This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json) Hash identifier: E6BGWKH3toX/JezFFBli/ldE+gGxk6DFkJ6mWim/6wI= Subject key identifier: FF:94:C6:59:34:9E:37:A1:50:15:2F:23:ED:62:FD:6A:49:4E:2F:60 Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe Certificate serial: 019AF3F754F7041BD6A32748A1548B3AF80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 14:01:03 +0000 Manifest this update: Sat 06 Dec 2025 14:01:03 +0000 Manifest next update: Sun 07 Dec 2025 14:01:03 +0000 Files and hashes: 1: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: P7CHoNwoMQSowi7uNikUSOwMytKiZx/E6HYoW1BCsSM=) 2: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (hash: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:54:f7:04:1b:d6:a3:27:48:a1:54:8b:3a:f8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe Validity Not Before: Dec 6 14:01:03 2025 GMT Not After : Dec 7 14:01:03 2025 GMT Subject: CN=ff94c659349e37a150152f23ed62fd6a494e2f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:ff:15:1d:fd:38:83:33:15:7c:ef:73:a1: ff:d5:8f:d2:50:76:13:f7:c7:b5:d3:57:4b:11:4c: ad:6d:e9:95:84:13:8e:70:cf:cd:d3:4e:66:cb:1b: 54:18:43:a5:b5:1e:7f:bb:3a:6a:bc:b1:d8:30:d6: ce:63:a7:a8:54:58:68:65:6a:ff:3c:1d:44:38:37: 63:0a:e1:a1:be:32:c3:2d:8f:e8:ae:35:d3:88:10: be:10:24:a8:53:42:02:09:61:b6:52:22:9a:0b:7f: 2f:66:97:ea:56:cd:58:ea:0c:c5:e5:b4:76:1a:41: 65:ce:90:a4:c3:6a:34:e6:a7:cc:a7:c4:00:82:88: 5c:47:25:75:81:03:de:d4:de:76:d2:e6:6d:e0:47: 9f:b2:34:86:35:d2:e0:da:83:85:7c:20:f2:6b:c7: 4f:ce:d3:81:3a:30:d9:05:8e:7a:b6:e1:b0:a2:02: 8c:f4:7a:bb:a3:44:85:2a:16:53:11:12:36:94:42: 28:75:38:8a:f1:e1:24:39:b5:fe:1a:df:ef:13:5a: aa:13:39:eb:e3:d2:32:d4:93:94:b3:68:6d:f5:00: 9e:ec:ef:e4:cd:5e:50:48:c6:1a:8c:b4:15:b1:81: 69:5c:f0:03:2c:6d:9f:33:24:0b:4d:1b:07:e1:cc: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:94:C6:59:34:9E:37:A1:50:15:2F:23:ED:62:FD:6A:49:4E:2F:60 X509v3 Authority Key Identifier: keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f5:3e:40:5f:38:33:4d:3d:d9:80:62:3e:03:a8:9f:81:cd: d9:22:68:c4:4f:0f:47:a6:02:a7:62:60:34:73:3b:b6:5e:04: d1:2f:6f:77:49:45:f8:53:15:38:a6:ca:46:d9:ff:94:fe:7d: 98:cb:5b:bd:e7:b2:79:18:4c:f7:fa:b1:9c:3c:0b:17:b3:41: 04:41:33:f3:c2:9b:3b:69:90:fc:12:fd:5f:da:01:bf:60:b7: fe:9e:e1:c2:1b:57:84:49:64:45:4b:e7:1e:6f:48:73:20:0d: 20:c6:08:5e:ff:be:ec:5e:73:5f:03:49:c2:bf:11:6b:ff:b8: 38:fe:11:e6:10:de:6d:03:62:bf:fe:0e:e2:b5:d8:0d:87:dc: 88:2b:ee:26:26:16:a9:0f:56:f3:9d:e5:3a:4c:1a:24:b6:5e: 78:75:c5:8a:1f:4f:b4:8b:21:fe:dd:9d:83:15:fe:60:03:f5: 47:dd:39:3c:37:dc:c1:6c:6d:fa:d4:31:11:70:58:8b:1a:4d: d2:2e:b9:cc:29:16:c4:9e:d3:d1:f5:90:68:ec:74:9c:e1:cc: 93:d1:99:8d:84:e7:c9:f6:4e:5f:67:fc:ed:37:c5:eb:0f:48: 21:fb:95:93:c5:e8:1c:8b:78:73:4f:3c:f8:00:b5:3d:1b:65: a8:aa:a8:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91T3BBvWoydIoVSLOvgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2Q1OTQzOGNjMjAxZGNhMmZjMWNlN2E2ODc3M2JkNzFi ZTBlYmUwHhcNMjUxMjA2MTQwMTAzWhcNMjUxMjA3MTQwMTAzWjAzMTEwLwYDVQQD EyhmZjk0YzY1OTM0OWUzN2ExNTAxNTJmMjNlZDYyZmQ2YTQ5NGUyZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tr/FR39OIMzFXzvc6H/1Y/SUHYT 98e101dLEUytbemVhBOOcM/N005myxtUGEOltR5/uzpqvLHYMNbOY6eoVFhoZWr/ PB1EODdjCuGhvjLDLY/orjXTiBC+ECSoU0ICCWG2UiKaC38vZpfqVs1Y6gzF5bR2 GkFlzpCkw2o05qfMp8QAgohcRyV1gQPe1N520uZt4EefsjSGNdLg2oOFfCDya8dP ztOBOjDZBY56tuGwogKM9Hq7o0SFKhZTERI2lEIodTiK8eEkObX+Gt/vE1qqEznr 49Iy1JOUs2ht9QCe7O/kzV5QSMYajLQVsYFpXPADLG2fMyQLTRsH4cyq1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+Uxlk0njehUBUvI+1i/WpJTi9gMB8GA1UdIwQY MBaAFFF9WUOMwgHcovwc56aHc71xvg6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYt OGIzMWUyMzM4MmRhLzEvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYtOGIzMWUyMzM4MmRh LzEvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/U+QF84 M0092YBiPgOon4HN2SJoxE8PR6YCp2JgNHM7tl4E0S9vd0lF+FMVOKbKRtn/lP59 mMtbveeyeRhM9/qxnDwLF7NBBEEz88KbO2mQ/BL9X9oBv2C3/p7hwhtXhElkRUvn Hm9IcyANIMYIXv++7F5zXwNJwr8Ra/+4OP4R5hDebQNiv/4O4rXYDYfciCvuJiYW qQ9W853lOkwaJLZeeHXFih9PtIsh/t2dgxX+YAP1R905PDfcwWxt+tQxEXBYixpN 0i65zCkWxJ7T0fWQaOx0nOHMk9GZjYTnyfZOX2f87TfF6w9IIfuVk8XoHIt4c088 +AC1PRtlqKqotA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:57 2025 by rpki-client