This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json) Hash identifier: vsA8JJs/GO4hAMpNyrKoF8CbXDOanTjwQJqJFgotJZg= Subject key identifier: 34:F0:CD:44:61:4C:E0:B9:03:F1:9A:92:67:44:47:7F:4D:7F:79:B2 Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63 Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063 Certificate serial: 019AF12CF73BDDAF2ACC4560F512A3B01D9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: QKLh7oHXdtQxrsB9qP7Vh+LxJoUhi5Mqe2Lnu/HnFc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f7:3b:dd:af:2a:cc:45:60:f5:12:a3:b0:1d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063 Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=34f0cd44614ce0b903f19a926744477f4d7f79b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:5f:eb:d9:b0:eb:94:d4:e5:78:a0:c5:80: bd:6e:f4:9b:47:63:53:7b:3e:4a:f6:b7:e0:75:15: 6a:38:7c:e4:b9:a7:89:c4:6c:5e:13:38:06:15:c2: 91:e1:e9:0d:3c:3e:6f:48:35:db:0c:55:b6:f3:62: 12:81:30:21:90:58:91:b7:96:02:80:77:17:ed:c0: 3a:32:67:c0:84:60:fb:c5:d1:02:ce:7b:6d:2a:ff: 0c:cf:64:e0:14:14:f1:0e:7b:f5:50:73:e5:b0:c9: 94:09:4d:34:a4:0b:74:bd:61:24:ca:55:6e:98:f0: ab:56:05:8a:4e:99:4b:90:ba:39:e6:62:07:d8:11: 9b:12:e0:c7:6d:fb:9c:fc:eb:cf:c2:a6:c5:da:a3: 50:d5:19:45:02:3a:87:2b:31:a3:41:02:a7:55:8e: 4f:9a:38:e8:bf:db:53:61:73:dc:53:4e:8b:f0:99: 5a:f7:e8:02:c7:2e:73:46:2f:4a:83:19:3a:a2:f1: 90:54:b9:46:f6:d4:3b:cb:9a:ad:ef:60:e2:4e:85: af:ce:2f:3d:77:04:ec:f2:5d:9d:8a:eb:29:50:89: 0a:20:e2:e5:64:67:46:10:99:e5:5d:86:5a:63:07: 74:cb:ab:15:d9:30:a3:21:0d:95:03:2c:bd:9e:2e: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F0:CD:44:61:4C:E0:B9:03:F1:9A:92:67:44:47:7F:4D:7F:79:B2 X509v3 Authority Key Identifier: keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:29:b4:19:88:43:89:5e:6f:89:e9:eb:f0:9b:be:f0:6a:8c: 6f:b5:bb:5d:48:37:7d:8c:e8:b5:e4:c3:fc:1d:af:f0:dc:f4: c5:b7:a0:77:f6:06:85:8f:3c:8f:d6:a1:e1:26:9c:43:54:66: 14:c0:82:f4:17:26:6e:01:cc:4f:40:a7:b4:8e:05:5e:23:e2: ba:46:59:20:75:5e:c8:96:06:62:90:9d:26:d5:82:d3:21:04: 13:1d:5d:3f:2f:f2:a6:ad:7c:4b:3f:7d:74:82:17:ab:3f:fb: af:e1:07:73:de:41:2f:f9:f4:86:f5:f5:3f:14:94:79:b0:06: e9:d4:e7:b7:21:df:7a:e8:19:1e:8b:3b:b7:7e:22:93:1f:90: 6d:ad:9a:20:96:80:96:ba:56:99:1b:19:8a:3d:7f:a1:0d:8a: 07:60:6d:9d:94:0d:67:9f:d2:a6:70:7d:bb:e6:4c:42:28:04: 42:f1:68:a9:38:93:17:c5:c2:4f:84:d1:57:8f:39:cb:6f:c7: 72:b9:0c:6b:dd:9f:f6:f5:d1:7e:38:98:2c:56:53:58:c5:66: ac:52:db:e0:e5:58:e0:be:37:c3:30:52:76:b5:83:01:9b:a9: e3:dd:ac:e9:47:3e:d5:cf:d9:4f:2e:46:61:96:20:24:03:89: 14:49:0f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPc73a8qzEVg9RKjsB2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl MjMwNjMwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EygzNGYwY2Q0NDYxNGNlMGI5MDNmMTlhOTI2NzQ0NDc3ZjRkN2Y3OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qtf69mw65TU5XigxYC9bvSbR2NT ez5K9rfgdRVqOHzkuaeJxGxeEzgGFcKR4ekNPD5vSDXbDFW282ISgTAhkFiRt5YC gHcX7cA6MmfAhGD7xdECznttKv8Mz2TgFBTxDnv1UHPlsMmUCU00pAt0vWEkylVu mPCrVgWKTplLkLo55mIH2BGbEuDHbfuc/OvPwqbF2qNQ1RlFAjqHKzGjQQKnVY5P mjjov9tTYXPcU06L8Jla9+gCxy5zRi9Kgxk6ovGQVLlG9tQ7y5qt72DiToWvzi89 dwTs8l2diuspUIkKIOLlZGdGEJnlXYZaYwd0y6sV2TCjIQ2VAyy9ni7s6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTwzURhTOC5A/GakmdER39Nf3myMB8GA1UdIwQY MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJim0GYhD iV5vienr8Ju+8GqMb7W7XUg3fYzoteTD/B2v8Nz0xbegd/YGhY88j9ah4SacQ1Rm FMCC9BcmbgHMT0CntI4FXiPiukZZIHVeyJYGYpCdJtWC0yEEEx1dPy/ypq18Sz99 dIIXqz/7r+EHc95BL/n0hvX1PxSUebAG6dTntyHfeugZHos7t34ikx+Qba2aIJaA lrpWmRsZij1/oQ2KB2BtnZQNZ5/SpnB9u+ZMQigEQvFoqTiTF8XCT4TRV485y2/H crkMa92f9vXRfjiYLFZTWMVmrFLb4OVY4L43wzBSdrWDAZup492s6Uc+1c/ZTy5G YZYgJAOJFEkPKg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:12 2025 by rpki-client