This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json) Hash identifier: aF7WZzS/G0ORtZtiF1ej2fVzXmldhyfs/io+UbWh5WE= Subject key identifier: C6:10:6C:22:C4:3A:E6:5E:2D:43:3E:BF:BE:A0:00:D3:89:AB:31:3B Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669 Certificate serial: 019B3D90FD2C6CB60F3290AC6595EAFF46B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 21:01:10 +0000 Manifest this update: Sat 20 Dec 2025 21:01:10 +0000 Manifest next update: Sun 21 Dec 2025 21:01:10 +0000 Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=) 2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: QZNxwy9eTKbIncbQz8vDRR6FD9h5ugpKLrUd8wINX5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:fd:2c:6c:b6:0f:32:90:ac:65:95:ea:ff:46:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53529924b233ac563c08e0c313e29213fd969669 Validity Not Before: Dec 20 21:01:10 2025 GMT Not After : Dec 21 21:01:10 2025 GMT Subject: CN=c6106c22c43ae65e2d433ebfbea000d389ab313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:cb:49:bd:d4:d0:16:67:4b:fd:b9:9c:f5: 0d:91:78:f2:ff:86:bf:dc:a3:35:2e:c4:85:91:38: 77:43:b7:19:4d:fa:c4:15:16:5f:47:17:2f:d4:ac: a2:4a:d2:f2:d8:c2:87:62:f2:f4:51:3f:a9:af:1f: 17:fe:3e:d7:96:51:6d:2f:cd:bd:b6:09:43:b0:07: 1b:58:ac:20:5e:04:94:58:cf:a5:9e:c9:3b:6a:d0: 22:e4:5f:4e:ae:27:8f:a8:19:db:61:b6:a8:b2:50: 07:df:d2:10:6b:52:2f:db:6b:f5:f8:8c:72:73:ae: 74:87:11:33:70:55:72:22:88:c4:df:cd:71:70:1c: 23:27:63:88:9d:4e:8d:e8:c1:37:2f:0d:f8:42:08: 57:9c:80:3c:f6:80:16:a9:84:10:77:cc:e7:e2:7f: 81:f4:d4:78:50:78:f9:b6:04:5c:39:8d:fa:78:51: d0:5a:e7:70:eb:66:27:bc:e0:46:c4:2d:ea:38:3f: 7c:85:27:ff:62:6b:eb:a1:e3:d8:3b:3a:24:91:97: f8:13:e8:83:a7:66:e9:b7:1b:83:6d:b8:9a:a7:ed: 83:bc:b3:1c:b8:0e:13:34:41:30:10:e5:aa:40:44: cf:c1:b0:8f:76:e3:d6:b8:1d:a4:82:a0:70:d6:da: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:10:6C:22:C4:3A:E6:5E:2D:43:3E:BF:BE:A0:00:D3:89:AB:31:3B X509v3 Authority Key Identifier: keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b2:7d:46:e6:87:be:7a:1d:98:14:48:c4:d6:27:3c:e4:ed: 82:23:91:fe:5f:21:b2:ca:15:e0:d0:4d:4a:55:12:0f:81:00: 2f:d1:56:0e:78:8a:e6:91:34:19:5b:b8:79:15:10:fd:07:3f: 81:08:1c:ea:e9:31:48:8c:64:8a:50:4d:6b:e8:3e:f9:61:f0: 87:7a:58:c6:ea:65:f5:87:04:46:8d:80:dd:0d:93:e0:40:9f: 3d:df:d9:8e:4c:20:b3:43:75:8e:cf:e7:1c:87:7e:16:f5:39: 03:20:ec:2c:47:2b:fe:26:a8:ae:4d:3d:16:cc:68:7d:1b:69: 60:ed:69:01:b4:df:f2:37:0e:f6:19:f6:1b:a5:cf:7f:94:45: 97:bb:65:aa:59:45:54:ff:e3:1b:58:34:d1:91:26:61:db:4d: 77:f2:b0:75:e7:37:56:a6:e0:e3:6a:30:54:c5:7a:bc:59:20: eb:bd:b2:27:dd:f1:9f:e2:63:4b:bc:e2:34:7a:02:69:e9:c0: f0:b7:92:a2:c8:0d:de:8a:18:85:b4:7d:5d:41:e2:92:d1:62: 5e:e8:a6:71:68:6c:56:df:62:65:db:01:58:73:d0:96:33:5f: 32:ef:aa:4d:08:a9:14:e9:36:55:37:80:aa:89:8e:98:3b:f1: ea:2c:93:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kP0sbLYPMpCsZZXq/0awMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5 Njk2NjkwHhcNMjUxMjIwMjEwMTEwWhcNMjUxMjIxMjEwMTEwWjAzMTEwLwYDVQQD EyhjNjEwNmMyMmM0M2FlNjVlMmQ0MzNlYmZiZWEwMDBkMzg5YWIzMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyurLSb3U0BZnS/25nPUNkXjy/4a/ 3KM1LsSFkTh3Q7cZTfrEFRZfRxcv1KyiStLy2MKHYvL0UT+prx8X/j7XllFtL829 tglDsAcbWKwgXgSUWM+lnsk7atAi5F9OriePqBnbYbaoslAH39IQa1Iv22v1+Ixy c650hxEzcFVyIojE381xcBwjJ2OInU6N6ME3Lw34QghXnIA89oAWqYQQd8zn4n+B 9NR4UHj5tgRcOY36eFHQWudw62YnvOBGxC3qOD98hSf/YmvroePYOzokkZf4E+iD p2bptxuDbbiap+2DvLMcuA4TNEEwEOWqQETPwbCPduPWuB2kgqBw1trNZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYQbCLEOuZeLUM+v76gANOJqzE7MB8GA1UdIwQY MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt OTQ0MTU2OTBkZGZkLzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrJ9RuaH vnodmBRIxNYnPOTtgiOR/l8hssoV4NBNSlUSD4EAL9FWDniK5pE0GVu4eRUQ/Qc/ gQgc6ukxSIxkilBNa+g++WHwh3pYxupl9YcERo2A3Q2T4ECfPd/Zjkwgs0N1js/n HId+FvU5AyDsLEcr/iaork09FsxofRtpYO1pAbTf8jcO9hn2G6XPf5RFl7tlqllF VP/jG1g00ZEmYdtNd/Kwdec3Vqbg42owVMV6vFkg672yJ93xn+JjS7ziNHoCaenA 8LeSosgN3ooYhbR9XUHiktFiXuimcWhsVt9iZdsBWHPQljNfMu+qTQipFOk2VTeA qomOmDvx6iyTOg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:07:25 2025 by rpki-client