This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json) Hash identifier: t3zFGOi5DyzFyElEbSnW3ZXa8QRtEY1FL6dheyQuXhY= Subject key identifier: 57:4E:7A:F3:85:4F:69:32:E1:91:29:7B:95:B0:D5:C0:00:30:F8:2C Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F Certificate issuer: /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f Certificate serial: 019AF12CFBC8CAF48A31B0FE733FC9EDDBE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 01:00:48 +0000 Manifest this update: Sat 06 Dec 2025 01:00:48 +0000 Manifest next update: Sun 07 Dec 2025 01:00:48 +0000 Files and hashes: 1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: ZYA2GML4xoh2t8v7uSTPO1cKYnqhtP8HTDfsqWo/i+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fb:c8:ca:f4:8a:31:b0:fe:73:3f:c9:ed:db:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f Validity Not Before: Dec 6 01:00:48 2025 GMT Not After : Dec 7 01:00:48 2025 GMT Subject: CN=574e7af3854f6932e191297b95b0d5c00030f82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:0d:0a:fa:a7:7a:92:40:d1:3b:04:44:18: fd:55:54:6c:59:9c:a9:67:ee:ca:17:90:58:6c:df: 94:b7:e2:de:f4:c2:fd:51:3d:e3:d2:bc:8c:f4:a9: 64:5d:96:ef:c5:62:b2:9c:bf:d6:74:e9:15:c3:a2: f2:db:d3:04:38:bc:83:db:f1:a8:20:08:7d:40:76: cf:42:b6:3a:38:d8:0d:2f:2c:96:b1:a9:8e:31:c0: bc:5e:ba:91:c3:f0:93:47:91:28:ec:30:b1:1c:da: d2:d8:8d:01:c7:b4:83:a5:80:37:29:1e:41:95:0f: 85:46:21:39:66:ce:89:46:40:b2:6c:b0:ca:c7:d3: de:e0:88:9b:bf:92:c6:42:e7:a1:79:6b:f3:1e:fd: 33:28:97:e6:62:e2:87:0a:db:73:6f:7a:d0:a4:b8: 39:7b:e7:81:39:a2:8a:e4:73:f2:df:58:e3:36:e7: 0a:42:ea:a4:d5:45:9a:92:31:78:b0:2c:ca:4d:cf: 4e:6b:ba:9d:e9:42:f9:c9:ad:4d:91:e9:bb:a4:da: b5:92:35:b0:2a:5d:61:9b:43:07:65:fc:c4:a0:38: 31:51:16:a6:bc:84:bc:89:fe:49:66:29:5f:b9:ad: c1:ed:cd:02:c7:40:73:a3:95:42:cd:52:1f:77:45: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4E:7A:F3:85:4F:69:32:E1:91:29:7B:95:B0:D5:C0:00:30:F8:2C X509v3 Authority Key Identifier: keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:27:f2:ed:94:d1:bb:78:4c:2c:4b:4c:2c:d5:b2:7b:1a:be: 2d:47:75:15:61:47:53:53:4b:2f:eb:5d:cc:b0:c9:81:35:84: 1a:56:63:c4:90:91:21:d4:a7:4b:ea:15:9e:fb:a2:a2:a5:8a: 3b:36:2a:b3:be:09:84:b0:07:b2:b5:db:11:8b:f2:e8:eb:c2: c3:cb:eb:8c:15:e2:b2:02:15:a0:2d:7c:76:54:ba:01:ec:c4: 44:ac:fa:3c:39:83:20:74:e8:30:a7:22:cd:40:70:a4:29:b8: 32:4a:bc:ba:45:62:4b:ed:e4:d7:26:23:78:33:25:7a:3c:d0: a3:e0:1f:3c:64:18:59:63:a7:48:fa:64:e2:76:8a:31:6e:4d: 45:f9:52:a6:84:08:f7:d5:ec:f2:89:7d:f4:7a:c7:7e:30:08: 11:a3:75:7b:56:a1:87:2f:35:b6:9b:c0:07:02:ff:df:71:78: 49:e3:7e:09:bb:20:ca:b4:f3:47:ac:6e:3f:ca:8b:76:42:22: 02:5d:65:2c:7d:97:61:66:07:2a:b9:8e:9a:50:ca:e6:c1:eb: a3:0d:13:a8:bc:fb:be:4d:b1:fa:dd:fd:27:4c:c8:52:b4:3c: be:90:c7:f2:6f:09:10:22:18:a4:4c:c7:40:9c:39:af:00:5b: 39:83:23:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPvIyvSKMbD+cz/J7dvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZmU0ZDQ4YWEwMTNkNDBlMDZjMzEyZmY3MTA0ODliMjBk ZmUwN2YwHhcNMjUxMjA2MDEwMDQ4WhcNMjUxMjA3MDEwMDQ4WjAzMTEwLwYDVQQD Eyg1NzRlN2FmMzg1NGY2OTMyZTE5MTI5N2I5NWIwZDVjMDAwMzBmODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFsNCvqnepJA0TsERBj9VVRsWZyp Z+7KF5BYbN+Ut+Le9ML9UT3j0ryM9KlkXZbvxWKynL/WdOkVw6Ly29MEOLyD2/Go IAh9QHbPQrY6ONgNLyyWsamOMcC8XrqRw/CTR5Eo7DCxHNrS2I0Bx7SDpYA3KR5B lQ+FRiE5Zs6JRkCybLDKx9Pe4Iibv5LGQueheWvzHv0zKJfmYuKHCttzb3rQpLg5 e+eBOaKK5HPy31jjNucKQuqk1UWakjF4sCzKTc9Oa7qd6UL5ya1Nkem7pNq1kjWw Kl1hm0MHZfzEoDgxURamvIS8if5JZilfua3B7c0Cx0Bzo5VCzVIfd0WfMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdOevOFT2ky4ZEpe5Ww1cAAMPgsMB8GA1UdIwQY MBaAFFH+TUiqAT1A4GwxL/cQSJsg3+B/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWY1TlNLb0JQVURnYkRFdjl4QklteURmNEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jN2Q3MjItZGQxYi00NWNkLTk5ODMt Y2MzYjc4ZTc3YTA3LzEvVWY1TlNLb0JQVURnYkRFdjl4QklteURmNEg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jN2Q3MjItZGQxYi00NWNkLTk5ODMtY2MzYjc4ZTc3YTA3 LzEvVWY1TlNLb0JQVURnYkRFdjl4QklteURmNEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxify7ZTR u3hMLEtMLNWyexq+LUd1FWFHU1NLL+tdzLDJgTWEGlZjxJCRIdSnS+oVnvuioqWK OzYqs74JhLAHsrXbEYvy6OvCw8vrjBXisgIVoC18dlS6AezERKz6PDmDIHToMKci zUBwpCm4Mkq8ukViS+3k1yYjeDMlejzQo+AfPGQYWWOnSPpk4naKMW5NRflSpoQI 99Xs8ol99HrHfjAIEaN1e1ahhy81tpvABwL/33F4SeN+CbsgyrTzR6xuP8qLdkIi Al1lLH2XYWYHKrmOmlDK5sHrow0TqLz7vk2x+t39J0zIUrQ8vpDH8m8JECIYpEzH QJw5rwBbOYMjww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:13 2025 by rpki-client