This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json) Hash identifier: vmQ3XnlPUcDh5zepM+dVF5vMhxGVB/QR3Bfec+vMPws= Subject key identifier: CB:3E:45:6F:11:1E:95:21:F0:9D:36:CF:D3:21:E7:B0:F3:45:8D:45 Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e Certificate serial: 019AF163F2A07EBAEE19895936F495ABA039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft Manifest number: 11D6 Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=) 2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: 0d4mo8ZrRNZmNiEJEKTWtwBrniBHGvBNreB3S0ivetk=) 3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f2:a0:7e:ba:ee:19:89:59:36:f4:95:ab:a0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=cb3e456f111e9521f09d36cfd321e7b0f3458d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:35:7d:35:1b:bd:e3:66:5b:f0:16:fb:5f: 3e:c1:11:dd:a7:03:4b:25:ee:2b:c2:53:4a:80:04: 75:a6:a6:bb:66:5d:07:72:f7:de:25:4a:e4:ae:dc: aa:fe:c5:da:92:2f:5e:7d:12:85:6e:fe:f9:8b:41: cb:5f:47:3e:04:20:1a:29:c6:29:df:83:28:19:92: a8:b1:ca:24:74:97:14:b2:9a:b2:79:27:74:e9:e9: 10:68:35:c7:b4:55:a9:eb:70:84:ac:3b:92:84:0e: 35:9b:d3:59:9c:86:75:64:7b:2d:78:53:76:da:25: 1c:f0:49:61:39:73:04:54:10:40:0d:2d:68:ca:31: 77:87:69:db:9c:5f:1b:9d:c0:09:60:63:f1:1a:3f: 81:ae:eb:90:f7:14:bf:aa:68:99:28:db:04:d2:4d: 9c:49:f8:2f:d0:1a:65:f2:40:80:19:95:fa:83:0c: 2f:25:9d:84:de:72:2d:55:56:98:3f:2e:79:b6:f1: f4:c7:0b:4e:06:f9:4d:81:4d:1c:63:7c:f9:12:98: ec:17:3e:80:c6:e8:67:5f:ab:f8:15:fb:77:67:3b: 2d:5c:5e:4c:e6:5e:3f:00:ac:34:4d:06:86:bd:1f: 8e:f3:24:76:fe:88:57:a6:38:e8:52:d5:7d:bd:fb: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3E:45:6F:11:1E:95:21:F0:9D:36:CF:D3:21:E7:B0:F3:45:8D:45 X509v3 Authority Key Identifier: keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bf:af:1a:df:36:d4:0f:dd:f1:60:b0:a4:e8:73:e9:5e:2f: 8d:1e:d1:19:a1:49:ae:44:e8:77:24:1d:cf:bc:0e:6b:7a:12: c9:0d:57:fd:da:b6:1f:5a:3a:00:86:0f:f0:1b:91:97:23:39: 94:8b:fb:cf:34:b0:e3:bc:a6:81:5d:e7:c0:72:d1:7d:46:bc: d0:a2:f9:b3:e6:b4:f5:0b:d8:e2:35:2f:b4:d3:45:a8:b6:7e: 21:67:bd:7c:05:df:66:e8:12:a5:74:54:a4:9c:67:c5:a9:17: 7b:5e:10:0a:4e:ec:3c:91:57:2a:70:20:77:e2:4b:50:68:b7: 40:3f:63:60:3d:d9:f4:a3:17:54:82:34:a9:69:53:fa:30:5a: 03:7b:b4:bb:b2:1f:59:2d:a9:3b:51:30:45:67:b7:a1:12:39: 2c:10:38:9f:ed:17:05:04:7b:49:4c:28:f3:90:67:b9:b4:77: d9:37:b5:6d:a3:03:47:9e:0f:a9:af:61:fd:93:d6:10:2a:14: f9:03:01:df:33:46:26:a0:3e:9a:50:4c:e8:cb:85:4b:f8:55: c5:f3:22:b9:36:ca:1d:3a:5a:6c:14:26:a6:a8:6b:4b:48:ab: c2:11:52:c9:7a:21:cb:28:49:5f:a6:30:4e:f5:5f:14:59:b1: d3:f9:a7:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/KgfrruGYlZNvSVq6A5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOWZiYWI1MTcxYTVjYjIyZjZjNTRmMTBiM2EyY2I2ZGI1 MTcyM2UwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD EyhjYjNlNDU2ZjExMWU5NTIxZjA5ZDM2Y2ZkMzIxZTdiMGYzNDU4ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zg1fTUbveNmW/AW+18+wRHdpwNL Je4rwlNKgAR1pqa7Zl0HcvfeJUrkrtyq/sXaki9efRKFbv75i0HLX0c+BCAaKcYp 34MoGZKoscokdJcUspqyeSd06ekQaDXHtFWp63CErDuShA41m9NZnIZ1ZHsteFN2 2iUc8ElhOXMEVBBADS1oyjF3h2nbnF8bncAJYGPxGj+BruuQ9xS/qmiZKNsE0k2c Sfgv0Bpl8kCAGZX6gwwvJZ2E3nItVVaYPy55tvH0xwtOBvlNgU0cY3z5EpjsFz6A xuhnX6v4Fft3ZzstXF5M5l4/AKw0TQaGvR+O8yR2/ohXpjjoUtV9vfvAnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs+RW8RHpUh8J02z9Mh57DzRY1FMB8GA1UdIwQY MBaAFFKfurUXGlyyL2xU8Qs6LLbbUXI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQt NzczNzMyNjUyZjRmLzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQtNzczNzMyNjUyZjRm LzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb+vGt82 1A/d8WCwpOhz6V4vjR7RGaFJrkTodyQdz7wOa3oSyQ1X/dq2H1o6AIYP8BuRlyM5 lIv7zzSw47ymgV3nwHLRfUa80KL5s+a09QvY4jUvtNNFqLZ+IWe9fAXfZugSpXRU pJxnxakXe14QCk7sPJFXKnAgd+JLUGi3QD9jYD3Z9KMXVII0qWlT+jBaA3u0u7If WS2pO1EwRWe3oRI5LBA4n+0XBQR7SUwo85BnubR32Te1baMDR54Pqa9h/ZPWECoU +QMB3zNGJqA+mlBM6MuFS/hVxfMiuTbKHTpabBQmpqhrS0irwhFSyXohyyhJX6Yw TvVfFFmx0/mn9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:15 2025 by rpki-client