This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json) Hash identifier: YOn+YgQQx+PhuqH8fQ1OjEPxLkP4chf/x5RdzCYwCRM= Subject key identifier: A5:AF:4E:3F:7D:F2:88:BA:F0:AD:0D:2D:87:BB:59:55:E9:50:A5:54 Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59 Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959 Certificate serial: 019AF19B21D85CFF13A1074EB90C70564C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft Manifest number: 1756 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=) 2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: WxEiWVs0ZwxQ/WkedHqBM9fqBhmOslCdArbJTWqqfX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:21:d8:5c:ff:13:a1:07:4e:b9:0c:70:56:4c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=a5af4e3f7df288baf0ad0d2d87bb5955e950a554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:e0:42:b4:ff:11:30:31:9c:1d:f0:5d:bd: 3e:d7:c9:39:d8:a7:4d:14:d1:0f:6f:b0:20:7b:30: 59:54:b9:ec:97:62:77:b3:38:63:0a:d2:67:d9:68: a1:a4:6d:e5:58:05:a2:ba:76:90:db:65:a8:bc:10: 4b:45:35:42:8a:27:e5:2b:ee:a6:95:22:be:da:d8: f1:e8:ff:58:90:cd:5f:7e:57:26:6b:45:9d:d7:10: 0a:a1:d3:cb:b9:d2:50:a0:57:d8:b4:e3:29:a4:d4: 0f:86:8c:b7:75:42:72:38:57:78:ae:f6:8b:60:33: 6b:9e:23:9f:d6:dc:30:50:7a:75:95:26:63:8c:79: 28:1a:5c:b6:83:5f:d4:58:8e:68:ef:c6:a1:d0:2f: dd:1a:d6:01:0c:da:5a:38:4d:9a:15:e0:65:9a:44: d0:92:90:14:18:80:1b:93:de:1f:ae:56:2a:aa:9e: dd:81:27:f1:a2:f9:11:85:c2:ee:90:5e:ce:0c:33: 4d:b2:2c:c3:5f:06:26:33:a8:b3:fc:4b:a9:9e:e4: 44:b1:8e:40:23:79:c2:16:0e:be:38:c9:99:e6:10: e0:3d:bd:6e:59:b0:72:ee:e0:2b:c6:53:4a:5e:22: a4:00:45:90:36:97:ae:17:16:4f:ec:74:0b:0c:df: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AF:4E:3F:7D:F2:88:BA:F0:AD:0D:2D:87:BB:59:55:E9:50:A5:54 X509v3 Authority Key Identifier: keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:78:ac:c8:02:f4:25:fe:f0:28:a6:e4:20:0f:27:16:05:12: 15:41:45:4f:c0:6d:bc:bc:cf:3d:aa:e7:ba:80:98:00:73:47: 9c:95:a6:24:d6:d8:9d:39:ea:c1:8c:64:96:bc:df:b9:30:4f: 7d:5a:6d:2b:78:42:c5:1a:ba:f8:c4:16:5d:a5:f2:0d:e6:58: ef:4b:b5:ca:11:00:de:08:98:0d:84:f9:6f:54:a4:5a:38:dc: 2c:24:25:ec:8e:84:23:bc:57:6f:8a:c8:fd:72:01:ab:16:39: 7c:18:8f:5d:92:d5:cd:e0:e2:4e:a8:70:a7:04:9b:cb:8d:f0: 65:7a:61:8c:23:d0:81:7b:cc:f5:53:2e:90:ea:04:22:1b:dc: 25:d9:68:8c:03:5d:80:aa:7a:f5:b8:77:cb:45:9b:ef:39:2d: e3:60:7d:cf:02:ac:0a:55:8c:68:f9:3b:25:08:c7:30:20:da: 84:e0:82:61:dd:a7:6e:2b:59:cc:24:7c:00:d9:d5:80:7d:a4: 9e:05:cd:b9:3c:e7:b7:6a:73:b3:ad:5c:8b:e7:2b:c5:1a:9f: aa:c7:ed:9c:98:e7:7d:9a:4a:82:f7:c9:a3:97:7a:0e:8c:dd: 33:a3:89:a1:7c:59:1d:e4:67:a8:14:70:b4:84:3f:78:c7:08: 21:d2:d6:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyHYXP8ToQdOuQxwVkxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWM4ZjMyYTFmNDI4MWY3MTQ2Mzg5NWQ1NDNjNzE3OWNm N2Y5NTkwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EyhhNWFmNGUzZjdkZjI4OGJhZjBhZDBkMmQ4N2JiNTk1NWU5NTBhNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVjgQrT/ETAxnB3wXb0+18k52KdN FNEPb7AgezBZVLnsl2J3szhjCtJn2WihpG3lWAWiunaQ22WovBBLRTVCiiflK+6m lSK+2tjx6P9YkM1fflcma0Wd1xAKodPLudJQoFfYtOMppNQPhoy3dUJyOFd4rvaL YDNrniOf1twwUHp1lSZjjHkoGly2g1/UWI5o78ah0C/dGtYBDNpaOE2aFeBlmkTQ kpAUGIAbk94frlYqqp7dgSfxovkRhcLukF7ODDNNsizDXwYmM6iz/EupnuREsY5A I3nCFg6+OMmZ5hDgPb1uWbBy7uArxlNKXiKkAEWQNpeuFxZP7HQLDN+3XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWvTj998oi68K0NLYe7WVXpUKVUMB8GA1UdIwQY MBaAFFCcjzKh9CgfcUY4ldVDxxec9/lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZjBhN2QtZGNjZC00N2NlLWIyMWQt MTQ4MDljOTM4Yjc2LzEvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZjBhN2QtZGNjZC00N2NlLWIyMWQtMTQ4MDljOTM4Yjc2 LzEvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHisyAL0 Jf7wKKbkIA8nFgUSFUFFT8BtvLzPParnuoCYAHNHnJWmJNbYnTnqwYxklrzfuTBP fVptK3hCxRq6+MQWXaXyDeZY70u1yhEA3giYDYT5b1SkWjjcLCQl7I6EI7xXb4rI /XIBqxY5fBiPXZLVzeDiTqhwpwSby43wZXphjCPQgXvM9VMukOoEIhvcJdlojANd gKp69bh3y0Wb7zkt42B9zwKsClWMaPk7JQjHMCDahOCCYd2nbitZzCR8ANnVgH2k ngXNuTznt2pzs61ci+crxRqfqsftnJjnfZpKgvfJo5d6DozdM6OJoXxZHeRnqBRw tIQ/eMcIIdLWaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:00 2025 by rpki-client