This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json) Hash identifier: DzuzgPkwxj1gCF+9qiJtLIKbDiHpr66N0tHg5Lrga5w= Subject key identifier: 14:86:59:25:93:5E:3D:F1:1F:16:38:30:B8:60:7A:43:9B:30:14:22 Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Certificate serial: 019B4248F076DD8BDF7C834BFC37228E218D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 19:00:34 +0000 Manifest this update: Sun 21 Dec 2025 19:00:34 +0000 Manifest next update: Mon 22 Dec 2025 19:00:34 +0000 Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=) 2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=) 3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: 1wKvX8qwGy6nhEpY6hDfVXJ6FUVqAdDjh126ruxE3cU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:48:f0:76:dd:8b:df:7c:83:4b:fc:37:22:8e:21:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Validity Not Before: Dec 21 19:00:34 2025 GMT Not After : Dec 22 19:00:34 2025 GMT Subject: CN=14865925935e3df11f163830b8607a439b301422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7c:93:6c:2e:22:da:0b:a3:31:f1:a9:c4:db: e3:5d:ae:3c:8b:36:4d:22:cb:5d:47:41:b0:a8:dd: 83:dc:58:86:0d:50:c8:8e:44:43:87:f0:0b:ca:aa: 9d:4f:ca:61:fd:f8:77:88:25:15:f9:fd:ef:47:a4: cb:70:a7:3e:d8:df:70:85:84:86:1b:69:07:07:79: 19:16:dc:57:1b:98:1c:69:5c:48:55:4f:79:15:5b: 07:32:40:42:3b:4f:ef:87:cd:e7:05:3c:46:9a:22: 8b:b5:af:53:68:91:dd:e6:5c:a9:f5:c3:4c:db:78: 73:6d:40:72:39:1d:37:d0:8b:1c:81:bf:e0:77:9c: 30:54:a6:62:91:10:82:11:88:84:b0:c3:f1:b4:99: d9:39:fc:c5:9c:99:a3:15:d2:1f:f2:0f:ff:cf:d8: 41:77:6f:e3:03:9f:0f:35:d1:6a:97:4d:f6:49:dc: ad:d1:0a:3c:15:ae:06:e0:2f:14:91:a3:b4:03:a3: bd:f7:09:13:ba:92:2b:bf:cf:fe:04:19:ef:87:56: e8:ae:f1:64:9a:08:7e:c7:94:7e:13:6b:35:0a:33: 51:c4:7e:10:3a:ca:ad:81:63:f2:f9:99:61:70:f0: 5b:1f:10:eb:4e:ac:87:5c:47:43:6b:67:97:31:a3: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:86:59:25:93:5E:3D:F1:1F:16:38:30:B8:60:7A:43:9B:30:14:22 X509v3 Authority Key Identifier: keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ee:2e:73:cf:8e:0a:89:a5:85:58:0f:0b:49:4c:c2:2d:a5: 03:ee:ff:c0:06:49:ba:1f:b3:7f:da:7c:fa:b5:3e:51:62:de: 4b:3b:e1:a7:8b:29:ff:67:8b:24:03:5b:32:e3:3f:0e:43:98: 90:b3:a1:3d:e2:07:5d:9a:15:81:61:68:a4:38:a9:ca:1f:85: 07:3b:c5:fb:1b:cc:d5:ae:98:04:6f:d1:1c:53:23:76:e6:12: 31:fb:37:9b:a3:5c:20:fd:f8:9a:18:03:9c:8f:bb:31:5c:00: 3c:75:88:e7:d2:d6:66:7d:2e:89:da:d8:15:8a:44:fe:24:f7: 17:5c:94:e0:6b:ec:20:37:11:5a:eb:90:bd:85:da:2c:ce:41: f9:cc:38:04:d4:c9:e9:e2:b5:8d:43:29:75:78:3f:c4:b4:77: 31:f3:67:68:96:74:c2:f2:90:9a:dc:86:bc:e8:a2:ec:75:d1: 70:d3:b0:67:5d:0e:21:5f:5f:24:ee:6a:5e:c7:a0:df:59:63: 65:0a:b7:6d:3e:1d:8a:11:55:bb:17:9f:c1:d7:4a:73:b7:c7: b2:53:79:cf:00:a6:6e:15:d3:fc:87:d8:36:fd:bc:19:cf:94: aa:6b:28:0e:80:7a:01:a1:02:6f:9f:06:4e:4d:e9:7b:71:13: 2b:8d:84:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSPB23YvffINL/DcijiGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4 ZDhlYzgwHhcNMjUxMjIxMTkwMDM0WhcNMjUxMjIyMTkwMDM0WjAzMTEwLwYDVQQD EygxNDg2NTkyNTkzNWUzZGYxMWYxNjM4MzBiODYwN2E0MzliMzAxNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3yTbC4i2gujMfGpxNvjXa48izZN IstdR0GwqN2D3FiGDVDIjkRDh/ALyqqdT8ph/fh3iCUV+f3vR6TLcKc+2N9whYSG G2kHB3kZFtxXG5gcaVxIVU95FVsHMkBCO0/vh83nBTxGmiKLta9TaJHd5lyp9cNM 23hzbUByOR030Iscgb/gd5wwVKZikRCCEYiEsMPxtJnZOfzFnJmjFdIf8g//z9hB d2/jA58PNdFql032Sdyt0Qo8Fa4G4C8UkaO0A6O99wkTupIrv8/+BBnvh1borvFk mgh+x5R+E2s1CjNRxH4QOsqtgWPy+ZlhcPBbHxDrTqyHXEdDa2eXMaP7qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSGWSWTXj3xHxY4MLhgekObMBQiMB8GA1UdIwQY MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne4uc8+O ComlhVgPC0lMwi2lA+7/wAZJuh+zf9p8+rU+UWLeSzvhp4sp/2eLJANbMuM/DkOY kLOhPeIHXZoVgWFopDipyh+FBzvF+xvM1a6YBG/RHFMjduYSMfs3m6NcIP34mhgD nI+7MVwAPHWI59LWZn0uidrYFYpE/iT3F1yU4GvsIDcRWuuQvYXaLM5B+cw4BNTJ 6eK1jUMpdXg/xLR3MfNnaJZ0wvKQmtyGvOii7HXRcNOwZ10OIV9fJO5qXseg31lj ZQq3bT4dihFVuxefwddKc7fHslN5zwCmbhXT/IfYNv28Gc+UqmsoDoB6AaECb58G Tk3pe3ETK42E3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 20:55:10 2025 by rpki-client