This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json) Hash identifier: rSUshEMJQ/yqpxmU8jD9Fh+rGTyDH9A2yyvDhnQsgFo= Subject key identifier: 64:86:79:96:24:0E:9F:47:45:02:80:A5:49:2A:06:09:5D:84:C7:26 Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437 Certificate serial: 019AF12D48F1D81AE1E0F555D98FAF47B8D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=) 2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: N8tWCiFw+9smbPe5FL0c4hgAz3ZiMBJDrKM3Fs/7pdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:48:f1:d8:1a:e1:e0:f5:55:d9:8f:af:47:b8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437 Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=64867996240e9f47450280a5492a06095d84c726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:e5:31:81:9c:4a:8d:6a:96:1a:09:30:45: 07:9c:d5:dc:0e:c5:69:67:f5:a0:bc:4c:ae:86:c3: d9:3d:02:69:66:4f:e1:18:98:49:3a:c7:e5:f1:6a: 22:8d:3b:4e:1b:ee:09:b9:a5:f8:94:d5:df:d8:89: c8:57:26:5a:ed:7d:64:c7:7c:b1:83:d5:1a:3a:31: 56:45:ab:4c:87:dd:2e:27:89:54:0d:28:54:03:af: 9b:7e:12:b4:1b:e0:af:e6:e1:16:68:cf:90:cc:79: 73:59:2d:91:04:dc:5b:65:61:4d:6f:ea:70:39:2a: bc:9c:37:18:55:db:32:52:9b:2c:4e:22:17:31:7e: 8b:9b:9e:8a:bd:6c:64:5c:4e:13:82:97:3c:e7:63: 29:c7:df:16:91:0b:45:24:c1:be:ca:e3:5e:e1:27: fc:ba:d4:d2:1e:8e:46:1c:34:75:3e:a7:3e:ea:b0: 91:1f:0e:04:41:e1:4d:da:05:99:28:67:64:e3:aa: cd:a5:a6:3f:9f:1d:9a:d1:42:19:14:5d:c7:26:27: 1a:d3:e6:03:39:a5:55:3f:c1:ba:64:a3:1e:dd:89: a6:51:a2:41:ea:83:17:2b:37:c2:20:2a:f9:96:85: fe:47:22:cf:f4:15:cb:34:1f:37:c6:f0:67:4b:af: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:79:96:24:0E:9F:47:45:02:80:A5:49:2A:06:09:5D:84:C7:26 X509v3 Authority Key Identifier: keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:cc:75:8d:4d:cb:b4:b2:43:1f:93:8c:53:54:61:9c:47:28: 16:98:91:17:ed:b1:f8:5c:c2:9a:da:4a:4a:db:21:32:3c:02: 41:b0:22:64:55:43:34:46:7d:90:ca:12:d4:89:93:dd:d1:d2: 7d:7b:e2:e5:6f:37:25:ef:1d:6e:6d:c2:23:a2:87:4f:cd:dd: 56:e3:3a:1b:4a:2f:95:24:d4:2b:fe:84:76:1c:61:4c:39:ca: e2:c3:a5:d3:65:a8:09:4b:ba:34:76:2c:83:88:e0:9f:2d:40: fb:e2:94:c1:11:60:4e:02:13:4d:75:a6:57:9d:14:18:c5:5a: 38:25:bc:23:4d:4f:21:3d:19:c9:c3:99:95:19:bc:e2:09:de: f7:4d:b6:a6:11:21:ab:69:34:f3:0a:35:14:4d:31:25:bc:6f: 40:7f:dc:55:27:2e:f9:a2:c7:d9:a8:d4:19:4f:3b:a3:87:56: 06:e2:1e:c9:c8:c2:9f:7c:df:0d:ee:ae:9a:ef:2d:9e:5e:08: 44:35:c0:2c:f8:af:9d:94:e2:84:b6:30:3a:47:6b:a4:8b:64: 21:74:7f:38:e4:b2:2c:f2:97:66:ed:43:3e:32:a4:f9:e3:d4: b6:bb:3c:0d:27:95:0f:43:19:24:90:ce:c7:5e:27:b1:89:66: 17:31:a2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUjx2Brh4PVV2Y+vR7jTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4 OTI0MzcwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD Eyg2NDg2Nzk5NjI0MGU5ZjQ3NDUwMjgwYTU0OTJhMDYwOTVkODRjNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDlMYGcSo1qlhoJMEUHnNXcDsVp Z/WgvEyuhsPZPQJpZk/hGJhJOsfl8WoijTtOG+4JuaX4lNXf2InIVyZa7X1kx3yx g9UaOjFWRatMh90uJ4lUDShUA6+bfhK0G+Cv5uEWaM+QzHlzWS2RBNxbZWFNb+pw OSq8nDcYVdsyUpssTiIXMX6Lm56KvWxkXE4Tgpc852Mpx98WkQtFJMG+yuNe4Sf8 utTSHo5GHDR1Pqc+6rCRHw4EQeFN2gWZKGdk46rNpaY/nx2a0UIZFF3HJica0+YD OaVVP8G6ZKMe3YmmUaJB6oMXKzfCICr5loX+RyLP9BXLNB83xvBnS6+/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSGeZYkDp9HRQKApUkqBgldhMcmMB8GA1UdIwQY MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt NjM3OTljMDI2YTU3LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3 LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5cx1jU3L tLJDH5OMU1RhnEcoFpiRF+2x+FzCmtpKStshMjwCQbAiZFVDNEZ9kMoS1ImT3dHS fXvi5W83Je8dbm3CI6KHT83dVuM6G0ovlSTUK/6EdhxhTDnK4sOl02WoCUu6NHYs g4jgny1A++KUwRFgTgITTXWmV50UGMVaOCW8I01PIT0ZycOZlRm84gne9022phEh q2k08wo1FE0xJbxvQH/cVScu+aLH2ajUGU87o4dWBuIeycjCn3zfDe6umu8tnl4I RDXALPivnZTihLYwOkdrpItkIXR/OOSyLPKXZu1DPjKk+ePUtrs8DSeVD0MZJJDO x14nsYlmFzGiXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:06 2025 by rpki-client