This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json) Hash identifier: iuoJD21h+Ur0pCQedgfj6kCSlLKukB6K1rk1TyAv8MU= Subject key identifier: 7D:07:D7:E6:7E:5F:98:BD:70:6D:1A:E5:BD:9C:89:E8:46:41:E5:41 Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83 Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83 Certificate serial: 019AF08847F51AF3E363915389B7BAFD9317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft Manifest number: 123C Signing time: Fri 05 Dec 2025 22:00:54 +0000 Manifest this update: Fri 05 Dec 2025 22:00:54 +0000 Manifest next update: Sat 06 Dec 2025 22:00:54 +0000 Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: sFTK0qMJpDqHbXGhuxBna5CP6lmbKIHqsooJZMB8V2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:47:f5:1a:f3:e3:63:91:53:89:b7:ba:fd:93:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83 Validity Not Before: Dec 5 22:00:54 2025 GMT Not After : Dec 6 22:00:54 2025 GMT Subject: CN=7d07d7e67e5f98bd706d1ae5bd9c89e84641e541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:40:bd:b8:80:c1:d9:a1:44:82:17:d5:30: 4b:b4:dd:37:fd:39:f4:6b:7c:59:13:44:60:bb:61: c6:41:f7:dc:28:cb:53:17:38:67:c9:1e:f7:d3:f2: d5:81:b3:ca:83:b9:ad:25:a9:b7:ab:41:7a:6b:47: 6a:56:d5:82:6c:a9:7c:a7:c3:d9:fd:7e:bf:9f:35: 49:c5:f1:ae:f1:a9:91:7f:9b:3b:77:d1:f7:14:13: b8:ee:c5:c5:6f:ca:50:9f:88:54:8e:b2:da:eb:8d: 2f:8f:7f:eb:be:ae:8b:31:26:f6:9b:c8:9f:11:8b: cd:07:e1:91:86:44:27:aa:37:0e:20:57:b8:e5:26: 6c:03:73:70:3e:49:51:f8:b2:6a:3f:bf:58:63:6c: b6:5a:53:f4:1c:e7:be:52:74:15:c2:e2:cc:08:b9: be:91:fc:e6:28:8d:06:55:b0:3b:68:20:94:33:b3: a7:f5:b6:83:d1:ca:ce:f7:94:e0:70:90:5d:f8:c6: d7:aa:0f:2e:5a:f3:0b:7e:46:d3:ce:91:c1:3c:a5: 7a:0f:79:e7:ff:82:41:84:03:dd:c0:10:82:d9:f1: 81:6e:e6:25:73:62:43:93:f0:0c:b5:be:31:03:b7: 0e:d6:f4:a6:7d:fe:52:30:0a:61:97:39:bf:1f:8e: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:07:D7:E6:7E:5F:98:BD:70:6D:1A:E5:BD:9C:89:E8:46:41:E5:41 X509v3 Authority Key Identifier: keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:13:17:70:ad:be:a3:57:3f:cd:23:e9:39:01:b6:f7:ae:e8: 1a:8e:fb:3e:15:0e:98:b8:67:b1:f8:47:5b:eb:2d:aa:c0:dc: 31:1f:fa:f8:d6:1d:5a:2e:1a:22:b1:f9:0a:11:39:ca:cf:55: cb:a8:04:45:ea:b2:73:af:74:a1:53:e2:b5:46:b5:f0:85:af: 67:5a:99:e1:86:ce:86:de:d6:b6:ef:22:5c:a3:8a:e4:8b:34: 42:c5:87:a3:13:27:a2:21:6f:f9:0f:75:bf:e9:14:25:e8:9f: 5e:86:b4:dc:1c:0c:fa:07:25:89:c2:8f:14:98:a5:dc:cb:db: ca:a1:20:26:f1:cc:c0:00:b4:bd:f2:72:8d:62:20:df:1c:f5: 7e:d1:8a:75:29:54:b3:be:38:53:ce:7d:87:aa:80:79:6c:ec: a8:f3:0e:d3:c8:f2:55:f8:98:50:79:c8:20:0e:66:3b:30:bf: d9:ae:20:0a:bf:68:f9:cc:bc:70:73:78:cc:b5:b5:68:d7:7a: 20:ad:55:ee:18:67:64:f7:9e:8a:68:90:5b:41:cf:34:46:e4: fc:f1:37:51:b0:bd:c7:ff:df:2d:8f:26:3a:43:1f:33:66:eb: f3:70:d6:66:2d:4b:88:8e:a6:a6:a3:ce:4e:cc:38:bb:a1:4e: 21:d1:4a:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEf1GvPjY5FTibe6/ZMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzIyYWM0OTAyMGNhNTdjNzRmM2IxNDhiYzA0MTAyY2Fi YWRjODMwHhcNMjUxMjA1MjIwMDU0WhcNMjUxMjA2MjIwMDU0WjAzMTEwLwYDVQQD Eyg3ZDA3ZDdlNjdlNWY5OGJkNzA2ZDFhZTViZDljODllODQ2NDFlNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t9AvbiAwdmhRIIX1TBLtN03/Tn0 a3xZE0Rgu2HGQffcKMtTFzhnyR730/LVgbPKg7mtJam3q0F6a0dqVtWCbKl8p8PZ /X6/nzVJxfGu8amRf5s7d9H3FBO47sXFb8pQn4hUjrLa640vj3/rvq6LMSb2m8if EYvNB+GRhkQnqjcOIFe45SZsA3NwPklR+LJqP79YY2y2WlP0HOe+UnQVwuLMCLm+ kfzmKI0GVbA7aCCUM7On9baD0crO95TgcJBd+MbXqg8uWvMLfkbTzpHBPKV6D3nn /4JBhAPdwBCC2fGBbuYlc2JDk/AMtb4xA7cO1vSmff5SMAphlzm/H47QZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0H1+Z+X5i9cG0a5b2ciehGQeVBMB8GA1UdIwQY MBaAFFEyKsSQIMpXx087FIvAQQLKutyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRJcXhKQWd5bGZIVHpzVWk4QkJBc3E2M0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNThjZjMtNjkwOS00NThhLWE1MWEt NTkxNGY5ZDMzNzhiLzEvVVRJcXhKQWd5bGZIVHpzVWk4QkJBc3E2M0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNThjZjMtNjkwOS00NThhLWE1MWEtNTkxNGY5ZDMzNzhi LzEvVVRJcXhKQWd5bGZIVHpzVWk4QkJBc3E2M0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBMXcK2+ o1c/zSPpOQG2967oGo77PhUOmLhnsfhHW+stqsDcMR/6+NYdWi4aIrH5ChE5ys9V y6gEReqyc690oVPitUa18IWvZ1qZ4YbOht7Wtu8iXKOK5Is0QsWHoxMnoiFv+Q91 v+kUJeifXoa03BwM+gclicKPFJil3MvbyqEgJvHMwAC0vfJyjWIg3xz1ftGKdSlU s744U859h6qAeWzsqPMO08jyVfiYUHnIIA5mOzC/2a4gCr9o+cy8cHN4zLW1aNd6 IK1V7hhnZPeeimiQW0HPNEbk/PE3UbC9x//fLY8mOkMfM2br83DWZi1LiI6mpqPO Tsw4u6FOIdFKxw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:33 2025 by rpki-client