This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft File: UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json) Hash identifier: b88vLwv/ljvznwKH96TudfwVeEe0NoUU/71+JfDbZI8= Subject key identifier: 3C:15:32:77:EE:89:51:E2:FB:74:CE:0F:66:CE:BD:8C:83:C4:EA:F9 Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB Certificate issuer: /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb Certificate serial: 019AF6536CCBB40F90BCC388934F896D27EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft Manifest number: 149C Signing time: Sun 07 Dec 2025 01:00:53 +0000 Manifest this update: Sun 07 Dec 2025 01:00:53 +0000 Manifest next update: Mon 08 Dec 2025 01:00:53 +0000 Files and hashes: 1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: Enso98vik2nZf/AU6Q0jmevRHR7MW/DxbULjf4w+Amc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:6c:cb:b4:0f:90:bc:c3:88:93:4f:89:6d:27:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb Validity Not Before: Dec 7 01:00:53 2025 GMT Not After : Dec 8 01:00:53 2025 GMT Subject: CN=3c153277ee8951e2fb74ce0f66cebd8c83c4eaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:d4:34:db:53:63:cd:0f:14:ef:5a:20:43: 76:4e:af:5a:14:f9:91:8c:7f:cb:8d:76:69:90:be: 1c:0f:7b:03:66:8b:78:77:01:be:c5:32:0a:4c:3f: a4:2f:8c:c4:92:69:a5:a0:1c:6f:7a:01:63:71:c3: 36:d0:58:29:ed:3b:3b:4a:79:a3:0d:ee:0b:61:02: ca:19:fc:63:09:9a:02:23:16:b7:1b:19:dc:c7:2d: 05:50:a3:1a:c4:cf:af:32:0d:0b:53:78:77:f4:81: dc:22:7e:1c:ae:04:eb:65:e1:32:f7:6a:f8:7d:f8: bd:52:c5:d4:7b:b6:1a:61:49:9c:28:65:ea:92:d0: 57:2f:6b:71:46:0d:35:12:28:13:2b:b7:1a:d0:59: cf:f7:0c:26:d8:9d:d2:6e:61:2a:6c:21:64:40:7f: 6b:07:89:1a:f2:4a:01:1a:30:65:af:3a:5c:b0:c4: f1:09:b8:69:c4:46:1e:02:8f:29:b3:53:0f:d7:e2: 59:01:21:42:ff:72:d5:8f:e5:37:e3:58:83:54:63: ac:7d:18:5a:8f:94:5b:65:3c:fa:90:1c:f0:fc:f8: b2:e7:38:29:ab:45:52:e3:f1:a2:98:ca:9d:8d:fd: 9f:2a:aa:19:52:0f:2c:4d:b5:4c:0e:1b:d5:09:14: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:15:32:77:EE:89:51:E2:FB:74:CE:0F:66:CE:BD:8C:83:C4:EA:F9 X509v3 Authority Key Identifier: keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4f:7e:b0:1c:ba:68:b3:86:ce:ab:e2:0c:00:89:69:73:08: fd:59:93:84:68:24:88:28:16:9d:c6:d3:21:b0:a1:3d:90:a8: 87:e5:7f:e3:ef:04:52:86:d3:ce:3f:dc:8b:46:03:64:ca:22: 40:23:bb:c3:90:73:c4:55:c7:84:7b:48:4b:10:fd:cb:7e:ac: b3:bf:f2:cc:a7:4e:7a:ee:08:ce:08:53:81:b6:93:64:0d:ee: 36:a3:2b:0b:2f:c7:9c:f4:12:89:5e:93:28:37:78:6e:e0:98: 97:45:ac:e7:79:42:c1:47:a8:ef:17:7e:6b:74:23:d6:09:84: cc:46:20:c4:4e:6a:72:cd:4d:b6:7b:a4:c9:a2:66:a4:e9:c0: 54:f8:52:41:b6:56:71:4f:c1:1b:1b:07:fa:0f:57:30:e0:4a: f0:e5:2c:de:c7:eb:93:74:30:77:03:b1:9a:8d:a9:ce:37:51: 41:e1:50:2f:bf:7e:5f:47:cc:2c:6e:3d:70:5e:c3:bd:ff:aa: 8f:47:08:b5:8b:65:73:26:00:c8:87:58:17:b6:18:b1:2e:ee: 95:15:f2:57:c6:04:b2:22:82:5a:3e:63:4f:fd:a6:43:28:80: c4:d9:7d:5d:c2:64:59:ef:3f:3b:bd:f7:63:42:88:34:85:91: c0:45:a7:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U2zLtA+QvMOIk0+JbSfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMmZkZTVhYmQyNzE4NGJhYTlhZGFiN2NkYWZiY2MzYTU0 NDFhZWIwHhcNMjUxMjA3MDEwMDUzWhcNMjUxMjA4MDEwMDUzWjAzMTEwLwYDVQQD EygzYzE1MzI3N2VlODk1MWUyZmI3NGNlMGY2NmNlYmQ4YzgzYzRlYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7bUNNtTY80PFO9aIEN2Tq9aFPmR jH/LjXZpkL4cD3sDZot4dwG+xTIKTD+kL4zEkmmloBxvegFjccM20Fgp7Ts7Snmj De4LYQLKGfxjCZoCIxa3Gxncxy0FUKMaxM+vMg0LU3h39IHcIn4crgTrZeEy92r4 ffi9UsXUe7YaYUmcKGXqktBXL2txRg01EigTK7ca0FnP9wwm2J3SbmEqbCFkQH9r B4ka8koBGjBlrzpcsMTxCbhpxEYeAo8ps1MP1+JZASFC/3LVj+U341iDVGOsfRha j5RbZTz6kBzw/Piy5zgpq0VS4/GimMqdjf2fKqoZUg8sTbVMDhvVCRTNxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwVMnfuiVHi+3TOD2bOvYyDxOr5MB8GA1UdIwQY MBaAFFAv3lq9JxhLqprat82vvMOlRBrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTkt NzEzZmQ4ZTkxZmE5LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTktNzEzZmQ4ZTkxZmE5 LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk9+sBy6 aLOGzqviDACJaXMI/VmThGgkiCgWncbTIbChPZCoh+V/4+8EUobTzj/ci0YDZMoi QCO7w5BzxFXHhHtISxD9y36ss7/yzKdOeu4IzghTgbaTZA3uNqMrCy/HnPQSiV6T KDd4buCYl0Ws53lCwUeo7xd+a3Qj1gmEzEYgxE5qcs1NtnukyaJmpOnAVPhSQbZW cU/BGxsH+g9XMOBK8OUs3sfrk3QwdwOxmo2pzjdRQeFQL79+X0fMLG49cF7Dvf+q j0cItYtlcyYAyIdYF7YYsS7ulRXyV8YEsiKCWj5jT/2mQyiAxNl9XcJkWe8/O733 Y0KINIWRwEWn2A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:11 2025 by rpki-client