This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft File: UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json) Hash identifier: fvSK/NOzygfDRJ0Y+EFAdANhjiN4mHCWOuuJEcHoaBM= Subject key identifier: C5:12:FA:32:5B:1A:46:AC:EF:25:F4:C6:1B:20:F0:0D:35:65:00:00 Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB Certificate issuer: /CN=515cbdbd16a6e868e99675bc29180268c258f0fb Certificate serial: 019AF50B0175B5BAFFAF45F8D3A34D60AA15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft Manifest number: 124E Signing time: Sat 06 Dec 2025 19:02:10 +0000 Manifest this update: Sat 06 Dec 2025 19:02:10 +0000 Manifest next update: Sun 07 Dec 2025 19:02:10 +0000 Files and hashes: 1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: 1I1ncUPEXcHjlSNKKX699T8VOUGMjqS2Sf1rlPM3rH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:01:75:b5:ba:ff:af:45:f8:d3:a3:4d:60:aa:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb Validity Not Before: Dec 6 19:02:10 2025 GMT Not After : Dec 7 19:02:10 2025 GMT Subject: CN=c512fa325b1a46acef25f4c61b20f00d35650000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:c8:99:93:3c:54:1a:e5:71:90:b4:5b:e8: cf:da:27:8c:b1:9b:8d:c0:a7:d6:07:fd:4a:8d:85: 1e:e0:a8:5e:3c:a5:35:39:32:86:f6:ce:14:28:a8: f4:fb:95:5d:73:de:63:9e:51:22:82:2f:b6:95:a8: fa:3b:2d:25:64:7a:9f:4c:d0:be:98:a4:7c:e6:6d: 4d:42:0c:41:db:ea:b9:d0:e5:4c:58:65:90:72:e9: 4c:ee:31:0d:09:a2:a8:81:6b:6b:89:18:14:72:c3: 03:4b:5e:ad:7b:3c:04:f3:50:fb:e4:03:11:06:75: 8d:5f:9f:ab:d4:ba:d7:e2:1c:dc:4c:f3:74:93:fc: 99:06:7a:5c:71:53:6b:4e:31:5d:94:ed:08:cc:d1: 44:6b:11:90:6d:77:f7:a4:a8:db:70:eb:98:21:63: 63:00:6a:87:21:6e:97:d3:1b:fb:5d:8c:4b:e6:0d: 22:5b:3a:b2:35:e2:01:81:c7:6d:21:83:0e:76:6a: ea:88:7f:aa:87:91:3f:49:68:31:29:91:1e:fe:a9: fb:58:f5:46:8c:54:68:a2:fd:e3:57:06:57:20:26: a0:b0:88:40:ad:cc:8a:e1:1b:20:fa:de:da:74:5e: 43:68:0b:de:a1:8f:15:af:e1:6e:82:c0:7f:99:1c: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:12:FA:32:5B:1A:46:AC:EF:25:F4:C6:1B:20:F0:0D:35:65:00:00 X509v3 Authority Key Identifier: keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:68:09:27:3a:7a:b0:e9:21:8c:e6:79:89:73:fb:b5:c3:e8: 73:4f:15:44:9c:e1:3b:28:25:a3:24:f4:b7:75:f8:40:9a:13: 22:36:b0:70:fb:49:5f:ac:cb:c6:a6:2b:6b:03:bb:dc:5f:dc: 88:d8:b2:9f:90:ba:91:d0:ff:34:f8:da:35:f5:a7:da:6a:dd: 9b:74:92:e1:b2:e1:f0:df:31:0a:71:fb:4f:31:ab:58:09:8d: 90:e8:5b:03:63:34:a1:ec:45:d4:62:3d:9c:22:78:38:68:f8: 5a:57:15:c8:6e:5b:4f:82:51:8d:bb:fc:0e:72:55:38:55:5a: 9a:ce:2d:97:ca:62:df:da:68:9c:b6:9b:08:a7:82:84:20:36: be:e5:80:4e:e8:03:51:c5:d2:a0:2a:17:e3:0c:d2:54:1c:fb: c5:8b:75:6c:01:41:58:d3:25:59:8d:46:71:6d:00:88:37:7c: dd:dd:0b:e8:2a:57:7b:9e:6f:9c:60:9d:76:e7:de:64:34:99: ef:4d:0c:d1:93:58:51:21:8f:8f:41:d8:1e:b7:39:75:e2:d4: 82:73:5c:c3:55:50:f7:05:e0:40:b3:72:3b:c1:5d:c4:1b:a0: fa:c1:54:9e:54:01:1a:33:26:50:0b:74:ce:a5:6f:87:d7:73: 03:a4:e5:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwF1tbr/r0X406NNYKoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNWNiZGJkMTZhNmU4NjhlOTk2NzViYzI5MTgwMjY4YzI1 OGYwZmIwHhcNMjUxMjA2MTkwMjEwWhcNMjUxMjA3MTkwMjEwWjAzMTEwLwYDVQQD EyhjNTEyZmEzMjViMWE0NmFjZWYyNWY0YzYxYjIwZjAwZDM1NjUwMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqnImZM8VBrlcZC0W+jP2ieMsZuN wKfWB/1KjYUe4KhePKU1OTKG9s4UKKj0+5Vdc95jnlEigi+2laj6Oy0lZHqfTNC+ mKR85m1NQgxB2+q50OVMWGWQculM7jENCaKogWtriRgUcsMDS16tezwE81D75AMR BnWNX5+r1LrX4hzcTPN0k/yZBnpccVNrTjFdlO0IzNFEaxGQbXf3pKjbcOuYIWNj AGqHIW6X0xv7XYxL5g0iWzqyNeIBgcdtIYMOdmrqiH+qh5E/SWgxKZEe/qn7WPVG jFRoov3jVwZXICagsIhArcyK4Rsg+t7adF5DaAveoY8Vr+FugsB/mRzyjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUS+jJbGkas7yX0xhsg8A01ZQAAMB8GA1UdIwQY MBaAFFFcvb0Wpuho6ZZ1vCkYAmjCWPD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVZ5OXZSYW02R2pwbG5XOEtSZ0NhTUpZOFBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMTA0YWItZTE0Ni00NThiLWI0NWYt ZDNlOThlNjM5YWNhLzEvVVZ5OXZSYW02R2pwbG5XOEtSZ0NhTUpZOFBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMTA0YWItZTE0Ni00NThiLWI0NWYtZDNlOThlNjM5YWNh LzEvVVZ5OXZSYW02R2pwbG5XOEtSZ0NhTUpZOFBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmgJJzp6 sOkhjOZ5iXP7tcPoc08VRJzhOygloyT0t3X4QJoTIjawcPtJX6zLxqYrawO73F/c iNiyn5C6kdD/NPjaNfWn2mrdm3SS4bLh8N8xCnH7TzGrWAmNkOhbA2M0oexF1GI9 nCJ4OGj4WlcVyG5bT4JRjbv8DnJVOFVams4tl8pi39ponLabCKeChCA2vuWATugD UcXSoCoX4wzSVBz7xYt1bAFBWNMlWY1GcW0AiDd83d0L6CpXe55vnGCddufeZDSZ 700M0ZNYUSGPj0HYHrc5deLUgnNcw1VQ9wXgQLNyO8FdxBug+sFUnlQBGjMmUAt0 zqVvh9dzA6TlNw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:53 2025 by rpki-client