This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json) Hash identifier: 3LPHUAAOiJdxYLKNfkroaLppzdpkCdDV+93FmRzfBO4= Subject key identifier: 21:4A:61:98:12:D1:DD:2B:C3:33:03:6C:7A:8D:EF:A4:F2:65:11:EA Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8 Certificate serial: 019B30E87E6694BC302DBFC40C61D5CD4580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft Manifest number: 1280 Signing time: Thu 18 Dec 2025 10:01:41 +0000 Manifest this update: Thu 18 Dec 2025 10:01:41 +0000 Manifest next update: Fri 19 Dec 2025 10:01:41 +0000 Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=) 2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: RTuuEyIyUuMbaZfKSKLVoyLeOmdJp9TlQ7zsWl3vCtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:7e:66:94:bc:30:2d:bf:c4:0c:61:d5:cd:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8 Validity Not Before: Dec 18 10:01:41 2025 GMT Not After : Dec 19 10:01:41 2025 GMT Subject: CN=214a619812d1dd2bc333036c7a8defa4f26511ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:4f:55:1e:61:b6:0c:c7:11:49:8b:1e:13: b0:26:a6:21:4b:93:a0:9f:07:f3:d5:dc:bf:0a:3e: e8:d5:fa:3e:72:6a:69:e2:dd:12:8d:0e:12:7a:40: 29:7f:a1:9f:3c:4a:c4:ec:81:d6:b7:b0:47:a5:ea: 1e:87:e3:d5:67:67:4e:30:9f:8d:05:9d:1c:ba:c9: 09:7a:ab:17:2d:58:2a:cd:91:67:ff:6a:b9:23:65: cb:96:59:99:47:f9:6c:52:1f:bb:e4:af:2c:62:2e: 97:7f:d5:56:bc:ed:0d:6f:e0:58:58:09:e4:4d:4e: 3a:56:cf:d9:90:f2:4e:84:e0:d1:61:1d:a9:19:c4: 36:32:98:44:0a:ef:b5:f7:fe:96:79:74:5a:f2:49: f7:54:ca:57:c4:d7:0e:b6:7a:0a:b1:23:c0:2c:18: c2:5b:41:24:73:51:5b:e5:1a:ac:27:7a:17:4a:ee: 89:98:d4:33:00:d7:af:09:ce:0e:50:fb:a4:5e:0b: 3a:6d:5e:e5:7b:4c:fe:42:35:ab:51:89:a0:96:a7: af:75:e6:0f:b6:92:79:d0:ff:9c:1b:df:6b:5c:f3: bf:56:ae:12:ba:cd:74:c0:eb:0b:93:01:f5:fa:a7: fd:1d:a9:f0:bd:6d:c0:87:f4:00:4e:e9:6b:c5:c8: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4A:61:98:12:D1:DD:2B:C3:33:03:6C:7A:8D:EF:A4:F2:65:11:EA X509v3 Authority Key Identifier: keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:30:6b:5e:30:20:4e:ec:98:14:5f:a7:de:04:e7:c4:01: ec:41:af:aa:11:b7:2f:c7:a3:79:8c:9e:17:14:d9:cf:45:cf: 8f:a6:1d:9b:5f:6b:ce:3c:9e:4a:9c:08:ff:b3:a4:75:4e:c0: ff:74:5b:0c:19:6f:18:27:94:96:53:bf:2f:a9:6b:4a:bb:28: 3e:d2:a1:91:79:3a:72:f1:a7:2c:fa:15:95:66:a2:7b:ce:0e: ca:ff:0e:52:05:c9:58:85:da:3f:9a:93:b1:f5:93:bd:49:85: 34:6e:de:d1:2f:ea:cc:18:10:ae:be:4f:2e:58:d3:5b:33:8c: af:f5:e5:f2:2d:40:8b:d6:79:0f:a2:64:f2:07:f6:a3:6c:23: 62:b7:2c:75:cf:1a:3d:f8:38:66:76:a6:53:d9:81:de:88:04: 95:65:c5:07:94:75:94:ae:fe:e1:7b:16:41:32:98:c0:b6:3e: fe:40:44:6d:ee:ae:df:ea:60:a5:1d:25:cb:68:07:5d:28:da: 4c:b4:2b:94:fc:8a:ec:69:c2:da:ad:30:1d:dd:d3:7d:c1:ec: 42:e4:fc:8c:cb:2e:f5:7e:0e:2a:d9:0e:49:52:a2:17:d1:e4: 32:bc:b4:55:47:f9:dc:50:13:c8:34:0f:f2:fc:8f:28:da:c5: 8c:e3:87:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6H5mlLwwLb/EDGHVzUWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4 OTczYjgwHhcNMjUxMjE4MTAwMTQxWhcNMjUxMjE5MTAwMTQxWjAzMTEwLwYDVQQD EygyMTRhNjE5ODEyZDFkZDJiYzMzMzAzNmM3YThkZWZhNGYyNjUxMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/RPVR5htgzHEUmLHhOwJqYhS5Og nwfz1dy/Cj7o1fo+cmpp4t0SjQ4SekApf6GfPErE7IHWt7BHpeoeh+PVZ2dOMJ+N BZ0cuskJeqsXLVgqzZFn/2q5I2XLllmZR/lsUh+75K8sYi6Xf9VWvO0Nb+BYWAnk TU46Vs/ZkPJOhODRYR2pGcQ2MphECu+19/6WeXRa8kn3VMpXxNcOtnoKsSPALBjC W0Ekc1Fb5RqsJ3oXSu6JmNQzANevCc4OUPukXgs6bV7le0z+QjWrUYmglqevdeYP tpJ50P+cG99rXPO/Vq4Sus10wOsLkwH1+qf9HanwvW3Ah/QATulrxcihMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFKYZgS0d0rwzMDbHqN76TyZRHqMB8GA1UdIwQY MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5 LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmkwa14w IE7smBRfp94E58QB7EGvqhG3L8ejeYyeFxTZz0XPj6Ydm19rzjyeSpwI/7OkdU7A /3RbDBlvGCeUllO/L6lrSrsoPtKhkXk6cvGnLPoVlWaie84Oyv8OUgXJWIXaP5qT sfWTvUmFNG7e0S/qzBgQrr5PLljTWzOMr/Xl8i1Ai9Z5D6Jk8gf2o2wjYrcsdc8a Pfg4ZnamU9mB3ogElWXFB5R1lK7+4XsWQTKYwLY+/kBEbe6u3+pgpR0ly2gHXSja TLQrlPyK7GnC2q0wHd3TfcHsQuT8jMsu9X4OKtkOSVKiF9HkMry0VUf53FATyDQP 8vyPKNrFjOOHng== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:48 2025 by rpki-client