This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json) Hash identifier: LOm0KuzqAZnskXCSlAiL5WJu/9jLE4dIoEOzDfRFzaU= Subject key identifier: 84:20:29:CF:A0:C0:7E:15:80:53:E4:E7:ED:69:F6:8A:A7:7F:FA:C9 Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39 Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739 Certificate serial: 019AF509F533420F2EBCB7CE724179830C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 19:01:01 +0000 Manifest this update: Sat 06 Dec 2025 19:01:01 +0000 Manifest next update: Sun 07 Dec 2025 19:01:01 +0000 Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=) 2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: HboDs3dWC2sHlc8siDQbJaLmB7aM8SiHXsb9p21r0zQ=) 3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f5:33:42:0f:2e:bc:b7:ce:72:41:79:83:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739 Validity Not Before: Dec 6 19:01:01 2025 GMT Not After : Dec 7 19:01:01 2025 GMT Subject: CN=842029cfa0c07e158053e4e7ed69f68aa77ffac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:5b:17:25:2b:f8:38:6f:1d:0f:e7:88:74: a7:91:a5:7f:67:0c:e4:3b:4b:97:c6:7e:29:62:0a: 25:50:b3:c5:fe:16:b5:32:ea:0c:5c:48:b9:0a:56: 83:b3:23:c3:97:07:9e:df:e6:02:5f:3f:1e:51:80: 5d:b6:45:5a:ec:2d:36:11:9e:3b:c1:da:2c:43:05: e2:8c:48:a4:da:8b:27:2d:02:19:6f:28:23:3e:ed: d2:0f:27:d1:40:d3:7a:8f:4e:92:a7:bf:dd:8c:ea: fd:16:c3:22:d3:91:21:94:cd:81:75:31:14:6b:12: 41:11:a1:46:81:20:4e:3c:19:e4:fb:33:4b:10:e7: 5c:92:15:77:0f:72:25:6f:be:bb:9f:a7:e8:80:13: e8:33:38:d2:eb:ad:d3:d9:f5:84:01:af:1c:da:43: 4d:1a:62:a4:2e:67:07:98:13:22:71:13:2f:64:47: e4:b9:7e:77:c6:91:b7:37:8e:1c:e9:d7:af:bd:49: c2:21:73:d1:b1:e4:ec:80:39:1d:51:7b:70:c6:50: cf:f6:86:66:75:67:fd:0e:6f:d1:4f:5d:c7:06:fd: b8:aa:0a:19:76:b3:c6:72:1a:29:f3:ff:28:33:15: fb:88:52:96:17:82:7b:43:7b:41:80:39:f6:27:ec: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:20:29:CF:A0:C0:7E:15:80:53:E4:E7:ED:69:F6:8A:A7:7F:FA:C9 X509v3 Authority Key Identifier: keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:20:7e:f5:ea:61:65:c1:d4:04:f5:f2:07:0a:8b:31:00:b5: 58:7f:15:d9:90:24:9b:71:19:ab:f0:02:33:7c:1b:2f:6e:5e: e2:53:f7:24:71:0f:cd:ec:6b:63:7a:95:d5:52:a0:8c:f6:42: fe:b2:34:af:1a:98:1b:c9:89:db:89:94:0c:d8:d2:36:be:57: 44:62:07:e3:03:93:9d:a0:fe:17:8b:c4:0e:04:70:4c:19:08: c5:55:65:b7:c7:50:59:d4:4b:bf:c3:e8:bc:a7:42:48:e1:35: 16:69:9c:91:08:5c:b4:bb:d8:99:8d:ca:dd:10:89:c4:67:9c: 1d:e1:9c:90:a9:8f:45:6b:40:d8:31:fc:54:f4:56:8e:05:c9: 46:d0:41:ea:c1:ce:a3:82:62:81:2c:78:f5:99:1d:80:31:9e: 88:4e:2c:8a:52:43:a7:ee:1f:fb:63:33:9e:e1:98:2c:f6:6b: 84:c9:65:d5:36:02:f6:51:f7:67:b2:cf:0c:35:56:6d:a1:3e: 9e:db:49:c0:f0:5a:bb:02:19:11:03:4e:90:97:83:a5:4a:0a: 3a:f0:66:c0:43:af:ae:ac:85:d9:36:de:36:19:6a:09:f8:08: f5:bd:0d:91:de:15:59:d8:10:3f:9e:93:24:22:12:98:38:05: 2f:aa:50:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfUzQg8uvLfOckF5gwxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTY3MTJjY2ZhODc3YWJiNzYwY2I3N2UyNzA0MTc3NGNi MDQ3MzkwHhcNMjUxMjA2MTkwMTAxWhcNMjUxMjA3MTkwMTAxWjAzMTEwLwYDVQQD Eyg4NDIwMjljZmEwYzA3ZTE1ODA1M2U0ZTdlZDY5ZjY4YWE3N2ZmYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArENbFyUr+DhvHQ/niHSnkaV/Zwzk O0uXxn4pYgolULPF/ha1MuoMXEi5ClaDsyPDlwee3+YCXz8eUYBdtkVa7C02EZ47 wdosQwXijEik2osnLQIZbygjPu3SDyfRQNN6j06Sp7/djOr9FsMi05EhlM2BdTEU axJBEaFGgSBOPBnk+zNLEOdckhV3D3Ilb767n6fogBPoMzjS663T2fWEAa8c2kNN GmKkLmcHmBMicRMvZEfkuX53xpG3N44c6devvUnCIXPRseTsgDkdUXtwxlDP9oZm dWf9Dm/RT13HBv24qgoZdrPGchop8/8oMxX7iFKWF4J7Q3tBgDn2J+y3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQgKc+gwH4VgFPk5+1p9oqnf/rJMB8GA1UdIwQY MBaAFFBWcSzPqHert2DLd+JwQXdMsEc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGIt Zjg0YjYwNTIxZGY1LzEvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGItZjg0YjYwNTIxZGY1 LzEvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyB+9eph ZcHUBPXyBwqLMQC1WH8V2ZAkm3EZq/ACM3wbL25e4lP3JHEPzexrY3qV1VKgjPZC /rI0rxqYG8mJ24mUDNjSNr5XRGIH4wOTnaD+F4vEDgRwTBkIxVVlt8dQWdRLv8Po vKdCSOE1FmmckQhctLvYmY3K3RCJxGecHeGckKmPRWtA2DH8VPRWjgXJRtBB6sHO o4JigSx49ZkdgDGeiE4silJDp+4f+2MznuGYLPZrhMll1TYC9lH3Z7LPDDVWbaE+ nttJwPBauwIZEQNOkJeDpUoKOvBmwEOvrqyF2TbeNhlqCfgI9b0Nkd4VWdgQP56T JCISmDgFL6pQNA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:48 2025 by rpki-client