This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json) Hash identifier: 1l4wkPZMrl0OTtbueBflm6wQJRwDbqV54W4j+Wk84WE= Subject key identifier: F0:E2:28:A6:C9:53:DA:F7:CC:A4:3F:68:87:C0:8F:B6:31:8B:B7:03 Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c Certificate serial: 019B50E0B4FBF246476AD68914726980649F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft Manifest number: 1799 Signing time: Wed 24 Dec 2025 15:01:02 +0000 Manifest this update: Wed 24 Dec 2025 15:01:02 +0000 Manifest next update: Thu 25 Dec 2025 15:01:02 +0000 Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=) 2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: qlMCQgSdmXNN0dtC43yRzfkvS/vV66d7Stx0S6WWfYY=) 3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=) 4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:b4:fb:f2:46:47:6a:d6:89:14:72:69:80:64:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c Validity Not Before: Dec 24 15:01:02 2025 GMT Not After : Dec 25 15:01:02 2025 GMT Subject: CN=f0e228a6c953daf7cca43f6887c08fb6318bb703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:c0:3b:f2:8c:68:fc:28:b1:c3:14:18:27: fe:d1:9a:f7:ab:f6:c4:e0:3f:8d:fb:49:e4:59:cb: 27:f4:58:6a:10:d6:16:7d:98:23:7d:88:e9:e8:33: 5c:a1:cd:b8:e5:44:1d:83:8a:eb:e1:29:b9:5a:d4: c3:2b:1b:e8:0d:8a:1d:d1:63:87:f3:f6:a1:b6:97: 33:22:6b:1e:7c:65:82:0b:24:99:be:a7:a4:27:0d: 68:7c:16:03:51:99:02:c9:9c:6a:f3:f7:b8:8f:5d: 0b:39:44:24:21:84:28:ec:e5:5c:6c:9b:21:82:fd: b2:ad:39:e7:8a:f2:6b:68:ad:f0:0c:eb:5c:9a:98: 07:9a:05:43:5c:85:3a:5f:59:6e:b0:85:7e:f4:8b: 56:bc:87:82:1e:a2:ad:8f:c5:4b:5d:c0:4c:a6:56: b0:1f:a9:a1:d0:7b:0c:2b:79:f3:5e:de:40:8c:ed: 75:c2:81:0d:7e:b5:e3:1f:f0:34:b0:9d:f6:0a:38: 88:9f:83:a9:5c:a0:79:07:a5:95:51:6d:3f:66:8b: 72:b4:28:c6:95:57:b4:4b:25:4f:eb:63:cd:bb:0e: 50:aa:23:23:37:cd:5d:c7:6b:c5:fb:b5:6b:55:d3: e3:04:94:a7:5c:e3:99:be:01:5b:02:92:7d:91:81: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:28:A6:C9:53:DA:F7:CC:A4:3F:68:87:C0:8F:B6:31:8B:B7:03 X509v3 Authority Key Identifier: keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:76:15:ad:4a:45:d0:7d:5e:29:bf:b3:bf:ed:3d:4f:b9:82: 14:76:eb:51:88:11:35:9f:f8:9f:a1:3e:a5:b1:70:d8:83:f1: 16:db:5b:2f:24:a2:b8:25:0b:b2:d6:31:66:0c:d8:1e:eb:28: f8:98:a2:d6:5e:4b:66:4c:4b:df:07:14:67:40:b6:01:41:ac: 87:b5:30:04:0b:b9:14:73:4d:fb:52:b5:da:30:0e:d6:20:0d: 18:b2:d0:3c:fb:85:aa:22:c0:22:82:d9:32:86:b1:ef:09:e6: 61:fb:c0:eb:1b:19:1a:32:0c:93:f7:54:88:f4:f3:b1:a4:ce: bf:4c:5a:2e:32:d4:42:34:3d:61:7d:1b:5a:75:8c:37:07:56: bd:0e:5d:8a:54:28:c8:1e:03:a0:bc:10:45:18:e2:b8:c6:1d: 08:f4:c9:fd:14:27:ed:48:29:c5:85:e9:3d:41:16:24:92:d7: 2e:12:9c:2d:d1:ae:6a:b7:0a:5e:af:6e:ff:32:bd:63:d9:87: 42:3e:b0:ac:a3:e6:ec:82:93:26:0a:71:bc:a0:9b:98:25:f1: 69:89:a4:54:f5:04:4a:62:b6:e8:3d:91:16:4d:57:1a:3d:92: 13:05:2c:46:9e:57:5f:66:42:b7:37:d8:9d:25:1c:20:10:f1: 78:11:f1:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4LT78kZHataJFHJpgGSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3 OTkwNWMwHhcNMjUxMjI0MTUwMTAyWhcNMjUxMjI1MTUwMTAyWjAzMTEwLwYDVQQD EyhmMGUyMjhhNmM5NTNkYWY3Y2NhNDNmNjg4N2MwOGZiNjMxOGJiNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfAO/KMaPwoscMUGCf+0Zr3q/bE 4D+N+0nkWcsn9FhqENYWfZgjfYjp6DNcoc245UQdg4rr4Sm5WtTDKxvoDYod0WOH 8/ahtpczImsefGWCCySZvqekJw1ofBYDUZkCyZxq8/e4j10LOUQkIYQo7OVcbJsh gv2yrTnnivJraK3wDOtcmpgHmgVDXIU6X1lusIV+9ItWvIeCHqKtj8VLXcBMplaw H6mh0HsMK3nzXt5AjO11woENfrXjH/A0sJ32CjiIn4OpXKB5B6WVUW0/ZotytCjG lVe0SyVP62PNuw5QqiMjN81dx2vF+7VrVdPjBJSnXOOZvgFbApJ9kYFoLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDiKKbJU9r3zKQ/aIfAj7Yxi7cDMB8GA1UdIwQY MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt ZTIxYzQzNmI2MmVmLzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnYVrUpF 0H1eKb+zv+09T7mCFHbrUYgRNZ/4n6E+pbFw2IPxFttbLySiuCULstYxZgzYHuso +Jii1l5LZkxL3wcUZ0C2AUGsh7UwBAu5FHNN+1K12jAO1iANGLLQPPuFqiLAIoLZ Moax7wnmYfvA6xsZGjIMk/dUiPTzsaTOv0xaLjLUQjQ9YX0bWnWMNwdWvQ5dilQo yB4DoLwQRRjiuMYdCPTJ/RQn7UgpxYXpPUEWJJLXLhKcLdGuarcKXq9u/zK9Y9mH Qj6wrKPm7IKTJgpxvKCbmCXxaYmkVPUESmK26D2RFk1XGj2SEwUsRp5XX2ZCtzfY nSUcIBDxeBHxXg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:38:40 2025 by rpki-client