This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json) Hash identifier: DmYBnLuMg5gcngqX+0X+ZZ9PcimaLcK//qYRWqBfMAg= Subject key identifier: DB:98:BF:39:5D:16:ED:FC:9D:EA:20:B2:3E:83:87:A4:8A:E7:F0:36 Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Certificate serial: 019AF23F751DAC860516E26E23DD45E57300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft Manifest number: 14EE Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: hWU2gG/Cg6r8oSfprxZ4b1t1zwiKOKsWl2qeUN4eyPA=) 2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:75:1d:ac:86:05:16:e2:6e:23:dd:45:e5:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=db98bf395d16edfc9dea20b23e8387a48ae7f036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:cf:17:e2:70:dd:c0:a9:e8:69:6c:b4:64: 1d:a8:55:49:ea:29:cc:46:8a:c1:38:4a:92:f2:89: 32:19:31:25:4e:23:29:aa:4f:6b:c8:6f:9c:fd:5e: 21:aa:a5:6d:25:84:fe:d7:1c:8f:c4:6d:78:58:32: f7:e2:a2:b6:14:c9:72:39:05:d5:23:20:3e:f5:ea: 7c:64:05:16:2f:90:73:ec:ab:bf:ba:ba:9e:16:27: 53:41:ed:e1:cb:fd:50:be:e4:e4:67:b4:9d:43:29: 0a:ef:74:a9:29:11:86:1d:ec:76:53:98:35:59:1d: 8f:b8:37:bf:a4:48:7f:e1:a7:09:84:bb:81:14:31: dd:1b:e5:21:2e:90:02:1b:95:97:34:a4:81:52:32: 9d:49:40:1a:d7:4d:b6:df:57:eb:72:bf:29:bb:01: 47:bb:70:a7:78:09:c1:42:20:ca:b8:5e:5f:37:0e: da:14:36:11:92:0e:00:6e:bd:4a:05:cd:cd:f9:bb: 24:07:06:1c:80:d5:c1:19:58:0d:59:b9:4d:03:70: cc:3b:98:eb:5b:1c:8a:9a:0a:6e:48:15:c7:a5:ad: f5:6c:70:7d:dd:7d:af:d9:db:50:cf:e7:89:01:6f: 20:9c:39:d7:33:19:05:10:aa:06:ea:79:d3:56:7e: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:98:BF:39:5D:16:ED:FC:9D:EA:20:B2:3E:83:87:A4:8A:E7:F0:36 X509v3 Authority Key Identifier: keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b1:33:c1:6c:1c:8c:3d:54:0f:d0:cf:78:f7:53:c3:26:59: f8:74:69:04:18:8d:3d:54:56:98:a4:de:14:c2:50:eb:84:75: e7:2a:fd:98:f3:c3:9f:46:ab:3d:07:80:eb:94:d8:21:2c:68: 53:3c:76:82:18:2e:e0:81:65:91:9f:b8:79:93:9b:ea:28:21: 0f:ab:d3:8f:71:c6:9a:8d:19:fa:c8:b5:b5:b6:b2:18:e4:8e: 5e:9b:67:c7:b0:7d:77:85:41:0b:fd:4e:b4:e2:a6:be:24:f8: 0d:9d:50:8c:8d:88:a6:55:7e:41:00:7b:8c:50:3e:34:80:39: 7a:52:bb:50:c5:b0:23:ec:77:bd:74:99:c7:a9:a1:fc:22:08: 47:40:5c:2b:5f:97:07:ea:8b:c0:98:4d:75:03:6d:05:a2:84: 0f:3f:23:e0:a5:d1:66:e5:c8:9d:f4:ec:f8:30:90:17:f8:36: 4d:aa:fd:d5:c9:4d:9e:bb:3d:b1:39:e3:cf:9d:d7:81:a8:c3: 68:63:a8:d7:38:54:30:e2:e9:99:c7:d5:c3:fe:21:d6:e4:76: 88:76:9e:05:bd:0f:43:3f:56:c3:2b:f1:6d:0e:9f:53:c2:b3: 58:d2:b9:64:18:00:f2:11:f3:a4:4d:21:dc:e7:50:53:e4:39: 55:44:eb:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3UdrIYFFuJuI91F5XMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1 NGJkYjgwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EyhkYjk4YmYzOTVkMTZlZGZjOWRlYTIwYjIzZTgzODdhNDhhZTdmMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO3PF+Jw3cCp6GlstGQdqFVJ6inM RorBOEqS8okyGTElTiMpqk9ryG+c/V4hqqVtJYT+1xyPxG14WDL34qK2FMlyOQXV IyA+9ep8ZAUWL5Bz7Ku/urqeFidTQe3hy/1QvuTkZ7SdQykK73SpKRGGHex2U5g1 WR2PuDe/pEh/4acJhLuBFDHdG+UhLpACG5WXNKSBUjKdSUAa102231frcr8puwFH u3CneAnBQiDKuF5fNw7aFDYRkg4Abr1KBc3N+bskBwYcgNXBGVgNWblNA3DMO5jr WxyKmgpuSBXHpa31bHB93X2v2dtQz+eJAW8gnDnXMxkFEKoG6nnTVn6DKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuYvzldFu38neogsj6Dh6SK5/A2MB8GA1UdIwQY MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt Mjc0ZjEwYTVlMWUzLzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLEzwWwc jD1UD9DPePdTwyZZ+HRpBBiNPVRWmKTeFMJQ64R15yr9mPPDn0arPQeA65TYISxo Uzx2ghgu4IFlkZ+4eZOb6ighD6vTj3HGmo0Z+si1tbayGOSOXptnx7B9d4VBC/1O tOKmviT4DZ1QjI2IplV+QQB7jFA+NIA5elK7UMWwI+x3vXSZx6mh/CIIR0BcK1+X B+qLwJhNdQNtBaKEDz8j4KXRZuXInfTs+DCQF/g2Tar91clNnrs9sTnjz53XgajD aGOo1zhUMOLpmcfVw/4h1uR2iHaeBb0PQz9WwyvxbQ6fU8KzWNK5ZBgA8hHzpE0h 3OdQU+Q5VUTrUg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:22 2025 by rpki-client