This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft File: U3h815RuENiGRqx53lfMbsWeQTI.mft (raw, json) Hash identifier: ph+hKiAOFpDw1KTDvu+PQbK1hv0LoffVaVwXEJtmewg= Subject key identifier: F8:4B:60:27:9E:36:A7:19:6E:E8:78:92:D6:DC:AF:94:04:48:45:36 Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32 Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132 Certificate serial: 019B38338445A27761E9FD2D83AA240BB458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft Manifest number: 1434 Signing time: Fri 19 Dec 2025 20:00:58 +0000 Manifest this update: Fri 19 Dec 2025 20:00:58 +0000 Manifest next update: Sat 20 Dec 2025 20:00:58 +0000 Files and hashes: 1: Gb_tS4tDYUhq7ZFBBu6bXOHKxSQ.roa (hash: j+ql1A+cPykDsn/U+bRsvn2rorjyFgGlp+mF0Qt3tRQ=) 2: U3h815RuENiGRqx53lfMbsWeQTI.crl (hash: VRGVaBTiHvT5Zd42tnz+omS6KJsb4RRakpJ4Fr4CnP8=) 3: aDocXw9aAWTC2tonweXjSXZoNMs.roa (hash: M6NywDoKFY4uKrDQ3WCmTb7f59Ph9hBt6rzgbYZvGvU=) 4: dqRRF9NrCy7kpjHElym2fRaWWpg.roa (hash: yVbcvUrGd5qHEf8kKaXL1t+AGyhms8ILF9sbmeot86I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:84:45:a2:77:61:e9:fd:2d:83:aa:24:0b:b4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132 Validity Not Before: Dec 19 20:00:58 2025 GMT Not After : Dec 20 20:00:58 2025 GMT Subject: CN=f84b60279e36a7196ee87892d6dcaf9404484536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:75:00:56:01:d6:64:1f:f4:a0:a9:8f:cc: 0c:ce:ea:f3:da:21:d4:84:f3:14:e7:28:41:7f:e7: 74:d6:71:32:37:75:06:96:da:04:77:90:e6:f3:be: 33:5d:6a:fc:8f:4e:e2:89:0c:ad:f2:3d:77:f2:68: 45:0e:53:8c:e3:48:c8:de:36:ad:92:88:c6:28:08: b8:b9:d5:75:a0:e1:30:53:e7:03:df:19:ee:d4:30: c3:55:85:84:9b:5b:d0:f4:2e:33:b7:07:b0:79:db: 05:51:dd:c2:d7:67:ee:f0:40:2f:56:59:ca:48:e0: ee:13:63:34:08:97:ec:72:04:20:f7:09:39:ec:1f: fc:07:c8:3c:cd:cc:20:1f:fb:37:bc:ad:82:50:23: 11:2d:07:80:ec:6c:66:39:88:ac:67:9b:6b:36:76: 60:a3:8e:75:ca:63:9d:49:e8:5a:b3:2f:a2:56:3c: 6f:4f:0f:dd:8d:c8:82:2a:53:85:50:17:67:37:d1: be:3a:46:79:fe:ae:21:d9:41:8b:5c:29:10:68:05: 71:cc:df:cf:f3:8e:f9:d1:49:c5:5f:78:99:03:99: ef:c6:ca:6b:a8:45:75:ec:0d:9e:57:e0:3b:fa:4a: 5a:d3:53:56:58:5d:4f:fc:5f:4d:af:9c:7b:7c:aa: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4B:60:27:9E:36:A7:19:6E:E8:78:92:D6:DC:AF:94:04:48:45:36 X509v3 Authority Key Identifier: keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:22:cd:18:92:23:d8:33:18:ba:81:e3:b3:c1:9f:7a:bc:6f: 61:b8:2f:2b:20:e1:7a:72:5c:24:03:ad:78:64:42:b5:a1:08: 74:a1:cf:f7:66:24:55:25:65:f7:79:42:b1:80:05:7d:9c:ec: 04:12:b1:8d:2f:76:0d:35:66:89:8e:60:16:97:91:5d:4f:95: e6:f1:1f:f2:a9:76:59:44:83:09:cc:a0:5a:0f:1c:c2:3a:ce: 88:84:6f:28:3d:1b:51:5e:b3:0e:0a:da:d7:a6:c8:25:3d:d2: e6:32:21:ce:72:c0:6b:b0:d2:7d:f3:4c:96:0e:12:80:7c:a4: 57:52:d6:11:f6:ed:d9:5b:a7:58:8b:c7:d5:15:5d:61:95:cb: 84:88:ae:c8:5b:db:81:54:d1:ea:9b:42:fe:c9:38:0e:5c:97: 0e:c5:43:79:00:d2:a4:ae:5b:f2:e0:6f:65:ee:1c:09:aa:3b: 1e:f9:67:f9:e8:62:b3:3a:6f:1d:fa:7a:da:05:dc:97:c8:a7: f4:a8:f4:a5:9f:f1:00:a2:ec:d8:b7:86:a3:1e:48:dd:c0:1a: db:2a:a0:df:72:07:5a:7d:c9:89:d4:90:7e:99:e3:79:f3:e3: 89:71:d6:07:49:37:5b:f9:83:04:30:ad:d4:3e:20:ba:08:cc: 51:e7:d0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M4RFondh6f0tg6okC7RYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzg3Y2Q3OTQ2ZTEwZDg4NjQ2YWM3OWRlNTdjYzZlYzU5 ZTQxMzIwHhcNMjUxMjE5MjAwMDU4WhcNMjUxMjIwMjAwMDU4WjAzMTEwLwYDVQQD EyhmODRiNjAyNzllMzZhNzE5NmVlODc4OTJkNmRjYWY5NDA0NDg0NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/d1AFYB1mQf9KCpj8wMzurz2iHU hPMU5yhBf+d01nEyN3UGltoEd5Dm874zXWr8j07iiQyt8j138mhFDlOM40jI3jat kojGKAi4udV1oOEwU+cD3xnu1DDDVYWEm1vQ9C4ztwewedsFUd3C12fu8EAvVlnK SODuE2M0CJfscgQg9wk57B/8B8g8zcwgH/s3vK2CUCMRLQeA7GxmOYisZ5trNnZg o451ymOdSehasy+iVjxvTw/djciCKlOFUBdnN9G+OkZ5/q4h2UGLXCkQaAVxzN/P 84750UnFX3iZA5nvxsprqEV17A2eV+A7+kpa01NWWF1P/F9Nr5x7fKpBvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhLYCeeNqcZbuh4ktbcr5QESEU2MB8GA1UdIwQY MBaAFFN4fNeUbhDYhkased5XzG7FnkEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAt NTIzZmQ4NmEwN2M3LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAtNTIzZmQ4NmEwN2M3 LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiLNGJIj 2DMYuoHjs8GferxvYbgvKyDhenJcJAOteGRCtaEIdKHP92YkVSVl93lCsYAFfZzs BBKxjS92DTVmiY5gFpeRXU+V5vEf8ql2WUSDCcygWg8cwjrOiIRvKD0bUV6zDgra 16bIJT3S5jIhznLAa7DSffNMlg4SgHykV1LWEfbt2VunWIvH1RVdYZXLhIiuyFvb gVTR6ptC/sk4DlyXDsVDeQDSpK5b8uBvZe4cCao7Hvln+ehiszpvHfp62gXcl8in 9Kj0pZ/xAKLs2LeGox5I3cAa2yqg33IHWn3JidSQfpnjefPjiXHWB0k3W/mDBDCt 1D4gugjMUefQiA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:02:06 2025 by rpki-client