This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json) Hash identifier: OELusOWfxfUg3r8NoPJLRzByngAMFc58xcgNWGvWrYU= Subject key identifier: 2C:CA:F1:70:4D:3C:0E:4C:8A:B8:11:16:F7:89:BB:8B:DF:E5:48:44 Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12 Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112 Certificate serial: 019B386A1175013A50C15B517878BCC3D7AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft Manifest number: 0F9B Signing time: Fri 19 Dec 2025 21:00:33 +0000 Manifest this update: Fri 19 Dec 2025 21:00:33 +0000 Manifest next update: Sat 20 Dec 2025 21:00:33 +0000 Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: darWu70v7N2Yi4rDIXos4R+nDdjMrCfYyISjyF79QDE=) 2: tJ6oFmHPDNKseUEyL7GH7vyhvz4.roa (hash: DBrWjbsghHkZ5x5yFhux0SY16RKyxiS2uZ1W0pIOzNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:11:75:01:3a:50:c1:5b:51:78:78:bc:c3:d7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bf98d53522aa957081fdec28b172084394f112 Validity Not Before: Dec 19 21:00:33 2025 GMT Not After : Dec 20 21:00:33 2025 GMT Subject: CN=2ccaf1704d3c0e4c8ab81116f789bb8bdfe54844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:2c:01:de:a2:d2:e8:3d:a4:17:48:09:30: c1:c1:31:45:5e:2f:cf:e2:de:1f:0b:da:92:6d:70: fe:02:44:51:84:c5:25:1c:6e:57:ec:fc:b3:36:6d: 45:9d:57:10:6f:36:68:e3:80:3a:64:52:53:11:e7: 59:dd:43:c1:08:e4:fe:f2:36:11:17:22:31:c1:86: 18:44:76:6e:1d:35:53:97:71:0d:ea:80:3b:a3:bb: 87:61:ff:e1:1a:e1:0d:a0:6d:83:37:fa:ae:6a:40: 4e:4b:f4:0f:de:42:b1:9c:39:86:5f:7c:81:1a:1f: 70:97:a9:0e:57:e9:5d:8b:a8:eb:2d:2b:b9:70:85: 74:a6:c1:c3:ff:a4:d2:b7:bd:30:45:da:3b:d9:a5: 0d:a6:6b:61:4d:e5:85:75:54:56:0f:ce:f4:9c:5c: de:a9:85:70:0e:64:cc:20:0a:d9:e2:e0:9e:15:9b: 3f:92:7c:8d:6c:84:3c:b2:8b:1b:16:83:31:9a:72: 69:c9:d5:70:0b:8e:2a:09:f0:2f:b4:c4:d8:c1:55: 33:9f:70:46:67:ec:dd:e9:ec:26:7d:0c:fa:5a:14: 9e:08:88:db:fb:a2:58:31:b0:e0:18:12:56:dd:e0: 41:62:90:f3:85:a4:b9:b5:1e:78:72:3d:8e:e0:b9: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CA:F1:70:4D:3C:0E:4C:8A:B8:11:16:F7:89:BB:8B:DF:E5:48:44 X509v3 Authority Key Identifier: keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fc:21:6c:1a:64:ac:8c:76:d2:ee:f6:56:a9:80:e2:8d:96: 2c:53:ab:a7:4c:04:8b:1f:8d:ab:e3:94:d8:05:ad:da:18:c8: 7a:d3:21:92:a3:f6:45:7f:70:5a:85:fb:48:70:8d:42:cc:6a: 49:42:53:f8:2a:5b:0b:88:ee:2f:6b:7c:6c:4d:ea:6f:15:b1: 3d:ce:bd:f4:19:8a:02:2b:c0:bd:8b:b0:f5:42:8a:60:05:92: 03:36:1b:96:69:73:c1:4b:21:67:c5:61:4f:53:b3:95:01:cf: 1f:1c:47:17:eb:35:73:f3:d3:64:5c:7a:2e:9d:9c:d2:3f:63: d8:af:cd:97:23:8b:b5:75:1a:c9:13:68:ab:2e:35:63:b9:fd: f7:ab:24:54:b4:47:9f:1f:43:21:d3:2f:68:b4:cd:e0:f7:e3: 3e:bd:ed:a2:9f:6a:73:8b:9a:1b:de:0a:54:90:a9:ad:f9:db: 6b:2e:31:1f:08:5a:88:b8:8f:f6:60:a5:b5:18:ca:c1:58:12: e9:b7:87:83:99:78:a0:aa:b1:4a:9a:20:f6:f6:3b:81:07:9b: 15:90:4c:70:a1:65:3c:69:4f:d9:1d:c6:dc:36:6f:dd:6d:70: 4e:62:66:40:da:0f:0b:f5:12:61:32:35:3b:2d:25:05:e6:f6: 1a:99:1e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahF1ATpQwVtReHi8w9esMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmY5OGQ1MzUyMmFhOTU3MDgxZmRlYzI4YjE3MjA4NDM5 NGYxMTIwHhcNMjUxMjE5MjEwMDMzWhcNMjUxMjIwMjEwMDMzWjAzMTEwLwYDVQQD EygyY2NhZjE3MDRkM2MwZTRjOGFiODExMTZmNzg5YmI4YmRmZTU0ODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ssAd6i0ug9pBdICTDBwTFFXi/P 4t4fC9qSbXD+AkRRhMUlHG5X7PyzNm1FnVcQbzZo44A6ZFJTEedZ3UPBCOT+8jYR FyIxwYYYRHZuHTVTl3EN6oA7o7uHYf/hGuENoG2DN/quakBOS/QP3kKxnDmGX3yB Gh9wl6kOV+ldi6jrLSu5cIV0psHD/6TSt70wRdo72aUNpmthTeWFdVRWD870nFze qYVwDmTMIArZ4uCeFZs/knyNbIQ8sosbFoMxmnJpydVwC44qCfAvtMTYwVUzn3BG Z+zd6ewmfQz6WhSeCIjb+6JYMbDgGBJW3eBBYpDzhaS5tR54cj2O4LkVyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzK8XBNPA5MirgRFveJu4vf5UhEMB8GA1UdIwQY MBaAFFO/mNU1IqqVcIH97CixcghDlPESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMt ZmFkNzA3ZDljNGY2LzEvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMtZmFkNzA3ZDljNGY2 LzEvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvwhbBpk rIx20u72VqmA4o2WLFOrp0wEix+Nq+OU2AWt2hjIetMhkqP2RX9wWoX7SHCNQsxq SUJT+CpbC4juL2t8bE3qbxWxPc699BmKAivAvYuw9UKKYAWSAzYblmlzwUshZ8Vh T1OzlQHPHxxHF+s1c/PTZFx6Lp2c0j9j2K/NlyOLtXUayRNoqy41Y7n996skVLRH nx9DIdMvaLTN4PfjPr3top9qc4uaG94KVJCprfnbay4xHwhaiLiP9mCltRjKwVgS 6beHg5l4oKqxSpog9vY7gQebFZBMcKFlPGlP2R3G3DZv3W1wTmJmQNoPC/USYTI1 Oy0lBeb2Gpkedw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:28:28 2025 by rpki-client