This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json) Hash identifier: dzMRe5A40r2nuhDgPLhgFeOEwW2Rw4UV5aQE11IgU18= Subject key identifier: 04:D6:FF:31:95:AA:37:1E:4A:CF:0D:76:25:B6:2C:8E:77:DE:D9:BF Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Certificate serial: 019B37C5C9E4486C80B7952DCF7F0F1FA553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft Manifest number: 0EEC Signing time: Fri 19 Dec 2025 18:01:07 +0000 Manifest this update: Fri 19 Dec 2025 18:01:07 +0000 Manifest next update: Sat 20 Dec 2025 18:01:07 +0000 Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=) 2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: SvaE8nhLBjrYMxapPRf2WGT2UNDDQLAD56lEVAR3k/8=) 3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:c9:e4:48:6c:80:b7:95:2d:cf:7f:0f:1f:a5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Validity Not Before: Dec 19 18:01:07 2025 GMT Not After : Dec 20 18:01:07 2025 GMT Subject: CN=04d6ff3195aa371e4acf0d7625b62c8e77ded9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6c:e4:45:a5:6a:59:bb:c8:e0:0b:09:31:29: 98:2d:64:cd:a3:0e:17:9d:2f:f5:10:16:f4:8e:be: 5f:65:cb:48:5e:a9:83:88:5f:97:91:0c:a8:55:66: ce:2d:4d:8c:5d:51:48:6f:4d:27:5f:19:28:7d:6f: 8d:cb:73:7f:56:c8:84:b5:d5:44:b3:5e:d2:ff:e2: 39:fb:4e:d4:09:6a:66:8e:c9:ed:70:e9:97:f5:f3: 7f:0e:e0:d2:c3:fb:e8:a8:2d:d3:ef:95:61:95:8d: 02:7a:dd:ad:f3:e9:49:41:59:dd:62:4e:96:50:8d: 6d:73:d9:9a:e8:27:f9:e4:97:c1:f6:91:d8:dd:4c: 42:1c:25:9a:10:93:d6:24:32:38:fe:4f:c8:45:d5: 15:4d:5e:d7:23:2e:b2:c6:f9:96:e9:7c:84:2a:6b: 46:20:51:02:b5:e4:98:dd:a5:be:98:5f:8d:23:f5: f7:c4:bf:c7:27:d8:42:bc:7b:84:f8:6f:03:b2:45: 75:6c:d1:45:bd:32:02:31:0d:98:b6:9f:0b:06:38: 0b:9d:46:5d:1e:cc:be:26:f8:d6:96:ce:39:d6:36: f9:4c:dc:6b:6d:16:e8:6f:53:77:0e:f6:cd:a2:77: e0:1b:da:2d:63:55:80:68:19:3e:65:b0:37:35:7e: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D6:FF:31:95:AA:37:1E:4A:CF:0D:76:25:B6:2C:8E:77:DE:D9:BF X509v3 Authority Key Identifier: keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:38:6e:1a:a2:91:1c:b4:f1:20:41:2b:9b:2a:1d:eb:e6:2f: 9f:16:8d:0b:57:ad:44:ad:d8:bc:f4:68:ef:79:7d:63:7c:9c: 70:10:75:c4:30:25:97:31:1c:e3:83:f6:ce:2d:5a:9f:71:93: da:7c:4e:04:c9:43:6b:d4:7c:7d:a2:f1:10:f1:e9:7f:69:ff: 4f:09:36:f1:d3:12:49:c4:fb:43:16:67:b3:6c:ad:36:3e:d7: a5:ab:0f:0a:ed:24:e1:3a:76:9c:b9:7f:84:73:74:61:df:9c: 7f:db:de:2d:cf:90:58:19:26:a3:c5:3b:1d:d4:bc:7f:c3:b5: f1:4b:fc:fb:d0:03:4d:67:0e:00:3d:68:4e:92:87:ab:77:b1: 88:e2:2a:a5:27:0f:b2:a2:0d:23:a9:a8:69:8f:1e:27:75:01: a5:c5:32:56:a1:fe:53:c9:e0:19:06:8c:0a:8d:97:52:9e:6e: 82:59:d5:2c:2c:43:f6:33:8b:7a:f6:e7:2f:74:3f:ac:92:2a: 21:37:6d:71:a9:c4:77:d5:66:12:f6:b1:fb:12:1f:6c:b5:b2: 6a:f2:58:40:9f:d5:95:79:3f:0e:53:c6:31:2f:90:87:c8:98: 52:2f:53:39:45:5f:99:fc:0f:8c:74:68:0f:77:6f:c7:d7:18: 67:fe:c6:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xcnkSGyAt5Utz38PH6VTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5 NWFmM2QwHhcNMjUxMjE5MTgwMTA3WhcNMjUxMjIwMTgwMTA3WjAzMTEwLwYDVQQD EygwNGQ2ZmYzMTk1YWEzNzFlNGFjZjBkNzYyNWI2MmM4ZTc3ZGVkOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGzkRaVqWbvI4AsJMSmYLWTNow4X nS/1EBb0jr5fZctIXqmDiF+XkQyoVWbOLU2MXVFIb00nXxkofW+Ny3N/VsiEtdVE s17S/+I5+07UCWpmjsntcOmX9fN/DuDSw/voqC3T75VhlY0Cet2t8+lJQVndYk6W UI1tc9ma6Cf55JfB9pHY3UxCHCWaEJPWJDI4/k/IRdUVTV7XIy6yxvmW6XyEKmtG IFECteSY3aW+mF+NI/X3xL/HJ9hCvHuE+G8DskV1bNFFvTICMQ2Ytp8LBjgLnUZd Hsy+JvjWls451jb5TNxrbRbob1N3DvbNonfgG9otY1WAaBk+ZbA3NX6FuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATW/zGVqjceSs8NdiW2LI533tm/MB8GA1UdIwQY MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt NjlkNDA2ZTE4NjUzLzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtThuGqKR HLTxIEErmyod6+YvnxaNC1etRK3YvPRo73l9Y3yccBB1xDAllzEc44P2zi1an3GT 2nxOBMlDa9R8faLxEPHpf2n/Twk28dMSScT7QxZns2ytNj7XpasPCu0k4Tp2nLl/ hHN0Yd+cf9veLc+QWBkmo8U7HdS8f8O18Uv8+9ADTWcOAD1oTpKHq3exiOIqpScP sqINI6moaY8eJ3UBpcUyVqH+U8ngGQaMCo2XUp5uglnVLCxD9jOLevbnL3Q/rJIq ITdtcanEd9VmEvax+xIfbLWyavJYQJ/VlXk/DlPGMS+Qh8iYUi9TOUVfmfwPjHRo D3dvx9cYZ/7G7g== -----END CERTIFICATE-----Generated at Fri Dec 19 21:53:52 2025 by rpki-client