This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json) Hash identifier: GKRMqU6NOZXtVscb+NzJ+QDYG3X9dm3E75rewTIbrc0= Subject key identifier: B8:6F:49:0E:97:91:63:0F:40:53:55:BF:4F:C4:90:57:63:A0:1B:D1 Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38 Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938 Certificate serial: 019AF27652D30A808FA12A959DC163D9F2CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft Manifest number: 0DDD Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: ihkjHoSOazrOQuNUhcBbzcktAi16QB9CqSmNlltt5ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:52:d3:0a:80:8f:a1:2a:95:9d:c1:63:d9:f2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938 Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=b86f490e9791630f405355bf4fc4905763a01bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:b4:51:e8:ee:b5:b5:fe:05:97:e2:13:4a: 86:c4:0c:fb:20:cc:f0:18:7f:3c:fb:46:d8:22:a5: eb:9e:cd:ac:db:ad:d5:6f:28:7c:6b:75:c1:a8:c4: de:db:ac:3c:28:c1:17:47:e0:87:9a:a3:55:48:87: e3:11:ff:89:f4:39:dc:7a:33:c9:38:63:17:c6:b2: 9d:24:37:7d:a5:e4:76:7a:d7:6b:44:7b:b0:60:10: 6a:c7:df:a3:ce:46:ad:7f:fa:47:b8:49:be:52:f2: ee:38:d5:34:84:c3:f2:7e:02:22:a0:16:dc:c6:00: 11:62:dc:f9:e1:ca:71:66:43:15:15:fc:0c:ec:7f: 90:3f:5b:8e:7e:38:9a:6f:b3:11:86:e3:a9:b3:82: ae:33:2d:36:30:e8:6c:a0:5f:e7:e5:a3:cc:5e:0f: ee:1c:3d:0e:90:6b:1c:28:7a:4e:27:9b:5a:1e:67: 36:dd:cd:c4:8c:b0:ec:d2:08:18:19:2b:21:a1:a7: c0:b4:36:7b:c9:a3:65:23:78:26:06:f6:39:5b:d8: 20:6a:05:1f:6f:fa:4a:2f:6b:b9:57:9d:9c:5c:74: 42:71:33:f6:09:be:e8:53:95:43:7f:38:9f:95:1c: ea:fa:90:8e:5c:71:74:36:c8:25:d7:2a:e3:c9:0b: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6F:49:0E:97:91:63:0F:40:53:55:BF:4F:C4:90:57:63:A0:1B:D1 X509v3 Authority Key Identifier: keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b1:2d:88:2f:1c:ba:57:36:5b:23:98:ba:51:83:2d:47:8a: fd:6e:6d:b5:a2:bd:a0:2c:72:c0:b1:df:ff:38:dc:f5:7b:ce: 0e:e7:2b:fd:a6:53:52:1e:bb:44:48:d5:09:cb:47:df:db:d2: ea:e4:82:1a:33:1c:6f:5f:9a:9e:ed:51:43:58:65:1f:3a:71: 11:5f:5b:fa:19:7a:33:db:62:0e:c8:02:4a:6c:c1:36:58:dc: 9c:76:29:5f:2e:b2:a3:63:e4:71:5b:bf:04:df:cc:52:c4:ad: 5f:72:fd:2e:c6:c1:22:99:64:fb:bb:d5:f6:c5:ba:60:7e:b6: 97:8b:8a:58:b4:53:e2:d4:41:9b:29:6d:e9:eb:00:72:38:9d: c3:c4:67:41:af:3b:69:d1:a1:83:b2:d8:1a:03:00:56:0a:5b: a8:1d:91:27:79:7a:f1:1f:cf:4a:3e:c2:0d:f1:9b:88:97:86: 6d:73:a0:87:78:56:ad:76:1f:e0:0e:42:8d:83:9e:fa:d7:d0: 7a:4f:bd:90:63:ec:f3:5c:11:52:b7:3e:9d:44:6e:99:1e:b7: 42:d6:5d:05:8f:42:2a:12:a1:ac:48:1c:9b:b7:e4:cc:4b:84: 7e:51:6f:d4:22:fb:69:95:1d:87:ec:96:63:bd:08:a5:44:c0: b7:62:74:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlLTCoCPoSqVncFj2fLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNDRjNDJlMWNhMzAzN2JiNmY1NDFmMWUxNDA0ZjY2MmMz Njk5MzgwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD EyhiODZmNDkwZTk3OTE2MzBmNDA1MzU1YmY0ZmM0OTA1NzYzYTAxYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgO0UejutbX+BZfiE0qGxAz7IMzw GH88+0bYIqXrns2s263Vbyh8a3XBqMTe26w8KMEXR+CHmqNVSIfjEf+J9DncejPJ OGMXxrKdJDd9peR2etdrRHuwYBBqx9+jzkatf/pHuEm+UvLuONU0hMPyfgIioBbc xgARYtz54cpxZkMVFfwM7H+QP1uOfjiab7MRhuOps4KuMy02MOhsoF/n5aPMXg/u HD0OkGscKHpOJ5taHmc23c3EjLDs0ggYGSshoafAtDZ7yaNlI3gmBvY5W9ggagUf b/pKL2u5V52cXHRCcTP2Cb7oU5VDfziflRzq+pCOXHF0Nsgl1yrjyQuO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhvSQ6XkWMPQFNVv0/EkFdjoBvRMB8GA1UdIwQY MBaAFNFExC4cowN7tvVB8eFAT2YsNpk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEt NmEyZjRhMTA4N2Y5LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEtNmEyZjRhMTA4N2Y5 LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7EtiC8c ulc2WyOYulGDLUeK/W5ttaK9oCxywLHf/zjc9XvODucr/aZTUh67REjVCctH39vS 6uSCGjMcb1+anu1RQ1hlHzpxEV9b+hl6M9tiDsgCSmzBNljcnHYpXy6yo2PkcVu/ BN/MUsStX3L9LsbBIplk+7vV9sW6YH62l4uKWLRT4tRBmylt6esAcjidw8RnQa87 adGhg7LYGgMAVgpbqB2RJ3l68R/PSj7CDfGbiJeGbXOgh3hWrXYf4A5CjYOe+tfQ ek+9kGPs81wRUrc+nURumR63QtZdBY9CKhKhrEgcm7fkzEuEflFv1CL7aZUdh+yW Y70IpUTAt2J03w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:27 2025 by rpki-client