This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json) Hash identifier: AbM6QA3xugoOGnI5cosFlguElJN9G5jUfWDHVadQZSs= Subject key identifier: D9:47:7B:F7:F3:C4:B6:28:48:73:C0:67:05:8E:48:3A:43:F0:31:38 Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33 Certificate serial: 019AF3F811779850D5460BF00490BEA753AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:01:51 +0000 Manifest this update: Sat 06 Dec 2025 14:01:51 +0000 Manifest next update: Sun 07 Dec 2025 14:01:51 +0000 Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=) 2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: dwCl6MzSSLG7B2Cp8IQJKXPflKjyt6CRPm3GMS5Ks50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:11:77:98:50:d5:46:0b:f0:04:90:be:a7:53:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33 Validity Not Before: Dec 6 14:01:51 2025 GMT Not After : Dec 7 14:01:51 2025 GMT Subject: CN=d9477bf7f3c4b6284873c067058e483a43f03138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:bc:0e:5e:d9:3d:29:86:c9:ee:00:e1:a4: b5:da:1d:42:98:2a:35:70:36:78:45:92:5a:92:92: 08:0a:53:55:a8:42:c9:1f:41:24:17:45:9f:26:9d: 2f:08:16:8d:53:6e:41:fa:bd:d4:20:0b:97:a1:2e: 12:e6:72:ee:24:b6:50:80:18:21:60:27:44:c1:3f: 40:63:8e:d8:8f:cf:51:fe:99:4f:d8:af:f6:18:76: 47:03:65:58:5b:12:ef:6c:2a:5a:5c:1f:41:10:3c: f2:16:b9:03:c0:a3:36:ce:da:a4:53:9f:fa:e5:f0: 1f:e3:51:de:cb:3c:72:f9:0a:34:54:ab:02:c6:85: 1b:94:f2:10:1e:cc:4a:58:29:75:73:d7:4c:bd:80: 46:eb:01:fb:a9:a9:83:30:a0:f4:36:96:35:26:fc: 78:08:d9:d2:c7:3b:e1:bb:73:d8:99:ac:8b:60:0e: 95:44:a5:ad:63:d3:7a:9f:7a:20:9e:25:d4:03:4c: dc:76:b5:76:eb:ff:64:bd:f0:e3:e6:7c:4c:67:ed: 6b:4a:dd:4e:07:c1:ac:db:ed:3e:67:fc:60:b6:20: e5:90:ab:6d:ed:ec:43:32:8b:d4:08:2b:02:5a:f2: 48:82:fb:6f:7a:14:24:3a:13:60:b2:34:e2:45:4b: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:47:7B:F7:F3:C4:B6:28:48:73:C0:67:05:8E:48:3A:43:F0:31:38 X509v3 Authority Key Identifier: keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f9:f3:36:25:69:31:97:4e:16:8f:46:19:44:38:38:50:9e: e4:59:f7:17:44:e9:cf:90:e8:fe:85:04:60:61:91:92:2d:4f: 79:00:1b:50:6e:da:97:1e:36:99:a0:cc:36:cf:f8:b2:d8:0a: 48:d4:3d:30:21:aa:ff:87:ff:d4:77:30:de:81:dd:3a:d3:ad: e8:76:92:7e:4c:f2:35:77:cb:26:e0:69:f9:7a:f5:81:2d:ef: 78:d7:48:06:f4:90:57:fe:80:23:f4:8c:50:f2:d1:b4:94:43: 26:71:b3:a3:a7:8b:25:cd:c6:1b:a5:c6:db:9b:d6:a2:22:cf: 33:86:61:dc:25:e0:f2:28:fb:5f:3f:84:c5:b2:ae:4a:93:d3: a9:57:da:54:0a:61:9f:e8:bf:35:4d:c6:ce:cf:c2:8d:e1:e7: 87:88:e8:ab:e1:96:e3:49:fc:98:cd:2b:dc:39:7e:c5:22:1a: 93:29:ed:91:65:62:09:0f:df:87:8d:9e:e6:80:47:78:6b:2f: ad:4f:3c:6f:d7:ef:87:35:e6:1e:e9:01:2a:07:ce:6e:39:37: f5:e6:b0:5d:67:df:f7:04:a3:cc:d9:da:fb:ac:61:69:a5:a9: 66:04:da:a4:b7:03:23:6b:dc:da:5c:1b:a1:02:4f:a5:04:a6: 22:4d:5f:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+BF3mFDVRgvwBJC+p1OvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTRhMjZhYmE3MTAwNzYyMWZkNTk5ZDUzN2JiN2FlYWFk ZThiMzMwHhcNMjUxMjA2MTQwMTUxWhcNMjUxMjA3MTQwMTUxWjAzMTEwLwYDVQQD EyhkOTQ3N2JmN2YzYzRiNjI4NDg3M2MwNjcwNThlNDgzYTQzZjAzMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx68Dl7ZPSmGye4A4aS12h1CmCo1 cDZ4RZJakpIIClNVqELJH0EkF0WfJp0vCBaNU25B+r3UIAuXoS4S5nLuJLZQgBgh YCdEwT9AY47Yj89R/plP2K/2GHZHA2VYWxLvbCpaXB9BEDzyFrkDwKM2ztqkU5/6 5fAf41Heyzxy+Qo0VKsCxoUblPIQHsxKWCl1c9dMvYBG6wH7qamDMKD0NpY1Jvx4 CNnSxzvhu3PYmayLYA6VRKWtY9N6n3ogniXUA0zcdrV26/9kvfDj5nxMZ+1rSt1O B8Gs2+0+Z/xgtiDlkKtt7exDMovUCCsCWvJIgvtvehQkOhNgsjTiRUuyDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlHe/fzxLYoSHPAZwWOSDpD8DE4MB8GA1UdIwQY MBaAFFCUomq6cQB2If1ZnVN7t66q3oszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTkt YjQ1MWU0NzdiOWMyLzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTktYjQ1MWU0NzdiOWMy LzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/nzNiVp MZdOFo9GGUQ4OFCe5Fn3F0Tpz5Do/oUEYGGRki1PeQAbUG7alx42maDMNs/4stgK SNQ9MCGq/4f/1Hcw3oHdOtOt6HaSfkzyNXfLJuBp+Xr1gS3veNdIBvSQV/6AI/SM UPLRtJRDJnGzo6eLJc3GG6XG25vWoiLPM4Zh3CXg8ij7Xz+ExbKuSpPTqVfaVAph n+i/NU3Gzs/CjeHnh4joq+GW40n8mM0r3Dl+xSIakyntkWViCQ/fh42e5oBHeGsv rU88b9fvhzXmHukBKgfObjk39eawXWff9wSjzNna+6xhaaWpZgTapLcDI2vc2lwb oQJPpQSmIk1fgA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:46 2025 by rpki-client