:26:f5:f1:71: d3:70:2a:52:f5:38:4e:9b:ca:e4:74:d9:f6:e8:28:65:da:2c: 93:c8:21:80:0e:f8:ba:5e:45:80:a8:64:a3:70:24:44:b4:f9: 9e:99:c4:75:28:4a:93:ed:1e:4f:af:d0:45:16:19:b6:3f:df: dc:80:35:7d:9a:d8:cd:c8:43:ac:c3:a3:7e:73:90:32:f8:24: f7:2e:97:e0:63:ee:fd:f5:4a:b6:57:75:62:b8:a7:47:05:f9: 24:2c:80:75:4c:36:b4:45:c3:35:8f:61:7c:12:91:fd:8b:de: a0:bf:fe:cb:9b:a4:e0:8f:8d:d9:61:d4:d0:86:48:b8:8d:ab: 9b:04:f9:01:28:ba:91:65:dc:2d:e4:bb:e0:16:a8:e1:12:a9: f5:46:17:21:ba:b6:24:68:af:00:97:0f:97:83:a5:b0:84:3c: 0e:de:ae:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKFK6YsGdjDKRh9C25xhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3 OTkwNWMwHhcNMjUxMjIwMjEwMDQ3WhcNMjUxMjIxMjEwMDQ3WjAzMTEwLwYDVQQD EygwZmYxMjAwODJiZjlmYTY5YTQwM2Q1NjQ2NGQ0YjQ5MWM0ZWFjOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9UIK9P5pLggcPTqLARMLUeKugZ5 HrNAmvq85Yps45NLfjcvZWkqsgCBOAbrm6IGMJkAeJeqbKsiRKOrjzewxmqDRljE qkIS+vbmZE8Ih5MYNMh7olufTHn9MO7co28dyQ2cuO3/GtjW/LZ32ZG8F023qLlH tD40qTbGjoysUY5cjz1GV7tfU04eZh6n6xR4at9v3I4WuSLjtwuIZ0LyTwnE+SC3 4qHSeGaHbgubz+REFl74SMogMUm0vLYbswTYI3C3jDKxdBfPShrQrD5xxWBQq4sD 3XN6VTMbV8/UkipK3h6LfEuk3FUlcGLmIf8nY/gOy11QxehIVwteeWRGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/xIAgr+fpppAPVZGTUtJHE6skPMB8GA1UdIwQY MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt ZTIxYzQzNmI2MmVmLzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDb24uVF t5Xy7Z+NOj/nnhiSYWBNnUW/WG2jYtrd6v6AlXzoyYMkhgsfAbaHgdZvcDJqASuD z6a9wIhqKwwYckIgvGECn7PZYMXqDlXLI35mKAbLH2Em9fFx03AqUvU4TpvK5HTZ 9ugoZdosk8ghgA74ul5FgKhko3AkRLT5npnEdShKk+0eT6/QRRYZtj/f3IA1fZrY zchDrMOjfnOQMvgk9y6X4GPu/fVKtld1YrinRwX5JCyAdUw2tEXDNY9hfBKR/Yve oL/+y5uk4I+N2WHU0IZIuI2rmwT5ASi6kWXcLeS74Bao4RKp9UYXIbq2JGivAJcP l4OlsIQ8Dt6uxw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:57 2025 by rpki-client