This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft File: U_8iLUoiYwLL8QBoyqb0xB97scs.mft (raw, json) Hash identifier: Lw7Zd+cJ6s/mNp1klusO3yrFA5pHKWt1HCfITBqxQUg= Subject key identifier: 85:8D:6A:AC:A1:26:F3:B0:AE:A7:16:EE:A7:94:35:7E:B1:7D:B6:5A Authority key identifier: 53:FF:22:2D:4A:22:63:02:CB:F1:00:68:CA:A6:F4:C4:1F:7B:B1:CB Certificate issuer: /CN=53ff222d4a226302cbf10068caa6f4c41f7bb1cb Certificate serial: 019B3C7F6C21D275C518F283BB37DFFDD60C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft Manifest number: 032E Signing time: Sat 20 Dec 2025 16:02:22 +0000 Manifest this update: Sat 20 Dec 2025 16:02:22 +0000 Manifest next update: Sun 21 Dec 2025 16:02:22 +0000 Files and hashes: 1: U_8iLUoiYwLL8QBoyqb0xB97scs.crl (hash: eLpUYQRT8CIVjJu8KtcoI+l83KeUDHF59AsiYDzIp+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6c:21:d2:75:c5:18:f2:83:bb:37:df:fd:d6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ff222d4a226302cbf10068caa6f4c41f7bb1cb Validity Not Before: Dec 20 16:02:22 2025 GMT Not After : Dec 21 16:02:22 2025 GMT Subject: CN=858d6aaca126f3b0aea716eea794357eb17db65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:19:d4:fb:c1:f3:7e:c6:a1:ab:6b:3c:dd: 5f:da:82:b0:00:ff:4e:1a:af:4f:d0:f3:43:e7:07: 60:4b:96:53:14:7e:ee:06:9b:45:8b:12:14:4a:71: 53:73:54:5d:d5:ff:9f:1e:6d:6a:63:00:92:4f:da: 67:5e:2e:c0:82:67:04:5e:79:f3:4e:b2:a8:22:51: 61:b8:ee:c8:5d:8e:01:02:e2:b0:13:5d:16:d8:d9: bc:5f:e0:86:78:f9:51:df:22:98:2d:91:7b:60:2b: 0e:9d:61:7d:48:43:fd:0b:1f:58:03:c7:05:ef:e7: d5:ce:54:d9:47:4b:88:81:8b:fc:3a:3a:cc:30:df: a6:8f:c0:bb:7e:b6:6e:21:74:bd:bf:34:bd:c1:aa: 1f:a0:10:25:5b:4b:fc:43:b5:ba:43:62:bd:df:0d: e8:96:b7:12:4e:79:3f:a5:e8:33:06:b7:1c:2e:f5: 03:65:e2:a5:dd:f9:aa:63:e2:16:c0:ef:d9:8b:5f: ee:57:70:b9:f0:fa:f0:9b:8d:a5:7e:45:93:11:2d: c5:9b:a7:96:0e:06:5d:6e:42:19:b9:65:05:15:a8: eb:35:7a:6a:4c:f8:53:ba:7b:67:45:3b:53:6e:55: f0:36:f7:7c:26:d5:d9:92:0f:99:20:a0:a8:27:20: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:6A:AC:A1:26:F3:B0:AE:A7:16:EE:A7:94:35:7E:B1:7D:B6:5A X509v3 Authority Key Identifier: keyid:53:FF:22:2D:4A:22:63:02:CB:F1:00:68:CA:A6:F4:C4:1F:7B:B1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e6:06:9f:9f:88:4c:11:d2:2c:6b:9c:3d:eb:fd:0d:3d:52: dc:2c:79:42:31:8f:2e:87:fe:aa:a9:f3:af:38:83:61:93:2a: ee:04:56:69:d5:dc:bf:fb:78:e5:d2:b8:9a:26:e8:60:93:a2: 12:95:80:b6:48:27:83:16:b4:7a:7e:42:39:e4:50:b8:d1:ee: af:6d:dd:9a:c6:01:42:4e:0a:36:4a:c8:0d:d9:57:b5:88:31: fc:fa:ef:c6:d8:7b:a4:17:49:73:06:38:8d:9c:b1:2e:8c:1c: e0:02:31:ec:20:d8:c0:bf:e4:01:a5:c9:80:d1:c2:c0:e1:c8: e8:97:7d:a0:03:36:0c:33:53:f7:2b:b5:a4:ca:a1:cd:56:45: 69:ca:ba:b3:96:5c:f1:de:f1:de:4e:58:13:49:3d:27:f0:49: 63:73:ed:6b:84:86:51:45:ab:af:b9:7c:48:0a:0c:3c:59:f1: 3f:0a:25:fe:ec:53:b1:38:98:e8:2b:63:47:8d:53:8d:aa:78: 06:92:f7:a6:ac:d1:d8:b4:71:60:4e:9c:99:29:7b:eb:4f:24: 1f:d8:4e:bc:48:8c:eb:f1:3a:53:7c:d0:58:1c:a6:80:ef:cf: fb:fe:09:58:08:06:8f:0b:4a:b7:75:ab:02:bc:10:9f:0d:75: 28:44:56:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2wh0nXFGPKDuzff/dYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZmYyMjJkNGEyMjYzMDJjYmYxMDA2OGNhYTZmNGM0MWY3 YmIxY2IwHhcNMjUxMjIwMTYwMjIyWhcNMjUxMjIxMTYwMjIyWjAzMTEwLwYDVQQD Eyg4NThkNmFhY2ExMjZmM2IwYWVhNzE2ZWVhNzk0MzU3ZWIxN2RiNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TwZ1PvB837GoatrPN1f2oKwAP9O Gq9P0PND5wdgS5ZTFH7uBptFixIUSnFTc1Rd1f+fHm1qYwCST9pnXi7AgmcEXnnz TrKoIlFhuO7IXY4BAuKwE10W2Nm8X+CGePlR3yKYLZF7YCsOnWF9SEP9Cx9YA8cF 7+fVzlTZR0uIgYv8OjrMMN+mj8C7frZuIXS9vzS9waofoBAlW0v8Q7W6Q2K93w3o lrcSTnk/pegzBrccLvUDZeKl3fmqY+IWwO/Zi1/uV3C58Prwm42lfkWTES3Fm6eW DgZdbkIZuWUFFajrNXpqTPhTuntnRTtTblXwNvd8JtXZkg+ZIKCoJyCGTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWNaqyhJvOwrqcW7qeUNX6xfbZaMB8GA1UdIwQY MBaAFFP/Ii1KImMCy/EAaMqm9MQfe7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wNmY5YTMtOGZjYS00MTRlLWI1YWQt Y2EzNmQ5OGIzYzRkLzEvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8wNmY5YTMtOGZjYS00MTRlLWI1YWQtY2EzNmQ5OGIzYzRk LzEvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOYGn5+I TBHSLGucPev9DT1S3Cx5QjGPLof+qqnzrziDYZMq7gRWadXcv/t45dK4miboYJOi EpWAtkgngxa0en5COeRQuNHur23dmsYBQk4KNkrIDdlXtYgx/Prvxth7pBdJcwY4 jZyxLowc4AIx7CDYwL/kAaXJgNHCwOHI6Jd9oAM2DDNT9yu1pMqhzVZFacq6s5Zc 8d7x3k5YE0k9J/BJY3Pta4SGUUWrr7l8SAoMPFnxPwol/uxTsTiY6CtjR41Tjap4 BpL3pqzR2LRxYE6cmSl7608kH9hOvEiM6/E6U3zQWBymgO/P+/4JWAgGjwtKt3Wr ArwQnw11KERW1g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:44 2025 by rpki-client