This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json) Hash identifier: hHKqRAUQcWMSQidWedv8Dil5ZBjD1XQmG8YxW3RtZUQ= Subject key identifier: 62:E4:7D:60:76:7E:22:AD:75:B2:A9:ED:19:D5:6D:B2:C4:C0:9E:8E Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96 Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96 Certificate serial: 019AF1D1C486E11729FBF76CD85941EDCE73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft Manifest number: 0703 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: kmru2T/i/wZtzFRevy4XN7OpVtEHA1sF8yNuO914tmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c4:86:e1:17:29:fb:f7:6c:d8:59:41:ed:ce:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=62e47d60767e22ad75b2a9ed19d56db2c4c09e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:3a:c5:81:b3:bd:41:2b:8b:49:d5:e0:a9: 86:48:1d:c3:fc:93:f7:b2:6a:bf:ab:b6:a1:f3:58: 95:02:5f:61:15:f8:54:45:22:83:6b:3a:56:24:48: 8b:4c:4b:0d:0c:6c:1a:e6:bf:f5:ab:2f:b4:e6:5d: 26:25:96:c7:96:ea:13:5f:78:a6:bd:d5:54:18:52: 0c:12:ee:67:85:dc:7b:51:58:42:44:8c:ee:2b:ac: 36:96:22:fb:af:7e:9a:e8:d3:01:62:7d:73:1e:62: a5:5a:2a:16:10:d7:f2:2b:01:47:52:62:62:71:13: 74:46:fb:0c:3c:f9:e3:2b:d9:8a:72:45:ab:23:ec: 1c:85:f3:40:b2:b2:ed:13:a0:84:d0:1b:e4:46:10: 63:57:aa:83:b9:04:5b:f8:87:ec:28:8d:a2:da:71: 71:e1:40:7f:bf:01:cd:ea:1e:76:5e:9b:c6:19:62: 31:5b:bf:c9:9d:a8:07:ba:ef:8c:18:bf:dc:27:c3: 00:de:35:04:d3:a6:74:8f:84:b6:40:86:5c:a4:5a: 1d:d4:45:ab:c5:46:e8:8e:88:2e:1a:77:f1:9f:43: 96:68:69:a6:bb:e4:e6:0c:75:5f:0a:f7:02:74:f6: 54:4f:de:c8:a2:7f:1c:55:ce:ea:08:86:de:5f:7d: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E4:7D:60:76:7E:22:AD:75:B2:A9:ED:19:D5:6D:B2:C4:C0:9E:8E X509v3 Authority Key Identifier: keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:97:e4:e6:b1:f1:f3:73:cf:75:c3:81:6b:10:db:3c:6f:fb: c4:86:81:f3:9e:db:52:b6:32:a7:69:5a:ad:ed:2a:3b:9e:9e: 11:9a:ad:8e:9e:e1:43:1b:cc:d0:81:d5:82:a3:12:c4:47:b5: 44:4d:90:c7:6f:7a:bc:28:5e:41:13:09:43:e4:81:b6:12:28: 67:55:1c:8a:da:38:a7:35:71:72:94:66:5e:8d:d3:19:46:9f: 4a:c5:d9:11:a8:6e:72:f5:f2:3c:1c:66:69:3d:12:d9:9c:64: 33:af:fb:44:9d:9e:53:11:0d:62:56:ff:20:f0:e4:bc:bc:5a: 97:fc:e1:79:99:a4:2e:0a:a4:8c:dc:96:4c:7a:27:bb:f4:92: 6e:ce:6f:58:09:37:5b:7c:09:f9:1a:2b:a8:d5:93:24:f5:ff: e1:3e:9a:46:73:7b:3f:97:f7:3b:82:0f:7c:2c:c4:f5:ec:a0: 3b:f1:fc:1e:c7:d0:6a:8a:b9:63:74:9f:47:1a:bf:bf:a2:d4: 2b:78:5b:04:ce:37:cd:c5:e7:16:b7:ad:73:1b:b0:24:19:65: b5:4a:da:bd:5a:e4:37:cb:09:6c:fd:74:6a:b7:28:0b:af:85: d2:f9:04:c4:90:57:6b:b6:45:78:06:bc:29:19:de:87:64:99: 96:d1:e3:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cSG4Rcp+/ds2FlB7c5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZmIyNjBlYTFjODFiODFiMTkxZDBhZThkYzM2NDExMjFl OWViOTYwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD Eyg2MmU0N2Q2MDc2N2UyMmFkNzViMmE5ZWQxOWQ1NmRiMmM0YzA5ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseI6xYGzvUEri0nV4KmGSB3D/JP3 smq/q7ah81iVAl9hFfhURSKDazpWJEiLTEsNDGwa5r/1qy+05l0mJZbHluoTX3im vdVUGFIMEu5nhdx7UVhCRIzuK6w2liL7r36a6NMBYn1zHmKlWioWENfyKwFHUmJi cRN0RvsMPPnjK9mKckWrI+wchfNAsrLtE6CE0BvkRhBjV6qDuQRb+IfsKI2i2nFx 4UB/vwHN6h52XpvGGWIxW7/JnagHuu+MGL/cJ8MA3jUE06Z0j4S2QIZcpFod1EWr xUbojoguGnfxn0OWaGmmu+TmDHVfCvcCdPZUT97Ion8cVc7qCIbeX321BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLkfWB2fiKtdbKp7RnVbbLEwJ6OMB8GA1UdIwQY MBaAFFH7Jg6hyBuBsZHQro3DZBEh6euWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80ZjVlN2ItMTRlNy00NGJjLThkNWQt ZDI5NTc0NTNiODQ0LzEvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80ZjVlN2ItMTRlNy00NGJjLThkNWQtZDI5NTc0NTNiODQ0 LzEvVWZzbURxSElHNEd4a2RDdWpjTmtFU0hwNjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJfk5rHx 83PPdcOBaxDbPG/7xIaB857bUrYyp2lare0qO56eEZqtjp7hQxvM0IHVgqMSxEe1 RE2Qx296vCheQRMJQ+SBthIoZ1Ucito4pzVxcpRmXo3TGUafSsXZEahucvXyPBxm aT0S2ZxkM6/7RJ2eUxENYlb/IPDkvLxal/zheZmkLgqkjNyWTHonu/SSbs5vWAk3 W3wJ+RorqNWTJPX/4T6aRnN7P5f3O4IPfCzE9eygO/H8HsfQaoq5Y3SfRxq/v6LU K3hbBM43zcXnFretcxuwJBlltUravVrkN8sJbP10arcoC6+F0vkExJBXa7ZFeAa8 KRneh2SZltHjEw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:07 2025 by rpki-client