This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json) Hash identifier: 13N8gdzlfqr/7Za51EmHRWHqPAsBQXiqQb2vckcPN1U= Subject key identifier: 2C:BF:93:38:AC:C5:8D:92:03:B0:A7:CE:87:A8:C5:DB:E7:2B:CA:D6 Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82 Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982 Certificate serial: 019AF3C0153C1FBC9C328C9FD4D75FB85733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft Manifest number: 08D5 Signing time: Sat 06 Dec 2025 13:00:43 +0000 Manifest this update: Sat 06 Dec 2025 13:00:43 +0000 Manifest next update: Sun 07 Dec 2025 13:00:43 +0000 Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=) 2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: /ZQf9Js4KIvZ4030305D249o5B+awqFKzCWIp1DSfe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:15:3c:1f:bc:9c:32:8c:9f:d4:d7:5f:b8:57:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982 Validity Not Before: Dec 6 13:00:43 2025 GMT Not After : Dec 7 13:00:43 2025 GMT Subject: CN=2cbf9338acc58d9203b0a7ce87a8c5dbe72bcad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:18:74:62:d9:64:a4:57:72:be:34:3d:c8:d8: 10:4f:b0:4f:61:65:f9:d9:a0:df:02:a1:04:83:0a: 98:a5:8a:ae:79:25:8a:17:74:8e:51:66:f9:5c:64: b2:0e:37:21:8d:ad:27:70:21:a9:b0:5e:bd:cb:17: 22:70:78:ea:3e:45:90:0c:2e:76:ca:ca:04:56:ee: 89:59:24:42:cb:16:ab:68:ad:a2:b1:90:2c:2d:8b: 95:c1:2b:d3:e9:b5:00:84:58:2d:10:06:4b:5d:7c: d7:7e:15:f6:17:81:53:b8:fe:92:52:87:b0:ce:03: ec:e5:8c:ee:6d:0d:ee:b7:45:40:1e:f0:eb:c3:0e: 4e:8c:b5:82:3b:93:e6:69:cc:fe:02:32:f4:20:63: 57:41:27:17:60:e3:8c:0e:77:d3:73:c5:84:9e:31: 44:7c:c3:09:5f:d9:6d:f8:9e:8a:db:ee:69:fd:54: c6:09:16:45:6b:64:76:25:f2:03:6c:a7:c2:f0:24: e4:01:f2:ea:c0:ea:12:03:4b:96:17:34:5f:6d:7d: 1b:7f:cc:2f:3b:66:42:85:36:32:41:02:ce:ff:ff: b3:a0:c7:7f:21:38:6e:dd:b1:6a:2c:76:96:78:42: aa:4f:b7:21:33:e9:7c:e3:fc:0b:63:63:8e:1b:c9: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BF:93:38:AC:C5:8D:92:03:B0:A7:CE:87:A8:C5:DB:E7:2B:CA:D6 X509v3 Authority Key Identifier: keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:60:ee:c9:43:33:bf:a2:34:56:6e:5a:60:10:99:30:0b:9f: 48:fc:07:1e:60:0c:a5:9b:30:01:88:32:c9:30:0d:71:8a:8f: ee:d3:02:04:da:71:4a:0d:1b:10:91:b1:89:8b:52:8e:0f:84: 20:ac:5a:67:08:fd:24:24:64:ec:8f:28:23:73:36:74:00:8b: a2:b4:a5:3f:45:5e:89:f5:69:37:ee:87:eb:e2:5a:4b:6f:4e: 78:e8:bf:d4:88:74:da:13:30:bf:69:7a:8a:94:33:75:d4:2a: 08:92:c9:3a:07:a4:05:51:4c:89:45:49:79:f3:fa:22:1d:c7: f1:e6:c5:60:c1:7a:4c:71:4d:03:3b:e6:b8:bb:93:87:82:af: df:72:dc:00:d0:17:e0:10:4b:63:20:8c:66:6d:3c:49:d8:22: a5:05:c1:07:31:06:c5:43:44:e7:cd:b2:78:fe:32:26:a6:34: a7:59:a1:bf:e1:2d:5d:e9:0d:75:72:b7:c3:32:40:4d:06:16: 7a:87:53:f9:49:5e:27:83:be:d8:be:e1:34:bf:0b:5d:81:5a: 26:32:d0:5e:e0:d3:af:d1:9c:13:28:c8:6e:aa:13:36:82:18: 1d:83:86:e0:6d:82:ae:d3:1d:e8:5a:f3:fc:1d:6f:9b:e1:36: 61:b6:4a:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBU8H7ycMoyf1NdfuFczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZDkzMDVmY2JkNTljZGE0YjY4Zjg4OGRmNjAyMDQ4NWI3 NGU5ODIwHhcNMjUxMjA2MTMwMDQzWhcNMjUxMjA3MTMwMDQzWjAzMTEwLwYDVQQD EygyY2JmOTMzOGFjYzU4ZDkyMDNiMGE3Y2U4N2E4YzVkYmU3MmJjYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rh0YtlkpFdyvjQ9yNgQT7BPYWX5 2aDfAqEEgwqYpYqueSWKF3SOUWb5XGSyDjchja0ncCGpsF69yxcicHjqPkWQDC52 ysoEVu6JWSRCyxaraK2isZAsLYuVwSvT6bUAhFgtEAZLXXzXfhX2F4FTuP6SUoew zgPs5YzubQ3ut0VAHvDrww5OjLWCO5Pmacz+AjL0IGNXQScXYOOMDnfTc8WEnjFE fMMJX9lt+J6K2+5p/VTGCRZFa2R2JfIDbKfC8CTkAfLqwOoSA0uWFzRfbX0bf8wv O2ZChTYyQQLO//+zoMd/IThu3bFqLHaWeEKqT7chM+l84/wLY2OOG8lYawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCy/kzisxY2SA7CnzoeoxdvnK8rWMB8GA1UdIwQY MBaAFLnZMF/L1ZzaS2j4iN9gIEhbdOmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYt MWQwOWM3OWIyNTQwLzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYtMWQwOWM3OWIyNTQw LzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2DuyUMz v6I0Vm5aYBCZMAufSPwHHmAMpZswAYgyyTANcYqP7tMCBNpxSg0bEJGxiYtSjg+E IKxaZwj9JCRk7I8oI3M2dACLorSlP0VeifVpN+6H6+JaS29OeOi/1Ih02hMwv2l6 ipQzddQqCJLJOgekBVFMiUVJefP6Ih3H8ebFYMF6THFNAzvmuLuTh4Kv33LcANAX 4BBLYyCMZm08SdgipQXBBzEGxUNE582yeP4yJqY0p1mhv+EtXekNdXK3wzJATQYW eodT+UleJ4O+2L7hNL8LXYFaJjLQXuDTr9GcEyjIbqoTNoIYHYOG4G2CrtMd6Frz /B1vm+E2YbZKsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:42 2025 by rpki-client