This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft File: UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json) Hash identifier: bZ5BbRbxCTHlta2bCGdHgTgYKW2BiYZz20JRS18xqRs= Subject key identifier: 89:4A:44:F7:4C:2A:AA:2A:85:50:94:A5:09:2A:80:35:8F:3F:D7:39 Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f Certificate serial: 019AF16464073419FB37588BA83DFEE097CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft Manifest number: 1503 Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: tWQZCjE2dJzjUMhqYe+f2YhhmG0TGThTY9Ke97+oms4=) 2: _a7tAKf339v0StwY-99zGhTqG38.roa (hash: JYQNh/oqUzKN3SGNytd9bNClD0WxhF6t77T6aTG1SXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:64:07:34:19:fb:37:58:8b:a8:3d:fe:e0:97:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=894a44f74c2aaa2a855094a5092a80358f3fd739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:74:29:00:2f:68:b6:a2:af:0e:63:06:c7: af:25:de:90:51:50:44:c0:07:39:d3:2d:c1:ff:f0: 96:81:e1:f8:54:1f:39:fc:11:f3:73:34:67:67:08: e5:a9:28:fc:11:c7:64:13:7c:57:51:1c:4c:3b:3a: bf:11:ee:6f:39:2d:c9:92:8e:01:fb:34:a2:72:84: 1a:78:9c:9f:03:e1:06:94:82:59:93:f5:83:d8:ae: 87:b7:1c:30:45:f1:5d:33:31:b6:16:65:83:ad:a5: 55:89:66:ad:96:78:6d:7b:d8:cd:ae:d1:ec:d3:46: ce:0b:09:f2:aa:a7:a4:c1:17:b9:17:c6:c7:4c:c1: db:65:f5:5c:62:99:49:63:c5:11:a3:e7:6f:2b:9e: cc:61:c2:dc:8f:34:d1:bc:ee:ee:a8:ba:b5:37:d6: 10:46:5f:ce:6c:7d:5f:f6:2d:b4:05:df:9c:e2:8c: 3c:e1:11:de:e4:8c:4e:0b:6e:ba:a0:25:da:29:43: 59:c7:62:32:d2:4a:1e:fb:b7:4f:11:e4:e1:c8:78: c3:90:2d:de:7f:81:89:20:e0:fa:c6:82:f1:60:a7: 3c:15:57:1b:ad:1e:22:26:2d:53:e7:0c:69:23:78: f4:da:df:89:5c:cc:11:12:cc:7c:c0:c8:6e:f6:43: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4A:44:F7:4C:2A:AA:2A:85:50:94:A5:09:2A:80:35:8F:3F:D7:39 X509v3 Authority Key Identifier: keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b6:a7:c4:cb:7b:c3:2f:d9:b7:c2:44:92:6b:02:11:0f:4f: c6:dc:04:1f:74:b7:43:b1:d3:b6:a5:a4:3e:47:26:db:f8:5c: eb:48:81:6b:e3:36:86:84:03:de:ed:0b:3e:4d:08:94:0f:6b: 89:b6:61:11:b3:19:35:f2:d5:39:85:2a:bb:4f:37:be:0a:5d: 17:1f:fb:be:09:27:84:99:15:bf:1d:1a:04:cd:9d:85:68:df: a0:aa:01:b1:b2:8a:a7:3f:33:fa:46:1a:d2:40:4c:3b:43:1e: 57:6b:40:0b:f9:b1:15:2b:16:01:d4:f4:2d:fc:5e:75:07:2e: 2b:0e:b3:a7:93:fb:ec:dd:24:7c:ba:b3:7d:fc:e8:62:18:59: cb:2d:fe:a0:a8:3d:43:bf:3b:01:d0:0d:fc:21:3e:95:e2:20: 2e:ba:61:bc:01:95:80:4b:8b:82:d6:09:49:3b:27:da:1c:29: 3e:79:b9:cb:4a:26:b8:22:f6:a2:92:9d:a3:1e:59:1b:65:7c: 7d:3e:04:c9:a0:64:73:85:5d:5b:b4:9f:6d:c7:59:0f:4a:a6: 94:1b:c9:78:f8:8c:c5:a7:58:41:e6:8b:ea:7c:6e:e4:09:f9: 53:c4:2b:a9:f3:e2:45:d0:62:e3:d8:29:19:63:fe:c6:e0:d4: 00:5e:83:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGQHNBn7N1iLqD3+4JfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxM2JkZmVjNTViMDQ4YjBkMmYwM2I0M2JmNjZlM2U2N2U4 NjU1M2YwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD Eyg4OTRhNDRmNzRjMmFhYTJhODU1MDk0YTUwOTJhODAzNThmM2ZkNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSx0KQAvaLairw5jBsevJd6QUVBE wAc50y3B//CWgeH4VB85/BHzczRnZwjlqSj8EcdkE3xXURxMOzq/Ee5vOS3Jko4B +zSicoQaeJyfA+EGlIJZk/WD2K6HtxwwRfFdMzG2FmWDraVViWatlnhte9jNrtHs 00bOCwnyqqekwRe5F8bHTMHbZfVcYplJY8URo+dvK57MYcLcjzTRvO7uqLq1N9YQ Rl/ObH1f9i20Bd+c4ow84RHe5IxOC266oCXaKUNZx2Iy0koe+7dPEeThyHjDkC3e f4GJIOD6xoLxYKc8FVcbrR4iJi1T5wxpI3j02t+JXMwREsx8wMhu9kM/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlKRPdMKqoqhVCUpQkqgDWPP9c5MB8GA1UdIwQY MBaAFFE73+xVsEiw0vA7Q79m4+Z+hlU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTIt YTFjY2U2ZjgwY2EzLzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTItYTFjY2U2ZjgwY2Ez LzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXranxMt7 wy/Zt8JEkmsCEQ9PxtwEH3S3Q7HTtqWkPkcm2/hc60iBa+M2hoQD3u0LPk0IlA9r ibZhEbMZNfLVOYUqu083vgpdFx/7vgknhJkVvx0aBM2dhWjfoKoBsbKKpz8z+kYa 0kBMO0MeV2tAC/mxFSsWAdT0LfxedQcuKw6zp5P77N0kfLqzffzoYhhZyy3+oKg9 Q787AdAN/CE+leIgLrphvAGVgEuLgtYJSTsn2hwpPnm5y0omuCL2opKdox5ZG2V8 fT4EyaBkc4VdW7SfbcdZD0qmlBvJePiMxadYQeaL6nxu5An5U8QrqfPiRdBi49gp GWP+xuDUAF6DfA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:25 2025 by rpki-client