This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json) Hash identifier: vaO+E6TDjgTSFhi7K3XoQbXOarYnv+Qf051BOmv1OXg= Subject key identifier: 09:1B:5C:3C:73:7F:B7:DB:46:33:2D:4E:96:E3:BD:81:69:1E:0A:DB Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e Certificate serial: 019AF164164D87C41D581D4B8DF19121D6DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: ETuDi1i7QuaCZ06xCz67-_-3rS8.roa (hash: gA8InJx+hYlKiEEOwcyboW6iWIBSscTMh1nnp+mxyU8=) 2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: uj3aKjacciLWaRS6oOrjh+q9z4yqD/h1Ieg58Zfx+bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:16:4d:87:c4:1d:58:1d:4b:8d:f1:91:21:d6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=091b5c3c737fb7db46332d4e96e3bd81691e0adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:2c:50:40:e3:25:a8:5d:c5:db:69:62:31: 14:e8:6e:fd:51:f5:21:4d:4f:a1:5f:4f:21:7f:53: f4:49:2f:42:a2:e8:2e:1a:71:38:db:ea:b4:cf:ae: 8c:19:2e:28:ad:25:0a:79:91:ac:97:5e:99:d2:9b: 9a:cd:81:3d:e8:8f:19:f4:62:ea:6a:bb:1f:0e:49: fe:a9:0d:e3:fb:ab:fb:c9:68:57:f7:3e:73:7e:4c: 25:62:ab:eb:4e:a6:ab:fc:90:b3:fe:9d:45:10:d1: 89:0a:e2:70:cd:cc:36:67:cd:fe:46:67:29:fb:76: 3f:97:80:a6:d3:77:fc:6f:3c:48:0c:00:ac:9a:58: 6f:e9:62:a1:87:f0:63:de:5e:b4:f6:f0:ed:cc:a9: 40:25:96:3b:12:44:d4:f0:65:01:8f:f9:fd:33:40: 40:66:4d:d4:67:9c:cd:ef:d6:8e:af:d5:55:7c:74: 2f:c3:8e:c1:ae:29:15:70:d8:12:2a:46:f1:84:e7: fe:2f:77:a0:2c:32:87:2b:c3:e4:09:42:07:5f:fb: db:b2:ec:7e:c2:99:0a:78:08:74:d0:97:61:69:4a: f8:72:db:e7:5e:78:b2:4d:6c:95:e2:68:ec:ff:3f: 1a:03:26:f6:b7:6d:2a:bc:17:ed:d8:e9:6c:5c:43: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1B:5C:3C:73:7F:B7:DB:46:33:2D:4E:96:E3:BD:81:69:1E:0A:DB X509v3 Authority Key Identifier: keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:70:61:fa:6e:e3:bd:14:01:59:26:01:29:f9:7e:ac:51:2e: d8:20:95:95:ba:d7:03:d4:d5:9d:6f:ab:68:07:f5:03:07:8b: 23:69:a6:8a:d9:c8:cf:a3:70:bc:b8:6d:4d:ac:e0:62:1a:c2: ee:52:be:f3:6a:c1:e3:c8:62:34:e9:72:51:ac:18:7e:4f:9f: b5:54:0e:5f:02:41:41:07:65:8e:d2:c8:83:fe:20:d2:3a:33: ef:5f:6a:98:21:0f:e3:30:25:e4:de:99:d6:61:69:a8:41:5f: 54:73:cf:eb:36:af:6b:5d:72:b3:a2:57:22:a6:31:cb:50:1c: 68:7e:eb:a2:df:8e:30:ee:d8:17:9b:ae:6e:8c:0c:cb:b9:cb: 48:f1:23:eb:62:06:dd:de:e6:7b:83:85:a1:6f:49:22:d9:ed: 07:03:fc:6e:f9:1e:ec:48:ff:15:0f:e3:9c:96:19:d7:e7:62: 0a:73:5b:73:52:60:47:cc:d2:70:48:cb:80:7e:29:3e:e3:1b: 6e:ca:81:a9:59:19:54:84:36:0b:07:54:06:49:c2:7d:bb:56: 9d:34:96:97:3a:2d:f4:70:92:8d:4d:48:60:35:3c:6f:0a:94: a0:29:43:f8:ee:5a:15:6c:b3:b6:1d:62:83:5a:34:31:4e:11: b2:4b:bb:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBZNh8QdWB1LjfGRIdbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Zjc2OWQ0NDMzYjc3MDRkZjcwM2QxNjQ1YjdmZWE4ZWZi ZjkyNmUwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EygwOTFiNWMzYzczN2ZiN2RiNDYzMzJkNGU5NmUzYmQ4MTY5MWUwYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttksUEDjJahdxdtpYjEU6G79UfUh TU+hX08hf1P0SS9CouguGnE42+q0z66MGS4orSUKeZGsl16Z0puazYE96I8Z9GLq arsfDkn+qQ3j+6v7yWhX9z5zfkwlYqvrTqar/JCz/p1FENGJCuJwzcw2Z83+Rmcp +3Y/l4Cm03f8bzxIDACsmlhv6WKhh/Bj3l609vDtzKlAJZY7EkTU8GUBj/n9M0BA Zk3UZ5zN79aOr9VVfHQvw47BrikVcNgSKkbxhOf+L3egLDKHK8PkCUIHX/vbsux+ wpkKeAh00JdhaUr4ctvnXniyTWyV4mjs/z8aAyb2t20qvBft2OlsXEP8awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkbXDxzf7fbRjMtTpbjvYFpHgrbMB8GA1UdIwQY MBaAFLn3adRDO3cE33A9FkW3/qjvv5JuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQt M2FlYjdjZGUwMzZjLzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQtM2FlYjdjZGUwMzZj LzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3Bh+m7j vRQBWSYBKfl+rFEu2CCVlbrXA9TVnW+raAf1AweLI2mmitnIz6NwvLhtTazgYhrC 7lK+82rB48hiNOlyUawYfk+ftVQOXwJBQQdljtLIg/4g0joz719qmCEP4zAl5N6Z 1mFpqEFfVHPP6zava11ys6JXIqYxy1AcaH7rot+OMO7YF5uubowMy7nLSPEj62IG 3d7me4OFoW9JItntBwP8bvke7Ej/FQ/jnJYZ1+diCnNbc1JgR8zScEjLgH4pPuMb bsqBqVkZVIQ2CwdUBknCfbtWnTSWlzot9HCSjU1IYDU8bwqUoClD+O5aFWyzth1i g1o0MU4Rsku7rA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:38 2025 by rpki-client