This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft File: UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json) Hash identifier: l6cBlXVz/XYnIibv+CFNr+2S0Qmqr0ELSJGi23EsOqs= Subject key identifier: 07:4B:DA:BD:6B:A3:DC:20:82:CC:91:76:F7:F6:45:9E:1D:1A:D1:CB Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3 Certificate issuer: /CN=5032f297789a194a8b507805f35d42ee78c0d4c3 Certificate serial: 019AF1644492F3E77A47BFD731170A0A9BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: Aj1OasFd2vvG0PyQrbNrvT0baUZMTRQp6OYk9b0hYnw=) 2: nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa (hash: HsNAyKM2xYLYihaIQPq7p3bRxHDLIVC8wZ1mzcn3eIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:44:92:f3:e7:7a:47:bf:d7:31:17:0a:0a:9b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=074bdabd6ba3dc2082cc9176f7f6459e1d1ad1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:5a:ba:74:93:85:8f:08:ac:b7:73:d3:56: 1a:a3:61:e7:fa:8e:d8:5f:20:7f:79:14:b0:e0:66: 24:2d:de:4b:01:ce:1b:97:c6:1c:a1:59:59:89:b0: 10:ac:c8:9f:5e:79:79:ae:26:bf:2f:8c:de:29:aa: fc:78:c2:73:00:a6:65:85:2c:c5:f9:2e:01:f2:95: 75:99:4e:c2:e0:44:a0:23:2d:54:4a:1a:5f:81:97: df:36:de:26:d8:79:32:ea:c6:2e:d9:bb:e2:3a:9c: cd:6a:ed:80:cb:34:91:f7:0c:7d:9f:c2:b2:12:6c: 24:e1:29:2e:28:d3:f6:31:01:d5:c1:fe:27:3d:23: ad:10:64:73:2d:b2:3e:97:5b:70:98:0a:a6:ce:f0: f2:7e:a7:55:5a:7c:16:9c:37:7c:70:f4:39:14:30: 54:c2:5f:0a:99:21:1d:a8:07:d1:2f:25:83:fe:58: ef:8d:f7:98:1d:5a:1b:36:94:16:f8:f5:2d:0a:85: 6b:13:0a:e6:1a:af:9b:fb:c1:74:f3:01:fa:d8:bb: 4d:6f:2f:f5:cc:61:d7:2d:8c:3a:69:58:b2:a0:99: 98:3d:45:ab:7b:87:5b:a6:eb:8d:17:47:a3:5f:e9: b5:4a:48:d7:7e:a3:ae:f9:98:d5:d2:2a:0e:be:77: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4B:DA:BD:6B:A3:DC:20:82:CC:91:76:F7:F6:45:9E:1D:1A:D1:CB X509v3 Authority Key Identifier: keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7f:5a:06:07:2e:a5:3a:39:cf:db:8e:ac:e8:7c:11:49:a5: de:ac:41:12:19:33:30:dc:6b:ed:43:54:fe:6f:e5:f6:55:43: 4c:ee:ec:2a:0c:e1:18:dd:f5:e4:5a:95:fc:f6:a4:61:9a:14: e5:fc:d4:89:37:0e:80:87:a8:5c:5b:c5:58:3b:01:d3:42:b2: 2c:0a:42:44:b9:23:12:67:d7:e9:4f:68:30:2f:7c:df:3b:44: df:dd:ac:f2:c7:74:97:39:df:d4:61:b5:e6:e6:d3:c3:ac:60: 89:f5:6f:16:76:23:db:2f:25:37:30:0f:af:d2:f1:30:32:0f: 3e:c0:30:be:c1:5a:cb:51:d1:bf:b7:ca:80:e3:29:19:1b:5b: 7a:9c:8a:7c:f7:14:14:cf:f7:ba:a0:65:9e:b3:0c:8b:64:0d: 4d:e3:b1:7e:43:4e:d4:9a:44:a5:9e:53:9b:31:d2:1c:35:02: 42:59:8d:39:8a:9b:62:04:58:fe:75:ae:ce:d4:74:fd:e1:27: 36:6e:47:78:8a:3d:1e:fe:ca:1d:ac:18:34:0a:d1:12:3d:16: 16:33:f3:78:d2:6f:c9:b5:08:b2:ce:a9:f0:ba:50:05:38:66: a9:33:b1:5e:27:c6:03:13:fd:55:66:5a:b5:80:c2:80:bf:eb: 25:c8:a1:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZESS8+d6R7/XMRcKCpuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMzJmMjk3Nzg5YTE5NGE4YjUwNzgwNWYzNWQ0MmVlNzhj MGQ0YzMwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygwNzRiZGFiZDZiYTNkYzIwODJjYzkxNzZmN2Y2NDU5ZTFkMWFkMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocVaunSThY8IrLdz01Yao2Hn+o7Y XyB/eRSw4GYkLd5LAc4bl8YcoVlZibAQrMifXnl5ria/L4zeKar8eMJzAKZlhSzF +S4B8pV1mU7C4ESgIy1UShpfgZffNt4m2Hky6sYu2bviOpzNau2AyzSR9wx9n8Ky Emwk4SkuKNP2MQHVwf4nPSOtEGRzLbI+l1twmAqmzvDyfqdVWnwWnDd8cPQ5FDBU wl8KmSEdqAfRLyWD/ljvjfeYHVobNpQW+PUtCoVrEwrmGq+b+8F08wH62LtNby/1 zGHXLYw6aViyoJmYPUWre4dbpuuNF0ejX+m1SkjXfqOu+ZjV0ioOvnc/uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdL2r1ro9wggsyRdvf2RZ4dGtHLMB8GA1UdIwQY MBaAFFAy8pd4mhlKi1B4BfNdQu54wNTDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQt YzZiZGIxODMwNjk0LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQtYzZiZGIxODMwNjk0 LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGH9aBgcu pTo5z9uOrOh8EUml3qxBEhkzMNxr7UNU/m/l9lVDTO7sKgzhGN315FqV/PakYZoU 5fzUiTcOgIeoXFvFWDsB00KyLApCRLkjEmfX6U9oMC983ztE392s8sd0lznf1GG1 5ubTw6xgifVvFnYj2y8lNzAPr9LxMDIPPsAwvsFay1HRv7fKgOMpGRtbepyKfPcU FM/3uqBlnrMMi2QNTeOxfkNO1JpEpZ5TmzHSHDUCQlmNOYqbYgRY/nWuztR0/eEn Nm5HeIo9Hv7KHawYNArREj0WFjPzeNJvybUIss6p8LpQBThmqTOxXifGAxP9VWZa tYDCgL/rJcihNg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:23 2025 by rpki-client