This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json) Hash identifier: Fk1Q3zFf6TYUEcVApzeESQ1uWf+6t93FMSBQW5B3Uok= Subject key identifier: CF:7C:A1:A7:1A:DD:8A:5A:D5:56:D8:FC:3D:0C:87:9D:BB:CC:F1:57 Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8 Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8 Certificate serial: 019B4625BA3DBB20835F1BBAD32C23196BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft Manifest number: 02E5 Signing time: Mon 22 Dec 2025 13:00:35 +0000 Manifest this update: Mon 22 Dec 2025 13:00:35 +0000 Manifest next update: Tue 23 Dec 2025 13:00:35 +0000 Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: Vsfq40eUXA28ydHPsKUy2m41C/AB8WPFrbXOntMHMdA=) 2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:ba:3d:bb:20:83:5f:1b:ba:d3:2c:23:19:6b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8 Validity Not Before: Dec 22 13:00:35 2025 GMT Not After : Dec 23 13:00:35 2025 GMT Subject: CN=cf7ca1a71add8a5ad556d8fc3d0c879dbbccf157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:65:f2:d9:8d:ff:f3:9c:8c:67:7a:ac:ee: 84:59:a2:bd:10:c0:97:13:69:97:28:44:6c:b2:32: 1f:bd:a0:de:47:10:4b:58:55:ca:2d:94:75:d6:86: b8:82:8f:f6:1c:34:09:29:b9:fb:fb:41:02:8d:d7: 27:10:80:9e:eb:74:fd:57:91:4e:52:d5:ec:f0:dd: 3a:a2:4d:70:23:a2:12:fc:7d:28:2d:71:ba:41:2b: 0f:07:11:4c:98:75:1f:03:cb:d8:c9:2f:ee:b0:16: 99:d8:32:fe:c7:7f:61:7b:5e:bb:30:7d:94:d7:6f: 81:a0:bc:2d:a4:58:26:7a:69:26:06:83:18:9e:a6: 76:e2:6d:29:08:04:28:75:d1:9d:35:a1:a6:af:8c: 2a:e9:0b:35:b9:8a:47:2f:0d:e2:09:43:40:d4:cb: 90:00:83:0b:3d:96:97:4e:da:55:75:bf:24:a7:76: 6e:32:82:5b:7f:66:5f:48:1d:97:74:ce:fd:5f:03: c5:c9:3f:5f:46:7a:bc:f2:e6:c2:4f:5d:66:dc:c3: b1:c3:12:82:9c:f9:b2:5b:02:ce:da:db:e0:2c:b6: 05:47:8a:af:dc:40:c6:61:ff:10:a9:92:30:b8:18: c7:c7:86:70:1e:70:a3:1e:ac:cb:14:53:3b:fe:d7: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7C:A1:A7:1A:DD:8A:5A:D5:56:D8:FC:3D:0C:87:9D:BB:CC:F1:57 X509v3 Authority Key Identifier: keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:29:76:5d:18:bf:6f:b2:42:59:c0:a7:d5:43:88:0e:73:39: 5e:47:ad:7d:27:7b:75:37:d0:9e:0d:fb:1c:00:c2:df:ea:90: ca:a7:04:a7:ab:ae:6e:3b:82:53:90:55:be:8d:7b:51:31:67: 56:8a:48:ac:51:3f:a2:4e:33:94:cf:d5:2a:9a:87:c3:88:3d: 03:f3:4e:b4:84:4b:bf:e4:16:3f:82:8f:5c:d8:76:34:78:ea: 44:00:00:58:e7:b1:86:9c:48:c4:e8:fb:8b:4d:c3:b1:ac:52: b3:b3:ac:88:05:e0:08:1a:0c:0c:e3:08:69:dc:18:d7:85:8b: 30:4c:ce:f4:27:1d:71:6e:cc:39:2b:ea:86:bc:a2:6a:f7:a0: 70:b5:50:47:52:89:83:7d:c9:c6:ae:66:43:ba:01:a4:56:bb: c7:f5:9b:1a:aa:9e:5b:dc:7a:61:0f:23:d6:b5:e2:f5:38:38: 80:50:6f:97:52:ff:69:79:cb:11:ce:77:b3:77:50:79:93:e6: 34:a5:e3:69:69:92:8e:13:9a:9e:3e:ea:61:50:07:0f:2c:6a: 20:2f:6f:17:77:c8:e4:fe:c9:5d:9e:d4:8f:fc:4b:b6:44:50: e6:85:2d:25:ca:25:0e:82:62:56:29:ed:88:0b:41:26:6e:72: ae:50:31:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJbo9uyCDXxu60ywjGWv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl ZDkxYzgwHhcNMjUxMjIyMTMwMDM1WhcNMjUxMjIzMTMwMDM1WjAzMTEwLwYDVQQD EyhjZjdjYTFhNzFhZGQ4YTVhZDU1NmQ4ZmMzZDBjODc5ZGJiY2NmMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUxl8tmN//OcjGd6rO6EWaK9EMCX E2mXKERssjIfvaDeRxBLWFXKLZR11oa4go/2HDQJKbn7+0ECjdcnEICe63T9V5FO UtXs8N06ok1wI6IS/H0oLXG6QSsPBxFMmHUfA8vYyS/usBaZ2DL+x39he167MH2U 12+BoLwtpFgmemkmBoMYnqZ24m0pCAQoddGdNaGmr4wq6Qs1uYpHLw3iCUNA1MuQ AIMLPZaXTtpVdb8kp3ZuMoJbf2ZfSB2XdM79XwPFyT9fRnq88ubCT11m3MOxwxKC nPmyWwLO2tvgLLYFR4qv3EDGYf8QqZIwuBjHx4ZwHnCjHqzLFFM7/teP9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM98oaca3Ypa1VbY/D0Mh527zPFXMB8GA1UdIwQY MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSl2XRi/ b7JCWcCn1UOIDnM5XketfSd7dTfQng37HADC3+qQyqcEp6uubjuCU5BVvo17UTFn VopIrFE/ok4zlM/VKpqHw4g9A/NOtIRLv+QWP4KPXNh2NHjqRAAAWOexhpxIxOj7 i03DsaxSs7OsiAXgCBoMDOMIadwY14WLMEzO9CcdcW7MOSvqhryiavegcLVQR1KJ g33Jxq5mQ7oBpFa7x/WbGqqeW9x6YQ8j1rXi9Tg4gFBvl1L/aXnLEc53s3dQeZPm NKXjaWmSjhOanj7qYVAHDyxqIC9vF3fI5P7JXZ7Uj/xLtkRQ5oUtJcolDoJiVint iAtBJm5yrlAxbA== -----END CERTIFICATE-----Generated at Mon Dec 22 19:30:49 2025 by rpki-client