This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json) Hash identifier: r8VAWeWsC0IPwGi7jn0lwVRXV3myMT/7vkV/a4aYcJA= Subject key identifier: D1:74:8C:54:33:A6:A2:71:FE:B5:E1:7D:82:0A:F6:92:9B:9D:FD:EB Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f Certificate serial: 019B273FED3615C9615319E989284E55C410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 13:00:59 +0000 Manifest this update: Tue 16 Dec 2025 13:00:59 +0000 Manifest next update: Wed 17 Dec 2025 13:00:59 +0000 Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: kV2LZwOvQ9KjZa2S2k/VBQu9vqfCKkJekygCsaj533w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:ed:36:15:c9:61:53:19:e9:89:28:4e:55:c4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f Validity Not Before: Dec 16 13:00:59 2025 GMT Not After : Dec 17 13:00:59 2025 GMT Subject: CN=d1748c5433a6a271feb5e17d820af6929b9dfdeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:98:8d:48:df:a9:12:96:9d:7d:5c:41:e5: bb:a6:fd:39:ac:90:f8:7e:1b:f5:3c:d9:17:99:d6: 3a:33:8d:d8:01:e1:88:a0:ac:07:ee:cd:73:6e:c7: bc:f1:1e:5e:34:57:ba:bc:9b:fd:83:89:07:7c:58: bd:00:dc:fa:c9:20:15:14:f3:cc:0c:77:3b:5d:3b: b1:ce:5e:c5:e6:48:17:8f:06:b9:fb:41:75:75:7f: 31:9a:48:b3:d2:8d:2a:fd:9d:41:99:c4:03:0c:3f: d8:ea:a8:bb:32:53:d0:e3:4c:b8:35:a6:26:e7:61: 1c:3b:55:8c:d8:92:aa:07:fc:b5:18:45:54:07:08: 3e:cc:76:61:9f:60:29:7e:1a:a4:26:b9:2d:8e:71: e5:29:9d:4d:2e:35:0b:33:79:1d:9c:af:94:47:7a: 5e:ee:ca:1d:08:ba:8a:dd:e5:a5:e3:5c:4e:78:b0: 2a:75:c9:3e:de:64:c6:bc:06:c9:27:3c:9d:fc:8a: 76:c5:95:9e:51:78:db:2b:d5:a7:d8:1c:2a:72:e3: dd:5d:98:95:0f:fe:99:6d:82:00:cf:4a:fd:7e:ed: 5b:df:84:62:a9:03:4d:cd:a3:f6:30:e9:f7:53:06: fe:70:8c:03:1f:f8:ba:9e:0c:40:91:e8:f8:f4:33: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:74:8C:54:33:A6:A2:71:FE:B5:E1:7D:82:0A:F6:92:9B:9D:FD:EB X509v3 Authority Key Identifier: keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6a:19:2a:88:30:83:3f:c5:7c:fb:9f:a7:ed:75:ee:36:29: 17:d4:94:41:7d:2d:bf:4a:c3:57:44:bd:20:25:24:dc:96:c8: b1:17:14:e3:af:03:57:89:3f:bc:d2:66:28:95:ed:83:f9:24: cd:a6:0d:f0:29:0c:7d:23:50:9c:11:8e:1b:c6:53:08:3f:39: 54:c2:7d:ce:cf:5b:13:6d:84:00:d7:27:29:84:36:b3:7f:6e: c1:cf:3f:f7:6e:57:da:86:4d:71:e0:89:61:20:b4:9f:65:80: 36:86:4d:44:f3:3e:94:83:ab:27:71:f2:8e:4f:c5:74:64:a4: 69:10:73:ea:1e:e8:b1:e4:93:5a:b8:a2:06:e6:cf:a1:09:12: e3:d0:a5:fa:a2:f7:0f:8f:0c:63:ba:10:3a:6b:3a:d4:d4:fc: 52:18:91:79:fc:74:fe:51:74:96:b7:b8:66:a5:83:e0:65:59: f0:d3:60:c5:9a:2f:02:89:2e:37:96:2c:34:20:a3:c3:ea:c6: b1:b4:8c:ac:96:cd:65:1b:d7:dc:75:d3:97:0b:e9:4f:a0:80: 1b:f2:35:e7:29:0a:c4:42:c1:53:78:2a:a5:f0:4b:70:ea:34: 62:07:56:6d:5c:c3:1d:3d:f1:cf:b3:9a:ce:e7:6a:72:60:53: e6:65:bb:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP+02FclhUxnpiShOVcQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWMzOGNjM2VhYTM1NTZmYTM5YTIyZjMwZGMxYmE0ODM2 ZmU4OWYwHhcNMjUxMjE2MTMwMDU5WhcNMjUxMjE3MTMwMDU5WjAzMTEwLwYDVQQD EyhkMTc0OGM1NDMzYTZhMjcxZmViNWUxN2Q4MjBhZjY5MjliOWRmZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eGYjUjfqRKWnX1cQeW7pv05rJD4 fhv1PNkXmdY6M43YAeGIoKwH7s1zbse88R5eNFe6vJv9g4kHfFi9ANz6ySAVFPPM DHc7XTuxzl7F5kgXjwa5+0F1dX8xmkiz0o0q/Z1BmcQDDD/Y6qi7MlPQ40y4NaYm 52EcO1WM2JKqB/y1GEVUBwg+zHZhn2ApfhqkJrktjnHlKZ1NLjULM3kdnK+UR3pe 7sodCLqK3eWl41xOeLAqdck+3mTGvAbJJzyd/Ip2xZWeUXjbK9Wn2BwqcuPdXZiV D/6ZbYIAz0r9fu1b34RiqQNNzaP2MOn3Uwb+cIwDH/i6ngxAkej49DMA+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF0jFQzpqJx/rXhfYIK9pKbnf3rMB8GA1UdIwQY MBaAFFCcOMw+qjVW+jmiLzDcG6SDb+ifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQt MmE2NGY5OWJhZjVmLzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQtMmE2NGY5OWJhZjVm LzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGoZKogw gz/FfPufp+117jYpF9SUQX0tv0rDV0S9ICUk3JbIsRcU468DV4k/vNJmKJXtg/kk zaYN8CkMfSNQnBGOG8ZTCD85VMJ9zs9bE22EANcnKYQ2s39uwc8/925X2oZNceCJ YSC0n2WANoZNRPM+lIOrJ3Hyjk/FdGSkaRBz6h7oseSTWriiBubPoQkS49Cl+qL3 D48MY7oQOms61NT8UhiRefx0/lF0lre4ZqWD4GVZ8NNgxZovAokuN5YsNCCjw+rG sbSMrJbNZRvX3HXTlwvpT6CAG/I15ykKxELBU3gqpfBLcOo0YgdWbVzDHT3xz7Oa zudqcmBT5mW7ww== -----END CERTIFICATE-----Generated at Tue Dec 16 22:47:15 2025 by rpki-client