This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json) Hash identifier: jgZvy13EgebH+eg3M97klQj3QOJGNiO2D8/bF5Llv+c= Subject key identifier: F0:C3:F7:03:51:1B:85:C0:24:F8:8E:77:F0:26:48:94:DC:BE:0D:7F Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Certificate serial: 019B3D5A1AF88103459E24DF0456CABDE5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft Manifest number: 0C26 Signing time: Sat 20 Dec 2025 20:01:13 +0000 Manifest this update: Sat 20 Dec 2025 20:01:13 +0000 Manifest next update: Sun 21 Dec 2025 20:01:13 +0000 Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=) 2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=) 3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: V221jBVGHBoagtTE/VKEX+2MwxqVEVs3qz9NAuHFmjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:1a:f8:81:03:45:9e:24:df:04:56:ca:bd:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Validity Not Before: Dec 20 20:01:13 2025 GMT Not After : Dec 21 20:01:13 2025 GMT Subject: CN=f0c3f703511b85c024f88e77f0264894dcbe0d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:59:a7:4d:7d:72:f1:ef:a1:d4:2b:d8:3e: 10:86:4b:6b:4e:7c:33:61:02:f8:39:48:74:50:1b: f5:1c:1f:ef:a7:19:72:3d:09:b9:19:c9:73:0e:55: 8c:63:aa:a9:ff:37:42:60:2b:e3:b4:50:b8:6a:b2: 93:39:0e:8d:12:b2:29:a4:73:dc:2e:c8:29:e3:a3: 79:35:2b:d0:62:d8:80:68:a2:3b:9a:3b:4f:a1:c4: 21:c2:a9:31:c4:dc:36:00:eb:26:32:6f:e8:d4:b5: 41:0f:45:38:b0:7c:01:9e:df:f9:d2:06:35:2c:c0: 94:9f:97:51:17:89:ae:7b:c2:84:32:4c:12:32:1a: ff:86:86:ac:d1:b1:a8:27:c6:6c:7a:b7:5b:06:60: e4:02:24:12:c0:3c:42:ae:13:61:a7:94:da:d6:cd: 70:3e:45:05:84:94:be:4f:df:aa:15:ee:74:e1:e5: a1:b7:01:29:04:fd:76:66:e6:85:e9:ef:2a:88:4b: 2d:fb:b2:8b:cb:cb:d8:24:97:84:f9:ef:8a:b5:28: 09:3e:b8:29:c7:31:0f:7f:ee:2c:32:24:3b:1a:d1: e0:7c:09:fb:f7:df:a0:0f:bb:4d:a6:6a:6f:10:d4: 09:d9:8c:7c:df:11:44:51:d4:75:a4:d7:81:b4:6b: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C3:F7:03:51:1B:85:C0:24:F8:8E:77:F0:26:48:94:DC:BE:0D:7F X509v3 Authority Key Identifier: keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1a:f0:aa:be:73:17:96:f6:08:74:d7:e8:5f:09:8c:57:ea: 4e:ac:fd:b4:6e:cd:98:41:9a:a4:cc:dc:23:dc:24:d1:0b:13: c0:47:41:8c:a6:ad:b4:29:13:26:8c:78:65:e0:61:bf:0f:aa: 52:5b:af:0d:bf:df:c5:fe:21:a8:e8:c9:0b:72:e2:09:64:8f: 4d:0c:6f:a9:d8:4d:f3:65:77:f0:a4:a3:9f:d8:9e:d7:04:81: f6:3b:b5:eb:4c:5f:9a:a6:48:3f:31:9b:4f:10:28:ff:cb:d3: b6:99:cd:95:7c:4c:e6:23:1a:17:2e:7b:55:c7:45:67:d6:13: 13:99:9d:28:72:e7:e9:44:df:11:22:ee:1c:83:81:de:f6:e4: 5c:e1:e7:da:59:7f:e6:84:c8:fa:a8:4e:4d:af:c1:4b:96:8f: 8d:7f:0b:2e:8b:7d:8f:42:39:01:f4:d0:0e:91:7b:60:91:81: e7:d0:3b:c7:b6:53:73:07:d1:0a:dc:a3:ff:70:20:fc:e3:07: e0:b2:64:bd:ec:90:02:58:97:36:e9:7f:48:a2:0d:92:50:0b: 41:65:ff:87:2c:b8:69:54:ee:7f:f3:d5:12:f5:88:60:28:4b: 7e:1e:71:78:d4:7e:28:ee:02:05:e5:c6:24:9d:cf:ea:5f:69: 74:8f:35:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Whr4gQNFniTfBFbKveXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2VlZTJkNmQ3YTUwYzkyNDk5ZGExYTIxZjJhYmI3YTJh Nzc0YzgwHhcNMjUxMjIwMjAwMTEzWhcNMjUxMjIxMjAwMTEzWjAzMTEwLwYDVQQD EyhmMGMzZjcwMzUxMWI4NWMwMjRmODhlNzdmMDI2NDg5NGRjYmUwZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHVZp019cvHvodQr2D4QhktrTnwz YQL4OUh0UBv1HB/vpxlyPQm5GclzDlWMY6qp/zdCYCvjtFC4arKTOQ6NErIppHPc Lsgp46N5NSvQYtiAaKI7mjtPocQhwqkxxNw2AOsmMm/o1LVBD0U4sHwBnt/50gY1 LMCUn5dRF4mue8KEMkwSMhr/hoas0bGoJ8ZserdbBmDkAiQSwDxCrhNhp5Ta1s1w PkUFhJS+T9+qFe504eWhtwEpBP12ZuaF6e8qiEst+7KLy8vYJJeE+e+KtSgJPrgp xzEPf+4sMiQ7GtHgfAn799+gD7tNpmpvENQJ2Yx83xFEUdR1pNeBtGt5xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDD9wNRG4XAJPiOd/AmSJTcvg1/MB8GA1UdIwQY MBaAFFLO7i1telDJJJnaGiHyq7eip3TIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUt MGMwMjBhN2U0YTQ0LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUtMGMwMjBhN2U0YTQ0 LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRrwqr5z F5b2CHTX6F8JjFfqTqz9tG7NmEGapMzcI9wk0QsTwEdBjKattCkTJox4ZeBhvw+q UluvDb/fxf4hqOjJC3LiCWSPTQxvqdhN82V38KSjn9ie1wSB9ju160xfmqZIPzGb TxAo/8vTtpnNlXxM5iMaFy57VcdFZ9YTE5mdKHLn6UTfESLuHIOB3vbkXOHn2ll/ 5oTI+qhOTa/BS5aPjX8LLot9j0I5AfTQDpF7YJGB59A7x7ZTcwfRCtyj/3Ag/OMH 4LJkveyQAliXNul/SKINklALQWX/hyy4aVTuf/PVEvWIYChLfh5xeNR+KO4CBeXG JJ3P6l9pdI81Zg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:32:12 2025 by rpki-client