This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json) Hash identifier: 7a3H/BFLRv6KUY9ZbQFjXjN/GFwhorMEw2JQmId8qtc= Subject key identifier: 12:48:3D:A2:9A:F4:87:48:A9:D6:85:BE:47:20:7C:AE:FC:B7:97:FF Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Certificate serial: 019AF164138898352AEE27EA3763A41EE22D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=) 2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: DYwX4llC4+bGqq6EA80fQS2bSQa2aa90lB+YDfcCzfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:13:88:98:35:2a:ee:27:ea:37:63:a4:1e:e2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=12483da29af48748a9d685be47207caefcb797ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:a2:a7:e7:69:ef:4f:3a:14:a2:b0:c1:4b: 50:e7:a4:25:61:68:16:ca:b0:99:09:b9:99:6b:ef: 33:aa:e4:27:ec:24:3d:b5:3a:ba:b7:d3:29:01:77: 85:6e:36:2c:3f:4e:3d:7e:64:7f:d5:c4:6f:c5:c2: bd:69:df:1e:92:e3:a0:e1:e9:99:92:61:6b:50:93: c4:bf:97:85:bc:06:ba:48:3a:8e:5b:2c:e5:1e:b9: f4:e5:84:e8:d8:2c:f1:f8:73:62:54:b9:dd:cf:0d: fb:00:e8:cf:dd:61:39:85:51:08:23:a1:e2:d9:08: 30:80:d3:6a:78:1e:b5:3d:9f:6d:40:a9:ab:e8:72: 62:e9:ff:37:87:a5:e4:7f:ff:ca:96:d7:4b:06:0d: 76:1c:13:38:d5:c7:46:d4:04:22:30:c1:54:58:9b: 0a:e3:ab:71:2e:66:a6:c6:21:0c:a1:53:c6:f9:ac: a2:30:97:64:1b:e2:4e:1a:12:c4:c9:14:2f:7d:ce: 47:19:39:e2:e9:ea:36:67:b2:2e:39:d5:6c:39:95: 27:a7:14:e3:8d:b8:9a:81:45:61:b2:99:21:aa:05: 58:21:0c:a7:02:12:76:e8:c9:79:a7:aa:dc:a6:fe: 10:72:97:62:a6:ed:37:a5:1a:09:d6:56:74:20:1a: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:3D:A2:9A:F4:87:48:A9:D6:85:BE:47:20:7C:AE:FC:B7:97:FF X509v3 Authority Key Identifier: keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1d:fc:9f:2f:83:ce:f3:ef:14:1b:89:9e:b1:eb:86:57:e8: f7:71:8c:f8:89:aa:b3:72:ea:1f:12:3c:80:e4:cc:8e:c4:0e: 55:73:25:04:ca:ef:a8:ad:cb:fd:c7:69:c0:80:ee:99:01:9c: 7f:a4:a6:9a:18:55:64:bb:ea:c2:69:36:51:42:96:15:67:18: ab:99:ec:66:0b:41:fa:f4:21:df:9a:41:69:02:e6:f8:48:18: c8:64:05:4e:63:f8:63:79:3c:9a:e0:8c:35:25:fa:6c:18:d7: dd:95:f8:fa:ed:09:c9:20:69:ca:c3:84:27:6c:f1:21:49:8d: 35:33:ed:a0:4b:76:73:4b:a9:04:d0:c5:51:2a:15:67:3b:24: d0:18:0e:92:cf:85:ad:7c:4f:7e:60:00:e3:e1:f4:7c:7a:86: e1:51:7e:45:28:3a:30:25:79:9c:cd:86:fb:f6:fb:ed:80:b5: 65:b6:15:0c:33:99:28:90:3a:c2:8c:02:8e:f9:fd:6c:f9:a8: ad:14:43:f3:fd:3e:6f:57:bb:c7:d4:98:4b:28:e3:f9:5f:be: 21:3a:2f:98:d7:60:3e:4e:b8:f2:5d:be:bb:87:4c:f3:31:b0: ff:b4:ee:ee:09:7d:36:93:97:dc:df:99:47:3e:e1:e0:a8:62: a2:19:64:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBOImDUq7ifqN2OkHuItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk YTlkNDMwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EygxMjQ4M2RhMjlhZjQ4NzQ4YTlkNjg1YmU0NzIwN2NhZWZjYjc5N2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pGip+dp7086FKKwwUtQ56QlYWgW yrCZCbmZa+8zquQn7CQ9tTq6t9MpAXeFbjYsP049fmR/1cRvxcK9ad8ekuOg4emZ kmFrUJPEv5eFvAa6SDqOWyzlHrn05YTo2Czx+HNiVLndzw37AOjP3WE5hVEII6Hi 2QgwgNNqeB61PZ9tQKmr6HJi6f83h6Xkf//KltdLBg12HBM41cdG1AQiMMFUWJsK 46txLmamxiEMoVPG+ayiMJdkG+JOGhLEyRQvfc5HGTni6eo2Z7IuOdVsOZUnpxTj jbiagUVhspkhqgVYIQynAhJ26Ml5p6rcpv4Qcpdipu03pRoJ1lZ0IBrU7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJIPaKa9IdIqdaFvkcgfK78t5f/MB8GA1UdIwQY MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUx38ny+D zvPvFBuJnrHrhlfo93GM+Imqs3LqHxI8gOTMjsQOVXMlBMrvqK3L/cdpwIDumQGc f6SmmhhVZLvqwmk2UUKWFWcYq5nsZgtB+vQh35pBaQLm+EgYyGQFTmP4Y3k8muCM NSX6bBjX3ZX4+u0JySBpysOEJ2zxIUmNNTPtoEt2c0upBNDFUSoVZzsk0BgOks+F rXxPfmAA4+H0fHqG4VF+RSg6MCV5nM2G+/b77YC1ZbYVDDOZKJA6wowCjvn9bPmo rRRD8/0+b1e7x9SYSyjj+V++ITovmNdgPk648l2+u4dM8zGw/7Tu7gl9NpOX3N+Z Rz7h4Khiohlk5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:14 2025 by rpki-client