This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json) Hash identifier: ljmbznRveI/dLSjHPm5JFMTjd3nmVf3N/WtzHWXUbZ8= Subject key identifier: A3:16:70:A5:72:69:99:56:DC:9C:34:9B:0B:90:84:E4:AD:45:C0:75 Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019B51F38D83E246AD089FEB1442ECAA0028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft Manifest number: 0477 Signing time: Wed 24 Dec 2025 20:01:14 +0000 Manifest this update: Wed 24 Dec 2025 20:01:14 +0000 Manifest next update: Thu 25 Dec 2025 20:01:14 +0000 Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=) 2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: fsqkTY4+EAYbLTZxcG/sJKoGPxVHY0Jv9/V/AbOSpNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:8d:83:e2:46:ad:08:9f:eb:14:42:ec:aa:00:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Dec 24 20:01:14 2025 GMT Not After : Dec 25 20:01:14 2025 GMT Subject: CN=a31670a572699956dc9c349b0b9084e4ad45c075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:b5:f1:33:04:83:0d:e2:44:d4:23:10:8a: ef:c2:4e:eb:d0:ab:f3:81:0c:46:90:0c:a9:87:98: de:46:39:55:dc:f2:70:68:45:0c:76:f7:aa:85:4b: 18:2b:4f:51:0d:1e:3a:46:d2:0d:37:20:46:a6:65: de:c2:c6:66:08:38:54:a7:0f:c5:b9:24:a7:08:f1: 7f:7d:69:17:cb:e0:8d:55:ce:f1:cb:e2:d5:35:bb: 5f:2a:fd:f4:1f:21:50:4d:c3:21:c9:b5:77:9d:ce: 1b:80:0b:9d:c7:be:ca:e1:6f:ce:5f:d0:3f:76:e4: f8:b8:16:6e:18:98:d5:0f:14:6c:02:72:f2:84:f0: a2:00:99:71:ae:37:24:bc:80:cb:51:b2:81:83:cb: 00:ea:46:cf:74:79:75:97:1d:d3:56:4c:62:16:a1: 71:9a:99:88:05:87:72:6c:d1:ef:a3:58:4d:61:5f: 90:8c:61:49:72:77:27:04:61:42:de:a7:43:30:97: 3c:7b:bb:25:1d:aa:5b:26:ce:a6:66:56:13:46:1b: 33:f7:33:d3:69:6b:8e:93:0f:09:e7:ff:be:86:93: 84:10:63:61:75:85:b4:6e:8f:ca:82:2f:e6:48:bc: fc:6b:16:70:1b:04:60:3c:16:43:69:8e:6e:87:2e: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:16:70:A5:72:69:99:56:DC:9C:34:9B:0B:90:84:E4:AD:45:C0:75 X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e1:09:8a:63:d3:50:ae:6f:38:5b:de:b1:24:a0:32:c1:0a: 48:d9:9a:4f:82:24:70:c0:9f:8a:0a:25:fe:0d:c5:14:30:ea: 3d:01:3b:66:95:da:bc:1b:00:dc:50:65:52:70:75:85:ba:46: df:f7:b0:a6:9d:17:ff:b1:69:53:15:d2:c5:24:67:a4:c5:bf: 40:75:66:ad:a3:ac:8d:48:d9:fd:38:29:1d:15:f9:16:17:2b: 46:e3:bc:93:86:d0:16:a5:a5:9e:90:86:e5:20:5d:3a:ac:6c: 07:63:41:3d:1e:59:2f:ea:1a:43:34:f4:34:27:01:32:fc:d7: ce:7d:99:3a:bf:4f:04:b0:5c:98:95:8e:7f:6b:de:1c:2f:15: b1:c5:88:92:75:95:84:ee:f2:60:fb:5f:a9:86:1b:08:02:0e: 4f:c0:f6:fa:07:bf:83:84:56:f5:01:9d:7f:b9:e6:19:77:d8: c0:58:7c:c9:b4:4b:00:e0:76:cb:0b:f1:bd:18:e0:71:0f:06: 89:23:08:10:55:74:38:82:d8:44:6f:b7:63:d3:f9:31:b0:01: 25:fd:7f:52:2e:23:ba:8e:82:d6:cd:e9:96:b6:49:85:2a:33: 56:eb:39:4f:65:09:27:5e:c8:9c:5e:46:4c:c7:78:5d:0f:60: f3:2e:e4:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR842D4katCJ/rFELsqgAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjUxMjI0MjAwMTE0WhcNMjUxMjI1MjAwMTE0WjAzMTEwLwYDVQQD EyhhMzE2NzBhNTcyNjk5OTU2ZGM5YzM0OWIwYjkwODRlNGFkNDVjMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqq18TMEgw3iRNQjEIrvwk7r0Kvz gQxGkAyph5jeRjlV3PJwaEUMdveqhUsYK09RDR46RtINNyBGpmXewsZmCDhUpw/F uSSnCPF/fWkXy+CNVc7xy+LVNbtfKv30HyFQTcMhybV3nc4bgAudx77K4W/OX9A/ duT4uBZuGJjVDxRsAnLyhPCiAJlxrjckvIDLUbKBg8sA6kbPdHl1lx3TVkxiFqFx mpmIBYdybNHvo1hNYV+QjGFJcncnBGFC3qdDMJc8e7slHapbJs6mZlYTRhsz9zPT aWuOkw8J5/++hpOEEGNhdYW0bo/Kgi/mSLz8axZwGwRgPBZDaY5uhy5zpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMWcKVyaZlW3Jw0mwuQhOStRcB1MB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeEJimPT UK5vOFvesSSgMsEKSNmaT4IkcMCfigol/g3FFDDqPQE7ZpXavBsA3FBlUnB1hbpG 3/ewpp0X/7FpUxXSxSRnpMW/QHVmraOsjUjZ/TgpHRX5FhcrRuO8k4bQFqWlnpCG 5SBdOqxsB2NBPR5ZL+oaQzT0NCcBMvzXzn2ZOr9PBLBcmJWOf2veHC8VscWIknWV hO7yYPtfqYYbCAIOT8D2+ge/g4RW9QGdf7nmGXfYwFh8ybRLAOB2ywvxvRjgcQ8G iSMIEFV0OILYRG+3Y9P5MbABJf1/Ui4juo6C1s3plrZJhSozVus5T2UJJ17InF5G TMd4XQ9g8y7k2g== -----END CERTIFICATE-----Generated at Wed Dec 24 21:53:21 2025 by rpki-client