This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json) Hash identifier: QumDcSDYEwidQUKyO0VLChnYKakc8i34ZQyWoWwSk3Y= Subject key identifier: CF:1E:B8:FB:D1:3F:7B:73:C1:59:EE:A3:0A:7E:1C:11:58:D2:35:C5 Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Certificate serial: 019B3B346C635ACD0A0495C9E6008D93D3F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft Manifest number: 14CB Signing time: Sat 20 Dec 2025 10:00:49 +0000 Manifest this update: Sat 20 Dec 2025 10:00:49 +0000 Manifest next update: Sun 21 Dec 2025 10:00:49 +0000 Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: dsjb6Y2DeMsJV6AORw1nSvhg1Wih3eD6viQfAbKD+r8=) 2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:6c:63:5a:cd:0a:04:95:c9:e6:00:8d:93:d3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Validity Not Before: Dec 20 10:00:49 2025 GMT Not After : Dec 21 10:00:49 2025 GMT Subject: CN=cf1eb8fbd13f7b73c159eea30a7e1c1158d235c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:d3:18:4c:09:53:53:05:fc:a3:f8:3c:3a: 2a:fd:c6:c6:08:e1:7c:62:f5:1a:a0:be:49:b0:db: 58:17:1a:cc:48:4e:d0:5f:90:b0:0d:65:0d:e3:bc: 89:02:57:ec:b0:4f:2a:46:9e:ad:fe:5b:2f:c7:bb: ab:0d:fc:5e:1f:f7:62:22:b4:10:c8:54:5e:37:aa: e1:3f:7b:4f:00:d8:91:0e:96:3f:70:ef:5d:5a:95: 64:01:d6:0e:3c:77:cc:db:47:8b:ca:7e:0a:30:89: 84:2a:5e:5e:35:bb:d1:a7:c8:0a:59:06:94:a8:14: f9:24:de:af:05:81:26:10:1e:03:cd:38:f4:f3:cb: fc:13:c0:e8:65:dc:3d:b0:6f:15:61:15:2e:47:00: 41:31:fd:72:6d:de:2b:70:0d:7c:08:af:9f:35:d8: bf:43:6e:8c:21:6b:80:9b:6a:e4:85:29:9a:97:42: e4:55:35:85:53:27:d1:20:2d:60:95:a4:4b:e0:3f: 5f:48:ac:ee:ab:4c:80:cf:51:46:79:22:81:74:3c: e2:73:fe:5d:3f:f3:ab:f8:25:06:1c:4c:70:5a:4b: 2d:59:8e:01:12:4e:2c:03:01:84:f6:01:06:ef:29: a8:24:62:23:83:8b:ac:df:5b:5d:8d:11:5b:31:0a: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1E:B8:FB:D1:3F:7B:73:C1:59:EE:A3:0A:7E:1C:11:58:D2:35:C5 X509v3 Authority Key Identifier: keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:64:c3:22:d9:92:f4:cd:50:e7:85:8a:25:69:f8:0e:73:17: e1:6c:60:02:c9:60:d0:42:cd:1f:67:fe:08:66:c9:a9:a6:09: 18:d3:65:26:87:76:87:4a:8d:b7:6e:e8:99:83:df:64:c2:a6: c5:05:d2:be:02:b7:c1:7c:95:a9:c6:da:3c:0d:23:26:9e:c5: 47:32:ba:00:c2:1b:f9:82:a3:64:34:3d:76:be:9e:ec:66:eb: eb:23:2d:54:b7:e8:2f:64:de:36:8c:c2:4c:9b:7e:ea:bc:eb: 03:3c:de:2b:97:06:02:e2:9a:3c:be:d9:7a:0c:5a:79:fe:d0: 77:f6:d7:00:43:ed:ec:8e:bf:56:aa:ac:c1:2f:da:1b:f5:f3: 81:49:dd:f7:27:5a:1f:b9:0f:7c:b2:04:62:21:86:7a:ce:cb: 95:cb:4f:51:61:e4:b0:d5:c7:34:14:f0:0f:3d:ad:df:c3:15: f1:ef:5f:8f:d9:c1:be:2d:fa:2e:6b:d0:87:b5:10:d7:a0:ed: 5c:20:fe:24:1a:8a:1a:66:4e:9a:2c:ae:8b:80:10:80:74:32: 8d:d0:2c:51:9f:a8:48:f8:de:c4:c2:15:80:a7:b4:56:14:79: 67:c4:76:ec:c8:22:7e:3e:94:25:60:d5:2c:3b:ae:1e:3a:d4: 26:ca:3a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NGxjWs0KBJXJ5gCNk9PwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZGE5OWY5MzUxOGUyOWE5NDViMDdmNjBhMThlZjg2ZTli MzllNjUwHhcNMjUxMjIwMTAwMDQ5WhcNMjUxMjIxMTAwMDQ5WjAzMTEwLwYDVQQD EyhjZjFlYjhmYmQxM2Y3YjczYzE1OWVlYTMwYTdlMWMxMTU4ZDIzNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmvTGEwJU1MF/KP4PDoq/cbGCOF8 YvUaoL5JsNtYFxrMSE7QX5CwDWUN47yJAlfssE8qRp6t/lsvx7urDfxeH/diIrQQ yFReN6rhP3tPANiRDpY/cO9dWpVkAdYOPHfM20eLyn4KMImEKl5eNbvRp8gKWQaU qBT5JN6vBYEmEB4DzTj088v8E8DoZdw9sG8VYRUuRwBBMf1ybd4rcA18CK+fNdi/ Q26MIWuAm2rkhSmal0LkVTWFUyfRIC1glaRL4D9fSKzuq0yAz1FGeSKBdDzic/5d P/Or+CUGHExwWkstWY4BEk4sAwGE9gEG7ymoJGIjg4us31tdjRFbMQo8LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8euPvRP3tzwVnuowp+HBFY0jXFMB8GA1UdIwQY MBaAFFPamfk1GOKalFsH9goY74bps55lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODkt OWYzMDJjMjBhZTcwLzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODktOWYzMDJjMjBhZTcw LzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymTDItmS 9M1Q54WKJWn4DnMX4WxgAslg0ELNH2f+CGbJqaYJGNNlJod2h0qNt27omYPfZMKm xQXSvgK3wXyVqcbaPA0jJp7FRzK6AMIb+YKjZDQ9dr6e7Gbr6yMtVLfoL2TeNozC TJt+6rzrAzzeK5cGAuKaPL7Zegxaef7Qd/bXAEPt7I6/VqqswS/aG/XzgUnd9yda H7kPfLIEYiGGes7LlctPUWHksNXHNBTwDz2t38MV8e9fj9nBvi36LmvQh7UQ16Dt XCD+JBqKGmZOmiyui4AQgHQyjdAsUZ+oSPjexMIVgKe0VhR5Z8R27Mgifj6UJWDV LDuuHjrUJso6Bg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:14:50 2025 by rpki-client