This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json) Hash identifier: ka8Jo6NrU7mAUNqyT5HWPOb7tH5it2MKSUmxGLCiMyk= Subject key identifier: B5:31:6B:7B:99:AA:EC:76:3D:0E:AD:95:A8:A1:3F:1F:83:FB:CF:20 Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd Certificate serial: 019B3DC78DA2398B8719C9708BB7FCEA51B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft Manifest number: 03AE Signing time: Sat 20 Dec 2025 22:00:46 +0000 Manifest this update: Sat 20 Dec 2025 22:00:46 +0000 Manifest next update: Sun 21 Dec 2025 22:00:46 +0000 Files and hashes: 1: MJaKjYCmx7hqbl_Sgp0HlxFEPTo.roa (hash: 7qpw/goTRYdFqZs/4SurZemQFQCz3pPQoJv09aj5YOE=) 2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: LYXjosaf/Uvi6ub3EYRS+XKyrjS281Ke+yvMd4h+Qi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:8d:a2:39:8b:87:19:c9:70:8b:b7:fc:ea:51:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd Validity Not Before: Dec 20 22:00:46 2025 GMT Not After : Dec 21 22:00:46 2025 GMT Subject: CN=b5316b7b99aaec763d0ead95a8a13f1f83fbcf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:39:0f:d1:02:81:48:84:d9:f1:da:d1:6b: e2:08:10:a0:62:30:3f:0d:6a:a7:fd:5d:76:80:8a: 38:06:91:c8:fa:37:6d:e5:c4:cb:55:79:e4:23:6f: 6f:d0:94:d8:bb:25:d7:4f:6c:84:f1:46:17:46:1a: e0:e8:de:88:28:fb:5a:a0:26:61:c0:5a:86:cc:93: 4c:f6:b5:e4:51:7e:65:4f:63:7a:89:6b:f5:b2:85: 28:cc:4e:09:15:9d:63:c3:fd:d4:d8:0c:64:4c:45: fd:c2:e6:d5:5a:81:aa:d1:b4:eb:06:0a:18:84:61: d5:6b:b6:af:54:d3:94:5d:ba:04:11:d9:8e:c3:f1: 08:e2:a5:44:55:b5:b5:f4:e9:30:c5:0c:5f:75:71: 06:c3:2b:c2:ef:2e:50:1f:f1:4c:eb:23:cb:e5:1d: ff:3e:e0:75:2a:f7:9b:e0:7a:c9:47:e9:f1:e5:12: e0:01:ce:58:d7:d2:96:cc:95:50:e0:b8:0c:f4:24: 49:df:cc:11:f2:c7:f6:f4:2b:85:98:61:e5:f8:f1: 47:29:77:22:de:e3:e7:4f:5f:28:86:d1:10:b6:d4: 73:3b:21:50:89:f3:ea:af:ed:23:2e:14:14:57:ef: 56:f0:5c:89:25:e9:63:75:01:7a:3b:f8:12:a2:1a: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:6B:7B:99:AA:EC:76:3D:0E:AD:95:A8:A1:3F:1F:83:FB:CF:20 X509v3 Authority Key Identifier: keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d9:60:6d:00:f3:71:14:ba:34:c1:eb:2f:93:fb:0d:b8:c6: 98:f9:59:08:2a:08:c3:fe:6f:46:26:13:88:27:ad:e9:e3:29: f9:ce:90:78:85:95:28:32:74:95:e7:eb:1c:30:79:15:b3:d4: bc:88:7c:f8:63:fd:da:6f:2c:f4:85:d9:ac:99:35:1c:2e:42: c4:cd:37:be:c1:bc:a1:18:d3:82:6a:3e:85:63:87:61:a9:39: 2c:fd:0b:34:0f:e9:7c:1f:78:eb:8f:2b:d5:77:0c:0c:06:51: e0:92:73:c6:66:0e:02:e4:a8:b0:cd:53:3c:ce:6b:7c:d7:df: 9f:53:2a:3d:1d:ff:9b:56:a9:8e:aa:80:26:9c:b5:74:d0:ce: f7:ee:32:7c:1f:25:43:be:f3:53:9e:f2:41:54:c4:02:fd:16: 30:77:1a:73:e1:5e:21:48:75:80:7d:9f:0f:f3:e3:d5:18:69: b0:5f:21:bd:e7:a1:fc:e9:d8:22:2c:5b:c2:72:85:bd:3d:20: 3c:04:2f:04:9a:bf:92:e4:f9:82:29:57:ec:bf:32:7b:49:ca: 34:c6:57:b6:be:5c:7b:a0:1e:55:fc:de:60:b2:77:3b:db:0c: d6:1c:c8:32:82:2c:b2:13:cc:c5:a1:80:fc:bb:e8:65:3a:45: 10:e1:89:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x42iOYuHGclwi7f86lG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGY4NzlmM2Y5N2FkOGNkNzMxOTNkODA2OWU0OWIwMWI2 YmFkZGQwHhcNMjUxMjIwMjIwMDQ2WhcNMjUxMjIxMjIwMDQ2WjAzMTEwLwYDVQQD EyhiNTMxNmI3Yjk5YWFlYzc2M2QwZWFkOTVhOGExM2YxZjgzZmJjZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpc5D9ECgUiE2fHa0WviCBCgYjA/ DWqn/V12gIo4BpHI+jdt5cTLVXnkI29v0JTYuyXXT2yE8UYXRhrg6N6IKPtaoCZh wFqGzJNM9rXkUX5lT2N6iWv1soUozE4JFZ1jw/3U2AxkTEX9wubVWoGq0bTrBgoY hGHVa7avVNOUXboEEdmOw/EI4qVEVbW19OkwxQxfdXEGwyvC7y5QH/FM6yPL5R3/ PuB1Kveb4HrJR+nx5RLgAc5Y19KWzJVQ4LgM9CRJ38wR8sf29CuFmGHl+PFHKXci 3uPnT18ohtEQttRzOyFQifPqr+0jLhQUV+9W8FyJJeljdQF6O/gSohq7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUxa3uZqux2PQ6tlaihPx+D+88gMB8GA1UdIwQY MBaAFK1Ph58/l62M1zGT2AaeSbAba63dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQt OTRlZjE5NzA3MzgyLzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQtOTRlZjE5NzA3Mzgy LzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdlgbQDz cRS6NMHrL5P7DbjGmPlZCCoIw/5vRiYTiCet6eMp+c6QeIWVKDJ0lefrHDB5FbPU vIh8+GP92m8s9IXZrJk1HC5CxM03vsG8oRjTgmo+hWOHYak5LP0LNA/pfB94648r 1XcMDAZR4JJzxmYOAuSosM1TPM5rfNffn1MqPR3/m1apjqqAJpy1dNDO9+4yfB8l Q77zU57yQVTEAv0WMHcac+FeIUh1gH2fD/Pj1RhpsF8hveeh/OnYIixbwnKFvT0g PAQvBJq/kuT5gilX7L8ye0nKNMZXtr5ce6AeVfzeYLJ3O9sM1hzIMoIsshPMxaGA /LvoZTpFEOGJ2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:15 2025 by rpki-client