This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json) Hash identifier: qX19VVAvNLs+57C4tF8jc7q68y+FwuK7ZXXVZqSuOE4= Subject key identifier: 9E:26:22:2F:83:9D:FF:A9:D9:35:65:C4:B0:4F:8B:0B:6A:A7:40:5A Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706 Certificate serial: 019AF1D1D98D87B2601240F5C19A1E0AF5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: Zzi0fOjOMJb2E5iWo2SoLksgwEXOo7CG5E0Iz58AyHk=) 2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d9:8d:87:b2:60:12:40:f5:c1:9a:1e:0a:f5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706 Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=9e26222f839dffa9d93565c4b04f8b0b6aa7405a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:51:b8:02:a6:44:c7:ff:cf:1c:69:dd:07: ef:14:91:f9:fc:38:e4:32:af:d5:7c:48:94:88:6c: 74:23:f6:e8:f6:d1:a5:d5:44:0c:6c:40:79:6a:b9: c6:b2:ee:ba:22:59:59:be:25:92:01:f4:85:0f:e6: 60:82:0e:d2:26:19:d6:85:b5:e3:04:6f:d0:2d:fa: 78:81:59:e0:99:8d:f5:10:0b:50:f5:ba:82:e6:20: 71:86:3f:f3:a4:a1:28:4e:84:af:d5:0c:a7:f0:17: 88:33:e7:66:a1:68:d5:6f:be:70:7e:d1:c9:ab:6b: 98:43:cc:fb:84:39:da:3d:17:d9:fe:47:6f:7d:17: 8a:f7:6e:e3:1b:69:85:52:d0:74:f0:4d:36:bf:30: dd:19:b4:d7:c2:73:ca:5f:34:6d:83:46:9c:4c:08: a7:98:6e:a1:df:3b:73:0b:1e:b9:42:b6:36:8d:98: 25:16:75:d6:09:7f:5e:20:45:38:42:68:27:60:37: 09:88:e4:ed:2f:ce:3e:18:b1:7d:f6:9f:1a:65:49: f5:11:f9:88:92:8f:1e:8c:62:39:24:fc:ba:c6:ca: d9:9b:03:79:8a:77:96:fb:53:10:f5:f8:1b:d9:c2: 2e:5f:1f:0b:4f:d5:03:c2:79:73:79:60:64:d5:4d: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:26:22:2F:83:9D:FF:A9:D9:35:65:C4:B0:4F:8B:0B:6A:A7:40:5A X509v3 Authority Key Identifier: keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:00:8d:b2:cc:3e:ed:e3:eb:2a:24:4d:0c:13:99:32:7a: 96:ad:c1:26:6f:99:e4:03:f9:aa:ef:6e:9f:02:43:56:b5:b5: 26:e7:e8:e4:96:80:25:5e:28:34:45:82:ea:c4:76:4d:37:d9: 38:c2:c5:7a:2f:4b:bb:3f:8d:fa:df:da:18:17:29:2b:bd:eb: d6:57:ce:b0:8c:e7:cf:8f:ec:f8:17:7d:5c:d1:65:88:87:fd: b5:93:e4:9a:d6:58:11:cc:aa:7d:fc:a6:99:98:86:d9:da:f6: d4:8e:08:c5:1f:6b:76:16:42:c5:87:4f:d9:f2:e7:14:ce:e7: a0:9c:f0:af:9a:98:6a:ae:cd:fb:49:ee:6c:c6:e2:ca:41:71: 7c:1f:50:a8:92:30:26:ae:6a:35:72:fb:a7:5c:90:3e:9a:37: e8:1f:8d:3a:a3:f0:b4:94:f6:30:f2:64:55:ad:57:8c:58:62: 68:d2:12:47:79:4b:fd:63:69:05:59:34:52:6f:34:ef:51:68: 54:e0:9d:89:11:46:90:ad:17:69:4e:da:f4:50:64:f4:31:5e: 73:08:1d:4f:5f:aa:2d:0e:ac:ff:6b:9d:56:ee:b0:31:36:8e: 96:33:e4:6d:69:95:41:87:60:af:eb:e4:8b:41:34:2e:03:54: 76:45:48:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dmNh7JgEkD1wZoeCvWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWYyNDdkNGJjNzAyMTQ2MDZkMDdkNjU5MzE5ZWMzZjM0 Nzk3MDYwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD Eyg5ZTI2MjIyZjgzOWRmZmE5ZDkzNTY1YzRiMDRmOGIwYjZhYTc0MDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUVRuAKmRMf/zxxp3QfvFJH5/Djk Mq/VfEiUiGx0I/bo9tGl1UQMbEB5arnGsu66IllZviWSAfSFD+Zggg7SJhnWhbXj BG/QLfp4gVngmY31EAtQ9bqC5iBxhj/zpKEoToSv1Qyn8BeIM+dmoWjVb75wftHJ q2uYQ8z7hDnaPRfZ/kdvfReK927jG2mFUtB08E02vzDdGbTXwnPKXzRtg0acTAin mG6h3ztzCx65QrY2jZglFnXWCX9eIEU4QmgnYDcJiOTtL84+GLF99p8aZUn1EfmI ko8ejGI5JPy6xsrZmwN5ineW+1MQ9fgb2cIuXx8LT9UDwnlzeWBk1U1t0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4mIi+Dnf+p2TVlxLBPiwtqp0BaMB8GA1UdIwQY MBaAFFMfJH1LxwIUYG0H1lkxnsPzR5cGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMt OGVkODQzM2QzOGM0LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMtOGVkODQzM2QzOGM0 LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC8AjbLM Pu3j6yokTQwTmTJ6lq3BJm+Z5AP5qu9unwJDVrW1Jufo5JaAJV4oNEWC6sR2TTfZ OMLFei9Luz+N+t/aGBcpK73r1lfOsIznz4/s+Bd9XNFliIf9tZPkmtZYEcyqffym mZiG2dr21I4IxR9rdhZCxYdP2fLnFM7noJzwr5qYaq7N+0nubMbiykFxfB9QqJIw Jq5qNXL7p1yQPpo36B+NOqPwtJT2MPJkVa1XjFhiaNISR3lL/WNpBVk0Um8071Fo VOCdiRFGkK0XaU7a9FBk9DFecwgdT1+qLQ6s/2udVu6wMTaOljPkbWmVQYdgr+vk i0E0LgNUdkVITg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:00 2025 by rpki-client