This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json) Hash identifier: H7FqaARBJ63yW8H37HM87EGsBxZr+IhaEGEZgRKq8kg= Subject key identifier: 90:54:DC:74:23:2E:60:E7:C3:BF:DC:4C:FA:A6:41:8D:2A:F1:71:01 Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea Certificate serial: 019AF276F2F053B6A5E468D0A3EB4FC0F14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 1WNYYNS7RX-CeZ_6JxRjUdD-q2A.roa (hash: wxMlsJGdNKU4KY3gfHml6end/i1xs49sClefHW/FEbI=) 2: RWBCbOOdbBGTferrrFeH21g0Q-s.roa (hash: OgUeYLtx1plcBJ0e3g1wF6V6jlWOtr/OpNuK7tUONQE=) 3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: LbU4+3A4JSQZMHbKpGx9jXFGvSLsG8sTCeti6GBnU9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f2:f0:53:b6:a5:e4:68:d0:a3:eb:4f:c0:f1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=9054dc74232e60e7c3bfdc4cfaa6418d2af17101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:98:5c:c6:e5:5a:1b:e3:e5:ec:3e:f2:6c: b6:a6:8b:b4:60:31:63:5d:51:dc:d0:77:1e:ff:ae: b2:00:8f:3d:a0:22:c7:a8:bf:38:52:79:67:22:bd: f6:95:7c:4c:06:4f:87:34:b3:c4:23:d8:f9:7e:1e: 97:8a:a2:50:a5:8b:33:64:4b:8b:7a:7e:56:4a:65: 9e:30:48:eb:63:d8:26:5d:28:33:8a:19:e2:c9:14: bf:27:b8:de:ad:45:12:1a:97:81:d6:46:69:cd:11: dd:58:8b:69:24:1b:7d:75:33:38:85:54:d3:f0:a9: c6:f4:5d:2a:75:e4:b9:44:88:d4:ad:0b:40:2b:ef: db:69:82:69:43:d5:82:61:68:5d:74:07:23:f0:d2: ef:7a:c1:30:0b:8a:06:46:1b:0b:4a:22:e4:61:a0: da:dd:52:63:aa:82:5e:09:9b:78:a6:cc:96:3d:57: de:a6:b5:e4:4e:26:03:db:51:1d:b3:2b:be:3e:8f: 2e:f1:f3:28:52:55:5d:41:d4:f1:f3:ca:fe:d7:cb: 4f:d9:5f:97:ed:61:95:3e:59:5d:71:67:bb:d1:5f: a5:8a:68:36:e8:8a:ef:50:9f:7d:ce:70:c8:26:26: 64:01:67:b7:35:01:80:23:67:b1:f7:17:30:b5:39: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:DC:74:23:2E:60:E7:C3:BF:DC:4C:FA:A6:41:8D:2A:F1:71:01 X509v3 Authority Key Identifier: keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:33:c6:9e:aa:eb:ce:7d:14:ff:93:77:e8:d6:6e:43:92:7c: 92:c7:bc:4c:de:9f:a6:4c:40:d2:23:71:11:ac:6c:5a:81:45: 9e:61:17:8c:9e:37:fc:e2:44:d5:4a:9f:d1:26:3b:b3:19:fa: 28:42:18:9e:0f:80:a9:97:b6:da:48:ce:e4:93:6d:90:9c:a7: 27:cd:90:69:79:80:7e:ed:de:31:6d:02:80:b6:61:22:a4:a5: df:0b:59:10:12:2a:18:77:d1:12:d2:25:92:48:83:b8:35:e5: 7f:fb:c8:88:4a:24:44:72:9c:84:45:6e:a7:dc:b5:f8:90:11: 27:5b:1e:4a:59:95:fc:b4:5b:18:d9:3c:e6:25:e1:ad:d0:8c: 45:a3:71:fe:49:96:44:be:17:3e:be:bc:c2:c5:8c:56:e5:d0: bf:6e:36:cc:e8:6b:2a:e6:98:03:cd:14:21:e9:3f:0f:56:be: fc:41:a9:28:d1:57:2d:b8:4f:ec:44:1b:74:35:82:3f:01:ac: 37:1d:58:1c:60:20:24:65:ae:90:bd:b6:52:5d:bf:d9:e0:68: 6d:e2:ab:c6:41:92:6c:ff:6d:d5:b5:5e:75:63:c9:93:14:b1: 12:91:ac:f7:29:a8:62:a5:4d:1c:36:ab:56:83:24:c4:14:40: f6:67:05:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvLwU7al5GjQo+tPwPFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz ZTIwZWEwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD Eyg5MDU0ZGM3NDIzMmU2MGU3YzNiZmRjNGNmYWE2NDE4ZDJhZjE3MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ+YXMblWhvj5ew+8my2pou0YDFj XVHc0Hce/66yAI89oCLHqL84UnlnIr32lXxMBk+HNLPEI9j5fh6XiqJQpYszZEuL en5WSmWeMEjrY9gmXSgzihniyRS/J7jerUUSGpeB1kZpzRHdWItpJBt9dTM4hVTT 8KnG9F0qdeS5RIjUrQtAK+/baYJpQ9WCYWhddAcj8NLvesEwC4oGRhsLSiLkYaDa 3VJjqoJeCZt4psyWPVfeprXkTiYD21Edsyu+Po8u8fMoUlVdQdTx88r+18tP2V+X 7WGVPlldcWe70V+limg26IrvUJ99znDIJiZkAWe3NQGAI2ex9xcwtTm9wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBU3HQjLmDnw7/cTPqmQY0q8XEBMB8GA1UdIwQY MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt NTU2MDhiNjk0NDU2LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2 LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTPGnqrr zn0U/5N36NZuQ5J8kse8TN6fpkxA0iNxEaxsWoFFnmEXjJ43/OJE1Uqf0SY7sxn6 KEIYng+AqZe22kjO5JNtkJynJ82QaXmAfu3eMW0CgLZhIqSl3wtZEBIqGHfREtIl kkiDuDXlf/vIiEokRHKchEVup9y1+JARJ1seSlmV/LRbGNk85iXhrdCMRaNx/kmW RL4XPr68wsWMVuXQv242zOhrKuaYA80UIek/D1a+/EGpKNFXLbhP7EQbdDWCPwGs Nx1YHGAgJGWukL22Ul2/2eBobeKrxkGSbP9t1bVedWPJkxSxEpGs9ymoYqVNHDar VoMkxBRA9mcFtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:53 2025 by rpki-client