This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft File: UfF0UrXxvy_3B27gWf8nXAyxEt4.mft (raw, json) Hash identifier: toIF17DxhTnuNcbZN9dj3nFWoOoiBH5A9RdyfZoJKDg= Subject key identifier: 58:27:56:1C:B7:88:BE:6E:8B:00:A1:1A:90:52:79:1D:0E:A4:19:77 Authority key identifier: 51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE Certificate issuer: /CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de Certificate serial: 019AF0BFA10205B212D0A22270960CCB8540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft Manifest number: 06 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: GXuUD6nAp7RfhD5guLaEdCtJhos.roa (hash: 5cLq1XiFXQljJjhGmJhwjtVSIZlhSNusJxMQnbQOGSg=) 2: UfF0UrXxvy_3B27gWf8nXAyxEt4.crl (hash: pJCGlOkMKACUQCRcz/hFHAvzDPKGN67lF8OAyW+qmrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a1:02:05:b2:12:d0:a2:22:70:96:0c:cb:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=5827561cb788be6e8b00a11a9052791d0ea41977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:d9:db:54:b5:19:cd:e6:83:a4:4c:86:30: ec:80:f8:6f:08:cb:25:3e:d4:e8:fa:e5:a1:2a:49: 2b:05:e5:f7:be:f7:42:34:cf:45:7e:40:00:3f:24: 55:7e:2b:73:3d:eb:33:66:15:15:fb:30:50:9a:8a: e4:95:f3:2f:ad:07:1e:71:b9:f4:3d:45:7e:ec:83: a7:33:e8:5c:9a:98:97:e2:01:05:d7:a7:6a:f1:d2: 8e:71:a4:65:86:af:47:53:27:86:c7:9a:f2:0a:c7: 17:02:73:2c:77:41:d8:a0:9c:ab:77:ee:6b:d6:fc: fa:d9:75:1a:55:c2:83:a0:82:2f:e5:36:cb:3e:ae: 27:ee:cf:5f:28:0c:c9:78:b6:f1:0a:6a:6b:93:9d: 60:bc:23:2d:d7:fd:d0:f0:ed:23:09:e9:72:1e:7d: 0f:8d:08:32:8a:5c:71:96:88:26:88:1f:7c:09:41: 18:4a:be:2b:9a:02:8e:20:d7:fc:b6:2a:22:b9:8c: 50:e8:be:00:15:5d:9a:64:1b:b7:56:e4:b8:a5:da: 89:09:f8:fa:2e:31:b2:3d:d9:b2:f2:53:a5:0b:f6: 1a:46:3c:fe:55:fc:b1:62:17:c8:2d:46:e4:2f:de: d0:9a:6a:8b:aa:d4:19:28:0e:0e:9f:42:4d:44:2a: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:27:56:1C:B7:88:BE:6E:8B:00:A1:1A:90:52:79:1D:0E:A4:19:77 X509v3 Authority Key Identifier: keyid:51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:26:69:5e:98:2f:66:89:30:13:19:c2:45:e9:68:09:5d:c4: 93:05:ba:cb:61:54:53:66:b3:1b:f3:99:12:d6:7e:4e:9b:92: 35:6c:5d:68:d9:30:0d:51:51:ca:9c:d2:99:82:f9:f2:06:ac: 1d:e7:e0:bf:aa:52:b5:e7:4f:d3:eb:3a:77:17:25:ba:3a:89: 10:62:d8:15:d8:f4:7e:76:d9:f3:05:2f:d3:30:b2:89:47:45: 54:94:bc:13:27:24:91:04:64:c2:b8:98:9a:73:52:03:98:8b: d6:b7:46:47:12:f1:a0:9d:ad:c6:f4:f4:a3:b9:87:35:ef:9e: 31:3a:cf:0c:2a:20:6c:84:55:92:cb:9e:e3:5c:8e:59:ed:e1: 11:59:8d:1e:8a:ab:d1:90:49:c0:ef:b1:8a:7d:e7:2e:57:52: 6a:2f:e8:16:2b:4b:8a:67:3e:48:5b:83:22:7a:a4:e6:92:b8: 21:d3:93:56:18:e8:30:f9:94:39:cc:29:ec:47:10:70:6e:86: be:13:d3:9c:cf:79:61:22:80:87:6a:b6:6c:80:c5:d4:7b:aa: 22:a4:26:96:a8:47:0f:b1:ed:cc:77:1f:ce:59:a5:3a:27:e7: 3a:61:25:b6:96:0c:f9:0d:80:38:9b:78:51:4d:2b:87:10:69: d0:c4:26:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6ECBbIS0KIicJYMy4VAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjE3NDUyYjVmMWJmMmZmNzA3NmVlMDU5ZmYyNzVjMGNi MTEyZGUwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD Eyg1ODI3NTYxY2I3ODhiZTZlOGIwMGExMWE5MDUyNzkxZDBlYTQxOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3PZ21S1Gc3mg6RMhjDsgPhvCMsl PtTo+uWhKkkrBeX3vvdCNM9FfkAAPyRVfitzPeszZhUV+zBQmorklfMvrQcecbn0 PUV+7IOnM+hcmpiX4gEF16dq8dKOcaRlhq9HUyeGx5ryCscXAnMsd0HYoJyrd+5r 1vz62XUaVcKDoIIv5TbLPq4n7s9fKAzJeLbxCmprk51gvCMt1/3Q8O0jCelyHn0P jQgyilxxlogmiB98CUEYSr4rmgKOINf8tioiuYxQ6L4AFV2aZBu3VuS4pdqJCfj6 LjGyPdmy8lOlC/YaRjz+VfyxYhfILUbkL97QmmqLqtQZKA4On0JNRCo5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgnVhy3iL5uiwChGpBSeR0OpBl3MB8GA1UdIwQY MBaAFFHxdFK18b8v9wdu4Fn/J1wMsRLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MzU4ZWItMWQ0My00NGY0LWJjMDAt MDdhYmZmNjcyMDJjLzEvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81MzU4ZWItMWQ0My00NGY0LWJjMDAtMDdhYmZmNjcyMDJj LzEvVWZGMFVyWHh2eV8zQjI3Z1dmOG5YQXl4RXQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICZpXpgv ZokwExnCReloCV3EkwW6y2FUU2azG/OZEtZ+TpuSNWxdaNkwDVFRypzSmYL58gas Hefgv6pStedP0+s6dxclujqJEGLYFdj0fnbZ8wUv0zCyiUdFVJS8EyckkQRkwriY mnNSA5iL1rdGRxLxoJ2txvT0o7mHNe+eMTrPDCogbIRVksue41yOWe3hEVmNHoqr 0ZBJwO+xin3nLldSai/oFitLimc+SFuDInqk5pK4IdOTVhjoMPmUOcwp7EcQcG6G vhPTnM95YSKAh2q2bIDF1HuqIqQmlqhHD7HtzHcfzlmlOifnOmEltpYM+Q2AOJt4 UU0rhxBp0MQm0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:40 2025 by rpki-client