This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft File: USt7qR3DDrtBPNBVvUMpLi0UAY8.mft (raw, json) Hash identifier: HQ3X1Jpz+l/mSJq1TpQHhV+Tzt7n2aqZHG94n1hGmBY= Subject key identifier: 37:AE:8F:43:4E:26:E3:DF:85:04:52:9F:72:D4:EB:63:7F:B3:B6:7A Authority key identifier: 51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F Certificate issuer: /CN=512b7ba91dc30ebb413cd055bd43292e2d14018f Certificate serial: 019B42803A98299EB1A9B337944B9FB7ED04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft Manifest number: 070E Signing time: Sun 21 Dec 2025 20:00:58 +0000 Manifest this update: Sun 21 Dec 2025 20:00:58 +0000 Manifest next update: Mon 22 Dec 2025 20:00:58 +0000 Files and hashes: 1: USt7qR3DDrtBPNBVvUMpLi0UAY8.crl (hash: 7qwjiU9XrFBlvdoSoHliNuNxygQbtoS39LQg0HnWznY=) 2: vloVVT9ufVGR6rj5SefMS3qmK1c.roa (hash: /V+TKP3WFA5NtQkzEdfMB+4hHPZcd6oAqeonzaeqn0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:3a:98:29:9e:b1:a9:b3:37:94:4b:9f:b7:ed:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=512b7ba91dc30ebb413cd055bd43292e2d14018f Validity Not Before: Dec 21 20:00:58 2025 GMT Not After : Dec 22 20:00:58 2025 GMT Subject: CN=37ae8f434e26e3df8504529f72d4eb637fb3b67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:81:e5:13:2a:35:b7:7e:55:7c:e8:b5:79: 8b:e5:22:ed:74:2f:e5:71:01:7c:5c:3f:1e:44:ef: 49:34:01:42:13:76:d2:e6:62:3a:d1:53:04:64:ea: 80:c7:d1:9d:f0:48:ab:af:3d:e0:99:51:a8:ef:a6: 46:00:33:e7:6d:92:b3:50:3a:6f:11:59:7e:e4:d4: 48:47:c4:56:7f:99:db:ac:1d:2e:a9:fa:7c:b1:02: d7:8b:25:83:3b:77:a5:0f:4b:ad:6a:f4:92:0f:94: da:4e:96:f9:51:26:a1:c4:3f:be:48:7d:22:0d:74: 5a:18:1f:c8:36:ad:30:1b:0e:75:1e:48:ad:5e:6e: 0d:9d:3e:13:c7:eb:a9:67:fd:0d:fa:97:0d:c8:54: bc:7a:a4:e9:77:53:72:aa:6d:5e:d2:0b:9a:a6:70: 0d:f9:78:b3:0c:c8:fd:ac:09:85:92:70:a2:8e:a1: 1d:ea:86:d1:e0:42:6c:45:06:0f:3f:90:2f:d3:d3: 20:45:06:1e:0c:45:b7:f4:06:27:57:4d:b3:c3:e7: 60:ad:c9:9c:e7:1c:25:75:d2:a8:81:4f:2f:26:a1: 7c:ac:38:6c:c8:71:1b:36:ba:77:b0:a8:bc:d8:8f: 45:1a:77:35:44:62:08:6b:ac:51:d9:1a:76:e9:7b: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AE:8F:43:4E:26:E3:DF:85:04:52:9F:72:D4:EB:63:7F:B3:B6:7A X509v3 Authority Key Identifier: keyid:51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e0:63:e2:d6:7e:40:ca:11:b6:c0:8f:88:83:b2:09:bb:94: 30:15:ef:ac:4f:99:05:56:5f:b3:cf:12:87:4f:42:af:b3:ea: 61:e2:c9:22:4a:33:6a:2d:ad:8c:87:ec:4b:2d:05:c6:d7:16: a9:79:57:cd:9a:82:61:57:c6:3d:9c:b6:2c:31:f0:8c:1b:57: c8:24:0d:1a:dd:83:be:8c:72:f1:d2:f0:d0:ba:fc:9d:f3:1b: e3:01:8b:ce:b1:cc:94:49:5d:78:50:e8:ca:9b:4d:d5:df:eb: 0e:b7:33:04:4a:cb:22:b8:30:d7:4e:10:c3:26:30:da:37:01: 40:36:50:d3:6a:81:b2:70:1f:9f:74:62:3e:65:1e:b5:ae:14: 73:97:f3:58:af:64:8a:78:2c:2a:ba:15:4a:7c:8c:48:38:92: 67:bd:f8:5e:ee:3c:44:bb:c0:67:3b:dc:4d:4d:63:40:5b:6c: 9f:b4:75:26:2a:6c:41:83:bf:3d:1e:d3:df:d9:0b:33:d2:09: b9:92:25:ce:db:ff:2c:80:b1:fe:48:1f:7d:a4:25:a1:6f:16: 26:cc:0c:ce:05:0e:ab:5d:e5:41:b9:73:ae:73:4e:f0:89:e9: 19:5a:f4:ea:d3:a6:34:36:a3:cd:3f:bc:f6:5e:73:bf:c9:b2: 78:65:fb:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgDqYKZ6xqbM3lEuft+0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMmI3YmE5MWRjMzBlYmI0MTNjZDA1NWJkNDMyOTJlMmQx NDAxOGYwHhcNMjUxMjIxMjAwMDU4WhcNMjUxMjIyMjAwMDU4WjAzMTEwLwYDVQQD EygzN2FlOGY0MzRlMjZlM2RmODUwNDUyOWY3MmQ0ZWI2MzdmYjNiNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZeB5RMqNbd+VXzotXmL5SLtdC/l cQF8XD8eRO9JNAFCE3bS5mI60VMEZOqAx9Gd8Eirrz3gmVGo76ZGADPnbZKzUDpv EVl+5NRIR8RWf5nbrB0uqfp8sQLXiyWDO3elD0utavSSD5TaTpb5USahxD++SH0i DXRaGB/INq0wGw51HkitXm4NnT4Tx+upZ/0N+pcNyFS8eqTpd1Nyqm1e0guapnAN +XizDMj9rAmFknCijqEd6obR4EJsRQYPP5Av09MgRQYeDEW39AYnV02zw+dgrcmc 5xwlddKogU8vJqF8rDhsyHEbNrp3sKi82I9FGnc1RGIIa6xR2Rp26XvZKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeuj0NOJuPfhQRSn3LU62N/s7Z6MB8GA1UdIwQY MBaAFFEre6kdww67QTzQVb1DKS4tFAGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEt MTY3Mzc0OWJjZWVjLzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEtMTY3Mzc0OWJjZWVj LzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeBj4tZ+ QMoRtsCPiIOyCbuUMBXvrE+ZBVZfs88Sh09Cr7PqYeLJIkozai2tjIfsSy0FxtcW qXlXzZqCYVfGPZy2LDHwjBtXyCQNGt2Dvoxy8dLw0Lr8nfMb4wGLzrHMlEldeFDo yptN1d/rDrczBErLIrgw104QwyYw2jcBQDZQ02qBsnAfn3RiPmUeta4Uc5fzWK9k ingsKroVSnyMSDiSZ734Xu48RLvAZzvcTU1jQFtsn7R1JipsQYO/PR7T39kLM9IJ uZIlztv/LICx/kgffaQloW8WJswMzgUOq13lQblzrnNO8InpGVr06tOmNDajzT+8 9l5zv8myeGX7rw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:07:49 2025 by rpki-client