This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json) Hash identifier: aU+g9JNwzbW5EJKh2ldY041U3sY/LD1bG/oTCJPMDR4= Subject key identifier: D9:0E:DB:ED:17:8A:3C:B0:77:E6:F2:D8:50:CA:52:D9:96:30:D2:36 Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33 Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033 Certificate serial: 019AF31D181EFEEAA9F2E1EF9C258F6874DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft Manifest number: 0F2E Signing time: Sat 06 Dec 2025 10:02:41 +0000 Manifest this update: Sat 06 Dec 2025 10:02:41 +0000 Manifest next update: Sun 07 Dec 2025 10:02:41 +0000 Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: /veP5qh7QfcLt4i1Ve2xEpnWT9GQzVtIiO99UbM8arE=) 2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:18:1e:fe:ea:a9:f2:e1:ef:9c:25:8f:68:74:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033 Validity Not Before: Dec 6 10:02:41 2025 GMT Not After : Dec 7 10:02:41 2025 GMT Subject: CN=d90edbed178a3cb077e6f2d850ca52d99630d236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:c9:a8:c1:b4:5f:f4:b4:90:cc:ab:ab:f0: 1d:9e:5e:36:f6:25:0f:60:ea:68:7e:e4:dc:4c:c9: 9f:fe:e0:1a:84:ff:df:7d:ba:0b:38:a6:15:40:8d: 9a:38:78:65:d6:5c:5e:ab:1c:e7:8c:37:29:7b:fc: f1:bf:6a:51:cd:50:96:9c:51:0d:6b:cb:82:8e:b1: c4:cf:4f:da:25:7a:a8:9c:23:da:95:21:9b:c2:7e: 5d:11:26:24:32:ff:ae:c4:85:5f:fa:66:8d:d3:71: 4e:63:0c:8b:8e:f8:d7:1e:67:40:f2:a3:df:b9:be: 72:13:95:11:15:e9:2b:69:ae:c9:3d:ad:30:f3:1b: e2:16:4c:f8:fe:b0:fe:7b:70:7d:31:4e:df:8a:57: 15:05:e7:63:a7:14:31:aa:c9:8e:83:2e:3b:09:3c: 7e:1d:15:66:b1:5c:bd:9b:3d:8c:ea:ff:90:4d:00: e2:2a:ac:d0:95:e8:a9:ea:e0:0b:7c:39:1b:64:38: 7b:1c:78:7e:90:a5:46:7e:b1:82:62:d8:37:16:b5: b8:82:63:fa:74:3c:40:75:98:a6:c6:41:72:1b:d9: aa:09:ed:58:b4:9e:a9:cc:f3:b3:10:83:4b:47:37: 47:53:35:87:d4:27:f1:51:4a:08:7c:e5:57:b0:7d: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0E:DB:ED:17:8A:3C:B0:77:E6:F2:D8:50:CA:52:D9:96:30:D2:36 X509v3 Authority Key Identifier: keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:c6:77:e3:00:f0:89:55:6a:8e:07:d3:68:f1:4d:59:1f:6b: 0a:b3:14:a8:7f:6e:99:ea:8f:c5:24:34:35:19:6b:15:b0:56: e9:a2:c7:70:b8:e6:d8:19:89:5d:b4:0a:e6:b1:98:61:3c:b9: 72:e0:6f:bd:05:b3:23:6b:03:37:a5:6f:fb:03:33:5f:b8:fb: 73:2a:66:1a:96:cf:dc:d2:ec:7a:63:7d:7f:20:46:54:cc:c0: eb:b3:1d:84:1a:bc:69:61:d8:42:53:ec:24:ef:f4:8e:50:32: d6:e1:60:e2:bf:c3:43:55:50:06:0b:bd:6d:6b:2f:4a:19:c3: 35:d4:6a:f6:b7:3f:a0:2a:c8:02:90:94:8c:a8:dc:77:1e:45: c4:cb:b8:c2:82:f1:d6:ef:f4:36:68:86:7f:9b:22:ba:a7:dc: 7f:58:39:89:57:81:a4:e4:3f:db:9a:06:95:5f:bd:0f:a1:50: 8b:b5:b8:c8:75:0e:e8:ad:18:db:e1:ad:93:4d:a1:dd:e5:88: 79:40:c3:38:a7:72:26:dc:e8:ec:9b:c0:43:3a:e3:b9:30:c7: ab:fe:5b:99:fe:a9:d0:15:80:cc:82:65:64:05:ec:f6:fd:15: 90:1e:28:00:3f:cb:fd:95:87:96:6b:7e:7a:e7:7f:a7:d7:33: 3a:87:3d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRge/uqp8uHvnCWPaHTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNTdjODdkMTExYzgwNTBmZDVjOWFjMmIwNmJlNjIzMjM2 NzUwMzMwHhcNMjUxMjA2MTAwMjQxWhcNMjUxMjA3MTAwMjQxWjAzMTEwLwYDVQQD EyhkOTBlZGJlZDE3OGEzY2IwNzdlNmYyZDg1MGNhNTJkOTk2MzBkMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRbJqMG0X/S0kMyrq/Adnl429iUP YOpofuTcTMmf/uAahP/ffboLOKYVQI2aOHhl1lxeqxznjDcpe/zxv2pRzVCWnFEN a8uCjrHEz0/aJXqonCPalSGbwn5dESYkMv+uxIVf+maN03FOYwyLjvjXHmdA8qPf ub5yE5URFekraa7JPa0w8xviFkz4/rD+e3B9MU7filcVBedjpxQxqsmOgy47CTx+ HRVmsVy9mz2M6v+QTQDiKqzQleip6uALfDkbZDh7HHh+kKVGfrGCYtg3FrW4gmP6 dDxAdZimxkFyG9mqCe1YtJ6pzPOzEINLRzdHUzWH1CfxUUoIfOVXsH1YmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkO2+0Xijywd+by2FDKUtmWMNI2MB8GA1UdIwQY MBaAFFFXyH0RHIBQ/VyawrBr5iMjZ1AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAt ZDI5NzAxNDg3NTM2LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAtZDI5NzAxNDg3NTM2 LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3MZ34wDw iVVqjgfTaPFNWR9rCrMUqH9umeqPxSQ0NRlrFbBW6aLHcLjm2BmJXbQK5rGYYTy5 cuBvvQWzI2sDN6Vv+wMzX7j7cypmGpbP3NLsemN9fyBGVMzA67MdhBq8aWHYQlPs JO/0jlAy1uFg4r/DQ1VQBgu9bWsvShnDNdRq9rc/oCrIApCUjKjcdx5FxMu4woLx 1u/0NmiGf5siuqfcf1g5iVeBpOQ/25oGlV+9D6FQi7W4yHUO6K0Y2+Gtk02h3eWI eUDDOKdyJtzo7JvAQzrjuTDHq/5bmf6p0BWAzIJlZAXs9v0VkB4oAD/L/ZWHlmt+ eud/p9czOoc9Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:55 2025 by rpki-client