This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft File: UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft (raw, json) Hash identifier: zVnQl+i8p2LCwG4v1SLvorVEdQuy2e///opiLPumJEk= Subject key identifier: D4:89:E3:79:E2:CD:51:3C:AF:29:63:19:2B:97:82:5C:F3:E8:47:A9 Authority key identifier: 52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25 Certificate issuer: /CN=520536fe776691837728a7fe455a732555b91125 Certificate serial: 019AF1643CBE5387AFB5856CC97CFB7705F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft Manifest number: AC Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl (hash: tNXPFvIkt/Z2ncP+mCvt1DiDEtByc0oBSnONRjstLKM=) 2: _xpIchk0-7OcmLKE5QqAd5gFe40.roa (hash: W5sNIk34R1s/k3ucndWBk0r/EQrbVh4FhIwqizPc4NA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3c:be:53:87:af:b5:85:6c:c9:7c:fb:77:05:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=520536fe776691837728a7fe455a732555b91125 Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=d489e379e2cd513caf2963192b97825cf3e847a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:ae:af:53:7c:cb:87:38:8e:8d:cb:c3:74: 78:22:50:a7:23:96:56:91:ca:d3:9b:a2:dd:28:1d: 6f:19:8d:61:33:46:02:22:81:50:20:c2:d6:2e:07: 2f:3c:9f:ae:32:2a:b8:88:ef:e7:eb:e6:60:89:91: 85:7d:b3:4c:71:52:9c:ca:28:fd:58:56:0c:20:08: 3d:5c:d9:9d:3e:ea:0f:5e:35:c4:5e:8e:30:1d:e3: ef:35:78:fa:c7:66:40:96:6e:fe:51:76:79:2f:39: b9:cf:aa:9d:18:8f:a0:fe:c1:f8:c5:84:61:61:a9: a6:b2:7a:f7:b4:b6:11:3b:4c:e7:3f:70:42:b7:21: 45:e9:8e:4c:05:75:52:a5:81:50:5b:ab:2c:07:a4: 0b:6e:fa:68:7e:82:38:98:3f:42:06:a1:0f:4e:62: ac:a8:83:48:d9:1f:b5:de:a1:70:9e:e2:e4:fe:5b: 25:bb:2d:d8:82:42:4b:67:fb:c1:5a:cb:6c:e0:95: 01:b9:81:f3:9f:58:b6:19:5e:06:2a:b6:b2:02:d7: aa:08:82:db:2b:3f:11:01:c1:08:07:35:10:3a:55: 0b:da:df:f1:71:9b:e5:81:96:57:66:f5:4d:0c:1a: ab:b5:ab:09:48:8a:8d:7d:f4:3e:67:3b:07:87:23: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:89:E3:79:E2:CD:51:3C:AF:29:63:19:2B:97:82:5C:F3:E8:47:A9 X509v3 Authority Key Identifier: keyid:52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:50:3d:d3:0d:84:d6:ce:1b:4e:1b:5a:26:bd:17:85:6b: 5b:ac:47:21:72:dc:9f:b0:c5:0d:ed:1f:5c:fc:9a:54:87:2f: 9f:6d:97:5e:4a:d4:ed:ea:c9:8e:74:4d:0c:1c:a2:af:b6:9c: b5:00:b1:54:11:ab:6b:e5:a7:28:33:b4:58:c3:23:8c:40:02: bb:85:22:43:b8:8d:fa:6a:2e:fc:a5:c6:1c:e1:50:39:03:03: bc:b0:9d:9b:81:ec:9c:dd:21:17:17:83:71:2c:d1:14:6c:75: 1e:75:77:13:b3:5e:ba:c2:b6:d5:5f:3f:19:68:96:3a:ff:f4: 97:eb:b4:c6:e5:43:15:d9:01:ff:62:57:f3:12:7b:fe:40:f5: 01:70:2e:c4:10:ff:77:2b:04:1c:4a:bf:77:84:02:9f:09:71: ca:c0:0f:39:af:e2:ad:0c:ca:a3:b0:a5:4b:e9:92:9e:a4:1c: e3:de:b3:f5:d9:ca:4e:cc:b2:a7:83:4e:1e:6f:63:da:22:95: 1d:14:68:9e:c6:99:b4:5a:68:c9:f9:80:01:65:fc:20:d6:ba: 87:af:9f:79:d6:9a:82:6a:ef:e5:d2:0d:28:51:32:41:c7:42: a8:51:0e:00:43:4b:dd:9b:18:93:4c:6a:b2:4f:e7:ea:54:21: a7:9a:cb:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDy+U4evtYVsyXz7dwX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDUzNmZlNzc2NjkxODM3NzI4YTdmZTQ1NWE3MzI1NTVi OTExMjUwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD EyhkNDg5ZTM3OWUyY2Q1MTNjYWYyOTYzMTkyYjk3ODI1Y2YzZTg0N2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxCur1N8y4c4jo3Lw3R4IlCnI5ZW kcrTm6LdKB1vGY1hM0YCIoFQIMLWLgcvPJ+uMiq4iO/n6+ZgiZGFfbNMcVKcyij9 WFYMIAg9XNmdPuoPXjXEXo4wHePvNXj6x2ZAlm7+UXZ5Lzm5z6qdGI+g/sH4xYRh Yammsnr3tLYRO0znP3BCtyFF6Y5MBXVSpYFQW6ssB6QLbvpofoI4mD9CBqEPTmKs qINI2R+13qFwnuLk/lsluy3YgkJLZ/vBWsts4JUBuYHzn1i2GV4GKrayAteqCILb Kz8RAcEIBzUQOlUL2t/xcZvlgZZXZvVNDBqrtasJSIqNffQ+ZzsHhyNuawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSJ43nizVE8ryljGSuXglzz6EepMB8GA1UdIwQY MBaAFFIFNv53ZpGDdyin/kVacyVVuRElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMzg1NDgtOGQ3NC00ZmE0LWFkNTkt NTgzOTk2NTg3ODRlLzEvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yMzg1NDgtOGQ3NC00ZmE0LWFkNTktNTgzOTk2NTg3ODRl LzEvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEX5QPdMN hNbOG04bWia9F4VrW6xHIXLcn7DFDe0fXPyaVIcvn22XXkrU7erJjnRNDByir7ac tQCxVBGra+WnKDO0WMMjjEACu4UiQ7iN+mou/KXGHOFQOQMDvLCdm4HsnN0hFxeD cSzRFGx1HnV3E7NeusK21V8/GWiWOv/0l+u0xuVDFdkB/2JX8xJ7/kD1AXAuxBD/ dysEHEq/d4QCnwlxysAPOa/irQzKo7ClS+mSnqQc496z9dnKTsyyp4NOHm9j2iKV HRRonsaZtFpoyfmAAWX8INa6h6+fedaagmrv5dINKFEyQcdCqFEOAENL3ZsYk0xq sk/n6lQhp5rLUA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:19 2025 by rpki-client