This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json) Hash identifier: llA21NTTG+DXfdvbT31zS0qJOTlfHLSt5qzzDusDOjg= Subject key identifier: DF:5B:5F:F5:18:A9:50:E9:FC:8A:C0:64:FA:6F:6D:6D:A0:09:EC:0B Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Certificate serial: 019B593EE9C315B6CF11AB1FF9759C56BF5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft Manifest number: 0831 Signing time: Fri 26 Dec 2025 06:00:53 +0000 Manifest this update: Fri 26 Dec 2025 06:00:53 +0000 Manifest next update: Sat 27 Dec 2025 06:00:53 +0000 Files and hashes: 1: Avvx3aT3VRXUTrx6x69kC7208rk.roa (hash: mkB5F6JMzCQ+6uSffkBPqIwarvvgqz8B0gcG77lROr0=) 2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: gJGqet9BQzEK2so1ue2TMCq/oT8dcoFQd7B0JzNPXfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e9:c3:15:b6:cf:11:ab:1f:f9:75:9c:56:bf:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Validity Not Before: Dec 26 06:00:53 2025 GMT Not After : Dec 27 06:00:53 2025 GMT Subject: CN=df5b5ff518a950e9fc8ac064fa6f6d6da009ec0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:cb:3a:a1:ea:9f:c1:2e:e2:79:2a:6d:1c: 33:6a:ff:68:ff:d8:49:54:cd:07:45:83:4f:9b:fb: dc:d9:6b:eb:95:92:ac:29:fc:42:ec:b8:26:e2:3e: a9:69:11:0e:6b:c1:cc:11:91:42:ef:84:7c:da:a1: 93:e7:ed:32:4a:f5:fd:f9:c7:e1:15:c2:53:32:52: 98:ee:ff:0f:2c:de:c8:f3:5f:20:12:18:55:1d:64: 19:24:08:43:26:9d:33:79:5d:c7:c3:a1:88:08:28: a2:09:dd:09:38:25:ca:5e:2f:7c:44:3d:ab:c8:87: 1d:1a:32:ae:c5:fa:2e:8f:8c:9d:ae:02:67:44:25: 15:a9:a8:ff:df:9c:88:02:a9:d0:02:1e:c9:b2:3a: 44:25:78:69:9b:8b:33:4a:8c:df:4d:e2:67:ce:e8: 70:1e:65:6a:47:0b:c5:eb:88:fe:d4:66:2b:b7:b8: 9b:56:d1:c2:b5:c8:ce:ef:71:75:24:f2:41:6c:0e: 29:1a:2d:28:f7:77:49:e7:9f:14:15:15:a2:41:a1: 03:36:77:14:a7:33:2d:6e:63:44:b2:5e:8b:f0:06: ac:5d:da:ad:f1:f0:77:f7:dc:e9:89:e0:dc:6d:02: 98:99:8b:d3:bc:d1:d3:11:9d:4d:44:3d:d8:b4:7f: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5B:5F:F5:18:A9:50:E9:FC:8A:C0:64:FA:6F:6D:6D:A0:09:EC:0B X509v3 Authority Key Identifier: keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d6:a4:32:8f:9f:cc:ab:8d:c4:f2:f2:01:e7:39:1e:06:72: 60:58:d8:a8:78:74:e3:77:da:e5:43:de:3a:78:81:3e:e9:14: fb:17:2a:a6:76:36:1e:a4:a7:fe:90:cb:8a:89:2f:f3:cc:6c: 38:fa:6e:a6:03:7d:ef:a3:07:4b:43:6c:b4:b3:7f:87:3c:4f: ff:6c:59:da:81:c2:21:ad:65:83:04:39:b6:f6:f6:38:92:e7: 80:20:89:af:90:d4:7e:d5:73:65:e5:43:5d:83:9a:b1:18:1a: c7:19:c1:65:e0:62:56:09:b2:26:22:08:bc:dc:68:1d:a6:4d: da:29:27:37:59:b9:a9:de:23:96:f7:ed:e5:2d:c8:0c:06:0b: d3:43:63:e6:e1:e4:18:3a:ba:68:22:42:8f:ae:63:c3:ef:a2: de:73:72:60:ed:40:91:88:6c:b4:12:2f:1c:54:27:ec:0b:71: 64:43:b9:68:39:c4:4c:7a:73:95:e2:46:55:f2:59:6c:50:15: c8:bd:68:30:47:a2:e3:44:1d:01:05:c0:55:6d:84:96:0c:9b: c3:94:19:5b:78:2e:26:3a:8f:00:3d:95:9b:a7:58:01:0f:17: 7f:73:6d:f7:3d:8f:9f:e4:1b:cf:62:37:37:06:5a:2c:e0:e7: a6:6c:7b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPunDFbbPEasf+XWcVr9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZWZmOTJmYzlmZTUzNTQ3YjdlM2JlMWY4MzYwODgwOWM0 NTY2YzkwHhcNMjUxMjI2MDYwMDUzWhcNMjUxMjI3MDYwMDUzWjAzMTEwLwYDVQQD EyhkZjViNWZmNTE4YTk1MGU5ZmM4YWMwNjRmYTZmNmQ2ZGEwMDllYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDPLOqHqn8Eu4nkqbRwzav9o/9hJ VM0HRYNPm/vc2WvrlZKsKfxC7Lgm4j6paREOa8HMEZFC74R82qGT5+0ySvX9+cfh FcJTMlKY7v8PLN7I818gEhhVHWQZJAhDJp0zeV3Hw6GICCiiCd0JOCXKXi98RD2r yIcdGjKuxfouj4ydrgJnRCUVqaj/35yIAqnQAh7JsjpEJXhpm4szSozfTeJnzuhw HmVqRwvF64j+1GYrt7ibVtHCtcjO73F1JPJBbA4pGi0o93dJ558UFRWiQaEDNncU pzMtbmNEsl6L8AasXdqt8fB399zpieDcbQKYmYvTvNHTEZ1NRD3YtH9zIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9bX/UYqVDp/IrAZPpvbW2gCewLMB8GA1UdIwQY MBaAFP7v+S/J/lNUe3474fg2CICcRWbJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMt NDU3NDA2MmFlY2I1LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMtNDU3NDA2MmFlY2I1 LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNakMo+f zKuNxPLyAec5HgZyYFjYqHh043fa5UPeOniBPukU+xcqpnY2HqSn/pDLiokv88xs OPpupgN976MHS0NstLN/hzxP/2xZ2oHCIa1lgwQ5tvb2OJLngCCJr5DUftVzZeVD XYOasRgaxxnBZeBiVgmyJiIIvNxoHaZN2iknN1m5qd4jlvft5S3IDAYL00Nj5uHk GDq6aCJCj65jw++i3nNyYO1AkYhstBIvHFQn7AtxZEO5aDnETHpzleJGVfJZbFAV yL1oMEei40QdAQXAVW2Elgybw5QZW3guJjqPAD2Vm6dYAQ8Xf3Nt9z2Pn+Qbz2I3 NwZaLODnpmx7+A== -----END CERTIFICATE-----Generated at Fri Dec 26 10:59:56 2025 by rpki-client