This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json) Hash identifier: 6Wd8oET3+oqmHZeDGIPSzQHPn7vg9Lga/db8oZcU41U= Subject key identifier: CF:26:94:1F:7C:1F:CB:EC:8D:0A:2A:B8:9D:9B:17:55:6B:A0:48:DF Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762 Certificate serial: 019AF31D2ECF7BAB2F15FB88A07CB265DC2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:02:47 +0000 Manifest this update: Sat 06 Dec 2025 10:02:47 +0000 Manifest next update: Sun 07 Dec 2025 10:02:47 +0000 Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=) 2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=) 3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: sgDI3JKEHBTgZp2dZB5udMSUsIZgaKs7vzqXjF4+OcU=) 4: dCfw3siXArkTGLHoDyVXC2auKAA.roa (hash: SQrCEBJEirqiW+cvXfiwSLmWhEoZRiFeCKfkOofqd38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:2e:cf:7b:ab:2f:15:fb:88:a0:7c:b2:65:dc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509df728d1b46634054972d2945fda58073b5762 Validity Not Before: Dec 6 10:02:47 2025 GMT Not After : Dec 7 10:02:47 2025 GMT Subject: CN=cf26941f7c1fcbec8d0a2ab89d9b17556ba048df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:5e:23:e4:31:c7:d7:9c:6f:9c:e4:7b:6c: 7b:4c:5a:90:05:4f:6d:a2:b7:fb:c2:94:66:4a:3e: b8:4b:5d:da:80:0d:5a:9f:97:f0:05:9f:9a:61:ce: 79:89:02:e0:c5:43:1f:61:d5:ec:c1:f4:37:50:de: 3e:1b:91:b1:4a:1b:f1:08:74:ed:4c:27:89:6c:95: 89:45:e8:30:a7:86:47:19:94:8b:eb:b3:fc:68:d2: 65:0a:1b:82:c9:d3:20:48:60:d3:58:c6:f5:67:c1: f9:86:8b:0f:37:8c:64:ef:f3:eb:3e:3d:19:7d:ee: 3b:23:f7:a2:41:c5:9b:8a:27:98:ab:cf:83:6b:21: 47:63:3b:27:18:1b:16:57:ef:0d:3a:dd:a2:99:4d: 52:cb:e8:10:87:0e:ea:b7:b1:a7:51:7b:36:17:39: 8c:5e:75:ad:1b:be:e0:3f:eb:f4:f6:19:28:b9:d8: 43:73:77:54:65:f8:94:53:5c:76:90:90:ae:8b:dc: ab:14:12:6e:59:41:18:d3:82:d7:31:f7:4c:38:9b: 1c:e1:29:a9:e3:89:3e:b0:be:62:a4:2d:9f:9e:7f: b4:45:ed:e2:cf:b1:0e:a7:32:6e:cd:3b:4c:9a:71: 14:15:25:a6:b8:7b:f5:0d:f8:0a:42:ba:ef:96:19: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:94:1F:7C:1F:CB:EC:8D:0A:2A:B8:9D:9B:17:55:6B:A0:48:DF X509v3 Authority Key Identifier: keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:81:07:98:68:8b:78:f4:31:e7:b3:c8:e7:33:82:75:80:cc: 7c:92:c9:96:8f:26:41:bd:14:16:83:05:13:fe:a6:3e:9e:24: 78:84:92:f7:45:0c:79:94:14:4a:bb:04:7e:94:3d:86:73:b4: b6:1c:f2:81:24:88:93:a3:b3:2b:fd:f0:76:3c:04:41:0c:bf: 2d:89:58:81:1c:9f:6e:e7:76:ce:15:c6:a4:e7:bf:49:43:c2: 76:03:c5:2d:1b:2c:9f:da:d5:f9:8e:f5:cf:4d:9d:1e:93:b3: 2a:05:07:1d:36:6c:7b:0b:2b:3b:03:de:fc:5a:f8:9b:a1:df: 09:23:b7:8e:9c:b4:7d:de:62:67:e3:2f:9f:38:8e:54:96:1f: 71:5e:f9:46:d1:4a:9e:59:fb:dc:c5:31:96:ae:c0:57:a9:49: 01:0e:12:7e:b6:70:cf:3b:9e:9e:86:6c:38:e7:dd:36:10:19: 86:e1:8e:0e:e6:00:1c:0e:f7:02:ed:61:ce:7b:b1:90:7d:ea: 3e:f4:98:1d:45:d5:c6:40:b0:cc:14:09:14:7e:4c:78:99:96: c5:ec:aa:7b:d6:2a:e2:d7:76:82:d6:60:37:eb:07:34:29:ed: 0c:d4:3e:b2:55:85:d4:2f:34:a3:20:9e:d8:5e:3d:f4:99:b6: 4e:13:68:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHS7Pe6svFfuIoHyyZdwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz YjU3NjIwHhcNMjUxMjA2MTAwMjQ3WhcNMjUxMjA3MTAwMjQ3WjAzMTEwLwYDVQQD EyhjZjI2OTQxZjdjMWZjYmVjOGQwYTJhYjg5ZDliMTc1NTZiYTA0OGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY5eI+Qxx9ecb5zke2x7TFqQBU9t orf7wpRmSj64S13agA1an5fwBZ+aYc55iQLgxUMfYdXswfQ3UN4+G5GxShvxCHTt TCeJbJWJRegwp4ZHGZSL67P8aNJlChuCydMgSGDTWMb1Z8H5hosPN4xk7/PrPj0Z fe47I/eiQcWbiieYq8+DayFHYzsnGBsWV+8NOt2imU1Sy+gQhw7qt7GnUXs2FzmM XnWtG77gP+v09hkoudhDc3dUZfiUU1x2kJCui9yrFBJuWUEY04LXMfdMOJsc4Smp 44k+sL5ipC2fnn+0Re3iz7EOpzJuzTtMmnEUFSWmuHv1DfgKQrrvlhmDiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8mlB98H8vsjQoquJ2bF1VroEjfMB8GA1UdIwQY MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0 LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYEHmGiL ePQx57PI5zOCdYDMfJLJlo8mQb0UFoMFE/6mPp4keISS90UMeZQUSrsEfpQ9hnO0 thzygSSIk6OzK/3wdjwEQQy/LYlYgRyfbud2zhXGpOe/SUPCdgPFLRssn9rV+Y71 z02dHpOzKgUHHTZsewsrOwPe/Fr4m6HfCSO3jpy0fd5iZ+MvnziOVJYfcV75RtFK nln73MUxlq7AV6lJAQ4SfrZwzzuenoZsOOfdNhAZhuGODuYAHA73Au1hznuxkH3q PvSYHUXVxkCwzBQJFH5MeJmWxeyqe9Yq4td2gtZgN+sHNCntDNQ+slWF1C80oyCe 2F499Jm2ThNofg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:01 2025 by rpki-client