This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft File: UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json) Hash identifier: XXPCjx/tfW91OHqLuBOB/ZMJk7sB4qPuu3/FoXOZOB8= Subject key identifier: EE:E9:6C:87:F6:AC:02:2D:A9:3F:39:EC:40:7C:17:CE:95:72:4B:51 Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d Certificate serial: 019AF12D200D7FE2A59D10F97D707CD67259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft Manifest number: 1036 Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: 2ZGzzFFl8bn0fi7B+N+7iw0CJTL+ePCaubqVA5Bl2ok=) 2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:20:0d:7f:e2:a5:9d:10:f9:7d:70:7c:d6:72:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=eee96c87f6ac022da93f39ec407c17ce95724b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:1b:2d:59:60:16:3c:62:99:24:21:90:fd: 72:8b:1f:f4:6e:0b:34:5e:8a:5a:f8:4d:f5:44:05: 60:08:33:f4:83:51:fa:d5:88:31:9a:db:d1:28:4d: 50:62:e8:77:e8:3b:dd:b2:15:a0:1b:27:b9:df:56: bf:2f:19:ff:1e:31:1d:ea:93:6a:be:30:f1:4d:00: bc:7a:a1:ed:a0:0b:50:0e:fe:1c:d6:e1:e6:56:e9: b4:2f:b6:e5:22:b9:31:ae:d7:cf:fc:3c:4a:ad:58: 92:fb:3b:dd:40:6b:9f:6e:82:6b:bb:67:ac:e0:a8: 31:c1:dc:7b:96:5e:ee:4e:0f:f3:2f:9d:5b:cd:72: 70:1a:c6:0f:cc:ae:6f:70:ab:4c:a5:1a:56:ce:cf: 28:a4:cc:d8:10:76:48:96:c2:3d:4e:ad:80:da:57: 66:39:e4:20:a2:c1:ff:43:81:e7:f7:20:b7:2b:6f: f4:8a:d3:0d:a6:af:54:60:bf:20:0f:5e:4b:8c:de: 8d:80:80:83:5e:bc:c2:52:f5:4e:be:4b:af:6e:8c: f4:09:3b:cf:b0:48:cd:65:6b:57:1b:6b:56:8c:21: 98:50:0a:18:45:2f:30:4d:d6:98:7f:ef:4d:e4:57: dc:3a:9a:88:0e:cc:97:01:34:03:85:15:b1:e9:8d: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E9:6C:87:F6:AC:02:2D:A9:3F:39:EC:40:7C:17:CE:95:72:4B:51 X509v3 Authority Key Identifier: keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a8:82:1b:af:e9:cd:33:3d:1e:b1:8b:94:db:94:f7:78:7e: d0:f5:c8:1b:91:e4:c8:d7:73:cf:79:fe:d9:fb:3d:e1:aa:3b: 18:54:39:63:e8:78:4e:fc:69:5e:a6:e5:4c:b7:5a:c8:b8:60: fc:14:c8:eb:a5:a0:97:b4:dc:53:24:95:19:8a:34:5b:5e:8b: 02:a0:27:09:90:64:28:88:b9:32:0e:6f:49:db:8d:87:49:ba: cd:1b:3e:71:93:a2:b2:49:12:11:e9:5b:bb:b1:45:61:76:71: 51:49:88:74:27:7d:2f:d5:4b:d7:9a:6a:3c:82:c2:59:2e:b8: da:ae:61:b9:d9:aa:54:4f:bc:fd:65:33:77:76:f5:02:99:f1: e1:4f:b5:67:02:f7:3c:79:7c:6c:08:3f:78:30:f6:b3:55:c0: a3:38:d5:72:4b:42:83:26:9a:d7:57:1f:87:41:27:b1:33:13: be:5c:ed:c7:13:50:21:43:24:91:32:26:8d:32:f9:34:3c:eb: 75:5f:c4:b5:c3:91:13:2b:85:41:ca:f4:60:6e:db:86:8e:12: 52:5d:4b:5e:bb:1b:f2:54:f1:4e:35:67:f8:22:08:4c:20:d6: 2b:54:c9:eb:63:9f:1c:e6:3f:cc:7d:40:7b:a4:25:c7:13:19: cc:ac:fa:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSANf+KlnRD5fXB81nJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTY1NTQ3ZjEwOTYwNjRiNmI1NzNjMDI4MTcxNGMxZjA2 MWNkNGQwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD EyhlZWU5NmM4N2Y2YWMwMjJkYTkzZjM5ZWM0MDdjMTdjZTk1NzI0YjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLobLVlgFjximSQhkP1yix/0bgs0 Xopa+E31RAVgCDP0g1H61YgxmtvRKE1QYuh36DvdshWgGye531a/Lxn/HjEd6pNq vjDxTQC8eqHtoAtQDv4c1uHmVum0L7blIrkxrtfP/DxKrViS+zvdQGufboJru2es 4Kgxwdx7ll7uTg/zL51bzXJwGsYPzK5vcKtMpRpWzs8opMzYEHZIlsI9Tq2A2ldm OeQgosH/Q4Hn9yC3K2/0itMNpq9UYL8gD15LjN6NgICDXrzCUvVOvkuvboz0CTvP sEjNZWtXG2tWjCGYUAoYRS8wTdaYf+9N5FfcOpqIDsyXATQDhRWx6Y3lPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7pbIf2rAItqT857EB8F86VcktRMB8GA1UdIwQY MBaAFFKWVUfxCWBktrVzwCgXFMHwYc1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQt NWRhM2VjODJjYzU2LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQtNWRhM2VjODJjYzU2 LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaiCG6/p zTM9HrGLlNuU93h+0PXIG5HkyNdzz3n+2fs94ao7GFQ5Y+h4TvxpXqblTLdayLhg /BTI66Wgl7TcUySVGYo0W16LAqAnCZBkKIi5Mg5vSduNh0m6zRs+cZOiskkSEelb u7FFYXZxUUmIdCd9L9VL15pqPILCWS642q5hudmqVE+8/WUzd3b1Apnx4U+1ZwL3 PHl8bAg/eDD2s1XAozjVcktCgyaa11cfh0EnsTMTvlztxxNQIUMkkTImjTL5NDzr dV/EtcOREyuFQcr0YG7bho4SUl1LXrsb8lTxTjVn+CIITCDWK1TJ62OfHOY/zH1A e6QlxxMZzKz6Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:13 2025 by rpki-client