This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json) Hash identifier: V4zGWgLrx6eDIuFYG1X2I+GLofOYtTPFi963s0yt0es= Subject key identifier: AD:7D:7A:AA:15:A4:A1:DB:AD:3F:FA:9D:BA:0F:8A:0B:C0:D3:C1:8D Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b Certificate serial: 019AF19B55EA4DDCE607AA7FA78200EBE981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: 40fsYCAfuCbXrLJXEoEQ6U49yDsJTzRn+SRqvSbkLTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:55:ea:4d:dc:e6:07:aa:7f:a7:82:00:eb:e9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=ad7d7aaa15a4a1dbad3ffa9dba0f8a0bc0d3c18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d2:de:06:38:ad:35:78:c2:d2:8e:97:bb:82: 39:64:38:93:98:11:9d:db:c5:52:1c:22:4d:2a:8a: db:bd:11:e7:c2:d6:d8:f6:85:5d:0e:c2:cf:db:fe: d2:6d:21:29:15:2b:b0:93:59:3e:44:31:12:e7:03: d5:fe:33:76:8c:03:18:d1:5f:9f:2b:37:70:01:18: 7e:fd:05:dc:6e:e4:5c:0e:30:7f:3c:0e:19:d7:72: 42:83:b0:f8:95:10:af:ef:f9:9d:fa:64:80:12:06: 85:9c:ac:4e:6c:48:49:b5:40:04:90:5e:91:5f:12: 4b:fe:5d:be:30:ff:ff:7a:b9:be:30:07:0b:87:a1: d3:7f:27:b7:5e:e2:0a:e3:e7:a2:eb:5f:62:70:c3: 40:de:0e:42:da:f4:5b:95:2a:7d:3a:f5:af:0c:a3: dd:e4:2e:8f:70:77:1c:b6:8c:4b:8d:fd:14:1f:92: 8e:cb:c2:b3:12:63:3c:18:af:68:77:f3:86:79:e8: 27:4a:74:2d:12:ed:5e:d2:75:b1:f9:db:1f:bd:74: bb:ca:6f:47:a2:66:2f:2d:47:a1:41:21:44:be:e5: dc:e2:37:c4:1a:d0:3b:47:39:94:2b:8c:ee:24:48: 77:5f:33:c2:40:a0:83:bc:5a:d6:b6:02:9d:b8:ab: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7D:7A:AA:15:A4:A1:DB:AD:3F:FA:9D:BA:0F:8A:0B:C0:D3:C1:8D X509v3 Authority Key Identifier: keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ae:68:53:ba:f1:ed:7c:23:bd:42:52:93:5c:68:e8:f9:39: 87:75:47:bc:a8:4c:3e:61:27:2d:75:da:81:66:68:77:95:87: df:d2:cf:22:ba:3e:2f:d6:08:5d:d9:ae:d6:d0:5c:2e:90:4f: 23:02:63:6b:e9:3c:c7:24:93:aa:b8:22:4e:4a:c4:dd:f5:0e: a5:31:05:c6:37:4c:8a:32:70:62:c3:9f:8d:9d:2e:86:00:91: 37:7b:4f:b8:cd:87:39:f8:f3:f3:6f:5b:b3:e5:11:2c:b1:25: d0:dd:37:ba:19:cd:f5:6a:e7:ee:f6:82:38:7b:e9:b6:e3:9e: df:20:79:3a:16:d2:77:88:a6:4e:98:75:c5:4c:ef:28:3f:9d: 49:f2:0b:85:8e:84:09:94:ce:23:20:90:ca:c7:28:15:3e:02: 88:10:21:76:6d:c4:f6:11:d4:7a:8c:77:7e:f8:ab:3c:5a:0e: 2b:be:16:9e:d7:91:68:d0:0e:f4:e5:53:05:23:6b:b9:0b:24: 0e:0e:9b:02:05:99:a5:d0:b7:0e:be:66:a8:8f:79:44:82:d2: b3:4b:de:53:26:4f:ac:4a:57:41:c6:54:64:90:7a:ec:db:5a: 41:1f:be:42:c6:5c:0e:e0:17:b5:8a:91:68:91:a0:1c:47:2d: 14:e3:27:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1XqTdzmB6p/p4IA6+mBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjBmMjM0NTFkYzA1ZmE3ZWNmOWQxZWI0MWRkM2QxMzc1 NjQ1M2IwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD EyhhZDdkN2FhYTE1YTRhMWRiYWQzZmZhOWRiYTBmOGEwYmMwZDNjMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NLeBjitNXjC0o6Xu4I5ZDiTmBGd 28VSHCJNKorbvRHnwtbY9oVdDsLP2/7SbSEpFSuwk1k+RDES5wPV/jN2jAMY0V+f KzdwARh+/QXcbuRcDjB/PA4Z13JCg7D4lRCv7/md+mSAEgaFnKxObEhJtUAEkF6R XxJL/l2+MP//erm+MAcLh6HTfye3XuIK4+ei619icMNA3g5C2vRblSp9OvWvDKPd 5C6PcHcctoxLjf0UH5KOy8KzEmM8GK9od/OGeegnSnQtEu1e0nWx+dsfvXS7ym9H omYvLUehQSFEvuXc4jfEGtA7RzmUK4zuJEh3XzPCQKCDvFrWtgKduKuC8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK19eqoVpKHbrT/6nboPigvA08GNMB8GA1UdIwQY MBaAFFKw8jRR3AX6fs+dHrQd09E3VkU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMt ODQwZjA5ZWQ0OGQ1LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMtODQwZjA5ZWQ0OGQ1 LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoa5oU7rx 7XwjvUJSk1xo6Pk5h3VHvKhMPmEnLXXagWZod5WH39LPIro+L9YIXdmu1tBcLpBP IwJja+k8xySTqrgiTkrE3fUOpTEFxjdMijJwYsOfjZ0uhgCRN3tPuM2HOfjz829b s+URLLEl0N03uhnN9Wrn7vaCOHvptuOe3yB5OhbSd4imTph1xUzvKD+dSfILhY6E CZTOIyCQyscoFT4CiBAhdm3E9hHUeox3fvirPFoOK74WnteRaNAO9OVTBSNruQsk Dg6bAgWZpdC3Dr5mqI95RILSs0veUyZPrEpXQcZUZJB67NtaQR++QsZcDuAXtYqR aJGgHEctFOMn5w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:43 2025 by rpki-client