This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json) Hash identifier: 8TdzhfP0kTknq+A2jSIbcM2gOD5xO+Bp+FaJADMBrYg= Subject key identifier: 8E:0C:50:EE:8F:37:AF:8A:23:AF:14:F3:65:AE:5E:FD:FF:92:03:C8 Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0 Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0 Certificate serial: 019AFCC33DDB514443D67C2158F8A59213D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft Manifest number: 0E4C Signing time: Mon 08 Dec 2025 07:00:44 +0000 Manifest this update: Mon 08 Dec 2025 07:00:44 +0000 Manifest next update: Tue 09 Dec 2025 07:00:44 +0000 Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: I5zvCtrQMGclqpKX1zPB13+vCnGPMPMH3BU9VtBaC7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:3d:db:51:44:43:d6:7c:21:58:f8:a5:92:13:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0 Validity Not Before: Dec 8 07:00:44 2025 GMT Not After : Dec 9 07:00:44 2025 GMT Subject: CN=8e0c50ee8f37af8a23af14f365ae5efdff9203c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:aa:51:c4:0a:47:85:90:7d:35:8d:9e:2e: 4b:85:30:6f:71:25:b2:3d:e1:32:23:12:fd:27:a8: 92:7e:d8:27:26:16:0a:1d:c5:13:c5:b4:6b:22:74: 9c:4c:ac:b9:16:e0:1e:5d:a2:33:d2:4a:0c:73:62: 34:f7:e2:06:f5:9b:35:fd:cd:da:28:f0:a5:dc:a3: 8b:a6:a0:a2:41:ae:62:90:46:5a:1d:4e:87:0e:0d: aa:9b:d1:0f:45:87:ea:f2:82:59:f4:4b:95:2e:d6: b5:09:d9:1b:a9:f3:b7:f4:3d:00:e7:ca:d0:b2:f5: b9:ff:96:6f:2e:de:7b:f7:d6:f1:b6:f1:78:45:b4: 45:b3:37:60:e7:03:8d:96:17:38:8d:61:94:c3:ec: 4d:32:8e:16:e0:14:8f:4d:51:d9:02:93:56:9c:b5: 3a:b2:77:ac:52:62:02:a8:cf:d8:71:1f:46:d1:8e: 1b:e5:54:0e:88:1d:a5:89:50:be:5c:67:34:37:5f: 22:b7:39:b2:ce:09:a8:62:06:79:24:04:4c:29:54: 21:69:5a:67:c0:0b:c6:40:77:92:bf:69:eb:8a:c7: 73:d0:88:2d:79:22:6d:06:1c:93:e7:3f:d1:08:f1: f7:c6:63:aa:32:a2:f2:1c:e4:38:33:c1:3b:1f:7e: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0C:50:EE:8F:37:AF:8A:23:AF:14:F3:65:AE:5E:FD:FF:92:03:C8 X509v3 Authority Key Identifier: keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f1:6f:f8:99:b0:3e:50:6c:fe:2b:b8:7b:3f:a8:01:b5:f0: 06:08:9f:07:be:da:43:0f:f4:46:a3:16:6d:d9:3a:17:b5:ce: 2f:ba:fe:f3:2b:59:df:e8:e1:92:7f:48:c3:3e:a3:79:43:a3: 97:35:49:94:fa:18:bb:44:5f:5d:f2:35:15:bf:d7:84:ab:9d: e9:4b:f0:5f:48:ae:dd:85:3c:43:08:37:7d:9a:be:03:a8:44: 77:5b:73:0d:c8:da:30:1a:b3:42:cc:d6:ff:d2:92:94:92:06: 2b:50:81:69:36:da:ea:fd:8b:cc:08:2c:15:62:e4:60:86:99: 70:59:50:7f:7c:55:9c:a6:b2:d6:ea:43:c6:34:81:61:fa:2f: fb:c1:1c:66:f3:5a:23:ce:03:3a:ee:c7:d2:db:40:44:f1:fe: 45:3f:17:96:8a:d3:24:82:c5:86:0e:33:4c:e9:0c:e1:00:b5: 3c:23:74:79:db:f5:ae:d3:0e:e6:12:fe:91:ef:b3:0c:08:fa: 3e:0c:b2:14:bb:c6:d3:53:61:ff:c9:09:80:1c:3a:1b:cc:f8: 5e:32:3e:13:37:c6:78:37:dd:3f:50:b4:7d:45:2f:0c:d0:07: f5:bb:ef:cb:b3:17:81:49:3a:ca:b7:e9:0b:c1:6d:3c:35:c9: 06:3e:4d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8wz3bUURD1nwhWPilkhPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWVkZTJkNDdkNzdlMTQwYTk3YmYyOTg5ZGE4MmE1ODc3 M2M4YzAwHhcNMjUxMjA4MDcwMDQ0WhcNMjUxMjA5MDcwMDQ0WjAzMTEwLwYDVQQD Eyg4ZTBjNTBlZThmMzdhZjhhMjNhZjE0ZjM2NWFlNWVmZGZmOTIwM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysaqUcQKR4WQfTWNni5LhTBvcSWy PeEyIxL9J6iSftgnJhYKHcUTxbRrInScTKy5FuAeXaIz0koMc2I09+IG9Zs1/c3a KPCl3KOLpqCiQa5ikEZaHU6HDg2qm9EPRYfq8oJZ9EuVLta1CdkbqfO39D0A58rQ svW5/5ZvLt5799bxtvF4RbRFszdg5wONlhc4jWGUw+xNMo4W4BSPTVHZApNWnLU6 snesUmICqM/YcR9G0Y4b5VQOiB2liVC+XGc0N18itzmyzgmoYgZ5JARMKVQhaVpn wAvGQHeSv2nrisdz0IgteSJtBhyT5z/RCPH3xmOqMqLyHOQ4M8E7H37Y8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4MUO6PN6+KI68U82WuXv3/kgPIMB8GA1UdIwQY MBaAFFAe3i1H134UCpe/KYnagqWHc8jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUI3ZUxVZlhmaFFLbDc4cGlkcUNwWWR6eU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8wMWI3OWMtNzIyNS00OTE2LTgyMjEt MTJlZGQwZTBkMjFiLzEvVUI3ZUxVZlhmaFFLbDc4cGlkcUNwWWR6eU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8wMWI3OWMtNzIyNS00OTE2LTgyMjEtMTJlZGQwZTBkMjFi LzEvVUI3ZUxVZlhmaFFLbDc4cGlkcUNwWWR6eU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfFv+Jmw PlBs/iu4ez+oAbXwBgifB77aQw/0RqMWbdk6F7XOL7r+8ytZ3+jhkn9Iwz6jeUOj lzVJlPoYu0RfXfI1Fb/XhKud6UvwX0iu3YU8Qwg3fZq+A6hEd1tzDcjaMBqzQszW /9KSlJIGK1CBaTba6v2LzAgsFWLkYIaZcFlQf3xVnKay1upDxjSBYfov+8EcZvNa I84DOu7H0ttARPH+RT8XlorTJILFhg4zTOkM4QC1PCN0edv1rtMO5hL+ke+zDAj6 PgyyFLvG01Nh/8kJgBw6G8z4XjI+EzfGeDfdP1C0fUUvDNAH9bvvy7MXgUk6yrfp C8FtPDXJBj5N5Q== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:58 2025 by rpki-client