This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json) Hash identifier: ZEzIweQXSo5wFH4J5RL4sl2ax6hOLvHDhdG33vA9+cs= Subject key identifier: 89:55:8D:07:30:62:BE:A7:9E:AF:A8:FE:69:30:50:BD:51:FD:02:4D Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724 Certificate serial: 019B43930A9ADD2ECB40FDC38A26C2F3CCC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft Manifest number: 053B Signing time: Mon 22 Dec 2025 01:01:08 +0000 Manifest this update: Mon 22 Dec 2025 01:01:08 +0000 Manifest next update: Tue 23 Dec 2025 01:01:08 +0000 Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: N0jwSLc4RamSVmSaO4rJFR9nMFeGRJEgz89fEmiL6oc=) 2: tuLehSOy-qAFQeskzDC9g5qQP28.roa (hash: PI1JhY3WzMR4z9FpYAEO5831pX148zh5gBmaERfINeo=) 3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:0a:9a:dd:2e:cb:40:fd:c3:8a:26:c2:f3:cc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724 Validity Not Before: Dec 22 01:01:08 2025 GMT Not After : Dec 23 01:01:08 2025 GMT Subject: CN=89558d073062bea79eafa8fe693050bd51fd024d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:f0:e0:bb:f9:9f:02:9b:f0:c0:9a:69:d2: ed:2d:94:2d:f7:32:42:49:04:ae:bf:ea:6f:62:27: 91:21:46:34:99:ae:aa:08:f3:96:c6:17:b8:d7:d9: bd:f0:0e:01:c5:47:d0:f2:72:99:04:be:f2:12:b9: 11:3f:45:82:47:f6:18:07:ce:2c:01:6e:e1:39:6f: cb:b8:ad:ac:07:3d:26:54:ae:3f:81:45:72:67:54: b8:82:82:19:f0:b6:ef:d8:f2:c1:76:d1:0d:4b:21: 78:58:12:1a:58:16:01:68:1d:d4:0a:06:b4:21:76: 6a:56:f1:6a:24:58:f6:f1:b9:de:b6:81:ec:dd:ec: cc:45:35:0c:58:57:e3:3c:66:eb:14:73:8a:ca:3a: 71:b1:45:df:95:0e:fd:de:ea:9a:37:0c:32:38:f5: 8d:e8:79:3f:f3:18:32:f8:24:f4:16:4c:38:15:71: 99:66:7a:9e:3f:ba:28:b2:fd:20:c3:e8:ad:f3:31: 7c:be:55:3f:11:5a:24:50:e7:55:e9:3f:70:e7:92: e4:48:6d:ff:ab:81:4b:6a:78:80:ae:9f:20:36:f4: e8:f4:a3:9e:f3:7c:c0:1c:5c:a6:97:88:50:2e:bb: 41:a6:18:fd:c4:79:b7:1c:74:72:38:57:45:d5:78: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:55:8D:07:30:62:BE:A7:9E:AF:A8:FE:69:30:50:BD:51:FD:02:4D X509v3 Authority Key Identifier: keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:24:b7:c1:cd:b3:67:bd:d3:1b:a7:f9:ac:5b:91:d4:db:e3: 11:92:93:d7:e4:af:6a:d0:b9:d4:c3:e5:ea:23:c9:19:64:3b: 17:3d:63:1a:31:1f:fe:49:d3:98:de:90:12:0c:d6:1b:ac:48: 02:13:b6:f6:8d:fc:45:cf:99:5d:19:ef:15:ac:29:64:ce:6b: 45:01:4c:7d:c9:92:67:f9:07:fe:40:ae:d2:1e:f1:27:06:25: 01:89:24:83:87:0e:5a:86:d1:bb:35:4a:b5:16:83:bb:57:65: 14:06:55:d0:4e:dd:7a:c1:e7:37:15:c8:f0:91:23:3e:9e:c4: 4f:ba:ac:bc:c0:11:f7:dc:61:8e:3e:c8:f9:fb:91:e1:c6:16: 1b:5e:43:0a:ed:49:83:54:7a:8f:f0:44:f2:bf:f4:f3:98:d5: 07:ba:6c:52:4c:f5:76:33:3e:16:db:1e:55:db:9b:26:c4:ab: 27:ff:bd:d9:8a:f3:07:23:0d:19:4e:f0:45:62:45:2d:bc:95: 4c:74:35:ba:98:72:75:bd:e2:2d:0e:30:10:c9:1c:6a:d6:58: bb:fe:b1:44:f6:5a:76:01:ff:96:04:f9:47:a6:56:99:a2:fd: 5d:21:57:14:ab:95:1c:44:02:0b:2b:5b:2b:08:33:c4:9e:8e: 68:bf:15:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkwqa3S7LQP3DiibC88zEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5 OWE3MjQwHhcNMjUxMjIyMDEwMTA4WhcNMjUxMjIzMDEwMTA4WjAzMTEwLwYDVQQD Eyg4OTU1OGQwNzMwNjJiZWE3OWVhZmE4ZmU2OTMwNTBiZDUxZmQwMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Dw4Lv5nwKb8MCaadLtLZQt9zJC SQSuv+pvYieRIUY0ma6qCPOWxhe419m98A4BxUfQ8nKZBL7yErkRP0WCR/YYB84s AW7hOW/LuK2sBz0mVK4/gUVyZ1S4goIZ8Lbv2PLBdtENSyF4WBIaWBYBaB3UCga0 IXZqVvFqJFj28bnetoHs3ezMRTUMWFfjPGbrFHOKyjpxsUXflQ793uqaNwwyOPWN 6Hk/8xgy+CT0Fkw4FXGZZnqeP7oosv0gw+it8zF8vlU/EVokUOdV6T9w55LkSG3/ q4FLaniArp8gNvTo9KOe83zAHFyml4hQLrtBphj9xHm3HHRyOFdF1XhWIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlVjQcwYr6nnq+o/mkwUL1R/QJNMB8GA1UdIwQY MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2 LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCS3wc2z Z73TG6f5rFuR1NvjEZKT1+SvatC51MPl6iPJGWQ7Fz1jGjEf/knTmN6QEgzWG6xI AhO29o38Rc+ZXRnvFawpZM5rRQFMfcmSZ/kH/kCu0h7xJwYlAYkkg4cOWobRuzVK tRaDu1dlFAZV0E7desHnNxXI8JEjPp7ET7qsvMAR99xhjj7I+fuR4cYWG15DCu1J g1R6j/BE8r/085jVB7psUkz1djM+FtseVdubJsSrJ/+92YrzByMNGU7wRWJFLbyV THQ1uphydb3iLQ4wEMkcatZYu/6xRPZadgH/lgT5R6ZWmaL9XSFXFKuVHEQCCytb KwgzxJ6OaL8Vug== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:40 2025 by rpki-client