This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json) Hash identifier: Ru8rsMQdQSjao2w6pXUyO/vvrOIdMAVSBcWcW77fJqE= Subject key identifier: EC:0D:9E:C9:EF:88:87:54:31:50:04:70:6C:10:A3:71:31:D4:28:01 Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46 Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346 Certificate serial: 019AF19B3260AA3F362E49F2A905ECCB4B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=) 2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: nAKa38VWPji9gz9QULQenBFoA64jbvs4J7BW1hT8IDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:32:60:aa:3f:36:2e:49:f2:a9:05:ec:cb:4b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=ec0d9ec9ef888754315004706c10a37131d42801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:40:cb:63:09:36:5d:d2:4b:e8:71:3d:62: 28:50:e4:99:b5:13:df:eb:d3:69:98:83:00:01:01: 8b:0f:9b:4d:53:dd:ee:22:30:55:2d:3c:dd:49:d6: 4b:39:ca:03:b9:0d:99:c4:65:90:d0:c4:bb:4b:b1: bb:c9:ee:a9:a3:b6:54:83:f6:ff:42:8e:83:f0:16: 49:6b:4e:79:1c:e6:92:07:0b:16:1c:c0:bc:17:b9: a7:ef:e5:49:09:09:68:a5:8a:38:f9:66:b3:04:bd: ee:72:fc:fd:89:5a:01:fd:bb:1a:c8:eb:bf:5d:7e: 67:d2:59:4e:7c:cc:06:12:a9:83:a7:5b:c0:36:98: 08:08:0d:3a:65:7c:2b:94:a9:48:69:89:ab:59:8b: 8e:c0:11:81:04:92:fa:67:19:31:85:cd:0a:c8:6b: 88:6d:ad:9f:ee:e9:50:58:84:e0:1f:cd:db:5c:80: d8:7a:04:0b:e3:24:11:48:5b:f5:de:68:e9:7a:21: dd:8d:9d:24:16:c8:52:48:c5:67:f8:11:f2:a0:7a: 59:2b:05:a8:03:e6:f8:db:f7:3f:3f:d4:cc:0f:91: 85:4d:bf:a8:a1:df:f0:8b:b6:e7:16:c8:8d:70:3f: 38:08:81:dc:b8:08:d6:64:28:8f:6c:65:d9:26:61: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0D:9E:C9:EF:88:87:54:31:50:04:70:6C:10:A3:71:31:D4:28:01 X509v3 Authority Key Identifier: keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d7:ab:89:42:5e:0a:4f:64:71:f1:80:a8:ca:91:e0:0c:09: 7c:a9:5c:e8:03:d7:8a:d0:e7:45:ee:d1:b4:40:0b:45:28:5b: ea:b9:ef:58:ad:31:14:43:2a:5b:57:5d:e2:92:dd:82:e8:de: 43:6c:02:fd:a6:da:c0:14:72:98:da:0c:f4:d4:cd:c2:8b:19: 14:c1:3d:ad:c8:b2:ae:12:61:9f:80:d3:4c:d0:61:0b:d1:d8: 62:48:9c:fa:8e:e0:48:f6:02:7a:63:35:00:8f:7f:ef:94:35: ad:87:ce:68:30:0e:fc:a4:b1:9c:87:99:3e:3d:c9:09:2a:cc: 06:b8:3b:da:8c:0d:d7:04:b4:6f:d6:b7:f8:e8:0c:f5:23:67: ac:bb:5a:c2:a4:bc:6d:88:5c:db:87:f3:b3:d8:aa:22:55:46: ad:bb:42:10:86:58:ea:e0:29:b0:9e:b3:c4:35:94:d3:ae:d1: 0e:97:3c:8b:52:8a:b0:0f:ef:f1:4b:ce:85:98:68:c2:b5:60: bb:85:3d:4b:1d:65:0c:6a:9f:c8:cb:f9:63:75:3a:25:92:aa: 10:12:cb:be:20:a5:d8:8b:75:76:37:a8:26:e1:b1:39:94:67: 07:79:af:cd:ca:79:97:d5:d6:e0:42:3f:a7:f7:83:27:62:ca: 04:56:4d:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzJgqj82LknyqQXsy0tLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDNkZWQ3NDViMDVmNDAzOGU5ODNmYjlkNzhlZGY1NmYy NTEzNDYwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EyhlYzBkOWVjOWVmODg4NzU0MzE1MDA0NzA2YzEwYTM3MTMxZDQyODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uVAy2MJNl3SS+hxPWIoUOSZtRPf 69NpmIMAAQGLD5tNU93uIjBVLTzdSdZLOcoDuQ2ZxGWQ0MS7S7G7ye6po7ZUg/b/ Qo6D8BZJa055HOaSBwsWHMC8F7mn7+VJCQlopYo4+WazBL3ucvz9iVoB/bsayOu/ XX5n0llOfMwGEqmDp1vANpgICA06ZXwrlKlIaYmrWYuOwBGBBJL6Zxkxhc0KyGuI ba2f7ulQWITgH83bXIDYegQL4yQRSFv13mjpeiHdjZ0kFshSSMVn+BHyoHpZKwWo A+b42/c/P9TMD5GFTb+ood/wi7bnFsiNcD84CIHcuAjWZCiPbGXZJmFntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwNnsnviIdUMVAEcGwQo3Ex1CgBMB8GA1UdIwQY MBaAFFJD3tdFsF9AOOmD+5147fVvJRNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMt YzUzNmRmNWMyNzRlLzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMtYzUzNmRmNWMyNzRl LzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASteriUJe Ck9kcfGAqMqR4AwJfKlc6APXitDnRe7RtEALRShb6rnvWK0xFEMqW1dd4pLdguje Q2wC/abawBRymNoM9NTNwosZFME9rciyrhJhn4DTTNBhC9HYYkic+o7gSPYCemM1 AI9/75Q1rYfOaDAO/KSxnIeZPj3JCSrMBrg72owN1wS0b9a3+OgM9SNnrLtawqS8 bYhc24fzs9iqIlVGrbtCEIZY6uApsJ6zxDWU067RDpc8i1KKsA/v8UvOhZhowrVg u4U9Sx1lDGqfyMv5Y3U6JZKqEBLLviCl2It1djeoJuGxOZRnB3mvzcp5l9XW4EI/ p/eDJ2LKBFZNIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:32 2025 by rpki-client