This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json) Hash identifier: pHHjTtIQQ1TsRIWQ5aV2nCduS50hgvxc4xm0VM/nH4s= Subject key identifier: 5E:4F:34:A3:36:5F:5A:46:5F:43:54:CF:F6:AD:DD:7D:48:C5:00:BF Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9 Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9 Certificate serial: 019B3AFD57429FFCC347A14DBFDE3C74611D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 09:00:39 +0000 Manifest this update: Sat 20 Dec 2025 09:00:39 +0000 Manifest next update: Sun 21 Dec 2025 09:00:39 +0000 Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: rB4tnKSi7tS0VYytx9rO9qT4xeKTeBbAHuUu+aEyKro=) 2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:57:42:9f:fc:c3:47:a1:4d:bf:de:3c:74:61:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9 Validity Not Before: Dec 20 09:00:39 2025 GMT Not After : Dec 21 09:00:39 2025 GMT Subject: CN=5e4f34a3365f5a465f4354cff6addd7d48c500bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:0f:5b:8a:7d:a3:e5:25:9e:c1:77:fc:16: 31:0b:db:50:0a:56:cd:4b:39:ff:fb:cf:c3:29:aa: 47:41:d2:9c:9c:18:92:3e:51:22:84:1f:4c:56:3c: 48:3d:0c:f4:1a:9e:43:ee:fd:c4:b8:57:8b:19:9c: 6a:c0:e8:9a:bc:49:32:24:06:98:30:f0:fc:c0:1a: 72:6b:f5:71:44:9b:38:ec:f2:0f:66:98:5c:d0:54: ef:2e:07:0f:d1:1a:d2:fb:0b:47:e8:52:e9:ed:2d: b3:01:ed:20:05:33:75:aa:9a:e2:3c:3f:bc:5e:2d: 48:8f:32:89:b1:27:dd:17:28:54:88:ed:41:b2:0a: 49:13:3c:c1:f7:21:6c:d7:ae:b1:51:18:7b:80:8b: fc:2d:71:d1:e0:31:a1:88:17:a1:88:92:80:24:e5: d0:8b:c4:81:cc:ca:fd:f2:82:ce:ce:43:a0:51:7b: ed:15:6b:81:ac:33:1d:84:49:4f:7e:0c:0e:1f:20: a6:ee:8d:12:b9:3b:31:4c:98:70:38:cf:76:99:0f: ee:53:15:58:a6:d2:1f:4e:d7:ed:65:fc:ed:e9:72: 0d:16:f4:02:d8:c1:17:06:52:3e:87:29:83:a8:5e: 45:00:88:d7:53:83:85:eb:86:ca:79:c8:be:4e:90: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:34:A3:36:5F:5A:46:5F:43:54:CF:F6:AD:DD:7D:48:C5:00:BF X509v3 Authority Key Identifier: keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:22:5c:7e:ca:b5:08:0d:fb:84:a8:f1:cd:0b:8b:d2:64:32: e6:6b:22:a9:be:2f:09:03:f9:91:1c:cf:39:0f:99:03:6b:ea: ee:7c:d2:b8:58:07:b0:63:1b:56:bb:f9:ca:ab:7e:4e:c1:31: 79:1a:99:9d:02:1f:e3:52:ec:b5:83:57:97:12:f0:0b:13:60: 67:0a:36:61:26:9c:ec:54:6e:b5:62:6f:aa:d7:8b:82:ab:a3: f0:b4:e2:ee:a1:3c:18:15:75:48:e3:9e:f7:1c:90:1e:44:54: ce:24:3d:c7:1c:e3:37:fd:09:b4:ff:aa:5b:66:cc:4b:72:aa: 8f:7b:16:64:57:0d:9e:09:bc:86:4d:b1:ad:2b:7c:ae:5b:a5: d8:3f:ad:79:c5:12:fd:bf:d0:7a:e4:bf:3c:26:83:ed:55:3a: 6e:64:26:f1:2e:54:95:96:89:00:77:a0:d7:77:e6:6e:ba:46: 3b:d5:30:95:5a:f5:e5:75:80:7e:07:50:3a:8e:9d:de:5f:9d: e0:da:c3:e0:d3:f0:55:77:e3:b8:c3:28:b0:72:56:aa:5d:be: 01:db:bd:5c:89:33:e6:eb:0f:20:f8:00:2d:99:ee:17:f1:2f: 49:15:4e:f6:34:85:2d:13:d7:2c:1c:7a:99:1b:d1:d5:4b:10: 38:00:f2:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/VdCn/zDR6FNv948dGEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1 ZDY2ZjkwHhcNMjUxMjIwMDkwMDM5WhcNMjUxMjIxMDkwMDM5WjAzMTEwLwYDVQQD Eyg1ZTRmMzRhMzM2NWY1YTQ2NWY0MzU0Y2ZmNmFkZGQ3ZDQ4YzUwMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlwPW4p9o+UlnsF3/BYxC9tQClbN Szn/+8/DKapHQdKcnBiSPlEihB9MVjxIPQz0Gp5D7v3EuFeLGZxqwOiavEkyJAaY MPD8wBpya/VxRJs47PIPZphc0FTvLgcP0RrS+wtH6FLp7S2zAe0gBTN1qpriPD+8 Xi1IjzKJsSfdFyhUiO1BsgpJEzzB9yFs166xURh7gIv8LXHR4DGhiBehiJKAJOXQ i8SBzMr98oLOzkOgUXvtFWuBrDMdhElPfgwOHyCm7o0SuTsxTJhwOM92mQ/uUxVY ptIfTtftZfzt6XINFvQC2MEXBlI+hymDqF5FAIjXU4OF64bKeci+TpCUPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5PNKM2X1pGX0NUz/at3X1IxQC/MB8GA1UdIwQY MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt NzlkOTM0ZTRhOTlhLzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCJcfsq1 CA37hKjxzQuL0mQy5msiqb4vCQP5kRzPOQ+ZA2vq7nzSuFgHsGMbVrv5yqt+TsEx eRqZnQIf41LstYNXlxLwCxNgZwo2YSac7FRutWJvqteLgquj8LTi7qE8GBV1SOOe 9xyQHkRUziQ9xxzjN/0JtP+qW2bMS3Kqj3sWZFcNngm8hk2xrSt8rlul2D+tecUS /b/QeuS/PCaD7VU6bmQm8S5UlZaJAHeg13fmbrpGO9UwlVr15XWAfgdQOo6d3l+d 4NrD4NPwVXfjuMMosHJWql2+Adu9XIkz5usPIPgALZnuF/EvSRVO9jSFLRPXLBx6 mRvR1UsQOADyMw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:14 2025 by rpki-client