This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json) Hash identifier: ulJYXAC35JZqzV8ibazEcTe8L9jzW8rtcPnK0sph10U= Subject key identifier: 28:3E:D0:43:AC:00:B7:76:CB:1A:6F:F3:DD:15:D3:25:AF:63:03:C6 Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12 Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112 Certificate serial: 019B3A5883FC739F5AE00FDF07836BF49DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft Manifest number: 0F9C Signing time: Sat 20 Dec 2025 06:00:37 +0000 Manifest this update: Sat 20 Dec 2025 06:00:37 +0000 Manifest next update: Sun 21 Dec 2025 06:00:37 +0000 Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: gNlaJUGsrOC0se6ih0uayvGaaIpjF1Jpomb5q7hHV10=) 2: tJ6oFmHPDNKseUEyL7GH7vyhvz4.roa (hash: DBrWjbsghHkZ5x5yFhux0SY16RKyxiS2uZ1W0pIOzNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:83:fc:73:9f:5a:e0:0f:df:07:83:6b:f4:9d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bf98d53522aa957081fdec28b172084394f112 Validity Not Before: Dec 20 06:00:37 2025 GMT Not After : Dec 21 06:00:37 2025 GMT Subject: CN=283ed043ac00b776cb1a6ff3dd15d325af6303c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:a9:50:a1:c5:31:e5:ca:a7:41:88:19:d0: 4c:69:e6:53:c1:8a:3f:59:fe:d3:27:72:af:10:04: 1f:b3:14:b6:e6:a5:bf:79:ec:82:08:68:e6:0a:c8: df:66:4f:64:5e:c8:4b:da:7f:76:a6:b5:af:04:40: d5:e2:65:35:75:46:55:8b:12:31:d4:80:77:79:bb: 28:68:b6:e3:e7:0f:66:2f:26:2c:b4:3b:9e:70:72: fc:a3:45:3d:94:2d:48:1a:15:f0:52:98:60:2f:e6: f8:5c:c9:58:f4:3d:ab:94:0f:c4:82:0a:c6:34:77: bc:1d:f9:c3:bb:91:f1:05:6e:77:7f:ca:7d:4c:84: bf:32:31:36:d4:d0:5d:15:70:7e:02:e3:ed:3d:79: 74:7b:eb:03:69:90:d8:ef:ac:ed:e2:e7:3f:2b:6e: fe:4b:22:8c:bd:aa:2b:3c:f6:0e:dc:14:1a:3c:0d: 0f:b2:e7:08:ff:f4:ea:5e:46:51:ff:19:12:c0:8a: ef:b8:b5:58:35:e2:91:8c:df:31:b2:76:ee:db:11: 81:2c:b0:6f:fa:8f:fc:6c:5f:be:36:aa:56:30:3f: d9:23:e4:3f:ea:51:3b:c7:88:0c:ca:93:9c:2f:3b: 80:d9:eb:31:ce:fe:0b:9a:ff:70:13:34:61:e4:8d: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3E:D0:43:AC:00:B7:76:CB:1A:6F:F3:DD:15:D3:25:AF:63:03:C6 X509v3 Authority Key Identifier: keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c0:ce:58:83:cf:1d:c8:79:2b:42:b7:a3:4e:6d:b4:9e:c6: 74:d3:af:19:f5:a0:30:2a:78:60:2d:66:bd:4e:9c:ff:8d:f0: f1:03:19:d7:43:05:de:f9:9f:bc:3a:b2:64:7b:65:78:9c:aa: db:79:b0:8a:6f:5b:f9:f4:2f:28:19:62:89:59:47:ac:c4:62: 8f:67:89:db:d0:ba:76:43:9a:8e:0c:45:a3:e3:c7:cf:dd:52: 58:66:df:0e:3d:50:35:51:01:d2:3b:c7:92:dc:d3:22:38:d6: 47:30:74:9d:ea:87:39:7d:b8:d0:2b:94:98:e1:0f:39:84:20: c6:41:61:87:59:4c:b2:3b:b7:4f:d6:4f:66:f5:04:67:02:1e: 40:a8:df:4b:81:c9:43:e8:1d:63:a5:ca:05:d1:dc:08:cf:b8: db:fb:30:f1:a1:9a:8b:b3:dc:94:6e:c0:c4:a5:2e:4b:2b:ea: 0e:ed:bf:32:13:37:c0:bd:e1:9b:0b:f9:54:d9:08:67:0f:02: 13:3d:5c:56:dc:a0:5f:e1:62:af:71:47:10:e8:b4:a6:3a:90: 34:7b:dd:1b:15:f9:63:e8:1e:7d:56:9f:07:e2:c7:3c:3e:74: 7e:35:5a:b7:9a:ad:67:ba:8d:0a:67:1d:3d:9c:e1:e6:22:18: 56:53:b6:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIP8c59a4A/fB4Nr9J2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmY5OGQ1MzUyMmFhOTU3MDgxZmRlYzI4YjE3MjA4NDM5 NGYxMTIwHhcNMjUxMjIwMDYwMDM3WhcNMjUxMjIxMDYwMDM3WjAzMTEwLwYDVQQD EygyODNlZDA0M2FjMDBiNzc2Y2IxYTZmZjNkZDE1ZDMyNWFmNjMwM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gipUKHFMeXKp0GIGdBMaeZTwYo/ Wf7TJ3KvEAQfsxS25qW/eeyCCGjmCsjfZk9kXshL2n92prWvBEDV4mU1dUZVixIx 1IB3ebsoaLbj5w9mLyYstDuecHL8o0U9lC1IGhXwUphgL+b4XMlY9D2rlA/EggrG NHe8HfnDu5HxBW53f8p9TIS/MjE21NBdFXB+AuPtPXl0e+sDaZDY76zt4uc/K27+ SyKMvaorPPYO3BQaPA0PsucI//TqXkZR/xkSwIrvuLVYNeKRjN8xsnbu2xGBLLBv +o/8bF++NqpWMD/ZI+Q/6lE7x4gMypOcLzuA2esxzv4Lmv9wEzRh5I1nLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg+0EOsALd2yxpv890V0yWvYwPGMB8GA1UdIwQY MBaAFFO/mNU1IqqVcIH97CixcghDlPESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMt ZmFkNzA3ZDljNGY2LzEvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMtZmFkNzA3ZDljNGY2 LzEvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMDOWIPP Hch5K0K3o05ttJ7GdNOvGfWgMCp4YC1mvU6c/43w8QMZ10MF3vmfvDqyZHtleJyq 23mwim9b+fQvKBliiVlHrMRij2eJ29C6dkOajgxFo+PHz91SWGbfDj1QNVEB0jvH ktzTIjjWRzB0neqHOX240CuUmOEPOYQgxkFhh1lMsju3T9ZPZvUEZwIeQKjfS4HJ Q+gdY6XKBdHcCM+42/sw8aGai7PclG7AxKUuSyvqDu2/MhM3wL3hmwv5VNkIZw8C Ez1cVtygX+Fir3FHEOi0pjqQNHvdGxX5Y+gefVafB+LHPD50fjVat5qtZ7qNCmcd PZzh5iIYVlO2lQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:19:59 2025 by rpki-client