This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json) Hash identifier: Q4DeKVH22IB06G4E2+TCu/mEmL9bdmBubH1xFhR1xOs= Subject key identifier: D0:95:F4:2C:6C:61:A1:50:ED:B2:B3:F6:BD:0F:10:AB:FA:5D:68:7A Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc Certificate serial: 019B3A21DFAA5EC5F5457DA15D015CE63EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft Manifest number: 0FB5 Signing time: Sat 20 Dec 2025 05:00:56 +0000 Manifest this update: Sat 20 Dec 2025 05:00:56 +0000 Manifest next update: Sun 21 Dec 2025 05:00:56 +0000 Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=) 2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=) 3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: qF1R5NmgkRvZIwMq43wp5eNmQw9WMyqI/ki3qBKeT4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:df:aa:5e:c5:f5:45:7d:a1:5d:01:5c:e6:3e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc Validity Not Before: Dec 20 05:00:56 2025 GMT Not After : Dec 21 05:00:56 2025 GMT Subject: CN=d095f42c6c61a150edb2b3f6bd0f10abfa5d687a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:56:88:5b:64:a2:25:1b:b7:62:7d:6f:53: f7:55:23:01:82:c2:0f:2d:09:f5:8d:70:30:58:3c: 59:63:b8:9a:3a:d4:54:21:f8:cc:61:ba:1c:5f:81: 99:73:3b:74:de:5a:0d:bb:14:32:d6:72:35:69:54: 02:79:e6:f9:5d:55:f0:71:ee:23:31:3d:af:93:14: 40:7d:d3:3c:db:a3:b3:f3:56:95:7b:da:f5:bd:e1: f7:fe:91:e3:8c:ff:a2:61:48:c7:23:0a:2d:3b:61: 4b:c6:b8:da:b9:fa:9a:b4:62:b3:53:ae:c5:bb:fc: db:a4:67:3c:bc:b0:4a:57:58:d6:08:8f:73:03:5c: 2c:7f:45:cf:f0:f9:fd:0b:e2:72:74:39:51:ef:00: 91:f3:62:a9:fb:52:7d:e2:3e:76:36:d3:67:ca:91: d5:27:10:69:6c:4f:ff:ae:9c:cf:3a:c4:30:92:7d: ac:a1:46:82:08:48:ab:0e:73:7f:24:6b:57:2c:24: 47:f4:a1:55:08:d2:ab:53:a5:12:f7:8d:97:a2:f3: d8:b8:27:01:63:b3:fa:99:11:f1:fc:6b:ba:d6:2c: fd:1b:b4:9e:8c:ef:3b:f1:f8:dc:9c:fc:76:64:99: fa:df:a5:68:07:9c:5f:c6:8d:51:78:a0:1f:64:00: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:95:F4:2C:6C:61:A1:50:ED:B2:B3:F6:BD:0F:10:AB:FA:5D:68:7A X509v3 Authority Key Identifier: keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b2:bf:79:db:ce:22:0b:7e:46:13:88:1d:c4:71:00:03:ae: 84:bf:e5:87:0b:56:37:ad:c3:fb:c8:cb:20:67:2b:21:63:07: 0a:ef:47:4f:31:b4:a3:f2:49:91:69:32:0a:62:50:55:2f:76: 5d:4e:d1:cf:1e:d9:28:a4:f4:ad:8b:a9:a0:db:7e:ae:b0:29: e9:38:9b:30:6a:b1:e0:39:e0:be:dc:86:df:aa:48:bc:29:c7: e6:34:75:24:b9:9c:30:f9:34:8b:ec:cb:d1:6b:38:71:2d:2b: e6:16:d7:28:31:f2:c2:96:63:d0:88:4f:5b:7f:b2:b3:79:ef: 4e:27:4e:0a:11:3f:5d:42:5c:d1:58:1d:de:d2:7f:e6:58:cf: 4e:06:64:d8:c8:bd:90:de:e2:c0:23:48:c6:d5:16:7c:8c:bd: 2e:6f:cc:f0:03:6b:d6:0f:26:4e:8a:1b:f5:19:7d:fa:fd:63: 21:d8:0b:39:b0:45:a3:ed:73:21:87:44:5d:f4:97:f7:f8:45: cf:84:5d:22:d0:de:00:32:c7:a9:26:a7:93:7c:f7:eb:1d:94: 5f:68:21:16:46:e7:b2:3f:1c:68:c5:25:a4:10:92:3d:05:04: ae:76:0f:b8:93:9a:c8:ae:36:31:a9:97:35:d0:07:1e:93:c0: f1:ae:ff:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Id+qXsX1RX2hXQFc5j6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzY2JkMTQ3NzA0NGEwMzQwNGM3ZmM0Mzk2MWMyYzgzYmJh NzViYmMwHhcNMjUxMjIwMDUwMDU2WhcNMjUxMjIxMDUwMDU2WjAzMTEwLwYDVQQD EyhkMDk1ZjQyYzZjNjFhMTUwZWRiMmIzZjZiZDBmMTBhYmZhNWQ2ODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDtWiFtkoiUbt2J9b1P3VSMBgsIP LQn1jXAwWDxZY7iaOtRUIfjMYbocX4GZczt03loNuxQy1nI1aVQCeeb5XVXwce4j MT2vkxRAfdM826Oz81aVe9r1veH3/pHjjP+iYUjHIwotO2FLxrjaufqatGKzU67F u/zbpGc8vLBKV1jWCI9zA1wsf0XP8Pn9C+JydDlR7wCR82Kp+1J94j52NtNnypHV JxBpbE//rpzPOsQwkn2soUaCCEirDnN/JGtXLCRH9KFVCNKrU6US942XovPYuCcB Y7P6mRHx/Gu61iz9G7SejO878fjcnPx2ZJn636VoB5xfxo1ReKAfZAAGPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCV9CxsYaFQ7bKz9r0PEKv6XWh6MB8GA1UdIwQY MBaAFFPL0UdwRKA0BMf8Q5YcLIO7p1u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmIt YTJkMTE2NTYwYWNhLzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmItYTJkMTE2NTYwYWNh LzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLK/edvO Igt+RhOIHcRxAAOuhL/lhwtWN63D+8jLIGcrIWMHCu9HTzG0o/JJkWkyCmJQVS92 XU7Rzx7ZKKT0rYupoNt+rrAp6TibMGqx4DngvtyG36pIvCnH5jR1JLmcMPk0i+zL 0Ws4cS0r5hbXKDHywpZj0IhPW3+ys3nvTidOChE/XUJc0Vgd3tJ/5ljPTgZk2Mi9 kN7iwCNIxtUWfIy9Lm/M8ANr1g8mToob9Rl9+v1jIdgLObBFo+1zIYdEXfSX9/hF z4RdItDeADLHqSank3z36x2UX2ghFkbnsj8caMUlpBCSPQUErnYPuJOayK42MamX NdAHHpPA8a7/6A== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:28 2025 by rpki-client