This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json) Hash identifier: c+BV+60umG9AKrGfNjz+XwxPplxLKoE7cJ3Rl3lLqtY= Subject key identifier: 20:C6:FA:4B:D0:2A:C3:90:B2:7A:2E:F0:50:20:B0:A0:38:60:7C:A6 Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Certificate serial: 019B66C387FE154BF7556FD894A0F0422498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft Manifest number: 0838 Signing time: Sun 28 Dec 2025 21:00:48 +0000 Manifest this update: Sun 28 Dec 2025 21:00:48 +0000 Manifest next update: Mon 29 Dec 2025 21:00:48 +0000 Files and hashes: 1: Avvx3aT3VRXUTrx6x69kC7208rk.roa (hash: mkB5F6JMzCQ+6uSffkBPqIwarvvgqz8B0gcG77lROr0=) 2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: 2uBul42Zo5H+wBvXB9XVsEuXoh2zlS0sPy1qqOVidxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:c3:87:fe:15:4b:f7:55:6f:d8:94:a0:f0:42:24:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Validity Not Before: Dec 28 21:00:48 2025 GMT Not After : Dec 29 21:00:48 2025 GMT Subject: CN=20c6fa4bd02ac390b27a2ef05020b0a038607ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:f5:8f:be:30:dd:26:2d:55:2c:34:d4:41: 05:0d:89:b4:67:5e:bb:2c:b2:61:62:78:19:b5:ad: 92:d1:70:3a:0c:f7:85:d7:06:4e:e7:a3:a3:a7:8a: 5e:a4:fb:0e:44:90:87:3a:f8:93:b0:38:e0:7a:06: 7f:e4:aa:7e:c5:c6:ad:b9:1f:a0:86:4f:63:2b:5f: f5:14:31:b4:ce:9a:55:75:d6:a9:86:52:05:f8:e3: 56:24:90:92:95:18:ff:c7:a6:87:8e:af:c0:84:13: 58:b7:1e:a8:3a:63:12:b1:f6:52:78:84:5e:54:bc: 52:61:cd:1d:64:f7:df:a2:76:68:ec:ad:69:5f:b8: c7:dd:6e:90:61:68:68:39:d5:41:aa:06:49:f9:27: 6d:a0:d5:f8:57:04:d2:0d:7a:d4:ed:37:6b:1d:73: d5:d6:fb:1d:97:c0:df:4c:a5:11:46:c6:27:44:85: 3f:33:61:cc:37:6d:84:96:18:f3:ff:94:03:d8:e6: 9f:cd:54:13:7e:55:49:ba:cd:d9:08:48:72:b7:17: 47:21:df:b0:4b:f1:83:8b:fe:f4:0e:8b:6c:92:44: 20:ce:20:c8:9d:c8:40:65:48:5d:cf:a4:e4:17:7c: 69:97:db:af:c6:7d:b1:1b:de:21:8a:fb:f8:db:5a: 4d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:FA:4B:D0:2A:C3:90:B2:7A:2E:F0:50:20:B0:A0:38:60:7C:A6 X509v3 Authority Key Identifier: keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:74:38:92:c8:cd:0e:a3:28:f6:51:b4:87:82:e4:df:0d:83: a7:76:56:45:64:22:98:6e:70:e5:86:dc:55:b0:f5:72:26:b9: f9:61:b0:de:01:e5:63:88:9a:39:cf:88:2b:d2:ed:e7:6d:e4: 8a:ae:27:4d:a9:ea:cb:1b:be:2c:b7:05:46:a2:8b:22:d0:2d: d2:eb:06:3e:5a:69:fb:4b:a4:99:78:b2:15:01:01:f2:bb:e7: 2d:58:bd:07:1f:fd:84:1e:e5:e4:82:c9:ca:85:e6:ff:43:e5: 8e:43:a2:0d:0e:fb:3d:74:28:3a:67:73:98:18:ce:8c:23:0b: 2e:7d:f2:25:f2:49:d4:ee:16:33:67:39:bc:9b:87:3f:66:e8: c0:77:b8:1b:2e:f4:d5:0f:95:2c:31:22:f8:a7:83:19:6c:c3: cb:ba:fd:05:10:75:87:f7:dd:dc:ec:45:ab:b4:8b:85:06:3c: 12:95:20:83:30:a4:dd:8c:50:a2:82:5d:9b:f4:f9:1a:50:dc: 04:9e:2b:91:75:2e:61:52:75:f6:f9:54:df:76:e3:22:8b:08: e3:8e:ed:d7:c2:14:39:0a:0b:a6:83:ca:03:f8:5d:72:7c:da: 1b:12:d2:ee:ad:63:df:7d:76:a6:f7:f4:0f:b7:29:db:8c:f0: a4:48:39:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmw4f+FUv3VW/YlKDwQiSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZWZmOTJmYzlmZTUzNTQ3YjdlM2JlMWY4MzYwODgwOWM0 NTY2YzkwHhcNMjUxMjI4MjEwMDQ4WhcNMjUxMjI5MjEwMDQ4WjAzMTEwLwYDVQQD EygyMGM2ZmE0YmQwMmFjMzkwYjI3YTJlZjA1MDIwYjBhMDM4NjA3Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbP1j74w3SYtVSw01EEFDYm0Z167 LLJhYngZta2S0XA6DPeF1wZO56Ojp4pepPsORJCHOviTsDjgegZ/5Kp+xcatuR+g hk9jK1/1FDG0zppVddaphlIF+ONWJJCSlRj/x6aHjq/AhBNYtx6oOmMSsfZSeIRe VLxSYc0dZPffonZo7K1pX7jH3W6QYWhoOdVBqgZJ+SdtoNX4VwTSDXrU7TdrHXPV 1vsdl8DfTKURRsYnRIU/M2HMN22Elhjz/5QD2OafzVQTflVJus3ZCEhytxdHId+w S/GDi/70DotskkQgziDInchAZUhdz6TkF3xpl9uvxn2xG94hivv421pNaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDG+kvQKsOQsnou8FAgsKA4YHymMB8GA1UdIwQY MBaAFP7v+S/J/lNUe3474fg2CICcRWbJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMt NDU3NDA2MmFlY2I1LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMtNDU3NDA2MmFlY2I1 LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXQ4ksjN DqMo9lG0h4Lk3w2Dp3ZWRWQimG5w5YbcVbD1cia5+WGw3gHlY4iaOc+IK9Lt523k iq4nTanqyxu+LLcFRqKLItAt0usGPlpp+0ukmXiyFQEB8rvnLVi9Bx/9hB7l5ILJ yoXm/0PljkOiDQ77PXQoOmdzmBjOjCMLLn3yJfJJ1O4WM2c5vJuHP2bowHe4Gy70 1Q+VLDEi+KeDGWzDy7r9BRB1h/fd3OxFq7SLhQY8EpUggzCk3YxQooJdm/T5GlDc BJ4rkXUuYVJ19vlU33bjIosI447t18IUOQoLpoPKA/hdcnzaGxLS7q1j3312pvf0 D7cp24zwpEg5SA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:43:36 2025 by rpki-client