This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json) Hash identifier: uOhqDX00K57Kft0KYkDoLpBRNXcREcou1JJIa69yj5E= Subject key identifier: 8B:8E:11:56:57:8E:83:40:B9:05:33:59:56:DB:7A:FC:98:09:15:52 Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Certificate serial: 019B4249171AEA77367584200BE2A24A1709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 19:00:44 +0000 Manifest this update: Sun 21 Dec 2025 19:00:44 +0000 Manifest next update: Mon 22 Dec 2025 19:00:44 +0000 Files and hashes: 1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=) 2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: QgJ+F4vSW76nSX63bx83FjiL23rt8JN2amUSOzGL/GY=) 3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:17:1a:ea:77:36:75:84:20:0b:e2:a2:4a:17:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Validity Not Before: Dec 21 19:00:44 2025 GMT Not After : Dec 22 19:00:44 2025 GMT Subject: CN=8b8e1156578e8340b905335956db7afc98091552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:99:01:42:39:2c:77:57:78:04:a3:f3:43: e6:17:de:67:c9:8c:ca:2a:fb:c5:39:cb:c3:7c:a2: eb:0f:8a:40:70:3b:96:24:52:b8:d7:dc:65:26:b7: 0a:00:8c:59:ba:a7:49:e3:9a:a9:15:d2:16:39:08: 8d:65:51:81:42:c3:7f:00:58:79:46:65:f8:15:10: 0a:3c:96:1a:8f:7b:62:6e:b4:7f:50:ff:bc:ab:25: 05:5e:2d:c3:8c:08:ad:f5:2d:21:ba:a8:73:07:5d: 88:27:9f:2c:2f:30:c9:b7:47:07:b4:58:ce:f2:b3: 7e:e1:02:69:a6:ff:77:64:4d:46:55:bd:46:0c:96: 7d:9b:0e:9d:8c:76:97:1e:2b:74:31:d7:1c:d7:9b: 32:78:42:f6:78:ac:e2:1e:b6:b5:42:b4:68:9c:42: af:f8:6b:33:64:be:d7:5e:0e:64:74:e2:b0:4a:c8: 6c:cb:2d:28:84:b0:07:69:4a:9c:5e:90:1c:ad:de: da:75:52:93:ce:7c:21:83:60:48:36:f2:3e:71:4f: be:21:d3:33:b0:24:41:2a:e1:97:a8:c1:ef:06:62: 77:07:0e:1e:9d:84:83:ae:4f:18:7a:5d:50:6a:e9: 1f:6e:5e:35:7b:98:b7:32:e0:ec:3c:c8:ce:2c:71: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:11:56:57:8E:83:40:B9:05:33:59:56:DB:7A:FC:98:09:15:52 X509v3 Authority Key Identifier: keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:43:ea:6f:c4:bf:c1:be:c5:0e:b2:ce:50:12:e7:ca:22:3f: 90:07:f0:8c:fe:24:58:d5:1d:71:a5:1c:b2:1c:e8:a3:92:4a: 66:8b:3d:ab:c3:d1:22:2a:39:4f:02:f6:4e:3e:2b:ec:29:71: a5:bb:06:bc:ea:5f:83:80:a6:42:8b:15:57:af:c1:16:fc:cb: 20:21:3d:4d:39:dd:62:8d:62:1c:b7:b0:b2:eb:04:4e:70:2d: 68:74:9a:9c:b7:fb:21:90:dc:2f:93:16:16:20:de:10:0a:79: dc:e6:69:f9:fe:78:ab:9d:18:35:62:7f:a8:44:15:d4:63:06: 52:f6:ad:37:e8:ef:a0:f1:cd:0a:e7:3f:ae:55:d5:a1:3f:ca: 02:a4:5a:c9:1d:8f:27:ca:66:ce:c6:39:66:7e:db:b5:76:99: 0a:d4:2c:06:d8:24:a1:3c:13:7d:41:3e:e7:72:fd:2f:d5:85: 96:f4:ef:39:9a:a2:10:5e:26:f9:8a:4a:c6:be:99:0f:08:cc: 00:f8:bb:12:1d:c0:e4:c5:7d:9a:68:da:20:a6:61:f2:93:86: c1:5d:89:cb:26:5a:16:0e:de:42:98:57:21:49:af:63:02:6e: 4f:ff:f1:1e:9e:fc:be:04:af:87:50:b8:c9:99:53:2b:b5:fb: 86:97:6d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSRca6nc2dYQgC+KiShcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1 YWU4YjQwHhcNMjUxMjIxMTkwMDQ0WhcNMjUxMjIyMTkwMDQ0WjAzMTEwLwYDVQQD Eyg4YjhlMTE1NjU3OGU4MzQwYjkwNTMzNTk1NmRiN2FmYzk4MDkxNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxGZAUI5LHdXeASj80PmF95nyYzK KvvFOcvDfKLrD4pAcDuWJFK419xlJrcKAIxZuqdJ45qpFdIWOQiNZVGBQsN/AFh5 RmX4FRAKPJYaj3tibrR/UP+8qyUFXi3DjAit9S0huqhzB12IJ58sLzDJt0cHtFjO 8rN+4QJppv93ZE1GVb1GDJZ9mw6djHaXHit0Mdcc15syeEL2eKziHra1QrRonEKv +GszZL7XXg5kdOKwSshsyy0ohLAHaUqcXpAcrd7adVKTznwhg2BINvI+cU++IdMz sCRBKuGXqMHvBmJ3Bw4enYSDrk8Yel1Qaukfbl41e5i3MuDsPMjOLHEjqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuOEVZXjoNAuQUzWVbbevyYCRVSMB8GA1UdIwQY MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEPqb8S/ wb7FDrLOUBLnyiI/kAfwjP4kWNUdcaUcshzoo5JKZos9q8PRIio5TwL2Tj4r7Clx pbsGvOpfg4CmQosVV6/BFvzLICE9TTndYo1iHLewsusETnAtaHSanLf7IZDcL5MW FiDeEAp53OZp+f54q50YNWJ/qEQV1GMGUvatN+jvoPHNCuc/rlXVoT/KAqRayR2P J8pmzsY5Zn7btXaZCtQsBtgkoTwTfUE+53L9L9WFlvTvOZqiEF4m+YpKxr6ZDwjM APi7Eh3A5MV9mmjaIKZh8pOGwV2JyyZaFg7eQphXIUmvYwJuT//xHp78vgSvh1C4 yZlTK7X7hpdt+A== -----END CERTIFICATE-----Generated at Sun Dec 21 21:01:51 2025 by rpki-client