This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json) Hash identifier: buNAHqcch6CuYjrR/hjpx5QrBQrMTu618qWl2VZVZJ4= Subject key identifier: 00:4A:C4:AE:92:3B:86:9D:7A:3D:3D:60:AC:3E:BE:9B:63:19:FB:DE Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Certificate serial: 019B44A609049C60600E9470039E351D8BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft Manifest number: 0FC0 Signing time: Mon 22 Dec 2025 06:01:30 +0000 Manifest this update: Mon 22 Dec 2025 06:01:30 +0000 Manifest next update: Tue 23 Dec 2025 06:01:30 +0000 Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=) 2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=) 3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: hJ1K2CX+n4eAFPVldtcY0+egipxIeBlgSDpngKc9BXU=) 4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:09:04:9c:60:60:0e:94:70:03:9e:35:1d:8b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Validity Not Before: Dec 22 06:01:30 2025 GMT Not After : Dec 23 06:01:30 2025 GMT Subject: CN=004ac4ae923b869d7a3d3d60ac3ebe9b6319fbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:d7:71:87:a1:20:e4:1f:fe:5d:89:09:42: 94:16:ad:b6:b1:34:1a:96:4e:2d:f1:2b:65:18:98: f1:34:25:b5:9b:08:46:18:f9:7a:3a:c6:5a:05:07: 72:bd:6f:b1:ac:aa:54:f3:65:85:f5:67:d9:42:b0: 66:b4:08:bc:6d:26:a8:27:11:4e:35:ab:6e:ad:b4: 01:d9:bf:44:b9:d9:3c:61:46:1b:7d:c5:7f:fb:43: 37:04:8f:19:c5:20:3d:09:49:e3:3d:5c:18:26:4e: 8d:d9:3e:2a:a0:9b:b3:7d:e4:ec:2e:8f:a8:57:ff: 14:75:b3:4c:b2:af:45:8d:25:7c:88:47:61:6f:bf: 8e:2f:36:e8:a0:63:bc:1d:b3:aa:b2:6a:92:b1:42: f2:e6:65:42:8f:74:e4:b5:cb:0d:35:e9:63:77:09: 0e:11:d6:24:bd:e2:fc:f5:51:fe:5e:94:60:ca:36: ed:0d:bf:54:de:f9:73:ca:bd:a6:7a:93:36:71:09: 35:7e:ad:d7:cb:e6:68:c2:c4:01:08:26:86:b4:6c: 21:10:1f:0e:47:c2:d7:01:f6:1d:26:08:75:30:40: da:b7:0e:0b:c9:d9:6e:4b:56:7f:6c:3b:a6:11:71: 98:74:d1:a6:01:9e:48:30:0a:95:1b:84:8d:2a:7f: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:C4:AE:92:3B:86:9D:7A:3D:3D:60:AC:3E:BE:9B:63:19:FB:DE X509v3 Authority Key Identifier: keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cd:7e:3d:f5:85:c8:10:4d:c1:60:19:1d:cb:3b:39:c1:10: b3:b3:83:c6:4d:8d:00:c4:f0:35:e9:d2:ba:43:fa:00:92:2a: 58:04:d6:1c:ab:f7:8a:d0:f3:7c:5b:90:a2:4c:3c:1a:96:f5: c3:f7:ee:15:6b:51:38:e2:69:bd:6d:e4:80:a1:0e:a9:39:a9: e8:52:1c:ae:a4:89:3e:c4:e8:7b:16:dc:61:b1:0f:57:9c:5d: ed:3d:96:b3:6f:d9:b0:7b:32:9f:fb:58:2c:a7:27:c4:48:1d: cb:bf:fb:02:b0:0b:d8:18:f4:99:1d:2c:49:14:b7:da:8d:ef: 29:5e:28:b0:f2:45:c4:9d:11:18:55:77:7f:34:6b:6c:dc:4c: 0a:ab:cd:3b:9e:d3:da:83:04:79:20:98:54:20:2c:1f:2e:49: 31:c0:46:04:c0:8e:24:9a:3d:67:d8:09:93:33:43:24:30:34: 9a:db:87:14:39:9f:58:f1:f0:ff:53:44:c5:76:53:ac:08:f3: ed:cd:c5:6f:5f:dd:e7:e8:b6:d9:13:12:00:9b:54:41:99:56: 51:92:9d:00:f7:39:9b:f9:39:25:a3:52:bf:8e:d8:65:71:15: db:6c:cb:59:01:05:2d:5b:e4:3c:5e:2f:76:c2:32:ab:e6:24: 0a:67:ed:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpgkEnGBgDpRwA541HYvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm ZjFjNjEwHhcNMjUxMjIyMDYwMTMwWhcNMjUxMjIzMDYwMTMwWjAzMTEwLwYDVQQD EygwMDRhYzRhZTkyM2I4NjlkN2EzZDNkNjBhYzNlYmU5YjYzMTlmYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QvXcYehIOQf/l2JCUKUFq22sTQa lk4t8StlGJjxNCW1mwhGGPl6OsZaBQdyvW+xrKpU82WF9WfZQrBmtAi8bSaoJxFO NaturbQB2b9Eudk8YUYbfcV/+0M3BI8ZxSA9CUnjPVwYJk6N2T4qoJuzfeTsLo+o V/8UdbNMsq9FjSV8iEdhb7+OLzbooGO8HbOqsmqSsULy5mVCj3TktcsNNeljdwkO EdYkveL89VH+XpRgyjbtDb9U3vlzyr2mepM2cQk1fq3Xy+ZowsQBCCaGtGwhEB8O R8LXAfYdJgh1MEDatw4LydluS1Z/bDumEXGYdNGmAZ5IMAqVG4SNKn8mswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABKxK6SO4adej09YKw+vptjGfveMB8GA1UdIwQY MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt ODkyZWM2ZmY0NzcxLzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU81+PfWF yBBNwWAZHcs7OcEQs7ODxk2NAMTwNenSukP6AJIqWATWHKv3itDzfFuQokw8Gpb1 w/fuFWtROOJpvW3kgKEOqTmp6FIcrqSJPsToexbcYbEPV5xd7T2Ws2/ZsHsyn/tY LKcnxEgdy7/7ArAL2Bj0mR0sSRS32o3vKV4osPJFxJ0RGFV3fzRrbNxMCqvNO57T 2oMEeSCYVCAsHy5JMcBGBMCOJJo9Z9gJkzNDJDA0mtuHFDmfWPHw/1NExXZTrAjz 7c3Fb1/d5+i22RMSAJtUQZlWUZKdAPc5m/k5JaNSv47YZXEV22zLWQEFLVvkPF4v dsIyq+YkCmftwQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:45 2025 by rpki-client