This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json) Hash identifier: MlrBXZAwSjs+VmNN6Bh/t2Mc/s+W75z3cVJLgeyf3rE= Subject key identifier: B5:88:D2:DC:D2:99:A3:72:21:6A:03:65:04:35:7A:F9:37:A8:6E:A6 Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Certificate serial: 019B424A8DEC0AB2D64D79B222339C5B2A4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft Manifest number: 091F Signing time: Sun 21 Dec 2025 19:02:20 +0000 Manifest this update: Sun 21 Dec 2025 19:02:20 +0000 Manifest next update: Mon 22 Dec 2025 19:02:20 +0000 Files and hashes: 1: PrynGxhd3fBYSysYytSLlNvgiPU.roa (hash: c1xBK/MstkcP/5fvaGRoD60yvfbDsZTSPuvQcmy7U14=) 2: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (hash: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=) 3: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: h+mVNxq9w54UTpucB6ntmtFdLzC6quF3FCn8fgJimhc=) 4: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (hash: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:8d:ec:0a:b2:d6:4d:79:b2:22:33:9c:5b:2a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Validity Not Before: Dec 21 19:02:20 2025 GMT Not After : Dec 22 19:02:20 2025 GMT Subject: CN=b588d2dcd299a372216a036504357af937a86ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:46:2c:f3:12:be:80:9d:2d:c7:19:4b:98: 10:9b:5e:dd:c2:39:bc:4a:8c:5f:b4:e0:0c:ca:f5: 37:c9:c0:cf:e7:06:7b:64:6a:0b:8d:32:99:1b:6e: d3:a8:06:71:23:c5:85:a7:16:4c:d5:f8:0f:08:9a: e4:b2:e8:c4:8f:05:b7:53:d2:d6:f1:39:d1:29:2a: b3:16:83:be:54:cd:60:00:f6:39:cc:24:e1:1b:c4: d1:07:2b:d4:47:76:27:b4:5a:a5:ad:fc:fa:43:74: 6a:d6:33:fb:2e:7a:60:28:4d:3b:04:f1:fb:2d:cd: f9:4d:b6:09:ed:41:8a:ac:40:53:45:54:60:b9:1b: 7b:38:9c:a1:95:3d:ea:45:c2:29:4d:cc:33:65:a5: 0e:40:33:f3:a4:4c:b9:3f:aa:87:38:70:70:b4:6b: 35:79:f5:eb:8e:03:08:91:f6:51:24:57:6e:d0:8c: d1:fb:81:3c:07:df:7d:42:a5:03:ab:ba:ea:9a:dc: 40:0d:ed:82:61:71:98:d4:fe:a1:ed:1d:cd:87:e7: 84:90:c1:05:84:a0:de:96:05:3b:3d:a8:fb:54:54: 04:74:57:f5:a5:38:2d:11:c4:23:e6:21:9a:0d:b4: 83:96:fe:8e:4a:4e:44:1c:c8:e6:48:06:8a:c4:96: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:D2:DC:D2:99:A3:72:21:6A:03:65:04:35:7A:F9:37:A8:6E:A6 X509v3 Authority Key Identifier: keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:d0:87:1b:32:13:90:f4:4e:e0:56:36:c9:38:84:ea:a6: 5c:65:88:0e:15:51:fd:27:bb:79:01:04:31:5b:39:f1:7e:df: 86:dc:0d:3d:a1:d8:dd:3c:48:a0:37:93:b9:17:20:82:02:10: 23:2c:f3:29:af:88:ac:4f:98:e6:7b:a0:78:28:9b:27:43:6c: d4:5f:bf:28:b1:4b:7a:b2:cd:70:bd:da:30:ac:f8:27:2a:79: eb:56:a3:67:8c:a9:e8:ce:11:85:e0:4a:38:b1:1d:42:26:d1: 98:7f:0b:52:04:1c:ab:67:51:81:ad:aa:90:67:39:69:c5:08: 99:13:31:8e:65:d7:2a:4b:4a:54:9e:59:c3:6b:ed:a5:11:8d: d7:ad:b8:b0:53:2a:02:1f:c3:0f:7a:a2:57:90:16:eb:fe:b5: 7c:55:ca:13:b9:5d:69:4b:5f:fd:c7:18:7e:e2:4e:b1:ec:d8: 03:0e:63:e7:dc:b2:5b:e7:29:07:8f:1d:83:94:cf:6d:8f:80: 1d:fd:5a:fb:8f:39:ed:f4:4d:6f:d2:77:4e:98:54:3d:e7:5a: 84:36:15:35:b7:db:cb:c1:28:b1:ad:37:44:bd:36:d4:39:22: 3b:83:f5:59:57:88:65:80:b7:07:1e:5c:78:7a:9b:8e:32:fb: 78:03:e7:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSo3sCrLWTXmyIjOcWypMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw N2UyMjEwHhcNMjUxMjIxMTkwMjIwWhcNMjUxMjIyMTkwMjIwWjAzMTEwLwYDVQQD EyhiNTg4ZDJkY2QyOTlhMzcyMjE2YTAzNjUwNDM1N2FmOTM3YTg2ZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHhGLPMSvoCdLccZS5gQm17dwjm8 SoxftOAMyvU3ycDP5wZ7ZGoLjTKZG27TqAZxI8WFpxZM1fgPCJrksujEjwW3U9LW 8TnRKSqzFoO+VM1gAPY5zCThG8TRByvUR3YntFqlrfz6Q3Rq1jP7LnpgKE07BPH7 Lc35TbYJ7UGKrEBTRVRguRt7OJyhlT3qRcIpTcwzZaUOQDPzpEy5P6qHOHBwtGs1 efXrjgMIkfZRJFdu0IzR+4E8B999QqUDq7rqmtxADe2CYXGY1P6h7R3Nh+eEkMEF hKDelgU7Paj7VFQEdFf1pTgtEcQj5iGaDbSDlv6OSk5EHMjmSAaKxJbNNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWI0tzSmaNyIWoDZQQ1evk3qG6mMB8GA1UdIwQY MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt NWUzNmQxYjA4MjVlLzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLrQhxsy E5D0TuBWNsk4hOqmXGWIDhVR/Se7eQEEMVs58X7fhtwNPaHY3TxIoDeTuRcgggIQ IyzzKa+IrE+Y5nugeCibJ0Ns1F+/KLFLerLNcL3aMKz4Jyp561ajZ4yp6M4RheBK OLEdQibRmH8LUgQcq2dRga2qkGc5acUImRMxjmXXKktKVJ5Zw2vtpRGN1624sFMq Ah/DD3qiV5AW6/61fFXKE7ldaUtf/ccYfuJOsezYAw5j59yyW+cpB48dg5TPbY+A Hf1a+4857fRNb9J3TphUPedahDYVNbfby8Eosa03RL021DkiO4P1WVeIZYC3Bx5c eHqbjjL7eAPnnw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:10:37 2025 by rpki-client