This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft File: UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft (raw, json) Hash identifier: OmqK7RUe7vZ1h45v3XRfC1YfBmn7BU1Dkms14Bbj4og= Subject key identifier: 51:CF:05:48:16:10:59:C7:37:E3:31:C4:DA:33:E4:C5:96:67:09:3F Authority key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8 Certificate issuer: /CN=50affc288430a03c0f60ba6a0e27602370f2e9e8 Certificate serial: 019AF509FA4E5E235E60DA995DF48BE95707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft Manifest number: 0AEB Signing time: Sat 06 Dec 2025 19:01:03 +0000 Manifest this update: Sat 06 Dec 2025 19:01:03 +0000 Manifest next update: Sun 07 Dec 2025 19:01:03 +0000 Files and hashes: 1: UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl (hash: lNEYnSjHfEqSymSBo1Xn/HRyvvIAOfZvB/bY98yDHcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:fa:4e:5e:23:5e:60:da:99:5d:f4:8b:e9:57:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8 Validity Not Before: Dec 6 19:01:03 2025 GMT Not After : Dec 7 19:01:03 2025 GMT Subject: CN=51cf0548161059c737e331c4da33e4c59667093f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:3d:f5:ce:70:ae:02:e4:28:c0:a1:65:33: 9e:33:3a:d5:00:a6:fc:c6:6f:84:2d:06:6f:2d:bd: 2f:2c:ad:ed:a3:51:0d:6c:68:cc:76:6c:34:b0:75: d3:e7:b4:4c:4e:ff:b2:d3:65:49:0d:79:92:59:16: fc:b8:e1:32:a1:ce:1c:94:e7:2a:99:15:71:11:ee: 0f:ce:dc:01:5c:36:af:12:89:ae:86:78:ca:a6:d2: d3:22:6a:80:ce:60:06:98:a3:82:ba:63:13:76:cc: c5:d6:93:59:6f:86:f4:ee:f4:15:69:07:14:ae:ab: b2:e7:e8:f4:95:ce:0a:d1:4d:b9:0e:04:6c:46:99: 1a:91:09:ed:d8:c1:0f:ca:ac:5a:ae:af:8c:e2:95: b2:1a:87:cf:5c:36:96:5f:a4:5f:4b:86:4f:b6:ac: c8:4c:51:ea:9d:e6:09:f6:ee:d9:18:38:a9:16:2e: 4f:65:de:3f:f5:1e:96:a9:ea:d2:80:fa:27:85:a5: 24:a1:24:45:23:36:45:e4:a1:a6:91:7d:9f:0d:7d: 10:1d:08:40:69:4b:83:eb:a1:51:d1:fc:a8:00:ee: 86:e0:d5:85:4d:06:8d:12:9f:de:24:76:9f:2e:99: 97:c5:01:3b:dc:ad:95:2d:da:e6:24:38:23:24:93: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CF:05:48:16:10:59:C7:37:E3:31:C4:DA:33:E4:C5:96:67:09:3F X509v3 Authority Key Identifier: keyid:50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ff:d8:e2:73:ac:93:f8:a1:3d:da:c3:3c:73:49:de:65:20: ba:7c:d9:a8:ef:36:31:33:46:f1:eb:4d:07:d1:46:36:2b:33: 2a:d0:8d:1c:43:dc:a6:86:7a:e2:6c:65:f6:e5:ea:b0:d9:b2: cb:20:58:52:9c:8c:b8:bc:d8:93:eb:c8:66:df:17:36:9e:95: 8c:df:c9:3a:96:a8:ea:9c:76:97:1e:b9:50:6d:26:7e:7b:66: 23:b8:20:9d:9b:9b:f6:e2:88:18:e5:06:57:53:69:28:b1:ea: 52:ea:2b:2e:51:7e:8b:d5:e5:0f:46:d1:64:88:cd:ac:5b:16: 9c:51:0f:95:d7:cf:86:f6:59:4c:bb:ca:c2:3c:aa:37:ae:b5: ce:01:e3:08:1e:b0:67:ff:73:c1:bd:9d:9b:8d:d6:79:e8:b8: 37:e2:ce:09:c0:f4:38:b7:b0:ce:9c:a3:66:49:c8:3c:2d:45: c8:c9:a7:b0:c8:10:22:5f:8f:3d:57:7e:94:c2:ec:fb:d9:58: fa:15:1b:c7:70:46:15:cb:53:b2:65:d2:fb:33:73:e3:06:ab: 56:25:f1:21:d1:1c:a9:b4:da:f2:98:17:83:e3:63:c7:d1:29: 9c:cc:dc:09:db:3d:63:84:a2:6d:2a:27:18:de:dd:f4:4d:75: 05:8d:91:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfpOXiNeYNqZXfSL6VcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYWZmYzI4ODQzMGEwM2MwZjYwYmE2YTBlMjc2MDIzNzBm MmU5ZTgwHhcNMjUxMjA2MTkwMTAzWhcNMjUxMjA3MTkwMTAzWjAzMTEwLwYDVQQD Eyg1MWNmMDU0ODE2MTA1OWM3MzdlMzMxYzRkYTMzZTRjNTk2NjcwOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEI99c5wrgLkKMChZTOeMzrVAKb8 xm+ELQZvLb0vLK3to1ENbGjMdmw0sHXT57RMTv+y02VJDXmSWRb8uOEyoc4clOcq mRVxEe4PztwBXDavEomuhnjKptLTImqAzmAGmKOCumMTdszF1pNZb4b07vQVaQcU rquy5+j0lc4K0U25DgRsRpkakQnt2MEPyqxarq+M4pWyGofPXDaWX6RfS4ZPtqzI TFHqneYJ9u7ZGDipFi5PZd4/9R6WqerSgPonhaUkoSRFIzZF5KGmkX2fDX0QHQhA aUuD66FR0fyoAO6G4NWFTQaNEp/eJHafLpmXxQE73K2VLdrmJDgjJJMN4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHPBUgWEFnHN+MxxNoz5MWWZwk/MB8GA1UdIwQY MBaAFFCv/CiEMKA8D2C6ag4nYCNw8unoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUtfOEtJUXdvRHdQWUxwcURpZGdJM0R5NmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lMjBhN2EtODhlMi00NmU2LWFkOWQt MzNiODAzNWNhMzI0LzEvVUtfOEtJUXdvRHdQWUxwcURpZGdJM0R5NmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lMjBhN2EtODhlMi00NmU2LWFkOWQtMzNiODAzNWNhMzI0 LzEvVUtfOEtJUXdvRHdQWUxwcURpZGdJM0R5NmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP/Y4nOs k/ihPdrDPHNJ3mUgunzZqO82MTNG8etNB9FGNiszKtCNHEPcpoZ64mxl9uXqsNmy yyBYUpyMuLzYk+vIZt8XNp6VjN/JOpao6px2lx65UG0mfntmI7ggnZub9uKIGOUG V1NpKLHqUuorLlF+i9XlD0bRZIjNrFsWnFEPldfPhvZZTLvKwjyqN661zgHjCB6w Z/9zwb2dm43Weei4N+LOCcD0OLewzpyjZknIPC1FyMmnsMgQIl+PPVd+lMLs+9lY +hUbx3BGFctTsmXS+zNz4warViXxIdEcqbTa8pgXg+Njx9EpnMzcCds9Y4SibSon GN7d9E11BY2Rww== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:57 2025 by rpki-client