This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json) Hash identifier: zwl7QyiEkT9Cdo2ghAUgRA6wQF8zxcU0jcxPhuRGfes= Subject key identifier: 7B:51:1C:86:A3:E0:11:4D:7C:41:A4:31:F7:C4:A4:91:C7:21:90:09 Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2 Certificate serial: 019B5674E9FE25B3994EB9032CB4EA529B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 17:01:01 +0000 Manifest this update: Thu 25 Dec 2025 17:01:01 +0000 Manifest next update: Fri 26 Dec 2025 17:01:01 +0000 Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=) 2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: yMdLICDy/sAB2FmSVejB/CdR7OElADFllWkAxcU6Xe8=) 3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:74:e9:fe:25:b3:99:4e:b9:03:2c:b4:ea:52:9b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2 Validity Not Before: Dec 25 17:01:01 2025 GMT Not After : Dec 26 17:01:01 2025 GMT Subject: CN=7b511c86a3e0114d7c41a431f7c4a491c7219009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:07:f7:9f:f1:a8:5b:90:05:a9:cb:ff:d8: bb:c7:39:cd:a3:b4:79:8b:60:1c:7e:c9:6d:4e:0b: ae:a7:9f:6c:f4:0d:74:73:f9:e2:a1:41:01:c2:dc: 68:a0:aa:b5:9c:58:b7:e0:ef:1f:c7:33:3e:49:0e: 2f:d4:1f:57:b1:76:14:b0:fa:b8:3e:ab:34:b3:81: 6f:4c:81:6f:54:f2:1e:b0:d9:a3:01:91:28:c8:59: a4:08:c0:cb:25:89:d3:88:8c:ed:5c:e1:ee:a0:0a: b5:12:26:92:bd:43:bf:a9:fd:2d:c6:68:34:b8:ce: 40:5d:0e:2c:f8:51:dc:d9:d7:6e:de:b3:ab:3c:6f: 98:9a:b3:c0:23:05:72:5e:8b:b6:0c:ad:6f:d8:f4: 02:40:57:53:f2:e4:39:40:03:3b:8d:e4:09:99:04: ee:e1:9d:a7:5b:e8:21:a6:e5:0a:ce:75:19:70:97: 45:7a:b1:92:f5:99:fa:86:8e:83:b4:74:73:93:82: d2:ca:ad:e8:50:90:96:7e:9d:74:78:b3:dd:75:9b: 26:07:a7:39:c0:ac:92:ce:c7:b8:16:02:d0:dc:3f: 99:f4:c9:d7:d4:74:9d:72:72:03:8d:dd:fa:b8:8f: d1:93:90:f7:53:51:e7:9f:58:b7:fc:1c:4c:85:71: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:51:1C:86:A3:E0:11:4D:7C:41:A4:31:F7:C4:A4:91:C7:21:90:09 X509v3 Authority Key Identifier: keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f4:c3:4d:c9:84:20:a5:de:47:40:f3:7a:2c:07:d7:e5:93: b9:19:42:e4:10:c5:ae:1f:0f:a3:72:2e:c4:4f:d9:99:28:7e: 2b:62:48:fe:e7:7a:57:87:10:c6:bd:34:c4:54:1d:c5:79:39: de:9b:c4:0c:9b:9d:d4:83:1a:f2:ac:52:d0:93:1d:c8:24:4e: 57:67:fb:c2:73:71:71:61:c6:7e:a4:f3:93:7a:c2:b5:a4:c6: 9a:68:e5:9e:33:f9:e5:0a:b5:5c:df:6e:ea:83:c6:a7:d5:1c: 29:e6:58:a8:d1:c2:b5:da:0e:ff:eb:32:b4:8b:52:83:fb:8e: bb:42:a1:7f:d2:b8:6e:9f:bf:b2:9d:4a:b6:b4:8f:3c:89:61: 7d:d6:5a:6d:c8:03:35:bf:97:69:2b:d6:54:b7:a7:34:5c:5e: a8:07:5f:0c:17:82:66:de:77:66:c6:f2:57:4f:f1:b1:d3:61: f5:35:3d:ce:13:7c:fd:88:19:6e:c4:58:42:2f:55:bd:4d:8a: 9f:de:c1:56:f3:68:5d:75:68:7b:6d:4d:05:cf:a3:00:db:c8: 60:ff:77:b5:71:de:ca:23:be:df:64:99:2f:39:fc:ce:12:e2: 85:8b:fd:8f:2f:b1:d2:1c:8a:da:51:b0:4d:f8:36:68:c8:b5: e3:45:73:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdOn+JbOZTrkDLLTqUpuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3 ZjAyYTIwHhcNMjUxMjI1MTcwMTAxWhcNMjUxMjI2MTcwMTAxWjAzMTEwLwYDVQQD Eyg3YjUxMWM4NmEzZTAxMTRkN2M0MWE0MzFmN2M0YTQ5MWM3MjE5MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDAH95/xqFuQBanL/9i7xznNo7R5 i2AcfsltTguup59s9A10c/nioUEBwtxooKq1nFi34O8fxzM+SQ4v1B9XsXYUsPq4 Pqs0s4FvTIFvVPIesNmjAZEoyFmkCMDLJYnTiIztXOHuoAq1EiaSvUO/qf0txmg0 uM5AXQ4s+FHc2ddu3rOrPG+YmrPAIwVyXou2DK1v2PQCQFdT8uQ5QAM7jeQJmQTu 4Z2nW+ghpuUKznUZcJdFerGS9Zn6ho6DtHRzk4LSyq3oUJCWfp10eLPddZsmB6c5 wKySzse4FgLQ3D+Z9MnX1HSdcnIDjd36uI/Rk5D3U1Hnn1i3/BxMhXEJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtRHIaj4BFNfEGkMffEpJHHIZAJMB8GA1UdIwQY MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1 LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfTDTcmE IKXeR0DzeiwH1+WTuRlC5BDFrh8Po3IuxE/ZmSh+K2JI/ud6V4cQxr00xFQdxXk5 3pvEDJud1IMa8qxS0JMdyCROV2f7wnNxcWHGfqTzk3rCtaTGmmjlnjP55Qq1XN9u 6oPGp9UcKeZYqNHCtdoO/+sytItSg/uOu0Khf9K4bp+/sp1KtrSPPIlhfdZabcgD Nb+XaSvWVLenNFxeqAdfDBeCZt53ZsbyV0/xsdNh9TU9zhN8/YgZbsRYQi9VvU2K n97BVvNoXXVoe21NBc+jANvIYP93tXHeyiO+32SZLzn8zhLihYv9jy+x0hyK2lGw Tfg2aMi140Vz5A== -----END CERTIFICATE-----Generated at Fri Dec 26 01:29:56 2025 by rpki-client