This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json) Hash identifier: ZP2GjntMj/4LtXfJKb2mKgQpQ2DGF+8a9hdl7BGXqjY= Subject key identifier: F0:F8:66:DF:92:7A:30:08:2D:6E:05:C7:F3:59:A8:49:F6:60:72:28 Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Certificate serial: 019B3C1011EE7B8FA1DBB0BE3168748D1102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft Manifest number: 066F Signing time: Sat 20 Dec 2025 14:00:44 +0000 Manifest this update: Sat 20 Dec 2025 14:00:44 +0000 Manifest next update: Sun 21 Dec 2025 14:00:44 +0000 Files and hashes: 1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=) 2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: yRPWr/Q+l6fxgNvMXRk4l5KqMAQN+xRTcwlkBoEBn4g=) 3: u73KDW8PuRjOHzU8hQWCibfuL0k.roa (hash: En9Qm8idx2XEIJcVI/CY5UqHLPTe0K6nyndadhEDej8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:11:ee:7b:8f:a1:db:b0:be:31:68:74:8d:11:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157 Validity Not Before: Dec 20 14:00:44 2025 GMT Not After : Dec 21 14:00:44 2025 GMT Subject: CN=f0f866df927a30082d6e05c7f359a849f6607228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:f7:c9:48:41:48:fe:3a:4c:e1:d9:29:70: f4:d9:e3:02:b6:ac:56:01:aa:6d:79:b3:07:05:bb: b7:7d:02:e3:b5:09:6a:5c:0d:63:01:4d:79:ba:fc: 10:e9:20:ce:dc:43:63:bc:33:54:c8:58:07:5c:21: ba:d9:bc:16:e7:45:33:b2:b8:cc:79:5b:b2:1c:0b: ec:02:43:27:a4:c0:f1:f1:6a:74:fb:cd:8d:b9:4c: c5:50:08:b8:3c:2a:f5:2a:a5:5c:20:3c:9e:a8:d6: c4:aa:a6:2c:3d:19:57:4f:01:55:5f:bf:7c:92:89: 65:01:cf:d2:c0:be:28:05:c4:88:ef:78:b0:a4:26: ba:aa:7c:ee:fa:d8:f5:38:7c:6c:c9:77:57:e7:60: c8:04:bb:df:a4:14:5c:14:5b:84:60:5e:5d:55:51: 0a:39:58:13:df:8a:b5:07:b5:6e:42:4a:f9:0c:c2: b6:16:4e:37:ea:a2:67:04:ef:f9:f3:af:1b:a9:d6: ff:99:b6:6d:20:ea:50:90:5b:5d:ae:00:7e:76:a4: 6e:4d:cc:f3:d6:f7:37:38:15:46:cf:0b:d5:4d:63: d0:22:40:2f:67:18:e4:63:b2:e0:a9:b4:b6:05:af: 4f:bc:9d:dc:72:d6:f9:aa:5f:03:b1:14:d6:31:ab: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F8:66:DF:92:7A:30:08:2D:6E:05:C7:F3:59:A8:49:F6:60:72:28 X509v3 Authority Key Identifier: keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3f:55:1b:69:bf:c1:a3:c8:c6:39:87:a8:db:88:27:97:c8: 17:47:f9:b7:be:70:d6:f6:72:c3:15:03:57:8a:81:a7:cd:14: d4:13:d5:a0:66:d0:9a:75:d4:42:21:60:e0:e7:2b:a5:f7:62: 1e:b4:37:ed:d1:28:37:a7:6e:ff:1a:70:8c:dd:15:a2:54:63: d6:e2:af:9e:49:dd:21:14:94:c5:5f:63:df:d9:4c:6f:74:71: 07:9c:3c:64:26:ba:de:c2:9b:25:de:47:49:8f:62:e2:b5:58: 86:e9:57:65:21:16:0a:26:d1:c5:08:4f:d9:bd:ff:0a:32:0e: fc:3f:5e:39:76:56:b1:dd:0e:72:d9:7b:48:27:9e:a1:a8:64: fc:b9:36:5e:8c:52:e2:f7:58:0c:63:60:8d:6b:ca:6e:5d:15: 47:1b:45:08:ff:5d:69:00:32:ed:43:f6:7c:54:70:c7:64:40: 0f:eb:91:08:66:59:2f:ea:2f:55:7d:86:1d:de:16:1c:fa:27: e5:33:29:af:7e:65:21:22:98:a0:ab:7b:27:45:ee:4d:25:f9: 67:91:04:f5:ac:43:19:95:da:bd:e7:bd:08:f8:a0:8b:8b:67: 78:e8:75:83:f3:75:aa:96:51:0f:7d:0a:66:f2:1d:da:b3:7c: fe:1b:5c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBHue4+h27C+MWh0jRECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4 MTUxNTcwHhcNMjUxMjIwMTQwMDQ0WhcNMjUxMjIxMTQwMDQ0WjAzMTEwLwYDVQQD EyhmMGY4NjZkZjkyN2EzMDA4MmQ2ZTA1YzdmMzU5YTg0OWY2NjA3MjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4v3yUhBSP46TOHZKXD02eMCtqxW AaptebMHBbu3fQLjtQlqXA1jAU15uvwQ6SDO3ENjvDNUyFgHXCG62bwW50UzsrjM eVuyHAvsAkMnpMDx8Wp0+82NuUzFUAi4PCr1KqVcIDyeqNbEqqYsPRlXTwFVX798 kollAc/SwL4oBcSI73iwpCa6qnzu+tj1OHxsyXdX52DIBLvfpBRcFFuEYF5dVVEK OVgT34q1B7VuQkr5DMK2Fk436qJnBO/5868bqdb/mbZtIOpQkFtdrgB+dqRuTczz 1vc3OBVGzwvVTWPQIkAvZxjkY7LgqbS2Ba9PvJ3cctb5ql8DsRTWMasQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD4Zt+SejAILW4Fx/NZqEn2YHIoMB8GA1UdIwQY MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt MzM4ODE0NjdhYzVlLzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD9VG2m/ waPIxjmHqNuIJ5fIF0f5t75w1vZywxUDV4qBp80U1BPVoGbQmnXUQiFg4Ocrpfdi HrQ37dEoN6du/xpwjN0VolRj1uKvnkndIRSUxV9j39lMb3RxB5w8ZCa63sKbJd5H SY9i4rVYhulXZSEWCibRxQhP2b3/CjIO/D9eOXZWsd0Octl7SCeeoahk/Lk2XoxS 4vdYDGNgjWvKbl0VRxtFCP9daQAy7UP2fFRwx2RAD+uRCGZZL+ovVX2GHd4WHPon 5TMpr35lISKYoKt7J0XuTSX5Z5EE9axDGZXavee9CPigi4tneOh1g/N1qpZRD30K ZvId2rN8/htcLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:57:10 2025 by rpki-client