This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json) Hash identifier: bnAfaUCYfAAu2Pt6quYnxqZXIwgiMi1xotSVALFAYZg= Subject key identifier: 64:C4:5A:50:AA:1D:AC:AE:A8:DE:4A:39:E6:21:FC:27:A6:A8:F5:23 Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b Certificate serial: 019AF12D5A6D17D1F2DF7B45D18AEADF0DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft Manifest number: 14AB Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: M5nGVuDVkLtFa8/GtFgjVKFSxZAlyYgFlVK/Y0BJoG4=) 2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5a:6d:17:d1:f2:df:7b:45:d1:8a:ea:df:0d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50480549481968d43406127653f780abbf9a117b Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=64c45a50aa1dacaea8de4a39e621fc27a6a8f523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:03:0b:9d:7e:4b:d4:8c:bc:5f:a9:f1:74: 9f:1f:62:12:82:9c:8b:12:f7:40:ce:41:98:a0:61: 82:bd:be:df:4f:aa:6f:d4:1a:83:27:10:dd:25:24: df:e3:b2:4f:9a:95:7f:09:8d:a4:6a:c1:d5:22:ab: a5:14:1d:83:27:2e:bb:b1:4a:6a:45:c5:96:e4:38: 3d:2c:f0:81:31:73:d4:29:45:8c:86:bc:29:b1:17: ed:d9:ff:0c:28:cd:ec:84:d9:78:9c:48:63:70:e4: a1:63:da:5d:5f:88:ea:cf:51:d7:cd:be:2a:9c:e7: df:01:a9:ab:b2:4d:4f:19:60:4b:26:29:04:ac:37: 21:5b:7a:59:c7:cd:b6:16:72:ff:1e:d6:14:c4:c3: 47:97:a2:d9:1e:93:22:59:fb:dd:42:16:fc:35:f0: bc:70:f8:40:43:52:0e:79:65:e4:db:10:12:c8:60: 96:c8:e8:dd:b9:26:dc:25:03:d8:23:7a:b4:82:c1: c0:33:49:c9:6e:82:de:96:8d:66:8f:6d:31:4f:29: d9:74:38:4d:25:e3:6f:60:13:d5:31:8e:f0:9e:42: 56:a7:cb:eb:2c:cf:79:2a:82:ed:7f:40:42:39:ca: 40:c9:8e:21:72:6e:79:0b:cc:0e:7c:db:d9:68:9d: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:5A:50:AA:1D:AC:AE:A8:DE:4A:39:E6:21:FC:27:A6:A8:F5:23 X509v3 Authority Key Identifier: keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:63:1f:d5:2f:c7:69:db:72:75:11:f8:73:2c:14:d5:2b:ce: cf:dd:f1:e0:7a:9d:cd:f9:25:13:8f:42:c6:59:94:32:81:12: 5a:ca:a2:f6:b1:1d:7c:62:84:02:1c:5d:d3:18:8d:22:3b:5f: 57:14:b7:a8:f7:1c:12:4b:0f:55:66:f2:27:0e:1d:52:8f:1c: 1e:b0:12:c4:83:29:56:db:42:43:01:30:2a:b1:3e:7c:13:3f: fb:59:fe:97:f0:7b:8f:d2:ef:a4:8e:ac:dc:d9:ee:4c:08:36: 98:ea:4c:40:8d:86:15:68:f3:29:03:4b:9f:7f:f0:fc:a0:c1: bb:ff:70:76:b9:ac:f7:49:5d:56:1a:61:09:c7:65:5e:af:bb: cd:f5:95:27:22:27:2f:a9:18:89:70:49:cc:2c:5e:d7:74:a6: 0a:aa:1f:e4:24:4d:a9:97:51:45:b1:75:45:10:e4:5c:9e:bf: 39:31:2c:b8:94:2f:d8:81:e3:0e:95:bb:b9:c6:b2:af:df:aa: 10:62:dc:c2:65:03:c5:b7:ff:bf:ee:83:a5:b1:89:d7:3c:8b: 7a:2f:b6:f3:be:f8:c8:b3:bb:35:bb:ad:77:7d:a2:11:29:9d: 01:02:cf:9a:25:76:11:39:c1:5c:8f:c0:6b:77:1b:1c:3d:d1: e8:1f:06:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVptF9Hy33tF0Yrq3w27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNDgwNTQ5NDgxOTY4ZDQzNDA2MTI3NjUzZjc4MGFiYmY5 YTExN2IwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD Eyg2NGM0NWE1MGFhMWRhY2FlYThkZTRhMzllNjIxZmMyN2E2YThmNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGIDC51+S9SMvF+p8XSfH2ISgpyL EvdAzkGYoGGCvb7fT6pv1BqDJxDdJSTf47JPmpV/CY2kasHVIqulFB2DJy67sUpq RcWW5Dg9LPCBMXPUKUWMhrwpsRft2f8MKM3shNl4nEhjcOShY9pdX4jqz1HXzb4q nOffAamrsk1PGWBLJikErDchW3pZx822FnL/HtYUxMNHl6LZHpMiWfvdQhb8NfC8 cPhAQ1IOeWXk2xASyGCWyOjduSbcJQPYI3q0gsHAM0nJboLelo1mj20xTynZdDhN JeNvYBPVMY7wnkJWp8vrLM95KoLtf0BCOcpAyY4hcm55C8wOfNvZaJ0zHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTEWlCqHayuqN5KOeYh/CemqPUjMB8GA1UdIwQY MBaAFFBIBUlIGWjUNAYSdlP3gKu/mhF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2Yt NzQyOWIyMjc3MmMzLzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2YtNzQyOWIyMjc3MmMz LzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWMf1S/H adtydRH4cywU1SvOz93x4HqdzfklE49CxlmUMoESWsqi9rEdfGKEAhxd0xiNIjtf VxS3qPccEksPVWbyJw4dUo8cHrASxIMpVttCQwEwKrE+fBM/+1n+l/B7j9LvpI6s 3NnuTAg2mOpMQI2GFWjzKQNLn3/w/KDBu/9wdrms90ldVhphCcdlXq+7zfWVJyIn L6kYiXBJzCxe13SmCqof5CRNqZdRRbF1RRDkXJ6/OTEsuJQv2IHjDpW7ucayr9+q EGLcwmUDxbf/v+6DpbGJ1zyLei+28774yLO7Nbutd32iESmdAQLPmiV2ETnBXI/A a3cbHD3R6B8GlA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:32 2025 by rpki-client