This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft File: UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json) Hash identifier: 2Q4p12Y2mY4fNohEj+eJgHjrrb9ybxyY69jnU9WpB0g= Subject key identifier: 4B:62:3C:25:21:07:62:28:06:94:03:16:40:FA:65:D0:7A:C3:F3:E4 Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61 Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61 Certificate serial: 019AF0BF31A0A050C4C8721F868A270FF3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft Manifest number: 0E47 Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: tJR+sCfiFuluQrMLaAcmldcuYh+jfm/rEtQuY2VLM+8=) 2: XcVo6Gcf-l3iWhZzeOaaEzufuDw.roa (hash: Q8U31mISF8PJJ4X9+WRd+NF2mJCwrseuFFyVkfpjEQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:31:a0:a0:50:c4:c8:72:1f:86:8a:27:0f:f3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61 Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=4b623c25210762280694031640fa65d07ac3f3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:1c:36:f2:dd:ce:86:c5:f9:db:20:ca:a8: 0c:6d:70:94:34:ef:df:5e:07:cd:cf:59:3c:0e:f5: aa:39:57:0e:01:01:9b:f3:2a:36:fa:84:db:15:8f: 9c:6b:76:eb:0f:91:08:7f:06:b6:34:40:aa:54:b9: 6d:c2:0f:c6:8a:14:ba:03:b8:6e:d5:57:5e:e8:08: 98:b0:ba:d1:6f:72:a9:81:e6:ac:48:20:c5:0f:da: cb:81:0f:7b:cc:74:1e:a3:cf:2c:36:80:ef:58:b9: 50:a9:4e:3b:08:f6:03:01:70:97:d2:ec:4a:45:f9: f9:77:00:dd:f0:c1:a6:1f:5d:ea:80:cc:d9:67:d4: c6:0d:9f:ef:49:a9:04:e0:96:44:79:dc:23:eb:97: 81:17:48:96:67:ab:57:d8:22:ed:ab:f4:36:27:30: d6:e5:81:21:b2:3f:cd:05:8b:b3:75:4c:21:8c:3b: e3:a1:90:5c:0b:fe:ff:9c:f6:85:5a:b7:61:c3:88: d9:76:a9:e3:e6:db:4a:51:65:59:55:c0:ae:d2:41: ad:2d:b9:7f:cb:5e:62:bf:84:25:f4:b3:c7:53:e2: af:11:90:08:76:e0:ef:5e:dc:9d:60:4d:df:69:3a: 57:2c:d5:a7:17:13:14:e0:a5:f8:73:d2:bc:c9:e2: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:62:3C:25:21:07:62:28:06:94:03:16:40:FA:65:D0:7A:C3:F3:E4 X509v3 Authority Key Identifier: keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f3:8c:06:88:90:ed:ab:97:17:47:e5:97:26:b4:9a:eb:aa: ad:3d:49:19:3f:c3:51:bf:1c:c3:57:d3:cc:fa:79:ac:05:b5: e5:7f:6b:b6:43:9f:c9:93:89:87:89:40:46:0f:c9:e8:84:e6: d0:b5:79:2a:f5:27:f7:c6:bd:d4:e2:d8:7e:4e:48:21:35:75: 8e:05:90:17:07:7f:42:c4:18:5d:00:ee:b3:31:e3:c7:8e:2c: 5b:77:82:62:7c:81:4b:f3:82:e0:89:e7:5e:40:96:c8:67:24: 56:6a:67:bb:2c:e6:a2:af:f8:7d:0b:d3:eb:74:c3:be:76:41: 97:80:4b:59:93:04:b0:34:1b:33:6d:74:65:68:3f:63:8a:ff: 9f:e6:72:c3:30:24:35:4a:5e:0f:21:ba:9e:e1:46:06:22:20: 83:34:69:66:82:a5:cb:72:34:09:d3:43:02:0a:77:d6:43:7d: f8:b3:2b:f0:0e:b9:d7:9c:d7:dc:06:ae:d6:b1:d5:2d:5b:75: cd:c2:8b:9c:7a:74:75:91:65:88:63:54:b6:98:88:e1:b5:c4: ec:7b:6a:74:e3:38:f1:1c:f7:1b:b4:78:9a:29:45:94:98:2e: 36:ff:53:01:7e:ac:c1:f8:ce:d5:01:cf:3d:49:f0:fd:58:89: be:46:93:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzGgoFDEyHIfhoonD/PbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZjk0MTE3MzU2NGEwOWI3Y2Y4ZWZkZDk4NzU2MTQyNjJh N2RkNjEwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD Eyg0YjYyM2MyNTIxMDc2MjI4MDY5NDAzMTY0MGZhNjVkMDdhYzNmM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkcNvLdzobF+dsgyqgMbXCUNO/f XgfNz1k8DvWqOVcOAQGb8yo2+oTbFY+ca3brD5EIfwa2NECqVLltwg/GihS6A7hu 1Vde6AiYsLrRb3KpgeasSCDFD9rLgQ97zHQeo88sNoDvWLlQqU47CPYDAXCX0uxK Rfn5dwDd8MGmH13qgMzZZ9TGDZ/vSakE4JZEedwj65eBF0iWZ6tX2CLtq/Q2JzDW 5YEhsj/NBYuzdUwhjDvjoZBcC/7/nPaFWrdhw4jZdqnj5ttKUWVZVcCu0kGtLbl/ y15iv4Ql9LPHU+KvEZAIduDvXtydYE3faTpXLNWnFxMU4KX4c9K8yeKFkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtiPCUhB2IoBpQDFkD6ZdB6w/PkMB8GA1UdIwQY MBaAFFL5QRc1ZKCbfPjv3Zh1YUJip91hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEt MDlkOGU0OTNjMWY5LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEtMDlkOGU0OTNjMWY5 LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvOMBoiQ 7auXF0fllya0muuqrT1JGT/DUb8cw1fTzPp5rAW15X9rtkOfyZOJh4lARg/J6ITm 0LV5KvUn98a91OLYfk5IITV1jgWQFwd/QsQYXQDuszHjx44sW3eCYnyBS/OC4Inn XkCWyGckVmpnuyzmoq/4fQvT63TDvnZBl4BLWZMEsDQbM210ZWg/Y4r/n+ZywzAk NUpeDyG6nuFGBiIggzRpZoKly3I0CdNDAgp31kN9+LMr8A6515zX3Aau1rHVLVt1 zcKLnHp0dZFliGNUtpiI4bXE7HtqdOM48Rz3G7R4milFlJguNv9TAX6swfjO1QHP PUnw/ViJvkaTsA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:44 2025 by rpki-client