This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft File: UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json) Hash identifier: KN28jbQImL/iIXpoaJuunvhQ8TxRC2aveLv6+fUhfYA= Subject key identifier: DE:2E:42:04:14:AE:74:38:76:B7:BE:CC:E1:53:38:87:24:71:B9:2E Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32 Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232 Certificate serial: 019AF1648444F2E8F15C897B8CCEB2EE9641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft Manifest number: 0F2A Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=) 2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: B0F6UH84awtbIEghBb85pOhFjVke9NHbJMnLepEoXQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:84:44:f2:e8:f1:5c:89:7b:8c:ce:b2:ee:96:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232 Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=de2e420414ae743876b7becce15338872471b92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:97:44:bd:be:e3:7a:f2:d4:58:ba:7e:96: 55:ec:d6:e2:bb:ec:29:78:04:3e:e3:05:fe:52:d3: 41:66:75:9c:ad:67:44:2f:2a:37:0c:1b:8b:09:17: d2:25:2d:e9:9d:f3:75:64:ad:b6:16:9e:17:a5:3d: 42:cb:6f:4c:64:15:4b:3f:ed:ff:93:5d:3d:20:b1: 92:7c:d1:f7:18:88:72:c8:b2:5a:43:cd:ff:57:9c: 9c:80:d7:30:90:de:65:34:4f:21:cc:5a:0c:69:56: 48:70:35:9b:fe:a1:6d:68:34:1e:f7:4c:7e:1f:6f: c9:8c:f5:59:bb:79:64:50:e1:07:38:69:38:09:76: c7:99:42:89:c6:0e:7f:65:26:85:24:e3:c8:26:a8: a4:79:50:ff:bc:4c:2f:3d:bc:6d:06:94:50:1b:74: a4:91:0f:c5:35:ea:6b:2f:94:60:c4:28:d4:fe:c4: 24:dc:8d:56:1e:e6:d3:29:28:ca:56:e6:47:65:04: 43:78:04:85:ba:42:89:c4:03:6f:51:61:38:e9:5b: 4b:bb:ee:93:98:7c:a2:7b:c1:db:67:b4:33:24:ba: f3:98:a3:5e:26:70:43:2f:78:10:41:9b:86:cf:ae: 11:cd:6d:75:54:72:a2:fb:4f:46:cd:66:f3:1f:c6: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2E:42:04:14:AE:74:38:76:B7:BE:CC:E1:53:38:87:24:71:B9:2E X509v3 Authority Key Identifier: keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ba:5d:23:2b:e3:fe:04:57:09:35:89:48:e2:46:f3:fe:a4: c4:0c:30:aa:0b:5e:56:be:78:e8:70:dc:97:90:b1:37:01:67: 8a:6a:ee:7f:49:68:ed:d0:1a:71:50:6a:91:b6:21:7e:f0:bc: de:06:50:69:6b:1e:fd:86:f9:70:68:4c:45:06:de:95:b8:17: 4a:2e:ca:af:bd:2a:71:e8:5f:46:7d:20:3d:94:39:ab:9f:38: 3e:f4:24:ec:bc:1c:6f:03:05:b1:5a:49:ca:f9:04:d2:ef:3f: 8f:40:fb:cd:c0:46:d2:a2:0b:cb:30:4a:95:f7:74:b8:e1:0b: cf:30:37:ab:36:01:7b:47:c1:07:49:6e:3a:3f:f5:ec:87:39: 1d:ff:d8:f6:16:7c:1e:35:49:66:d0:b5:3b:44:c0:09:29:6b: 0e:71:92:02:f6:2b:c6:d6:9d:28:b3:08:1d:6d:4d:c0:fa:de: 18:4d:a9:91:2e:2c:15:3a:35:1d:54:d9:ec:d9:8f:6d:78:77: 79:36:86:5f:4d:94:c4:e5:e2:6e:d5:a9:ea:c1:dc:94:5e:34: 85:fd:46:f7:c3:09:b2:28:86:a7:09:8d:37:2c:aa:7c:70:c6: 5c:0f:b6:a5:e6:a4:9b:f8:0e:2e:94:91:e8:b3:83:a2:49:89: 4d:12:2d:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIRE8ujxXIl7jM6y7pZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMzUyMDVjM2QwMTcxM2Y5ZDhiNWIwMGUzNTM5NjE5YjIz MzUyMzIwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD EyhkZTJlNDIwNDE0YWU3NDM4NzZiN2JlY2NlMTUzMzg4NzI0NzFiOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U6XRL2+43ry1Fi6fpZV7Nbiu+wp eAQ+4wX+UtNBZnWcrWdELyo3DBuLCRfSJS3pnfN1ZK22Fp4XpT1Cy29MZBVLP+3/ k109ILGSfNH3GIhyyLJaQ83/V5ycgNcwkN5lNE8hzFoMaVZIcDWb/qFtaDQe90x+ H2/JjPVZu3lkUOEHOGk4CXbHmUKJxg5/ZSaFJOPIJqikeVD/vEwvPbxtBpRQG3Sk kQ/FNeprL5RgxCjU/sQk3I1WHubTKSjKVuZHZQRDeASFukKJxANvUWE46VtLu+6T mHyie8HbZ7QzJLrzmKNeJnBDL3gQQZuGz64RzW11VHKi+09GzWbzH8ZuTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4uQgQUrnQ4dre+zOFTOIckcbkuMB8GA1UdIwQY MBaAFFA1IFw9AXE/nYtbAONTlhmyM1IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2It MTYwMmQ2YWQxNDFhLzEvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2ItMTYwMmQ2YWQxNDFh LzEvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbpdIyvj /gRXCTWJSOJG8/6kxAwwqgteVr546HDcl5CxNwFnimruf0lo7dAacVBqkbYhfvC8 3gZQaWse/Yb5cGhMRQbelbgXSi7Kr70qcehfRn0gPZQ5q584PvQk7LwcbwMFsVpJ yvkE0u8/j0D7zcBG0qILyzBKlfd0uOELzzA3qzYBe0fBB0luOj/17Ic5Hf/Y9hZ8 HjVJZtC1O0TACSlrDnGSAvYrxtadKLMIHW1NwPreGE2pkS4sFTo1HVTZ7NmPbXh3 eTaGX02UxOXibtWp6sHclF40hf1G98MJsiiGpwmNNyyqfHDGXA+2peakm/gOLpSR 6LODokmJTRItnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:53 2025 by rpki-client