This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json) Hash identifier: 6JKgdcHIP1ZhmcsVewh0QAeOi9EPf7EGWKSdrYeada8= Subject key identifier: FB:EF:96:E2:84:76:43:AD:0C:F7:36:91:A0:7E:E9:DA:64:C3:AA:E6 Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf Certificate serial: 019AF464AE9C45BE46110B3DA5FC7E31AA5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:00:30 +0000 Manifest this update: Sat 06 Dec 2025 16:00:30 +0000 Manifest next update: Sun 07 Dec 2025 16:00:30 +0000 Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: MeYmqLnmDeXNmjl8kMWS2UvPdnTR7oWpZK02+AXkQFo=) 2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ae:9c:45:be:46:11:0b:3d:a5:fc:7e:31:aa:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf Validity Not Before: Dec 6 16:00:30 2025 GMT Not After : Dec 7 16:00:30 2025 GMT Subject: CN=fbef96e2847643ad0cf73691a07ee9da64c3aae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:77:3a:7c:ee:e6:02:c0:52:59:fd:da:02: a5:04:97:b2:b4:ad:32:6e:56:31:7a:e4:ab:31:fd: 77:a5:69:06:ec:77:69:e0:55:09:2b:7b:2b:6a:cd: ca:75:41:99:c0:c3:25:76:78:27:a0:6a:bb:a6:72: 87:f9:9c:8e:28:df:6c:6f:9c:39:68:9d:58:18:74: 51:09:66:a0:16:6b:ca:a3:5e:28:99:72:58:f9:e5: 33:74:31:02:a7:6c:aa:bd:e8:16:52:07:6d:af:9c: 71:b6:fd:b6:0d:36:30:ca:7c:20:88:4a:1f:60:bf: f6:0e:d6:64:4d:01:f5:d4:30:07:86:74:41:40:b6: b9:7a:78:58:41:7d:30:c1:4b:c3:b5:c8:5f:2d:b7: af:39:25:80:1f:a5:c0:0d:7e:70:50:7d:d9:c8:14: 68:9d:2d:95:d8:f4:c6:32:bf:ff:d7:60:7e:af:66: 01:f1:e0:7b:cc:60:2c:da:d8:23:f0:a4:0c:28:2a: 79:95:3b:5f:65:23:42:11:8b:50:d8:98:1d:2a:a5: 4d:f9:12:29:c4:85:8d:f1:15:75:b8:ad:3a:73:61: 1b:35:6d:38:ab:26:e3:ef:1d:cd:2c:74:01:61:75: f0:4a:09:6a:89:39:9d:2a:c9:48:a0:67:ca:c0:36: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EF:96:E2:84:76:43:AD:0C:F7:36:91:A0:7E:E9:DA:64:C3:AA:E6 X509v3 Authority Key Identifier: keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:94:f8:fa:16:0f:b9:21:f4:b9:34:4a:29:08:32:2c:2a:78: 2d:98:2e:44:ca:aa:4f:cd:f8:f9:57:0c:12:c5:2c:4b:a0:76: 15:39:ef:62:5d:28:fe:39:bb:5b:a2:ec:f0:21:5a:e9:e8:f5: 07:47:e9:9a:2a:44:61:6d:38:b3:23:06:51:fc:b9:1e:e1:10: 87:e1:b2:90:4b:d7:d5:d7:a2:95:34:02:bb:ed:89:d4:ef:62: 49:b0:22:02:00:b2:b9:89:22:55:35:14:c5:c7:1e:e5:56:fa: 6f:6d:38:9d:4d:d3:cc:43:fb:4c:0e:a5:14:6e:e8:50:e1:81: 1a:48:e4:0c:65:c7:1b:fd:94:d5:8a:fa:b7:90:7b:e8:44:9c: 39:82:19:c9:2b:13:20:e7:ab:c3:69:13:a2:d7:06:78:a0:c9: 63:57:6d:c8:3a:11:17:4b:ad:82:24:58:94:fa:0e:34:4e:fa: a7:20:d0:99:01:5a:ae:96:50:41:a2:b4:cd:28:1a:88:58:db: 48:de:cb:b3:8f:da:38:09:ed:18:32:fa:1b:63:bc:5a:11:c1: 93:95:bb:ab:a1:b2:dd:34:2e:35:ec:3a:4e:34:27:3b:4e:42: 1a:9b:0c:17:1e:81:77:50:14:c6:6c:ba:41:16:1a:eb:d2:05: c0:19:d4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZK6cRb5GEQs9pfx+MapdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl Y2VkZGYwHhcNMjUxMjA2MTYwMDMwWhcNMjUxMjA3MTYwMDMwWjAzMTEwLwYDVQQD EyhmYmVmOTZlMjg0NzY0M2FkMGNmNzM2OTFhMDdlZTlkYTY0YzNhYWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE13Onzu5gLAUln92gKlBJeytK0y blYxeuSrMf13pWkG7Hdp4FUJK3sras3KdUGZwMMldngnoGq7pnKH+ZyOKN9sb5w5 aJ1YGHRRCWagFmvKo14omXJY+eUzdDECp2yqvegWUgdtr5xxtv22DTYwynwgiEof YL/2DtZkTQH11DAHhnRBQLa5enhYQX0wwUvDtchfLbevOSWAH6XADX5wUH3ZyBRo nS2V2PTGMr//12B+r2YB8eB7zGAs2tgj8KQMKCp5lTtfZSNCEYtQ2JgdKqVN+RIp xIWN8RV1uK06c2EbNW04qybj7x3NLHQBYXXwSglqiTmdKslIoGfKwDYEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvvluKEdkOtDPc2kaB+6dpkw6rmMB8GA1UdIwQY MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut Y2Q4MWZjNTgwZjQ3LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3 LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5T4+hYP uSH0uTRKKQgyLCp4LZguRMqqT834+VcMEsUsS6B2FTnvYl0o/jm7W6Ls8CFa6ej1 B0fpmipEYW04syMGUfy5HuEQh+GykEvX1deilTQCu+2J1O9iSbAiAgCyuYkiVTUU xcce5Vb6b204nU3TzEP7TA6lFG7oUOGBGkjkDGXHG/2U1Yr6t5B76EScOYIZySsT IOerw2kTotcGeKDJY1dtyDoRF0utgiRYlPoONE76pyDQmQFarpZQQaK0zSgaiFjb SN7Ls4/aOAntGDL6G2O8WhHBk5W7q6Gy3TQuNew6TjQnO05CGpsMFx6Bd1AUxmy6 QRYa69IFwBnUzw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:30 2025 by rpki-client