This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft File: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft (raw, json) Hash identifier: 4TwNHT9U2C/aVjT0s6OwBXDCAheCpjUgAJAm0J6uabE= Subject key identifier: BA:03:44:33:B5:14:1B:A2:B4:C1:B1:8D:28:68:DF:62:AF:0B:6B:69 Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a Certificate serial: 019AF31CFA2CAEE2148C18F7C19D51257FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft Manifest number: 3D Signing time: Sat 06 Dec 2025 10:02:33 +0000 Manifest this update: Sat 06 Dec 2025 10:02:33 +0000 Manifest next update: Sun 07 Dec 2025 10:02:33 +0000 Files and hashes: 1: 3p0Wlr49r2oy-mqOd40rAvvmW3w.roa (hash: z1wQ/dZS1Nu1TOpyODQg46+I11CB0aKuZl5lRQ8vxEI=) 2: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl (hash: LSnv9sLmeGY0G0WsnT54JLt5YTFbRqUUdPIQ2eUlh0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:fa:2c:ae:e2:14:8c:18:f7:c1:9d:51:25:7f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a Validity Not Before: Dec 6 10:02:33 2025 GMT Not After : Dec 7 10:02:33 2025 GMT Subject: CN=ba034433b5141ba2b4c1b18d2868df62af0b6b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:67:f6:16:08:1d:a8:21:c4:78:1f:cc:1d: a1:c1:af:cb:93:39:f9:7c:98:06:ab:ee:26:b0:d1: a7:e6:dc:ea:bd:e7:b8:3b:03:32:11:ee:17:be:a6: 8b:2b:7e:d0:95:9a:aa:bf:a4:e6:75:26:ca:0d:f5: aa:ca:7f:ea:2b:19:16:e0:9c:a5:81:fe:9f:0d:34: c7:66:3d:01:9e:af:76:a3:22:e4:29:ae:f2:e7:0a: 46:e0:9a:d7:8b:ed:ca:5b:fe:c3:4c:d3:f2:7e:4c: 05:92:00:7e:78:b9:8d:54:87:b7:3b:70:2a:27:bb: 38:ea:93:1c:90:3b:14:e7:03:29:6a:7d:ef:6e:e6: a5:66:d0:70:2a:0a:4b:ac:6f:25:80:26:72:a9:70: 91:17:7f:7b:87:35:2a:ba:86:2c:4f:b4:4f:22:5d: 3d:14:27:f1:17:31:93:5a:a1:5a:06:29:ac:fb:ac: 94:3f:ea:79:1f:b6:e7:11:22:a0:e0:36:0e:1e:2c: 36:8b:f3:c6:87:88:21:83:23:4a:9d:4f:b2:3a:65: 5c:d7:13:92:71:f9:87:9e:3e:df:2d:57:4b:88:8e: bc:12:40:64:0b:39:a2:e3:a8:59:5f:d3:c6:24:0a: 4e:76:28:b0:cf:df:0c:c1:1c:2a:1b:16:8c:8b:dc: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:03:44:33:B5:14:1B:A2:B4:C1:B1:8D:28:68:DF:62:AF:0B:6B:69 X509v3 Authority Key Identifier: keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:02:cf:5f:ef:94:be:43:fb:ce:9e:fb:d0:1d:75:0f:69:90: fe:8c:17:93:4c:e7:fa:7e:ee:07:5e:48:29:3b:b6:99:ee:a7: 4c:61:42:6d:cd:68:72:4c:5c:dd:ab:8d:1e:11:80:26:cf:c9: 74:38:57:1c:2d:42:9d:55:2e:0d:67:8a:70:f8:45:a4:50:eb: 6f:b3:9f:f6:7e:2f:46:cd:d2:63:60:91:22:ff:ff:25:da:e4: 79:9b:9e:89:11:c5:a5:28:ce:3c:8c:7e:b1:f9:3a:c5:7f:ae: a2:58:8a:db:f6:02:a0:e7:c3:2a:d5:33:53:87:fb:1b:6f:44: ad:a0:18:b3:86:6b:02:67:f0:c5:b2:ca:0f:de:b6:65:cc:e9: 6c:80:52:1f:d7:26:9f:ef:63:41:b8:17:56:2f:b4:60:5a:72: 79:a1:3c:9c:bd:68:6b:59:22:6c:4d:f2:40:34:ac:81:34:19: b2:e1:af:f5:65:33:da:d2:89:84:5a:c4:31:b6:a8:b2:7f:e3: 03:57:43:73:5d:4d:ef:64:76:ab:01:53:df:54:dd:9d:8e:83: cd:cc:7a:19:46:d9:4e:b1:c9:8c:1b:92:c3:fe:6d:da:8a:5b: d3:67:13:34:57:0b:c7:25:30:d3:67:a7:30:8a:2a:29:e8:85: 37:b4:62:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPosruIUjBj3wZ1RJX/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyMmY0ZGVhN2RmMzkyN2Q0MDExYjMwODdkNGQwNjdm OWQxOWEwHhcNMjUxMjA2MTAwMjMzWhcNMjUxMjA3MTAwMjMzWjAzMTEwLwYDVQQD EyhiYTAzNDQzM2I1MTQxYmEyYjRjMWIxOGQyODY4ZGY2MmFmMGI2YjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2pn9hYIHaghxHgfzB2hwa/Lkzn5 fJgGq+4msNGn5tzqvee4OwMyEe4XvqaLK37QlZqqv6TmdSbKDfWqyn/qKxkW4Jyl gf6fDTTHZj0Bnq92oyLkKa7y5wpG4JrXi+3KW/7DTNPyfkwFkgB+eLmNVIe3O3Aq J7s46pMckDsU5wMpan3vbualZtBwKgpLrG8lgCZyqXCRF397hzUquoYsT7RPIl09 FCfxFzGTWqFaBims+6yUP+p5H7bnESKg4DYOHiw2i/PGh4ghgyNKnU+yOmVc1xOS cfmHnj7fLVdLiI68EkBkCzmi46hZX9PGJApOdiiwz98MwRwqGxaMi9zxdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoDRDO1FBuitMGxjSho32KvC2tpMB8GA1UdIwQY MBaAFFBRIvTep985J9QBGzCH1NBn+dGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQt ZDNmMjRhZTdiODdiLzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQtZDNmMjRhZTdiODdi LzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgLPX++U vkP7zp770B11D2mQ/owXk0zn+n7uB15IKTu2me6nTGFCbc1ockxc3auNHhGAJs/J dDhXHC1CnVUuDWeKcPhFpFDrb7Of9n4vRs3SY2CRIv//JdrkeZueiRHFpSjOPIx+ sfk6xX+uoliK2/YCoOfDKtUzU4f7G29EraAYs4ZrAmfwxbLKD962ZczpbIBSH9cm n+9jQbgXVi+0YFpyeaE8nL1oa1kibE3yQDSsgTQZsuGv9WUz2tKJhFrEMbaosn/j A1dDc11N72R2qwFT31TdnY6Dzcx6GUbZTrHJjBuSw/5t2opb02cTNFcLxyUw02en MIoqKeiFN7RiCw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:44 2025 by rpki-client