This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json) Hash identifier: Bu3xObVxwBsYtHpPJAUdbaUqbCOgegPOBxnZ1Q0nq9w= Subject key identifier: 46:3F:C2:30:93:34:99:1E:0E:23:F0:EB:E7:36:66:C9:8D:86:20:94 Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb Certificate serial: 019B46CAB151265676B3CF44EE6524D18894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft Manifest number: 0BF0 Signing time: Mon 22 Dec 2025 16:00:47 +0000 Manifest this update: Mon 22 Dec 2025 16:00:47 +0000 Manifest next update: Tue 23 Dec 2025 16:00:47 +0000 Files and hashes: 1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=) 2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: 9HqU+GZX2Jc5adByBzRZzYvbmWzKvfYdlNiGOWLreos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:b1:51:26:56:76:b3:cf:44:ee:65:24:d1:88:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb Validity Not Before: Dec 22 16:00:47 2025 GMT Not After : Dec 23 16:00:47 2025 GMT Subject: CN=463fc2309334991e0e23f0ebe73666c98d862094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:ab:52:67:26:62:07:45:7f:5c:eb:23:a8: 94:fa:d4:52:69:68:d0:aa:cc:1a:89:d2:04:2b:ce: 9d:9c:02:81:73:a5:03:87:c3:04:06:69:e3:6d:a3: 51:22:98:50:30:b2:a1:53:2b:df:60:2f:13:a0:2a: 41:1c:8a:1a:e5:63:af:d7:bb:92:de:77:19:87:5d: b8:f3:a7:20:48:1b:52:2e:50:46:bf:6f:69:e9:a0: c4:6b:9f:ee:99:5b:b0:f8:01:b3:35:8e:74:06:07: 09:ff:44:75:56:d1:96:11:fd:a4:e5:90:f1:25:3d: d9:8a:34:6b:55:35:39:82:2e:00:32:15:63:07:56: 17:0f:b9:82:8b:d1:6e:39:00:5e:5f:ff:b5:3c:21: fc:6e:75:67:5f:87:10:a3:be:88:7f:6b:eb:42:33: 74:63:57:d5:54:b2:7f:f6:53:5e:20:b1:fc:37:c2: 91:59:98:c7:d9:d5:9a:30:6e:03:a5:1c:32:fc:92: e9:6d:fa:37:d5:ca:46:bc:58:fc:86:f8:9b:5f:31: bd:a8:b1:07:6e:d2:da:6f:2d:fd:8e:72:a4:fe:08: a0:18:1b:62:aa:0c:c1:a4:9a:85:23:c1:45:3b:60: 05:8e:3b:9b:39:97:c5:9d:b7:38:f3:0b:b1:4f:7c: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:C2:30:93:34:99:1E:0E:23:F0:EB:E7:36:66:C9:8D:86:20:94 X509v3 Authority Key Identifier: keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:08:c7:64:cd:23:5b:1c:3c:b1:06:1a:00:5d:ef:c6:92:70: 8d:24:a7:c4:f4:4b:83:9d:ed:de:0b:64:42:35:5b:31:75:39: 1f:f9:d7:40:81:d4:59:75:d7:33:1f:a3:25:e0:1e:77:69:2a: d7:ed:36:09:a1:e8:6f:e8:83:ba:1b:06:8f:78:2d:38:29:50: cc:f5:60:28:32:e4:af:70:be:b5:42:ac:0e:ed:f8:ec:2f:7e: a4:10:48:9c:dc:65:86:81:9d:1f:19:4e:31:80:24:86:66:69: 8a:37:c2:ff:79:f5:8a:00:a3:6d:14:c3:68:30:4d:49:e8:87: 58:73:80:c7:c0:16:72:20:c6:cb:f8:cd:0e:d1:11:43:ea:f7: 92:f9:01:0b:3b:63:69:66:b9:55:2b:19:11:75:cf:ce:a0:4f: 0d:51:cf:a9:d5:6d:4a:0d:b3:57:d4:50:19:df:51:61:e2:76: 3d:07:37:d8:9c:1a:d8:48:2d:16:de:bd:c2:4e:6b:9f:1c:0c: 91:f2:bf:e5:19:98:69:12:02:a0:9b:7b:c9:4e:c4:9d:d8:db: 77:c5:82:fd:90:40:f2:0d:23:98:e0:19:5f:a4:39:56:95:e7: 34:2e:82:e2:35:49:32:94:5c:09:41:83:22:8a:70:9a:be:39: 67:f8:de:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyrFRJlZ2s89E7mUk0YiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTUwNDBhZTkyNzg2YmYxNzI3YjZiNGVjYzEwOTNiOGE3 NDAxZWIwHhcNMjUxMjIyMTYwMDQ3WhcNMjUxMjIzMTYwMDQ3WjAzMTEwLwYDVQQD Eyg0NjNmYzIzMDkzMzQ5OTFlMGUyM2YwZWJlNzM2NjZjOThkODYyMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8mrUmcmYgdFf1zrI6iU+tRSaWjQ qswaidIEK86dnAKBc6UDh8MEBmnjbaNRIphQMLKhUyvfYC8ToCpBHIoa5WOv17uS 3ncZh12486cgSBtSLlBGv29p6aDEa5/umVuw+AGzNY50BgcJ/0R1VtGWEf2k5ZDx JT3ZijRrVTU5gi4AMhVjB1YXD7mCi9FuOQBeX/+1PCH8bnVnX4cQo76If2vrQjN0 Y1fVVLJ/9lNeILH8N8KRWZjH2dWaMG4DpRwy/JLpbfo31cpGvFj8hvibXzG9qLEH btLaby39jnKk/gigGBtiqgzBpJqFI8FFO2AFjjubOZfFnbc48wuxT3xgvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY/wjCTNJkeDiPw6+c2ZsmNhiCUMB8GA1UdIwQY MBaAFFNVBArpJ4a/Fye2tOzBCTuKdAHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTct MWRkNTdlM2YzZDk3LzEvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTctMWRkNTdlM2YzZDk3 LzEvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQjHZM0j Wxw8sQYaAF3vxpJwjSSnxPRLg53t3gtkQjVbMXU5H/nXQIHUWXXXMx+jJeAed2kq 1+02CaHob+iDuhsGj3gtOClQzPVgKDLkr3C+tUKsDu347C9+pBBInNxlhoGdHxlO MYAkhmZpijfC/3n1igCjbRTDaDBNSeiHWHOAx8AWciDGy/jNDtERQ+r3kvkBCztj aWa5VSsZEXXPzqBPDVHPqdVtSg2zV9RQGd9RYeJ2PQc32Jwa2EgtFt69wk5rnxwM kfK/5RmYaRICoJt7yU7Endjbd8WC/ZBA8g0jmOAZX6Q5VpXnNC6C4jVJMpRcCUGD Iopwmr45Z/jeBw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:50 2025 by rpki-client