This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json) Hash identifier: kou0nQz6u+6YooGABU14SPCFQ56mHJ70dYqrjL6XWiY= Subject key identifier: D9:FE:E6:E0:2C:62:7B:ED:90:1A:B5:55:EC:02:80:87:BA:B0:1D:6F Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b Certificate serial: 019B2B1DC3C3D50CABF294FF49522DE01D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft Manifest number: 14C9 Signing time: Wed 17 Dec 2025 07:02:09 +0000 Manifest this update: Wed 17 Dec 2025 07:02:09 +0000 Manifest next update: Thu 18 Dec 2025 07:02:09 +0000 Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: /+5Ag69gA+qsBJOxHU4u+RKFANcKww5gb9cSQ824WYI=) 2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:c3:c3:d5:0c:ab:f2:94:ff:49:52:2d:e0:1d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50480549481968d43406127653f780abbf9a117b Validity Not Before: Dec 17 07:02:09 2025 GMT Not After : Dec 18 07:02:09 2025 GMT Subject: CN=d9fee6e02c627bed901ab555ec028087bab01d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:c7:04:62:2e:54:f7:13:98:71:ae:ea:17: f8:ee:62:5a:b3:5d:3d:9e:f0:1a:1a:f8:76:7d:55: 83:00:8b:7c:36:89:26:1a:cd:d2:44:c0:05:e2:bf: fa:e7:e3:70:dc:e6:a1:16:0f:1d:e2:e8:80:61:c4: 21:c5:e0:6d:7b:1e:5c:6e:fb:2b:ba:8f:90:f0:36: 17:e3:81:5a:70:e5:7c:25:a7:65:66:e8:1b:e5:a6: 45:f7:84:c4:10:5d:ce:89:6e:03:7a:19:0a:af:9b: 24:a1:98:c5:e4:de:29:9e:81:1f:34:94:e0:a6:87: 4f:19:f8:59:75:3b:ac:eb:05:cf:67:cb:e5:df:02: f2:c5:86:0c:9b:9e:b5:2b:c2:92:75:c1:34:01:0c: 36:29:e2:40:74:cc:29:93:e6:c2:59:c2:38:ff:02: 36:88:82:60:b7:1c:53:1c:fa:ae:06:61:54:3c:93: 09:f5:97:51:c8:93:1e:71:c3:cd:02:b8:4c:53:22: 78:b3:85:6c:68:75:df:3a:32:b3:bb:e5:d4:7a:65: ea:f0:c9:7f:a3:10:e4:06:b7:98:39:09:be:2c:f4: 8f:75:e9:51:d8:69:db:6f:e7:58:03:1e:69:80:62: 93:90:b3:40:d9:ce:2f:b3:c5:01:d3:74:d9:b7:8b: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FE:E6:E0:2C:62:7B:ED:90:1A:B5:55:EC:02:80:87:BA:B0:1D:6F X509v3 Authority Key Identifier: keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b3:4c:15:e4:14:a7:f2:56:df:6c:1c:80:fa:ce:47:0b:dc: 0b:07:2f:ac:45:12:ed:b7:30:c7:ae:06:ab:ad:32:72:4d:a6: ef:6e:49:34:eb:54:58:18:de:9e:62:36:1c:ce:b0:ab:a4:a6: e9:58:ea:ef:78:1d:ea:4e:be:0d:e7:97:14:a4:04:b7:66:e9: 7c:5f:6e:b4:30:40:9a:61:f7:d1:93:fe:dd:5d:5d:73:51:0f: 1d:c0:a6:73:cd:ca:0d:65:0c:17:8e:1d:66:98:eb:4b:ea:6c: 16:a0:5f:d6:5f:38:7e:e3:d9:26:f8:59:9a:70:c8:7c:63:43: 81:4e:b2:d5:7a:2f:94:5f:6d:f4:ba:c3:2a:90:1a:5c:3e:a5: e1:97:f0:6d:ee:b1:3c:51:e5:9c:ed:29:aa:50:51:46:6d:2f: 82:7c:36:e0:8e:7a:63:3f:dd:d5:4e:3c:40:39:7e:7d:cf:ee: 66:43:3d:3e:64:c9:30:4b:dc:18:2e:6e:7f:15:d1:43:39:70: 28:13:e1:14:89:3b:6f:94:06:8a:f3:51:0a:29:8a:01:3d:70: dd:07:b8:d9:7b:63:5d:8c:97:fd:ef:3d:9d:01:93:39:50:29: 63:99:2a:91:b3:a7:de:0a:cf:15:b3:bc:7f:ea:3a:88:ae:67: a9:58:07:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHcPD1Qyr8pT/SVIt4B0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNDgwNTQ5NDgxOTY4ZDQzNDA2MTI3NjUzZjc4MGFiYmY5 YTExN2IwHhcNMjUxMjE3MDcwMjA5WhcNMjUxMjE4MDcwMjA5WjAzMTEwLwYDVQQD EyhkOWZlZTZlMDJjNjI3YmVkOTAxYWI1NTVlYzAyODA4N2JhYjAxZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaDHBGIuVPcTmHGu6hf47mJas109 nvAaGvh2fVWDAIt8NokmGs3SRMAF4r/65+Nw3OahFg8d4uiAYcQhxeBtex5cbvsr uo+Q8DYX44FacOV8JadlZugb5aZF94TEEF3OiW4DehkKr5skoZjF5N4pnoEfNJTg podPGfhZdTus6wXPZ8vl3wLyxYYMm561K8KSdcE0AQw2KeJAdMwpk+bCWcI4/wI2 iIJgtxxTHPquBmFUPJMJ9ZdRyJMeccPNArhMUyJ4s4VsaHXfOjKzu+XUemXq8Ml/ oxDkBreYOQm+LPSPdelR2Gnbb+dYAx5pgGKTkLNA2c4vs8UB03TZt4v2wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn+5uAsYnvtkBq1VewCgIe6sB1vMB8GA1UdIwQY MBaAFFBIBUlIGWjUNAYSdlP3gKu/mhF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2Yt NzQyOWIyMjc3MmMzLzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2YtNzQyOWIyMjc3MmMz LzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7NMFeQU p/JW32wcgPrORwvcCwcvrEUS7bcwx64Gq60yck2m725JNOtUWBjenmI2HM6wq6Sm 6Vjq73gd6k6+DeeXFKQEt2bpfF9utDBAmmH30ZP+3V1dc1EPHcCmc83KDWUMF44d ZpjrS+psFqBf1l84fuPZJvhZmnDIfGNDgU6y1XovlF9t9LrDKpAaXD6l4Zfwbe6x PFHlnO0pqlBRRm0vgnw24I56Yz/d1U48QDl+fc/uZkM9PmTJMEvcGC5ufxXRQzlw KBPhFIk7b5QGivNRCimKAT1w3Qe42XtjXYyX/e89nQGTOVApY5kqkbOn3grPFbO8 f+o6iK5nqVgHsg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:33 2025 by rpki-client