This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json) Hash identifier: Pv/vgcWXMT/EbDdtijAT80sFoDu2pQdHQr0ELHxzdQc= Subject key identifier: C1:B6:05:26:44:8C:AF:9E:1F:9D:48:23:1E:FE:98:3E:01:B1:07:E0 Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Certificate serial: 019B38A2459896C35C47CCEF989DD5173380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft Manifest number: 091A Signing time: Fri 19 Dec 2025 22:01:57 +0000 Manifest this update: Fri 19 Dec 2025 22:01:57 +0000 Manifest next update: Sat 20 Dec 2025 22:01:57 +0000 Files and hashes: 1: PrynGxhd3fBYSysYytSLlNvgiPU.roa (hash: c1xBK/MstkcP/5fvaGRoD60yvfbDsZTSPuvQcmy7U14=) 2: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (hash: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=) 3: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: G0VYBXuFr1I1oK8Z4SZEZQGU6kiINtUl+gj9JfzFCxQ=) 4: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (hash: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:45:98:96:c3:5c:47:cc:ef:98:9d:d5:17:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Validity Not Before: Dec 19 22:01:57 2025 GMT Not After : Dec 20 22:01:57 2025 GMT Subject: CN=c1b60526448caf9e1f9d48231efe983e01b107e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:36:8c:bb:61:8f:53:6c:70:e4:b9:de:47: 2a:3a:90:f8:61:45:dc:e6:3d:6e:2b:e8:04:2d:04: 04:8b:91:7c:8a:a7:7d:a9:b3:fe:44:4c:2f:db:c7: e9:9c:13:48:47:2b:95:f6:fb:90:07:4a:0b:0a:24: ab:79:a3:1c:db:48:e8:ef:3b:66:2a:e1:08:c4:80: 39:c0:60:c2:2d:37:46:c1:34:08:9a:83:b4:00:92: 2b:3b:b9:98:ea:6a:c6:73:79:3d:e1:d8:a8:8e:c3: 72:bf:c2:98:c0:ef:19:56:2a:c7:c9:1b:e1:62:11: 9a:dd:03:b1:ba:eb:b5:e9:3e:d8:c6:6b:3f:4d:c9: 87:03:81:be:f4:b3:08:b8:d4:3a:76:12:c2:f7:4c: 08:c5:8c:3e:6e:24:6b:3b:9f:79:2a:ee:fd:6c:b2: 33:55:aa:f5:db:e0:d9:06:1c:c5:4f:f4:7f:40:c4: c2:75:e2:00:dd:b1:00:0b:ad:6c:5b:06:1c:d4:ff: 92:6f:a1:d5:0a:da:12:10:1d:0f:19:90:a5:45:90: ef:6e:7b:2c:24:b8:92:12:b9:42:6b:cd:11:0d:58: 53:ed:8f:b3:aa:4e:08:93:44:42:62:e3:62:e5:b6: 0f:4d:d3:fd:87:e1:6a:b8:59:d5:4b:50:e3:06:b8: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B6:05:26:44:8C:AF:9E:1F:9D:48:23:1E:FE:98:3E:01:B1:07:E0 X509v3 Authority Key Identifier: keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:da:aa:12:e5:bc:69:d7:10:aa:dd:d7:5b:69:ec:44:7d:7e: 73:b2:6f:38:da:47:90:ad:c2:05:65:64:77:cf:58:88:59:ce: 37:bf:dd:5a:42:7b:41:91:ed:35:e9:e6:29:36:dd:49:ce:84: 4a:46:e5:47:da:bb:02:5c:9e:4b:d6:a4:cd:2e:2a:48:6a:f7: ac:1b:ad:16:2c:a0:8c:31:0f:e3:49:f2:7a:08:26:5e:ef:6f: 37:e8:22:ca:09:55:2f:16:8b:b4:d2:fd:ca:fe:80:0a:e3:45: b5:30:e3:be:74:5d:2a:98:23:36:0b:79:84:7d:f6:71:27:a4: d3:90:de:8c:06:fc:8b:ab:2a:a7:33:e9:b6:e0:66:92:71:7b: fe:15:7a:0f:cf:e8:37:78:6f:7a:5c:20:6e:8c:2f:e4:75:f9: c4:82:5e:94:7b:9b:d8:c8:0a:8f:4f:d1:4c:1b:e3:3e:ee:cd: 7b:40:7a:c7:2e:d5:4f:16:fc:ab:aa:8e:c4:7a:1f:e9:b0:bb: c7:f3:fc:82:00:18:44:dd:69:40:2f:cc:c2:5b:05:38:fa:75: 33:0c:26:76:84:5f:3d:0d:87:61:7b:d9:6d:c3:b2:87:60:a3: 1b:0f:db:c3:af:8b:46:23:cd:be:01:1d:0e:7d:95:8d:e8:d3: c0:d6:ba:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4okWYlsNcR8zvmJ3VFzOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw N2UyMjEwHhcNMjUxMjE5MjIwMTU3WhcNMjUxMjIwMjIwMTU3WjAzMTEwLwYDVQQD EyhjMWI2MDUyNjQ0OGNhZjllMWY5ZDQ4MjMxZWZlOTgzZTAxYjEwN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU82jLthj1NscOS53kcqOpD4YUXc 5j1uK+gELQQEi5F8iqd9qbP+REwv28fpnBNIRyuV9vuQB0oLCiSreaMc20jo7ztm KuEIxIA5wGDCLTdGwTQImoO0AJIrO7mY6mrGc3k94diojsNyv8KYwO8ZVirHyRvh YhGa3QOxuuu16T7Yxms/TcmHA4G+9LMIuNQ6dhLC90wIxYw+biRrO595Ku79bLIz Var12+DZBhzFT/R/QMTCdeIA3bEAC61sWwYc1P+Sb6HVCtoSEB0PGZClRZDvbnss JLiSErlCa80RDVhT7Y+zqk4Ik0RCYuNi5bYPTdP9h+FquFnVS1DjBria5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMG2BSZEjK+eH51IIx7+mD4BsQfgMB8GA1UdIwQY MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt NWUzNmQxYjA4MjVlLzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9qqEuW8 adcQqt3XW2nsRH1+c7JvONpHkK3CBWVkd89YiFnON7/dWkJ7QZHtNenmKTbdSc6E SkblR9q7AlyeS9akzS4qSGr3rButFiygjDEP40nyeggmXu9vN+giyglVLxaLtNL9 yv6ACuNFtTDjvnRdKpgjNgt5hH32cSek05DejAb8i6sqpzPptuBmknF7/hV6D8/o N3hvelwgbowv5HX5xIJelHub2MgKj0/RTBvjPu7Ne0B6xy7VTxb8q6qOxHof6bC7 x/P8ggAYRN1pQC/MwlsFOPp1MwwmdoRfPQ2HYXvZbcOyh2CjGw/bw6+LRiPNvgEd Dn2VjejTwNa6ig== -----END CERTIFICATE-----Generated at Sat Dec 20 05:29:14 2025 by rpki-client