This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json) Hash identifier: AtKagHeh8i25s3N21Dq4I50yzL7yhOtUXlyPrqsliAU= Subject key identifier: C1:B8:79:3C:44:59:97:D5:D9:DF:D5:18:3F:C1:25:B8:FC:72:BA:00 Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0 Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0 Certificate serial: 019B2F9E282D64046C5C9E60F07491D653AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft Manifest number: 1414 Signing time: Thu 18 Dec 2025 04:00:52 +0000 Manifest this update: Thu 18 Dec 2025 04:00:52 +0000 Manifest next update: Fri 19 Dec 2025 04:00:52 +0000 Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=) 2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: 1NIxdkwY2TGpzcMokhBTWodugOoapJtVefI9LcSkEXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:28:2d:64:04:6c:5c:9e:60:f0:74:91:d6:53:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0 Validity Not Before: Dec 18 04:00:52 2025 GMT Not After : Dec 19 04:00:52 2025 GMT Subject: CN=c1b8793c445997d5d9dfd5183fc125b8fc72ba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:aa:d2:62:0d:08:8c:95:1b:76:26:9d:dd: b8:62:d3:50:17:d5:08:1b:35:fe:04:e5:4b:35:17: 15:fc:ac:d2:0e:8f:7d:e9:fa:fd:9f:52:57:95:38: 0d:0b:e9:a4:02:9d:ec:1f:08:1a:a8:eb:06:e4:05: f7:18:b0:32:f3:db:71:3a:02:b8:25:79:fb:4b:df: 79:eb:79:24:05:85:cb:f7:17:31:c5:be:15:fc:66: c7:7b:a5:fa:74:d5:5f:ce:16:7c:3e:de:34:7c:a0: 27:2d:e8:54:62:18:07:e8:5c:77:47:39:da:c2:4c: 20:42:88:9b:30:db:e4:22:18:31:fc:18:a2:eb:aa: 6f:df:66:68:57:2b:d8:f0:9f:c2:74:5b:4e:f2:04: 9c:34:e1:c2:18:0f:de:a9:7e:0e:9d:e9:f1:21:c5: 9b:7d:36:ee:d8:6c:04:2d:2f:da:bd:f0:d4:0e:88: 66:f1:c3:c4:1a:2c:c7:60:05:0a:74:08:ae:7d:2f: 18:78:85:ed:ba:ba:e8:02:8d:8b:70:06:7d:31:0b: 4e:36:a2:3c:f1:58:88:e0:9e:34:f6:1c:90:e6:4c: e5:6c:f1:da:39:ea:bc:d0:4f:c4:ef:ba:8f:c0:b3: cc:b6:05:bf:93:86:e2:a6:ee:7d:12:39:08:45:03: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B8:79:3C:44:59:97:D5:D9:DF:D5:18:3F:C1:25:B8:FC:72:BA:00 X509v3 Authority Key Identifier: keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:18:b2:50:23:43:67:36:a6:56:55:cf:c2:a5:fb:d0:f4:00: c3:2a:73:96:9a:27:e4:0d:01:7e:39:df:32:bc:40:a3:06:78: 63:9a:60:8e:a1:a3:87:ac:d3:0d:fe:87:94:e5:bb:a2:d5:d4: 26:68:29:67:3f:8b:c5:2f:97:6f:2b:34:a2:0c:48:8d:09:71: cd:14:ad:f4:d8:95:b7:47:a8:c3:ad:f7:5b:c5:3a:24:b8:37: a8:7a:07:e0:65:69:4e:f8:0f:1c:83:7d:86:2c:cc:39:f9:ec: d8:30:c0:93:1c:c5:77:00:6e:84:ee:69:80:39:18:fa:4b:09: d7:be:2e:f0:a2:86:45:89:e1:ed:40:87:d6:9f:2c:08:2e:d4: ff:9d:f6:70:9f:5b:1d:4f:60:86:a1:c9:b2:02:d6:02:06:04: b5:50:16:50:ad:44:79:4e:7d:ee:6e:d3:d8:56:23:66:62:3d: f4:66:fb:5b:d3:63:e3:3c:63:e2:58:bb:ca:c3:db:65:17:4d: 6f:8f:b3:c3:a9:0e:08:67:24:7b:9e:c1:5d:6d:e7:c2:a0:c3: 45:c4:2e:c4:24:78:96:c2:a8:f1:5e:69:be:56:60:77:14:94: e7:a9:53:d3:3e:40:41:95:04:ac:9d:68:5c:a8:bb:9d:c4:09: 24:2d:d8:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnigtZARsXJ5g8HSR1lOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODU1YzhlY2U5YmQ2ZjhlMzk0MDIwMjIxMmNlMDliMDVm NWY4YTAwHhcNMjUxMjE4MDQwMDUyWhcNMjUxMjE5MDQwMDUyWjAzMTEwLwYDVQQD EyhjMWI4NzkzYzQ0NTk5N2Q1ZDlkZmQ1MTgzZmMxMjViOGZjNzJiYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRiq0mINCIyVG3Ymnd24YtNQF9UI GzX+BOVLNRcV/KzSDo996fr9n1JXlTgNC+mkAp3sHwgaqOsG5AX3GLAy89txOgK4 JXn7S99563kkBYXL9xcxxb4V/GbHe6X6dNVfzhZ8Pt40fKAnLehUYhgH6Fx3Rzna wkwgQoibMNvkIhgx/Bii66pv32ZoVyvY8J/CdFtO8gScNOHCGA/eqX4OnenxIcWb fTbu2GwELS/avfDUDohm8cPEGizHYAUKdAiufS8YeIXturroAo2LcAZ9MQtONqI8 8ViI4J409hyQ5kzlbPHaOeq80E/E77qPwLPMtgW/k4bipu59EjkIRQM+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMG4eTxEWZfV2d/VGD/BJbj8croAMB8GA1UdIwQY MBaAFFOFXI7Om9b445QCAiEs4JsF9figMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWIt MWNlZmQxZmExMGE2LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWItMWNlZmQxZmExMGE2 LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzRiyUCND ZzamVlXPwqX70PQAwypzlpon5A0BfjnfMrxAowZ4Y5pgjqGjh6zTDf6HlOW7otXU JmgpZz+LxS+Xbys0ogxIjQlxzRSt9NiVt0eow633W8U6JLg3qHoH4GVpTvgPHIN9 hizMOfns2DDAkxzFdwBuhO5pgDkY+ksJ174u8KKGRYnh7UCH1p8sCC7U/532cJ9b HU9ghqHJsgLWAgYEtVAWUK1EeU597m7T2FYjZmI99Gb7W9Nj4zxj4li7ysPbZRdN b4+zw6kOCGcke57BXW3nwqDDRcQuxCR4lsKo8V5pvlZgdxSU56lT0z5AQZUErJ1o XKi7ncQJJC3YmA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:12 2025 by rpki-client