This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json) Hash identifier: DJJlq5o+9XeIGYutQBJ1pz1zmlKScAIWBHrDp3B3on4= Subject key identifier: 3B:44:DA:7A:36:A8:59:B3:84:BF:18:9B:D2:B6:43:DB:59:12:D9:B8 Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6 Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6 Certificate serial: 019AF12DAC62BDFD178DFC5B91A42880FAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:33 +0000 Manifest this update: Sat 06 Dec 2025 01:01:33 +0000 Manifest next update: Sun 07 Dec 2025 01:01:33 +0000 Files and hashes: 1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: 8/cu3tshEID5jtxFH3GpBGgRnAv8Y2EqvAl52tVE4SI=) 2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ac:62:bd:fd:17:8d:fc:5b:91:a4:28:80:fa:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6 Validity Not Before: Dec 6 01:01:33 2025 GMT Not After : Dec 7 01:01:33 2025 GMT Subject: CN=3b44da7a36a859b384bf189bd2b643db5912d9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:0f:21:f2:3e:43:7b:51:55:4d:f4:ca:a2: a0:88:1d:fb:55:dd:fd:f8:6f:e9:07:c2:1e:a1:d6: b1:3a:66:85:32:b5:1b:37:8d:42:c3:14:94:4a:de: 0e:b6:1e:a6:57:8c:53:f7:d3:89:5f:80:9e:93:cf: 7d:22:d2:d6:17:11:53:78:60:d3:6c:dd:69:c9:d2: bf:ee:c2:9f:40:33:fb:ed:37:f9:c5:92:2c:d4:2d: 8c:71:aa:05:d9:d5:82:01:fa:e9:68:71:ac:87:76: 88:6a:98:59:b7:34:98:ae:52:c7:91:c8:e6:da:2f: 26:d8:19:79:4d:7a:6e:5c:2b:c2:02:ca:0f:62:13: d1:d1:6f:4a:98:2b:4c:c3:0d:dc:6f:4e:27:03:5d: 4a:4a:3f:a9:3c:48:03:52:7c:2e:e0:d4:79:b3:16: 87:f2:74:f5:b2:85:c0:2e:ee:aa:11:8c:61:38:db: c2:51:8c:79:a1:e8:34:c2:ca:e6:39:ae:aa:0c:55: 31:c9:cc:ee:18:02:66:0e:33:7d:86:c7:14:f6:7d: d1:ef:7c:0f:2c:aa:35:03:c3:a9:d6:91:89:d5:f7: 64:b3:fd:17:70:d9:d6:55:a3:9c:0e:31:ac:d0:fb: eb:a1:71:f0:79:50:7a:c4:ac:b6:3c:8b:2d:35:fb: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:DA:7A:36:A8:59:B3:84:BF:18:9B:D2:B6:43:DB:59:12:D9:B8 X509v3 Authority Key Identifier: keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7d:bb:c5:16:30:43:78:b6:02:b6:8f:9e:a1:56:2d:20:32: b2:d7:2e:93:3b:2e:a2:33:47:13:9a:0f:9f:43:5b:b5:06:95: 9d:bd:77:a8:f1:68:e9:63:03:ae:ae:63:66:d8:0e:87:2a:3b: 41:b2:f2:35:28:6e:18:62:69:17:be:5e:5f:ba:4d:d1:5f:3d: 1a:8f:48:55:e6:b8:9e:19:c5:05:f7:98:bf:de:7c:45:07:05: 74:02:d6:f1:9c:b6:51:de:3e:a0:62:bb:d5:33:b5:21:bc:32: e4:cf:1b:f4:cc:0e:7f:2d:f6:e8:5b:19:e6:28:f3:4f:07:e7: 2f:ee:31:4d:62:7e:ff:81:75:39:2e:a1:1c:1d:6c:0b:46:92: 91:4c:6d:e7:c9:52:d1:cf:97:2d:4a:50:f0:ae:64:7a:d8:77: 64:61:41:93:98:aa:c7:73:46:cb:14:05:6b:2a:f7:3e:6b:eb: 3e:65:9e:b6:14:e1:0c:7b:d8:8a:9b:58:e5:a0:20:0c:66:18: ea:92:00:03:1b:15:e3:9d:38:c7:81:ff:26:49:56:c6:07:4f: bf:fb:35:a3:59:4c:52:8c:01:53:9f:ef:fb:e8:e5:bf:49:ad: db:9f:f6:21:2b:57:b5:22:bd:87:76:f0:3e:81:a7:98:da:4a: c1:b0:39:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaxivf0XjfxbkaQogPrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWYzOTFmMjlkOTIwNzhiYTZlMmM3NmZhYTJmOGFlOTQ3 MzQzZTYwHhcNMjUxMjA2MDEwMTMzWhcNMjUxMjA3MDEwMTMzWjAzMTEwLwYDVQQD EygzYjQ0ZGE3YTM2YTg1OWIzODRiZjE4OWJkMmI2NDNkYjU5MTJkOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWAPIfI+Q3tRVU30yqKgiB37Vd39 +G/pB8IeodaxOmaFMrUbN41CwxSUSt4Oth6mV4xT99OJX4Cek899ItLWFxFTeGDT bN1pydK/7sKfQDP77Tf5xZIs1C2McaoF2dWCAfrpaHGsh3aIaphZtzSYrlLHkcjm 2i8m2Bl5TXpuXCvCAsoPYhPR0W9KmCtMww3cb04nA11KSj+pPEgDUnwu4NR5sxaH 8nT1soXALu6qEYxhONvCUYx5oeg0wsrmOa6qDFUxyczuGAJmDjN9hscU9n3R73wP LKo1A8Op1pGJ1fdks/0XcNnWVaOcDjGs0PvroXHweVB6xKy2PIstNfuzvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtE2no2qFmzhL8Ym9K2Q9tZEtm4MB8GA1UdIwQY MBaAFFCfOR8p2SB4um4sdvqi+K6Uc0PmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYt MjhkMGYyMDJlMzZkLzEvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYtMjhkMGYyMDJlMzZk LzEvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX27xRYw Q3i2AraPnqFWLSAystcukzsuojNHE5oPn0NbtQaVnb13qPFo6WMDrq5jZtgOhyo7 QbLyNShuGGJpF75eX7pN0V89Go9IVea4nhnFBfeYv958RQcFdALW8Zy2Ud4+oGK7 1TO1Ibwy5M8b9MwOfy326FsZ5ijzTwfnL+4xTWJ+/4F1OS6hHB1sC0aSkUxt58lS 0c+XLUpQ8K5keth3ZGFBk5iqx3NGyxQFayr3PmvrPmWethThDHvYiptY5aAgDGYY 6pIAAxsV4504x4H/JklWxgdPv/s1o1lMUowBU5/v++jlv0mt25/2IStXtSK9h3bw PoGnmNpKwbA5Uw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:27 2025 by rpki-client