This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json) Hash identifier: CMUPB0whYxkR5zkg7qXZ7avUySyrrXnUGjE68k2s4Rw= Subject key identifier: E0:3B:62:81:BA:89:39:99:77:2E:25:88:2F:71:F3:17:83:8E:E6:02 Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019B3AC6561687561680F3A13F2C8D9C7BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft Manifest number: 046B Signing time: Sat 20 Dec 2025 08:00:35 +0000 Manifest this update: Sat 20 Dec 2025 08:00:35 +0000 Manifest next update: Sun 21 Dec 2025 08:00:35 +0000 Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=) 2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: s6ha4oJ+ggFGs8+4Q9ksJyLYgO1qtPaRLt8LUIsfJKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:56:16:87:56:16:80:f3:a1:3f:2c:8d:9c:7b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Dec 20 08:00:35 2025 GMT Not After : Dec 21 08:00:35 2025 GMT Subject: CN=e03b6281ba893999772e25882f71f317838ee602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:50:04:ba:37:1d:2c:76:a3:f9:93:cb:06:81: cc:44:24:2b:73:d1:27:96:08:cd:d2:ee:45:60:22: 41:49:fb:4b:26:5f:e6:04:c4:c7:82:43:83:3c:3f: 3c:15:0b:93:b2:b7:ac:9d:51:2a:ba:bd:fa:e6:11: 4f:50:44:9c:d1:14:19:16:b6:1f:dc:da:29:16:d2: 6c:10:0f:44:3f:9c:15:48:1a:42:ba:62:ec:f0:af: c9:80:7d:ae:76:29:9b:91:8a:0e:41:ef:a3:64:77: 7a:2a:40:48:dd:12:36:d8:bb:c6:5b:e6:ab:9a:73: 2e:6b:14:91:39:b7:fb:30:bd:70:41:ce:8c:3b:01: 1a:7f:6a:f1:f7:6e:30:9b:cf:49:28:74:38:91:6f: 4d:72:49:27:09:23:88:16:a9:c0:fc:8b:42:b2:b1: 92:50:87:32:b2:15:77:4c:4f:18:68:62:ba:26:6e: 79:c1:80:97:46:8f:14:54:ae:08:44:9a:b6:5d:c7: 13:82:1e:1e:d4:f0:79:42:a5:af:9d:07:c8:7c:8d: e3:a6:64:40:60:91:d9:9b:a5:f9:0f:20:10:25:f9: cb:06:d7:9b:f9:e1:f3:c8:12:4c:dd:08:21:b0:0b: 8e:dd:48:32:74:5b:6f:99:61:ad:23:3d:d0:e9:02: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3B:62:81:BA:89:39:99:77:2E:25:88:2F:71:F3:17:83:8E:E6:02 X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f4:61:e3:55:45:c9:86:2f:42:fd:78:61:77:a5:d1:41:f6: de:49:dc:3e:c7:42:04:4e:b1:15:a9:2e:42:fe:6a:1c:8e:47: e0:17:7a:02:91:de:15:d8:57:c3:bd:89:5b:63:6e:86:ec:7c: 78:2d:d0:b3:c0:85:b0:d4:b5:53:f7:84:69:b7:5d:1c:8f:3b: 6b:26:fd:b4:e5:e9:62:0d:fe:2e:00:11:45:36:07:ac:00:85: cf:45:c6:45:0b:90:c9:a4:e1:fa:a7:72:e4:1c:ea:96:e7:47: 8a:fa:6b:7e:51:1c:b8:cd:88:b4:81:fa:b2:fe:92:0b:cf:4b: a1:9b:e8:13:f9:07:ea:20:b8:99:5e:1c:dc:4c:7a:8b:d2:0a: ce:8f:0d:8d:af:e9:df:6e:ea:bc:cc:3f:3e:94:b8:19:55:c5: f0:7a:ec:7c:33:5c:7c:11:b7:c7:c2:d4:b4:7c:31:d7:28:e6: ca:d4:2f:b7:90:b4:00:86:f6:97:6f:ca:3f:90:33:2a:b7:07: 67:80:16:0d:8e:14:a4:53:d5:2d:eb:23:24:d3:90:8f:ca:2d: a1:19:5c:e8:e3:bc:16:ff:1c:3d:dc:29:27:68:88:a9:ea:46: fb:83:c2:6b:d1:27:e5:c5:43:1e:a7:f9:4e:df:b3:66:90:cd: 8f:4a:4d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xlYWh1YWgPOhPyyNnHvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjUxMjIwMDgwMDM1WhcNMjUxMjIxMDgwMDM1WjAzMTEwLwYDVQQD EyhlMDNiNjI4MWJhODkzOTk5NzcyZTI1ODgyZjcxZjMxNzgzOGVlNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lAEujcdLHaj+ZPLBoHMRCQrc9En lgjN0u5FYCJBSftLJl/mBMTHgkODPD88FQuTsresnVEqur365hFPUESc0RQZFrYf 3NopFtJsEA9EP5wVSBpCumLs8K/JgH2udimbkYoOQe+jZHd6KkBI3RI22LvGW+ar mnMuaxSRObf7ML1wQc6MOwEaf2rx924wm89JKHQ4kW9NckknCSOIFqnA/ItCsrGS UIcyshV3TE8YaGK6Jm55wYCXRo8UVK4IRJq2XccTgh4e1PB5QqWvnQfIfI3jpmRA YJHZm6X5DyAQJfnLBteb+eHzyBJM3QghsAuO3UgydFtvmWGtIz3Q6QJVWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA7YoG6iTmZdy4liC9x8xeDjuYCMB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/Rh41VF yYYvQv14YXel0UH23kncPsdCBE6xFakuQv5qHI5H4Bd6ApHeFdhXw72JW2Nuhux8 eC3Qs8CFsNS1U/eEabddHI87ayb9tOXpYg3+LgARRTYHrACFz0XGRQuQyaTh+qdy 5BzqludHivprflEcuM2ItIH6sv6SC89LoZvoE/kH6iC4mV4c3Ex6i9IKzo8Nja/p 327qvMw/PpS4GVXF8HrsfDNcfBG3x8LUtHwx1yjmytQvt5C0AIb2l2/KP5AzKrcH Z4AWDY4UpFPVLesjJNOQj8otoRlc6OO8Fv8cPdwpJ2iIqepG+4PCa9En5cVDHqf5 Tt+zZpDNj0pNsg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:37 2025 by rpki-client