This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json) Hash identifier: ruaEzm2aa8O6oZkSs2HnloPcVv/fpA9N3yCmA5ElMkA= Subject key identifier: B7:19:79:8E:06:C9:8D:F9:07:ED:14:98:09:60:FF:05:BD:D2:C0:6B Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Certificate serial: 019AFB7A381600B65F54A5D04F3033FC94FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft Manifest number: 16FA Signing time: Mon 08 Dec 2025 01:01:22 +0000 Manifest this update: Mon 08 Dec 2025 01:01:22 +0000 Manifest next update: Tue 09 Dec 2025 01:01:22 +0000 Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=) 2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: 9DHBHBk5yqYWo2Nw5Xv+smAsWBEeFo8pydTHs+JxmyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:7a:38:16:00:b6:5f:54:a5:d0:4f:30:33:fc:94:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Validity Not Before: Dec 8 01:01:22 2025 GMT Not After : Dec 9 01:01:22 2025 GMT Subject: CN=b719798e06c98df907ed14980960ff05bdd2c06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:ed:fc:5c:d5:37:6f:f6:c3:b2:18:0b:89: 0c:59:ec:46:5d:82:37:d2:0e:9d:a0:e8:1d:a0:79: 2d:75:c2:8a:96:fd:59:03:ff:1d:d8:24:14:9f:71: a7:cd:02:a4:eb:af:28:c5:52:f4:13:66:bf:f4:e5: 70:47:53:f7:13:d1:7d:17:f9:64:50:0a:8d:e9:eb: a1:1a:db:a7:e7:99:5b:3f:cb:fc:36:44:f7:a6:17: 34:2d:23:a8:b8:72:f6:32:79:2b:5b:70:ef:6a:4e: 52:f0:36:57:5a:69:5f:85:a5:fa:94:1f:bb:dc:b1: b3:f0:a1:1c:fa:f1:54:cf:b9:a5:25:1d:6d:77:98: 2a:c1:60:5b:75:92:97:43:c8:08:cb:10:22:49:7a: fd:5d:85:1a:04:50:27:e6:13:bb:d4:21:6e:c2:42: e8:7b:f5:16:b1:55:83:f9:7f:78:52:8c:6a:ed:43: df:84:2a:e5:f6:02:3b:b5:e4:90:34:30:f9:5e:97: 02:ef:3a:ec:78:57:2e:1c:30:b4:2d:39:94:06:d9: 6c:10:d7:07:f5:eb:26:d9:6c:0d:f2:0f:cb:f8:15: d5:5e:c7:22:6f:f3:30:1e:93:a6:f5:43:87:cf:46: 3f:a6:1b:5e:03:a5:d1:92:bc:84:a1:7d:e6:26:c9: 46:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:79:8E:06:C9:8D:F9:07:ED:14:98:09:60:FF:05:BD:D2:C0:6B X509v3 Authority Key Identifier: keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:80:88:9f:ac:e2:a9:c3:7a:2a:ec:03:2d:cf:98:6e:ab:ad: 6d:1e:f8:29:af:f1:98:05:f5:0e:29:aa:b1:02:3c:02:5b:11: fb:46:47:88:8a:9e:bc:2d:15:89:66:57:0f:2a:41:8e:12:cf: f1:a6:98:0f:de:42:b6:dd:6e:70:fb:ea:e6:2d:b4:62:8a:16: 21:5c:e9:0c:de:42:05:15:c7:6f:b3:e2:d6:d3:c7:b5:00:59: 52:19:e8:23:66:08:44:3c:f4:5e:30:a0:48:d3:03:97:00:4f: 66:4c:4b:cb:9c:94:61:fe:7e:ec:19:f8:b0:1f:9d:e8:72:b4: 33:a6:dc:ad:91:fc:2a:fd:cb:10:37:43:0a:f5:64:82:fc:ff: e5:10:1d:37:c8:a6:83:9f:b6:7b:6b:ca:2f:76:6b:25:eb:84: cc:78:1a:9a:e8:71:37:bd:46:ea:d3:32:06:95:0a:62:e3:c5: f1:58:cc:fb:e7:9e:e5:c7:ba:75:2e:62:b8:a3:63:ba:80:c0: 2e:da:dc:0f:1e:9f:6a:57:5d:93:f9:d9:db:5f:2a:c4:16:ef: bb:33:e8:fd:01:e9:56:38:0e:68:79:e3:ed:6a:60:f6:e8:fe: 8b:bc:24:1f:f4:c5:fb:a2:b4:87:76:30:8c:40:58:2d:03:5e: c4:13:58:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7ejgWALZfVKXQTzAz/JT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOWNhNWE2ZTVkNjc0MjFmM2YyY2QyMTEzOGNiNzA3MDQ4 NTA5NTUwHhcNMjUxMjA4MDEwMTIyWhcNMjUxMjA5MDEwMTIyWjAzMTEwLwYDVQQD EyhiNzE5Nzk4ZTA2Yzk4ZGY5MDdlZDE0OTgwOTYwZmYwNWJkZDJjMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pDt/FzVN2/2w7IYC4kMWexGXYI3 0g6doOgdoHktdcKKlv1ZA/8d2CQUn3GnzQKk668oxVL0E2a/9OVwR1P3E9F9F/lk UAqN6euhGtun55lbP8v8NkT3phc0LSOouHL2MnkrW3Dvak5S8DZXWmlfhaX6lB+7 3LGz8KEc+vFUz7mlJR1td5gqwWBbdZKXQ8gIyxAiSXr9XYUaBFAn5hO71CFuwkLo e/UWsVWD+X94Uoxq7UPfhCrl9gI7teSQNDD5XpcC7zrseFcuHDC0LTmUBtlsENcH 9esm2WwN8g/L+BXVXscib/MwHpOm9UOHz0Y/phteA6XRkryEoX3mJslG4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcZeY4GyY35B+0UmAlg/wW90sBrMB8GA1UdIwQY MBaAFFKcpabl1nQh8/LNIROMtwcEhQlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEt M2EzYTlmMDI0MmI4LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEtM2EzYTlmMDI0MmI4 LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALICIn6zi qcN6KuwDLc+YbqutbR74Ka/xmAX1DimqsQI8AlsR+0ZHiIqevC0ViWZXDypBjhLP 8aaYD95Ctt1ucPvq5i20YooWIVzpDN5CBRXHb7Pi1tPHtQBZUhnoI2YIRDz0XjCg SNMDlwBPZkxLy5yUYf5+7Bn4sB+d6HK0M6bcrZH8Kv3LEDdDCvVkgvz/5RAdN8im g5+2e2vKL3ZrJeuEzHgamuhxN71G6tMyBpUKYuPF8VjM++ee5ce6dS5iuKNjuoDA LtrcDx6falddk/nZ218qxBbvuzPo/QHpVjgOaHnj7Wpg9uj+i7wkH/TF+6K0h3Yw jEBYLQNexBNYDg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:14 2025 by rpki-client