This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json) Hash identifier: Evx+0DZGiMPDRr7R1hCBqSItFGw4FVAh8LOhyF7r9N4= Subject key identifier: C5:90:A1:BB:16:7A:D0:66:89:AB:15:D1:14:3A:94:C9:15:85:E1:FD Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46 Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746 Certificate serial: 019AF23FCDFE665231539C248267B551D2A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft Manifest number: 0B83 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: M908m8pSfUPFj3vM/mr9vRlQf9qAkLatyG9+0XcWyWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cd:fe:66:52:31:53:9c:24:82:67:b5:51:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=c590a1bb167ad06689ab15d1143a94c91585e1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:8d:a5:d9:7e:98:b6:82:c7:a0:0a:34:09: e0:d3:58:c4:05:b8:bc:ca:aa:23:34:88:92:18:bf: 69:54:bc:6c:8a:b8:2a:33:95:04:9c:c6:fb:f5:38: ce:74:8f:14:b6:6c:cd:0d:1d:f9:4c:6d:ba:bc:15: 2e:2f:ae:00:84:ae:85:49:7a:08:cf:a6:df:0d:51: e8:cc:0f:de:bf:a7:6f:de:06:04:66:21:4a:36:e0: af:99:ef:13:73:fd:06:62:dd:17:16:9c:a1:96:32: 3b:5c:79:0f:9d:e5:8a:c5:b6:d5:0c:ed:b9:3c:d2: 97:d2:6d:d2:76:4b:98:2c:64:5f:12:0a:d4:35:af: 18:bb:97:be:89:f8:38:ad:f0:8a:1a:2d:0b:ec:cc: 8c:96:94:0f:00:18:22:84:82:22:38:ea:59:f1:f7: 61:92:75:48:f6:cf:db:35:39:25:b1:78:bb:04:be: 37:ae:e7:d0:3f:7f:fa:b0:fd:ec:34:c0:09:c0:74: 73:3e:60:99:ca:e4:64:ed:a0:eb:8a:ae:31:40:a0: cc:f3:df:c7:90:6d:60:12:d3:22:f8:c3:75:84:d6: b7:e5:2f:36:b8:e4:ed:38:b2:ad:b7:36:d1:99:cb: 2c:b2:b3:7e:67:60:9b:21:60:27:ec:9f:4f:3c:c9: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:90:A1:BB:16:7A:D0:66:89:AB:15:D1:14:3A:94:C9:15:85:E1:FD X509v3 Authority Key Identifier: keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:af:f2:a9:a8:ff:46:f6:d9:9b:6d:d3:f5:d5:e2:50:26:be: 03:a8:30:78:10:70:83:98:75:1e:d1:7c:23:44:2f:8c:7a:5c: 25:7f:cb:2c:2c:94:a5:f4:6c:12:9a:da:9b:f1:14:cf:b6:b2: f9:dd:b3:79:77:7a:91:d6:99:20:a3:8a:7d:3b:bb:8b:b5:4d: e2:21:02:ce:7f:de:47:8f:19:6c:77:90:88:15:02:12:ee:29: 56:27:99:f9:75:6e:fd:e5:a3:58:21:c5:8b:23:cf:1a:54:43: 23:c4:7f:cf:df:89:ed:46:68:1d:db:3f:6a:2f:35:92:24:f6: 6b:3f:0e:aa:80:70:8d:3d:09:8b:60:e9:f1:56:3f:37:b7:4c: 64:14:dd:7f:0b:a0:ea:04:86:19:0d:a6:d9:c0:51:96:5f:9d: 5e:26:bf:9d:d9:40:86:96:31:52:77:57:af:8e:56:9e:18:3a: 73:0b:ac:d2:99:b8:11:84:33:9f:ec:d0:be:96:4e:f7:1c:93: 4a:31:e9:c4:49:bf:4f:b6:47:2c:80:30:f0:70:db:35:cc:bb: ee:8c:23:b0:44:01:97:c7:d3:5b:bb:ac:dd:cb:88:35:17:7f: 47:ec:75:c7:2c:c3:85:fe:08:e1:05:2c:cf:08:61:16:f4:9d: 40:7f:11:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP83+ZlIxU5wkgme1UdKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDk3ZmI1OGM2ZjZhNDQxZDhlZDc1MDAwNzczYjRkMDk4 NTY3NDYwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EyhjNTkwYTFiYjE2N2FkMDY2ODlhYjE1ZDExNDNhOTRjOTE1ODVlMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPONpdl+mLaCx6AKNAng01jEBbi8 yqojNIiSGL9pVLxsirgqM5UEnMb79TjOdI8UtmzNDR35TG26vBUuL64AhK6FSXoI z6bfDVHozA/ev6dv3gYEZiFKNuCvme8Tc/0GYt0XFpyhljI7XHkPneWKxbbVDO25 PNKX0m3SdkuYLGRfEgrUNa8Yu5e+ifg4rfCKGi0L7MyMlpQPABgihIIiOOpZ8fdh knVI9s/bNTklsXi7BL43rufQP3/6sP3sNMAJwHRzPmCZyuRk7aDriq4xQKDM89/H kG1gEtMi+MN1hNa35S82uOTtOLKttzbRmcsssrN+Z2CbIWAn7J9PPMkEHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWQobsWetBmiasV0RQ6lMkVheH9MB8GA1UdIwQY MBaAFFAJf7WMb2pEHY7XUAB3O00JhWdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMt MjJkYzYzNmIyNDg4LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMtMjJkYzYzNmIyNDg4 LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6/yqaj/ RvbZm23T9dXiUCa+A6gweBBwg5h1HtF8I0QvjHpcJX/LLCyUpfRsEpram/EUz7ay +d2zeXd6kdaZIKOKfTu7i7VN4iECzn/eR48ZbHeQiBUCEu4pVieZ+XVu/eWjWCHF iyPPGlRDI8R/z9+J7UZoHds/ai81kiT2az8OqoBwjT0Ji2Dp8VY/N7dMZBTdfwug 6gSGGQ2m2cBRll+dXia/ndlAhpYxUndXr45Wnhg6cwus0pm4EYQzn+zQvpZO9xyT SjHpxEm/T7ZHLIAw8HDbNcy77owjsEQBl8fTW7us3cuINRd/R+x1xyzDhf4I4QUs zwhhFvSdQH8R3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:13 2025 by rpki-client