This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json) Hash identifier: Y9sWkxm4TLs6uKlJaL1ornHvaOHSVwqJ0FVnsTK5JMc= Subject key identifier: CA:63:B6:DA:DB:60:2F:93:5B:C2:C3:06:4D:07:D0:50:5F:7F:08:D1 Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Certificate serial: 019B2C2EFBCDEBB0BD2657FA70FDEDCE8883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft Manifest number: 150C Signing time: Wed 17 Dec 2025 12:00:35 +0000 Manifest this update: Wed 17 Dec 2025 12:00:35 +0000 Manifest next update: Thu 18 Dec 2025 12:00:35 +0000 Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: zx5IlyAsFuKkkfZ5WCckrdAzKEOUNK55Ln52vw0+JW8=) 2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2e:fb:cd:eb:b0:bd:26:57:fa:70:fd:ed:ce:88:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Validity Not Before: Dec 17 12:00:35 2025 GMT Not After : Dec 18 12:00:35 2025 GMT Subject: CN=ca63b6dadb602f935bc2c3064d07d0505f7f08d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:c8:e0:1e:50:33:94:c1:85:6f:f5:5f:d9: 99:0d:60:7b:56:e0:b6:03:e6:97:05:c9:40:95:61: 0b:72:e8:45:1d:e2:df:b9:5c:1d:09:0e:29:76:2b: 37:76:34:72:30:81:d8:93:82:10:06:fb:6a:d2:bb: 32:3c:3e:c8:d0:62:91:ff:73:9f:ae:c6:90:4d:1e: aa:bb:ce:51:24:fc:49:44:f0:92:dd:60:54:34:de: 53:f8:9b:f8:73:58:85:38:e4:cd:a3:2b:ae:af:f3: 59:f0:80:44:05:71:2b:46:f1:9a:e1:d3:cf:a1:5c: 3a:31:0a:95:83:a9:9f:55:d3:46:8a:5b:fa:77:85: d5:d3:83:ba:d4:6c:6b:0e:dd:39:1b:f7:e9:36:89: 15:44:88:19:c4:c1:13:e9:f1:3c:98:29:07:4d:89: 09:30:6e:14:cd:84:3d:f2:7c:dc:f0:1f:b4:8a:30: e9:fe:10:d4:82:8b:33:29:fe:8b:87:cc:97:65:7b: da:d3:e2:3b:79:9f:b1:6b:fc:04:8d:2a:ca:c0:e7: f1:f0:fa:18:f0:47:fa:8c:b5:26:a0:db:4d:da:85: b9:0c:e6:9d:19:ea:f7:d5:46:67:8d:05:77:e2:4d: 6d:d3:4e:75:28:ff:e1:ed:13:6b:b3:07:28:6e:96: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:B6:DA:DB:60:2F:93:5B:C2:C3:06:4D:07:D0:50:5F:7F:08:D1 X509v3 Authority Key Identifier: keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:67:10:80:3b:ac:b5:9f:32:08:bb:27:97:a9:92:32:db:9b: a3:bf:6c:c8:11:ff:8f:09:92:34:71:04:1c:66:d5:fa:31:0a: 87:f2:cb:56:48:73:42:69:3a:43:da:8e:b6:92:a4:e0:10:92: f6:1a:22:4c:c1:96:be:95:f9:8e:ee:d0:0e:7e:74:5e:e5:70: f7:96:6b:a8:ce:6e:9a:57:d1:bd:80:55:77:f5:69:84:d5:2c: 0d:9f:7a:b1:6f:be:7f:85:cc:99:79:bf:d3:ee:05:4d:5d:81: 49:6b:1c:6a:c5:8f:8b:68:9b:c7:de:c5:e1:6f:57:14:c3:12: 47:b4:2f:3b:7b:9d:be:61:c3:a1:c8:3c:74:63:75:91:d4:60: eb:d9:85:aa:9e:f3:6d:23:79:99:02:d1:69:23:b5:00:25:9f: b0:84:0a:6b:38:e7:06:01:08:98:db:cc:ad:1f:be:fe:1c:b4: 31:c6:13:64:7d:2a:ec:dc:9f:c1:52:58:3d:22:66:58:5a:b1: 6c:d3:39:f0:48:65:6f:75:2f:77:67:f6:63:c8:1d:1c:63:26: 73:21:85:79:95:69:2c:1d:f0:69:fe:b6:a0:6b:58:87:cd:4c: e2:ea:ec:f9:72:52:04:38:c4:71:0a:57:8c:93:ac:36:d7:04: 36:2d:b6:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLvvN67C9Jlf6cP3tzoiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1 NGJkYjgwHhcNMjUxMjE3MTIwMDM1WhcNMjUxMjE4MTIwMDM1WjAzMTEwLwYDVQQD EyhjYTYzYjZkYWRiNjAyZjkzNWJjMmMzMDY0ZDA3ZDA1MDVmN2YwOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PzI4B5QM5TBhW/1X9mZDWB7VuC2 A+aXBclAlWELcuhFHeLfuVwdCQ4pdis3djRyMIHYk4IQBvtq0rsyPD7I0GKR/3Of rsaQTR6qu85RJPxJRPCS3WBUNN5T+Jv4c1iFOOTNoyuur/NZ8IBEBXErRvGa4dPP oVw6MQqVg6mfVdNGilv6d4XV04O61GxrDt05G/fpNokVRIgZxMET6fE8mCkHTYkJ MG4UzYQ98nzc8B+0ijDp/hDUgoszKf6Lh8yXZXva0+I7eZ+xa/wEjSrKwOfx8PoY 8Ef6jLUmoNtN2oW5DOadGer31UZnjQV34k1t0051KP/h7RNrswcobpbmmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpjttrbYC+TW8LDBk0H0FBffwjRMB8GA1UdIwQY MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt Mjc0ZjEwYTVlMWUzLzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGcQgDus tZ8yCLsnl6mSMtubo79syBH/jwmSNHEEHGbV+jEKh/LLVkhzQmk6Q9qOtpKk4BCS 9hoiTMGWvpX5ju7QDn50XuVw95ZrqM5umlfRvYBVd/VphNUsDZ96sW++f4XMmXm/ 0+4FTV2BSWscasWPi2ibx97F4W9XFMMSR7QvO3udvmHDocg8dGN1kdRg69mFqp7z bSN5mQLRaSO1ACWfsIQKazjnBgEImNvMrR++/hy0McYTZH0q7NyfwVJYPSJmWFqx bNM58Ehlb3Uvd2f2Y8gdHGMmcyGFeZVpLB3waf62oGtYh81M4urs+XJSBDjEcQpX jJOsNtcENi22+w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:29:38 2025 by rpki-client