This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft File: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft (raw, json) Hash identifier: x/M9NPPUZxYSnUU3ggH6989FMPtEXoCs1bFoVd0pg7s= Subject key identifier: 4A:CF:5E:AF:DD:53:44:2D:02:5A:87:44:10:BE:1C:AE:01:51:05:05 Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 Certificate issuer: /CN=51f83b800bf5d66cc76d0e624847fb668e177c71 Certificate serial: 019AF1D23E5ED625A8832C85E31C19ECC813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft Manifest number: 01F2 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl (hash: wsonDWM3HyWKeV1RpbpATgBnDrnNYL9eZMYyoMzGvcQ=) 2: UzdAI9r8ururR3efFNaAcO55XaM.roa (hash: pCH+pFsUkI5n2Li26SVl8WqYpHuk5K9R9H/mh0OmiJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3e:5e:d6:25:a8:83:2c:85:e3:1c:19:ec:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=4acf5eafdd53442d025a874410be1cae01510505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:56:0b:c0:00:1b:e8:6c:1d:c4:be:a4:1c: 13:f1:4e:bd:e7:78:45:e0:04:d2:ea:11:0c:ac:68: aa:89:62:2a:d7:da:98:a6:6a:7c:6c:45:bc:78:63: 79:b0:7e:a0:5c:18:c9:37:71:a5:dc:03:c3:97:97: 1a:84:c1:2a:04:f6:1b:45:b6:21:29:ac:e3:18:72: 1a:0f:f6:8b:3f:18:cc:8c:e9:5f:63:b4:9c:b7:a1: 66:21:8f:b8:1b:37:7e:2c:d2:c4:45:9d:46:b7:18: 9f:7d:eb:69:22:75:ef:6b:9d:ae:8a:90:b6:7a:68: 17:db:1f:c0:b8:ef:29:3e:f5:73:27:90:7e:cf:97: 7e:14:7d:1b:f2:5f:f0:f3:59:53:7d:1e:23:fd:a9: ae:77:2f:24:a4:d3:b0:da:da:ff:d2:90:ec:dc:0d: ef:33:9a:3f:e8:f8:64:fc:55:88:75:7d:3f:8c:40: af:42:f3:f7:bd:f0:1b:4a:a0:a0:ff:25:87:ea:d2: 75:a3:94:ad:21:d7:13:c2:f2:fa:d4:06:3a:fb:74: 3e:7a:e0:1b:55:db:01:4b:1c:6a:f1:bc:b0:4e:81: 4a:da:69:35:4d:e0:d6:c1:07:ee:14:d9:69:32:94: 4b:a2:04:29:e1:fb:52:7f:3d:22:62:0e:e0:c0:77: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:5E:AF:DD:53:44:2D:02:5A:87:44:10:BE:1C:AE:01:51:05:05 X509v3 Authority Key Identifier: keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:94:8d:b4:6f:d5:16:ad:46:08:ba:0e:31:23:3a:b6:0a:10: 5f:9e:20:47:97:96:ae:7b:b9:cd:60:81:67:20:96:e9:b7:31: e9:f6:8d:7f:99:a0:bb:9e:49:98:37:b2:66:f0:15:40:f2:3b: 4a:4a:b5:f2:a7:bc:a4:d2:8a:e1:3b:72:6f:ce:c0:02:17:fa: fb:cf:23:f4:39:55:5a:20:1f:16:56:e3:0e:1e:53:54:f5:4d: 79:b8:56:41:05:25:31:5d:11:b9:75:ff:f5:1b:91:ff:19:8a: 22:78:af:40:da:23:5c:f6:d2:eb:ce:e5:7a:e8:e4:6c:96:b9: a0:66:57:f3:6c:c0:9a:0d:30:f1:47:45:6f:fa:bb:29:61:68: 4b:74:ed:d6:82:96:af:8a:f8:f6:bc:52:8f:bc:48:f0:62:b5: 8c:b4:40:a3:34:1d:89:4a:d1:45:32:07:a4:81:a1:fa:cf:8e: 78:4f:2d:4f:a0:8e:96:3b:6e:42:c7:35:45:7a:c6:07:1b:1e: 20:87:99:4a:7c:ed:9d:6a:ae:c7:c4:4f:4f:11:21:3a:db:c3: 89:ee:55:e0:78:d7:0d:41:64:f7:da:45:d1:fb:93:cc:b0:69: ed:d8:b2:d6:52:3f:f3:15:96:6f:11:b2:92:8c:b8:d9:3e:6b: ed:74:64:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j5e1iWogyyF4xwZ7MgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjgzYjgwMGJmNWQ2NmNjNzZkMGU2MjQ4NDdmYjY2OGUx NzdjNzEwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg0YWNmNWVhZmRkNTM0NDJkMDI1YTg3NDQxMGJlMWNhZTAxNTEwNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25ZWC8AAG+hsHcS+pBwT8U6953hF 4ATS6hEMrGiqiWIq19qYpmp8bEW8eGN5sH6gXBjJN3Gl3APDl5cahMEqBPYbRbYh KazjGHIaD/aLPxjMjOlfY7Sct6FmIY+4Gzd+LNLERZ1GtxiffetpInXva52uipC2 emgX2x/AuO8pPvVzJ5B+z5d+FH0b8l/w81lTfR4j/amudy8kpNOw2tr/0pDs3A3v M5o/6Phk/FWIdX0/jECvQvP3vfAbSqCg/yWH6tJ1o5StIdcTwvL61AY6+3Q+euAb VdsBSxxq8bywToFK2mk1TeDWwQfuFNlpMpRLogQp4ftSfz0iYg7gwHcmYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErPXq/dU0QtAlqHRBC+HK4BUQUFMB8GA1UdIwQY MBaAFFH4O4AL9dZsx20OYkhH+2aOF3xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYt ZTY5NThlZDVhN2EwLzEvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYtZTY5NThlZDVhN2Ew LzEvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZSNtG/V Fq1GCLoOMSM6tgoQX54gR5eWrnu5zWCBZyCW6bcx6faNf5mgu55JmDeyZvAVQPI7 Skq18qe8pNKK4Ttyb87AAhf6+88j9DlVWiAfFlbjDh5TVPVNebhWQQUlMV0RuXX/ 9RuR/xmKInivQNojXPbS687leujkbJa5oGZX82zAmg0w8UdFb/q7KWFoS3Tt1oKW r4r49rxSj7xI8GK1jLRAozQdiUrRRTIHpIGh+s+OeE8tT6COljtuQsc1RXrGBxse IIeZSnztnWqux8RPTxEhOtvDie5V4HjXDUFk99pF0fuTzLBp7diy1lI/8xWWbxGy koy42T5r7XRkDA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:08 2025 by rpki-client