This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json) Hash identifier: jis6IQhdfdBg0NOrpAJPZYTE7S/JZrnw5arsCiItAdM= Subject key identifier: C3:47:D9:88:DD:AD:98:35:8D:C8:34:90:AA:FA:CF:30:D0:D7:44:B6 Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b Certificate serial: 019AF19B15673D1883312F43049811488EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft Manifest number: 0396 Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: cBJ1P1R3ynJCzlBG9mvxxsMoc1zoKLhh9FrQhwbgcMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:15:67:3d:18:83:31:2f:43:04:98:11:48:8e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=c347d988ddad98358dc83490aafacf30d0d744b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:ab:90:5b:54:63:ac:a3:66:d2:20:32:1c: 88:b1:ee:37:4e:4f:2e:da:f2:11:50:75:50:b5:94: f1:e3:17:fc:1e:2e:c1:1e:e1:55:16:fa:26:ad:4f: b3:29:1f:38:b1:2c:32:e0:56:19:6a:ff:0e:6e:37: ff:61:d4:c9:c5:d3:e8:c9:11:ef:3d:ae:88:63:c6: 3e:92:dc:95:c4:19:c6:e2:63:51:e6:b8:56:b9:db: c0:93:0f:cc:1f:2b:8c:b7:68:03:1c:7d:6f:3a:0d: 59:a1:83:45:d4:dd:fb:ac:48:ce:cc:75:1f:ae:ed: 4e:79:24:01:8b:81:19:ac:f5:29:14:55:c3:80:1a: 2e:96:50:af:59:9f:21:c0:9a:55:b9:36:b9:54:c1: 01:d5:ac:7a:e7:77:c2:03:e5:64:c2:cc:df:51:6e: a1:4f:32:8c:1a:c1:86:89:23:73:8c:2d:5c:e6:8a: e5:81:87:8d:15:4c:82:a1:25:e1:29:3c:93:ae:59: b7:bb:22:53:0d:ea:41:2d:c9:b7:8c:69:4c:4b:0f: 56:46:ea:c9:4c:c8:c8:05:79:03:ce:b2:ff:09:68: 53:6c:3c:21:a9:e0:4a:d1:6b:74:69:ae:63:af:25: 56:1c:5f:f5:3b:a9:0f:77:30:65:85:91:d3:7f:be: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:47:D9:88:DD:AD:98:35:8D:C8:34:90:AA:FA:CF:30:D0:D7:44:B6 X509v3 Authority Key Identifier: keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a1:17:50:f4:fc:c3:14:da:8c:8f:54:25:d1:83:4f:e0:d7: ea:ab:cf:5c:98:14:b9:7a:4d:5c:09:ba:57:0b:59:74:a3:21: a6:cd:d7:c9:ce:ff:d7:b2:ff:a0:b6:70:86:00:26:24:c2:01: 68:5a:20:73:83:97:1c:9b:dc:27:c5:13:a4:f0:bf:13:32:9c: 57:95:fe:8a:04:ce:50:83:72:ce:ec:42:bc:de:75:54:1e:25: 53:e0:81:69:ab:18:53:02:4a:fd:26:9a:49:7b:0d:0d:c6:11: f2:6f:ac:e6:06:0f:5e:e7:5f:17:0c:da:80:1b:29:f3:e2:ef: a0:1c:e1:0e:16:ad:f3:3b:d6:f0:6d:ae:4c:cf:b4:e9:12:e0: 9b:59:0e:8c:46:0f:15:9f:11:af:21:70:88:1c:56:6b:28:ed: 51:57:f3:88:56:7b:89:16:fe:3d:b0:ba:5c:43:92:7b:15:ae: 65:c4:f2:44:c9:2b:9e:a8:4e:15:f0:df:a6:e1:dc:63:6a:05: 46:be:b0:48:f0:be:ff:63:80:f2:60:26:da:46:cd:38:83:65: 4d:e5:9b:e9:11:25:8e:8d:a3:11:cf:2f:a4:7f:39:20:81:51: b5:f5:95:ce:84:ed:95:35:d9:16:50:2f:32:61:be:ea:aa:c1: e0:ab:db:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxVnPRiDMS9DBJgRSI7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDNiYjRmMTk1ODExZjhkNzcyM2NhMDFhMGIyZmZiZGVi NzVhMWIwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD EyhjMzQ3ZDk4OGRkYWQ5ODM1OGRjODM0OTBhYWZhY2YzMGQwZDc0NGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21yrkFtUY6yjZtIgMhyIse43Tk8u 2vIRUHVQtZTx4xf8Hi7BHuFVFvomrU+zKR84sSwy4FYZav8Objf/YdTJxdPoyRHv Pa6IY8Y+ktyVxBnG4mNR5rhWudvAkw/MHyuMt2gDHH1vOg1ZoYNF1N37rEjOzHUf ru1OeSQBi4EZrPUpFFXDgBoullCvWZ8hwJpVuTa5VMEB1ax653fCA+VkwszfUW6h TzKMGsGGiSNzjC1c5orlgYeNFUyCoSXhKTyTrlm3uyJTDepBLcm3jGlMSw9WRurJ TMjIBXkDzrL/CWhTbDwhqeBK0Wt0aa5jryVWHF/1O6kPdzBlhZHTf77zQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNH2YjdrZg1jcg0kKr6zzDQ10S2MB8GA1UdIwQY MBaAFFIDu08ZWBH413I8oBoLL/vet1obMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYTkyYTEtZTU5NC00MWVlLTg1NWMt MmJhNmEwMjJkNGM5LzEvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wYTkyYTEtZTU5NC00MWVlLTg1NWMtMmJhNmEwMjJkNGM5 LzEvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKEXUPT8 wxTajI9UJdGDT+DX6qvPXJgUuXpNXAm6VwtZdKMhps3Xyc7/17L/oLZwhgAmJMIB aFogc4OXHJvcJ8UTpPC/EzKcV5X+igTOUINyzuxCvN51VB4lU+CBaasYUwJK/Saa SXsNDcYR8m+s5gYPXudfFwzagBsp8+LvoBzhDhat8zvW8G2uTM+06RLgm1kOjEYP FZ8RryFwiBxWayjtUVfziFZ7iRb+PbC6XEOSexWuZcTyRMkrnqhOFfDfpuHcY2oF Rr6wSPC+/2OA8mAm2kbNOINlTeWb6REljo2jEc8vpH85IIFRtfWVzoTtlTXZFlAv MmG+6qrB4KvbPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:04 2025 by rpki-client