This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json) Hash identifier: 1QEMmktDm7F6mmppDhzHUepV2mC6XZ6en2xUFanLelE= Subject key identifier: 64:2E:A2:08:1F:60:DC:58:8A:3E:CB:74:28:A2:07:4F:AA:7B:BD:12 Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Certificate serial: 019B2E1D5FF73EB30E33D8DAA3786BC04F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft Manifest number: 150D Signing time: Wed 17 Dec 2025 21:00:35 +0000 Manifest this update: Wed 17 Dec 2025 21:00:35 +0000 Manifest next update: Thu 18 Dec 2025 21:00:35 +0000 Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: +1qb4CjpoeFEKzgLdTYVLxS8swXzI1OeNNUzkLkuabc=) 2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:5f:f7:3e:b3:0e:33:d8:da:a3:78:6b:c0:4f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Validity Not Before: Dec 17 21:00:35 2025 GMT Not After : Dec 18 21:00:35 2025 GMT Subject: CN=642ea2081f60dc588a3ecb7428a2074faa7bbd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:4d:ba:96:9e:ad:3b:d8:8b:5c:f6:53:a0: 8c:00:60:b2:22:7a:29:ab:d3:9a:5e:7e:63:9a:eb: 84:39:ba:75:3c:95:55:a0:6d:29:68:df:cc:fb:5f: bc:19:0e:d4:b0:9d:5b:34:b5:94:22:60:4b:0a:48: 12:db:89:59:fe:0e:d8:1e:ad:34:7e:94:16:d3:bf: c1:e9:e6:68:2f:a6:1b:a9:dc:56:e8:43:21:8c:b2: 8b:aa:5c:22:49:5b:0d:70:5d:9f:77:c6:48:49:0d: 68:7c:cc:a1:71:08:51:b5:55:eb:b0:64:32:2d:57: 22:3d:3c:a4:ca:71:96:9e:1a:ac:47:e6:15:e2:bc: 9d:3a:06:cc:78:2a:79:24:f5:8f:b0:70:22:61:33: 04:79:3b:aa:57:46:dc:cb:c1:7e:36:85:cc:b2:14: cc:a3:f6:80:56:20:1c:e4:7d:b4:7b:6d:36:64:84: d9:33:0b:c4:1e:90:d8:73:a1:80:b2:5a:f2:50:ad: d4:9a:6e:9a:db:6e:94:68:be:1d:3a:80:e3:d6:54: e4:e0:c4:ba:95:87:c6:82:90:4d:90:d0:ae:ef:a5: ef:45:3c:3a:62:4e:94:5f:b1:17:be:b1:ba:23:78: 36:eb:e6:9b:23:58:1c:32:41:cd:fc:5b:25:87:3a: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:A2:08:1F:60:DC:58:8A:3E:CB:74:28:A2:07:4F:AA:7B:BD:12 X509v3 Authority Key Identifier: keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5f:14:a7:3f:55:b7:ba:3f:9b:ac:85:67:d7:a6:71:41:47: b4:81:3a:00:da:ad:ec:a6:b5:20:2a:62:ae:5d:a1:49:9c:00: 0a:be:80:84:16:5b:ff:de:f7:10:11:00:af:dd:76:4d:fc:02: 66:fd:40:42:d1:cf:82:1d:a2:0e:e7:71:ab:bf:4f:0d:40:7a: c0:54:ef:60:d3:0f:28:c7:e7:c4:26:be:b5:f7:bf:67:54:26: 3b:b5:49:c1:c8:be:0f:4e:97:6a:6d:9b:cc:bc:3c:df:96:6f: 14:22:9a:89:c5:e7:2f:a5:f2:19:9d:84:2a:8b:30:83:d1:58: 95:40:47:d9:cc:77:4c:c7:0d:3d:56:a3:da:39:30:f9:8d:8b: 7d:37:9e:01:d6:5e:5a:de:aa:28:6d:05:36:36:d3:d8:03:c0: 62:26:a2:84:7d:3c:d1:f6:f1:da:03:fb:21:43:fc:00:ed:46: 81:d9:cd:4d:a4:6b:52:8f:50:98:bc:72:81:7a:4e:cf:fe:cf: 92:29:3d:d4:a7:4e:7b:3d:6e:08:3d:48:54:cb:1c:88:e6:a3: ba:9a:8b:bb:85:9e:22:76:6b:7b:6c:1b:17:df:47:f4:82:12: bf:77:04:02:73:3f:4d:29:cd:25:00:4a:1f:32:11:d3:d0:61: cb:d6:46:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHV/3PrMOM9jao3hrwE8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1 NGJkYjgwHhcNMjUxMjE3MjEwMDM1WhcNMjUxMjE4MjEwMDM1WjAzMTEwLwYDVQQD Eyg2NDJlYTIwODFmNjBkYzU4OGEzZWNiNzQyOGEyMDc0ZmFhN2JiZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx5NupaerTvYi1z2U6CMAGCyInop q9OaXn5jmuuEObp1PJVVoG0paN/M+1+8GQ7UsJ1bNLWUImBLCkgS24lZ/g7YHq00 fpQW07/B6eZoL6YbqdxW6EMhjLKLqlwiSVsNcF2fd8ZISQ1ofMyhcQhRtVXrsGQy LVciPTykynGWnhqsR+YV4rydOgbMeCp5JPWPsHAiYTMEeTuqV0bcy8F+NoXMshTM o/aAViAc5H20e202ZITZMwvEHpDYc6GAslryUK3Umm6a226UaL4dOoDj1lTk4MS6 lYfGgpBNkNCu76XvRTw6Yk6UX7EXvrG6I3g26+abI1gcMkHN/Fslhzo+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQuoggfYNxYij7LdCiiB0+qe70SMB8GA1UdIwQY MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt Mjc0ZjEwYTVlMWUzLzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl8Upz9V t7o/m6yFZ9emcUFHtIE6ANqt7Ka1ICpirl2hSZwACr6AhBZb/973EBEAr912TfwC Zv1AQtHPgh2iDudxq79PDUB6wFTvYNMPKMfnxCa+tfe/Z1QmO7VJwci+D06Xam2b zLw835ZvFCKaicXnL6XyGZ2EKoswg9FYlUBH2cx3TMcNPVaj2jkw+Y2LfTeeAdZe Wt6qKG0FNjbT2APAYiaihH080fbx2gP7IUP8AO1GgdnNTaRrUo9QmLxygXpOz/7P kik91KdOez1uCD1IVMsciOajupqLu4WeInZre2wbF99H9IISv3cEAnM/TSnNJQBK HzIR09Bhy9ZGOA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:00:28 2025 by rpki-client