This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json) Hash identifier: 37TrCISWFtqVl1sCnGUws8qzTJOSAcxaRS3URyy/hqI= Subject key identifier: 95:99:C1:52:9C:82:AC:32:80:E1:31:D7:61:9E:C9:FC:31:D1:49:B0 Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea Certificate serial: 019B4694508DF47B50763B811BEA19E1F31F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft Manifest number: 0770 Signing time: Mon 22 Dec 2025 15:01:23 +0000 Manifest this update: Mon 22 Dec 2025 15:01:23 +0000 Manifest next update: Tue 23 Dec 2025 15:01:23 +0000 Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=) 2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: 3VKS+V0Q5ZmxS92TYsGDuLwstqA3PKF2Gx4qqLw9Ogg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:50:8d:f4:7b:50:76:3b:81:1b:ea:19:e1:f3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea Validity Not Before: Dec 22 15:01:23 2025 GMT Not After : Dec 23 15:01:23 2025 GMT Subject: CN=9599c1529c82ac3280e131d7619ec9fc31d149b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:fa:bc:c4:86:9e:b4:6d:1a:1e:e8:aa:2c: 3f:33:5e:69:ad:49:42:e4:20:dd:89:45:db:14:aa: 58:df:bf:9e:8f:a0:97:48:1d:49:bb:da:d1:63:52: 53:3b:9f:73:fc:d3:80:a2:af:c0:07:01:a6:9c:4f: 53:b3:52:58:18:18:83:e8:ed:23:90:aa:bb:65:25: d8:1d:91:73:94:ff:5a:d0:b0:f0:55:b8:30:5f:15: 90:42:7a:f9:27:98:ae:8f:69:fe:27:fc:a0:c8:58: 29:a7:c5:3f:7a:1d:ed:9d:f6:99:2f:2f:08:7c:89: 68:b2:ef:fe:8f:fa:ce:b5:d2:11:1a:dc:fd:e8:28: 09:f7:f7:ee:a5:06:eb:54:44:7d:d0:01:e4:40:76: 2b:45:e5:16:2c:66:5d:58:9b:c2:0d:ac:e7:c5:24: 42:9f:fd:68:5b:09:42:22:94:78:6c:32:68:21:89: ed:8a:e6:7d:cd:0a:27:ca:0a:d6:fe:39:4c:bb:81: 30:40:24:6b:bc:7d:ec:65:44:38:93:03:b7:ae:a6: 6c:ee:e8:ab:7a:c6:a8:a4:e0:51:d5:49:26:c0:12: bb:1a:0f:11:a3:13:7f:b8:b7:98:ae:72:17:83:00: 9b:98:37:94:8b:d1:fc:b6:f4:12:1f:0a:81:03:c7: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:C1:52:9C:82:AC:32:80:E1:31:D7:61:9E:C9:FC:31:D1:49:B0 X509v3 Authority Key Identifier: keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5c:92:1b:b3:44:28:c8:cf:ea:8d:a2:d8:58:cb:ea:37:ae: 48:ab:56:f3:0f:81:1b:bc:a3:b9:fb:25:91:1e:84:61:36:e7: 3b:a0:d2:c2:06:fa:d1:7b:0d:d2:af:d6:16:8a:59:f4:f2:48: ca:6d:e9:00:36:cc:f1:6c:36:a2:c8:6c:93:c1:1a:e7:66:f1: dd:05:df:a5:dd:b0:6f:4e:06:48:48:3e:19:c7:ba:8b:02:9a: 29:5d:a3:d1:48:88:5c:c8:19:34:61:00:e3:f8:91:73:d2:6f: 65:63:74:06:47:bc:6c:fd:f4:46:ce:6a:56:2c:76:00:38:a1: bf:2d:29:29:50:19:77:f0:93:e6:48:a6:08:08:35:77:ee:0e: 1e:09:4f:b7:4d:b4:b5:f5:0e:21:c6:d2:fa:fc:16:8a:41:32: ff:ac:11:4e:6a:8e:d4:2a:44:89:29:af:9d:46:56:a8:aa:44: 0c:ba:51:28:92:0a:ea:28:c3:df:7b:c1:7b:7a:2a:40:3e:8a: 24:18:6a:d4:bf:23:31:a7:ee:85:2f:04:8b:97:ad:58:c2:ad: a9:3e:7e:b7:54:98:e0:9d:fa:0f:08:68:c9:56:f9:6e:93:d6: 80:20:9c:4b:d4:db:3b:38:1d:cf:98:1d:52:5d:f7:b6:74:80: 51:05:ef:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlFCN9HtQdjuBG+oZ4fMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZWFhMTljYTI3YTZmNTdmMmNiYjRlNDYzNzIwYjQzNmFm MTdkZWEwHhcNMjUxMjIyMTUwMTIzWhcNMjUxMjIzMTUwMTIzWjAzMTEwLwYDVQQD Eyg5NTk5YzE1MjljODJhYzMyODBlMTMxZDc2MTllYzlmYzMxZDE0OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/6vMSGnrRtGh7oqiw/M15prUlC 5CDdiUXbFKpY37+ej6CXSB1Ju9rRY1JTO59z/NOAoq/ABwGmnE9Ts1JYGBiD6O0j kKq7ZSXYHZFzlP9a0LDwVbgwXxWQQnr5J5iuj2n+J/ygyFgpp8U/eh3tnfaZLy8I fIlosu/+j/rOtdIRGtz96CgJ9/fupQbrVER90AHkQHYrReUWLGZdWJvCDaznxSRC n/1oWwlCIpR4bDJoIYntiuZ9zQonygrW/jlMu4EwQCRrvH3sZUQ4kwO3rqZs7uir esaopOBR1UkmwBK7Gg8RoxN/uLeYrnIXgwCbmDeUi9H8tvQSHwqBA8cJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWZwVKcgqwygOEx12Geyfwx0UmwMB8GA1UdIwQY MBaAFFPqoZyiem9X8su05GNyC0Nq8X3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAt MjdlOGY0ZjFjNjg0LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8wZDNiMmItZTMwNC00ZDYxLWI2ZDAtMjdlOGY0ZjFjNjg0 LzEvVS1xaG5LSjZiMWZ5eTdUa1kzSUxRMnJ4ZmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFySG7NE KMjP6o2i2FjL6jeuSKtW8w+BG7yjufslkR6EYTbnO6DSwgb60XsN0q/WFopZ9PJI ym3pADbM8Ww2oshsk8Ea52bx3QXfpd2wb04GSEg+Gce6iwKaKV2j0UiIXMgZNGEA 4/iRc9JvZWN0Bke8bP30Rs5qVix2ADihvy0pKVAZd/CT5kimCAg1d+4OHglPt020 tfUOIcbS+vwWikEy/6wRTmqO1CpEiSmvnUZWqKpEDLpRKJIK6ijD33vBe3oqQD6K JBhq1L8jMafuhS8Ei5etWMKtqT5+t1SY4J36DwhoyVb5bpPWgCCcS9TbOzgdz5gd Ul33tnSAUQXvdw== -----END CERTIFICATE-----Generated at Mon Dec 22 19:30:09 2025 by rpki-client