This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json) Hash identifier: 2V41fZb/uvqr24robt9T4JU6C65+f/h5o7GW/x/4ROk= Subject key identifier: 89:29:AB:95:91:7B:FC:DD:16:E6:40:11:ED:5B:46:D2:D9:01:45:7C Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92 Certificate serial: 019AF0BEDA65E599A8787FF715A23BCB1D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=) 2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: abqOZhUW1Us1Ckb9zVuMtkyV27N6HPuh0SiaRr8H3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:da:65:e5:99:a8:78:7f:f7:15:a2:3b:cb:1d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92 Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=8929ab95917bfcdd16e64011ed5b46d2d901457c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:55:bb:9c:54:d4:41:bc:8e:aa:c3:27:46: 5c:fc:23:a3:1f:a1:4f:5e:85:bd:52:f8:6c:2f:10: 27:1b:4f:6c:36:f5:b6:7c:3c:40:6c:73:e9:17:91: 95:b9:65:d1:08:0e:7c:0f:83:2c:ae:8d:0f:0f:1a: 3e:39:06:84:fe:dd:94:19:55:bd:9d:d2:39:4b:b3: 05:37:c7:29:30:aa:1d:a9:d5:e8:61:65:11:22:58: d8:36:26:96:e6:d3:53:f8:ad:2b:f7:25:d7:9d:9f: de:de:b5:6b:77:af:c5:61:1a:4e:79:82:a0:73:8d: fa:9f:ba:d9:b4:59:5f:06:7b:ee:f1:97:fe:2f:ce: ee:e1:b4:9b:20:1d:52:95:69:5b:e5:01:c5:48:02: 6e:27:92:f9:4a:66:7f:a1:21:28:c3:fa:9d:11:12: fa:29:5b:6b:1e:75:91:f4:04:cf:2d:f3:ee:68:5f: 99:e4:ea:7c:27:c1:a5:52:33:ea:2c:08:47:90:7a: 05:77:b2:eb:19:4f:4e:8d:44:da:56:7e:a3:41:42: f2:22:a9:93:a7:ab:33:d1:48:7b:c4:78:cb:e0:d9: c0:f2:bc:bd:a6:b7:2a:36:cc:ff:0e:0a:54:31:b5: 4f:68:a7:2e:00:43:71:04:87:7b:de:88:f9:dc:70: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:29:AB:95:91:7B:FC:DD:16:E6:40:11:ED:5B:46:D2:D9:01:45:7C X509v3 Authority Key Identifier: keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e9:05:ce:2e:da:6a:80:77:c8:9a:47:57:94:2d:d5:0b:a1: e2:db:4d:b8:60:46:25:80:92:10:aa:b4:7c:24:98:86:0a:5d: a6:f8:d8:aa:d7:95:e6:a0:5d:ad:de:85:ca:07:3b:f1:20:1a: 6b:12:81:27:c4:5b:31:f0:ff:7f:98:7f:9f:b1:51:2d:0c:32: 67:55:8f:c9:f8:4d:99:1d:d9:e4:c5:35:8d:1b:32:b0:3f:1c: 62:71:a7:5d:c0:f5:72:fa:3d:cc:d9:4c:2e:a8:1d:8f:12:f7: dd:5e:a7:6f:e2:ac:ca:61:1d:9f:36:fd:e0:c5:13:94:02:67: b5:05:7f:e5:1e:16:2c:45:92:e8:18:e8:92:60:74:6d:d5:13: cd:9c:52:e1:ac:25:e6:8f:6f:a0:c6:b4:db:62:a2:47:7f:ac: 26:38:76:06:c7:28:7f:41:c3:e6:b6:5f:6e:9b:51:3f:2f:e8: 9b:e6:82:e5:33:c4:03:e1:dc:e5:0e:4f:e3:d1:7a:b5:23:4f: 80:1f:69:23:80:a1:dd:f7:31:ea:36:84:3a:36:3b:4a:3c:8b: 66:9f:30:70:8f:14:7c:dd:25:43:ce:56:fa:d8:44:b3:9a:e7: 56:cd:44:ca:32:9b:1e:40:7c:31:ab:e8:aa:ed:e2:3a:e1:87: b6:3a:23:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtpl5ZmoeH/3FaI7yx1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTIzMWIyNDdiZmY2NWI0YzYzNDE5MDdlY2Q1ZWFiYTdm OWNhOTIwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD Eyg4OTI5YWI5NTkxN2JmY2RkMTZlNjQwMTFlZDViNDZkMmQ5MDE0NTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ZVu5xU1EG8jqrDJ0Zc/COjH6FP XoW9UvhsLxAnG09sNvW2fDxAbHPpF5GVuWXRCA58D4Msro0PDxo+OQaE/t2UGVW9 ndI5S7MFN8cpMKodqdXoYWURIljYNiaW5tNT+K0r9yXXnZ/e3rVrd6/FYRpOeYKg c436n7rZtFlfBnvu8Zf+L87u4bSbIB1SlWlb5QHFSAJuJ5L5SmZ/oSEow/qdERL6 KVtrHnWR9ATPLfPuaF+Z5Op8J8GlUjPqLAhHkHoFd7LrGU9OjUTaVn6jQULyIqmT p6sz0Uh7xHjL4NnA8ry9prcqNsz/DgpUMbVPaKcuAENxBId73oj53HDG3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkpq5WRe/zdFuZAEe1bRtLZAUV8MB8GA1UdIwQY MBaAFFKSMbJHv/ZbTGNBkH7NXqun+cqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQt NjUxMzVjZjJmODE1LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQtNjUxMzVjZjJmODE1 LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXukFzi7a aoB3yJpHV5Qt1Quh4ttNuGBGJYCSEKq0fCSYhgpdpvjYqteV5qBdrd6Fygc78SAa axKBJ8RbMfD/f5h/n7FRLQwyZ1WPyfhNmR3Z5MU1jRsysD8cYnGnXcD1cvo9zNlM LqgdjxL33V6nb+KsymEdnzb94MUTlAJntQV/5R4WLEWS6BjokmB0bdUTzZxS4awl 5o9voMa022KiR3+sJjh2Bscof0HD5rZfbptRPy/om+aC5TPEA+Hc5Q5P49F6tSNP gB9pI4Ch3fcx6jaEOjY7SjyLZp8wcI8UfN0lQ85W+thEs5rnVs1EyjKbHkB8Mavo qu3iOuGHtjojmw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:14 2025 by rpki-client