This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json) Hash identifier: zOB8Loe2vFt9P9LiaNsgQzd8/8Az1rm3ELRGnZAxR0s= Subject key identifier: C7:4B:05:8D:90:25:DD:77:14:8B:5F:C5:75:95:BA:0D:00:A1:71:95 Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee Certificate serial: 019AF276513D3D873B20421660A73BCC45F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft Manifest number: 0B1B Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: zow9ijfX+QuonV6AxvEYMQbMWtaR4IRDKHPa+H0D3pA=) 2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:51:3d:3d:87:3b:20:42:16:60:a7:3b:cc:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=c74b058d9025dd77148b5fc57595ba0d00a17195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:0e:b7:2d:44:a1:d9:0c:05:d4:6d:54:60: eb:2a:6f:85:11:a9:76:25:e3:1c:81:df:01:1a:70: f9:4a:1f:18:31:7f:08:9c:96:07:c3:f2:8f:e9:b4: bc:df:44:ac:58:f5:1e:0c:28:79:5c:46:ac:7d:12: 3f:b9:c5:50:e4:ed:8f:8a:27:14:8d:05:98:90:c9: 45:f7:6b:9f:8e:ee:de:0c:79:59:8c:4e:08:f3:e2: 18:73:31:73:7c:e3:be:3c:8e:b8:fb:f2:14:6b:21: 6e:c0:0e:b6:6d:1d:9f:d6:b9:12:fa:13:97:1b:51: 4f:b4:a4:35:6e:15:b0:57:03:ce:ca:22:79:6c:55: d8:91:14:7a:24:dd:b4:da:e7:8a:d4:f4:54:3d:1c: db:88:ee:55:e3:30:31:5f:e6:f4:be:1a:eb:d8:eb: a8:b0:dc:eb:fe:a1:4e:6e:6c:61:cb:4e:f8:79:b7: 6d:89:6d:3a:d7:0b:61:0f:2b:17:6e:90:81:5a:42: 98:16:5a:a0:5b:ac:8a:12:11:fc:a3:77:db:35:60: c3:87:3e:4e:d7:54:dc:c9:94:a0:36:8d:ba:11:5b: 4b:23:24:f2:58:d5:3b:ec:b3:59:26:92:a4:e3:cc: 04:9f:38:25:7f:a5:47:c6:96:ca:94:ff:a5:9f:82: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4B:05:8D:90:25:DD:77:14:8B:5F:C5:75:95:BA:0D:00:A1:71:95 X509v3 Authority Key Identifier: keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:cf:7c:98:d3:f7:2e:1a:94:e9:99:2e:ae:b6:2a:22:92:1c: 26:65:ce:d9:f4:ae:1d:d3:ca:ba:58:bc:f0:1f:18:8e:10:a0: d6:92:b1:af:0a:06:04:0e:a2:56:dc:35:fa:31:4a:8d:a1:25: e5:72:df:10:8a:12:11:57:1e:a7:7b:57:03:f8:ca:80:de:fe: 0b:8f:16:bc:7f:3f:a9:b4:b3:65:42:a8:ae:a3:1e:13:ea:27: 51:87:8c:a9:18:c6:a0:7e:dc:ab:1b:e4:e9:44:ac:04:3e:03: cd:6d:5d:28:a9:27:62:cc:ad:01:b1:26:d0:d9:51:34:4b:c0: bf:7f:fd:89:eb:ba:14:1d:f5:06:dd:32:9a:e7:8b:79:30:1b: 55:27:42:3e:07:5d:6d:97:1e:8c:a9:d6:87:d8:ed:ff:96:69: 0e:2b:10:34:3b:c1:e2:00:da:5d:ca:80:3e:fc:37:a8:50:5c: 69:ed:ee:5c:7b:11:52:67:ef:f3:5e:2e:08:0b:be:a7:9a:03: 2d:89:3d:1f:92:eb:2b:12:bb:8e:f7:0a:dc:54:57:27:92:cc: d0:88:ae:ec:81:f8:ed:c3:2d:94:a5:b5:84:f8:e9:fc:29:6e: 3a:87:ad:af:27:1e:9b:79:6b:d3:25:81:db:92:4b:a5:9c:1f: 9b:61:5e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlE9PYc7IEIWYKc7zEX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwM2Y3M2ZlZmU5ZGJkMTY1NjE0Mzc1YTE4YTM0Y2RjZmI0 YTMxZWUwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD EyhjNzRiMDU4ZDkwMjVkZDc3MTQ4YjVmYzU3NTk1YmEwZDAwYTE3MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yMOty1EodkMBdRtVGDrKm+FEal2 JeMcgd8BGnD5Sh8YMX8InJYHw/KP6bS830SsWPUeDCh5XEasfRI/ucVQ5O2PiicU jQWYkMlF92ufju7eDHlZjE4I8+IYczFzfOO+PI64+/IUayFuwA62bR2f1rkS+hOX G1FPtKQ1bhWwVwPOyiJ5bFXYkRR6JN202ueK1PRUPRzbiO5V4zAxX+b0vhrr2Ouo sNzr/qFObmxhy074ebdtiW061wthDysXbpCBWkKYFlqgW6yKEhH8o3fbNWDDhz5O 11TcyZSgNo26EVtLIyTyWNU77LNZJpKk48wEnzglf6VHxpbKlP+ln4K4xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdLBY2QJd13FItfxXWVug0AoXGVMB8GA1UdIwQY MBaAFFA/c/7+nb0WVhQ3WhijTNz7SjHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kZDU0M2QtZDFmNS00ZjQ5LTg5MGYt NTk0NGQ4ZWMyNzNjLzEvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kZDU0M2QtZDFmNS00ZjQ5LTg5MGYtNTk0NGQ4ZWMyNzNj LzEvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANM98mNP3 LhqU6ZkurrYqIpIcJmXO2fSuHdPKuli88B8YjhCg1pKxrwoGBA6iVtw1+jFKjaEl 5XLfEIoSEVcep3tXA/jKgN7+C48WvH8/qbSzZUKorqMeE+onUYeMqRjGoH7cqxvk 6USsBD4DzW1dKKknYsytAbEm0NlRNEvAv3/9ieu6FB31Bt0ymueLeTAbVSdCPgdd bZcejKnWh9jt/5ZpDisQNDvB4gDaXcqAPvw3qFBcae3uXHsRUmfv814uCAu+p5oD LYk9H5LrKxK7jvcK3FRXJ5LM0Iiu7IH47cMtlKW1hPjp/CluOoetrycem3lr0yWB 25JLpZwfm2FeXA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:04 2025 by rpki-client