This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json) Hash identifier: Ham3vzPPYK195uLSgExJwFhCyDGcAOh1WGcPon1T5zk= Subject key identifier: 7B:F3:8C:F3:34:1A:B2:96:5A:FC:AF:AA:65:61:37:EA:CF:1E:F5:15 Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019B3A21CED82BE981B0DE1F6DEDA095A646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft Manifest number: 0D7C Signing time: Sat 20 Dec 2025 05:00:52 +0000 Manifest this update: Sat 20 Dec 2025 05:00:52 +0000 Manifest next update: Sun 21 Dec 2025 05:00:52 +0000 Files and hashes: 1: 29SLMo34FhaAnpTCRG4-JhzaoEU.roa (hash: 2fi9WOSprxmNRnuIjRed7XskP0Ewr4AfYM3eX1Xq9nE=) 2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: z8/Ni3coXJJuqpE04dYzG3mXavWWulBR3tNRe5bMo1o=) 3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=) 4: gC44VWnXdqeRgBq7XFfpWF95Q6M.roa (hash: ZlFvQ0FdcQWc6LDQd+RgeJur3FpyWFSWGQsV0siREzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:ce:d8:2b:e9:81:b0:de:1f:6d:ed:a0:95:a6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Dec 20 05:00:52 2025 GMT Not After : Dec 21 05:00:52 2025 GMT Subject: CN=7bf38cf3341ab2965afcafaa656137eacf1ef515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:c6:85:23:f8:6c:c9:f2:de:5a:07:b6:20: 2c:a8:42:56:f1:84:ba:fa:93:1f:d7:f6:06:18:ec: 21:8e:ec:10:19:18:c6:f5:5d:e2:f2:55:e6:c9:84: c8:4c:6a:cc:f9:37:ff:5e:9e:0d:f3:0b:07:f5:cd: 8b:7b:16:87:06:af:8e:79:f6:aa:81:6c:be:36:5d: e0:cf:45:a0:cb:a4:47:fa:33:bd:f6:07:05:4c:1e: f5:bf:06:22:9d:9c:15:c4:dc:e2:21:45:8f:80:c2: bc:42:7f:62:6b:b3:2e:44:ce:46:7e:5b:ba:57:d9: 12:4c:84:41:83:75:08:92:51:b0:30:e3:6e:c6:71: 0f:86:cc:ec:6f:a9:56:d1:27:1c:38:10:ab:2a:7d: 3a:68:3e:7e:3f:4b:c9:3a:3a:f2:91:97:30:84:f6: ed:1f:aa:6b:7f:19:ef:d9:f8:18:0c:10:94:6c:7d: b3:c0:0f:e2:04:2f:5b:a3:69:93:7c:c0:70:0d:b2: b4:3a:21:cd:8a:dc:a7:db:8d:74:0c:9b:87:1a:71: f1:1d:c5:00:43:e2:61:01:39:c5:d6:0f:a0:f5:85: e9:64:de:75:1c:9b:37:25:61:d6:55:78:f7:e9:7a: 87:6a:94:35:bc:1b:0e:ba:6e:d8:81:c5:73:83:01: fd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F3:8C:F3:34:1A:B2:96:5A:FC:AF:AA:65:61:37:EA:CF:1E:F5:15 X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:bf:d9:84:35:b9:00:d8:3a:03:e4:ad:d5:2e:af:aa:3a:cc: 00:d0:53:a3:d7:63:07:3a:b6:c6:15:9d:e1:e1:11:89:53:55: 95:f9:a2:6d:49:a4:7d:1f:9a:7d:a5:76:16:95:38:49:2f:30: ef:c5:5e:7b:36:9e:33:fd:76:91:36:45:4a:42:de:c3:34:56: 4d:81:0f:32:9a:bc:fc:6d:aa:1b:b6:cb:1b:f0:3b:d7:fe:e3: 17:1d:47:74:b8:b8:eb:04:9f:db:6d:7b:a5:c3:20:cb:9e:a5: c8:f6:dc:20:a7:14:87:24:38:1f:7c:26:cd:c4:f4:51:3b:5f: 26:9f:16:13:e8:a8:83:2d:d2:14:41:7a:2e:ec:cc:f9:d9:ee: c4:d6:27:33:e6:14:81:cd:bd:d1:68:5f:09:ba:5d:ef:9f:95: 58:d0:c0:16:4e:7d:b4:03:2e:00:49:aa:f6:d0:1d:01:aa:34: 0b:d4:e9:44:2b:10:c6:bd:a9:c9:fc:ec:47:30:54:5d:e3:17: a1:ef:42:1d:98:b5:ef:7e:82:aa:d6:99:75:41:52:b8:3a:1f: b3:12:29:92:e6:a7:e3:ce:9a:0c:d8:be:91:65:46:5c:f7:68: 73:f7:e9:33:14:a5:47:ab:14:07:7e:9e:f1:ad:9d:40:9e:b5: a3:b0:d8:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ic7YK+mBsN4fbe2glaZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjUxMjIwMDUwMDUyWhcNMjUxMjIxMDUwMDUyWjAzMTEwLwYDVQQD Eyg3YmYzOGNmMzM0MWFiMjk2NWFmY2FmYWE2NTYxMzdlYWNmMWVmNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQXGhSP4bMny3loHtiAsqEJW8YS6 +pMf1/YGGOwhjuwQGRjG9V3i8lXmyYTITGrM+Tf/Xp4N8wsH9c2LexaHBq+Oefaq gWy+Nl3gz0Wgy6RH+jO99gcFTB71vwYinZwVxNziIUWPgMK8Qn9ia7MuRM5Gflu6 V9kSTIRBg3UIklGwMONuxnEPhszsb6lW0SccOBCrKn06aD5+P0vJOjrykZcwhPbt H6prfxnv2fgYDBCUbH2zwA/iBC9bo2mTfMBwDbK0OiHNityn2410DJuHGnHxHcUA Q+JhATnF1g+g9YXpZN51HJs3JWHWVXj36XqHapQ1vBsOum7YgcVzgwH9MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvzjPM0GrKWWvyvqmVhN+rPHvUVMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsL/ZhDW5 ANg6A+St1S6vqjrMANBTo9djBzq2xhWd4eERiVNVlfmibUmkfR+afaV2FpU4SS8w 78VeezaeM/12kTZFSkLewzRWTYEPMpq8/G2qG7bLG/A71/7jFx1HdLi46wSf2217 pcMgy56lyPbcIKcUhyQ4H3wmzcT0UTtfJp8WE+iogy3SFEF6LuzM+dnuxNYnM+YU gc290WhfCbpd75+VWNDAFk59tAMuAEmq9tAdAao0C9TpRCsQxr2pyfzsRzBUXeMX oe9CHZi1736CqtaZdUFSuDofsxIpkuan486aDNi+kWVGXPdoc/fpMxSlR6sUB36e 8a2dQJ61o7DYMw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:00 2025 by rpki-client