This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json) Hash identifier: YhGADa31on9ZYCTOok2zDVh2T6VGr8GMujBhwAC/JmY= Subject key identifier: D4:60:5B:FE:58:03:CF:45:BC:33:66:DD:1E:9D:95:D4:96:E7:B4:32 Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99 Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499 Certificate serial: 019B38D865C32397158E15A2875D1342207B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft Manifest number: 0810 Signing time: Fri 19 Dec 2025 23:01:04 +0000 Manifest this update: Fri 19 Dec 2025 23:01:04 +0000 Manifest next update: Sat 20 Dec 2025 23:01:04 +0000 Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: 75TxNmxRyHl93+osEwDoxVNpnWDaMuv5KdAoIOg2pjg=) 2: z0gK7j1eTNv7dmhYM5fYU83PlcI.roa (hash: F9PSIbqhKjRh7i/sDNMQoDtTGb+P8gRfs9+wZwKnUuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:65:c3:23:97:15:8e:15:a2:87:5d:13:42:20:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499 Validity Not Before: Dec 19 23:01:04 2025 GMT Not After : Dec 20 23:01:04 2025 GMT Subject: CN=d4605bfe5803cf45bc3366dd1e9d95d496e7b432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:b2:41:9d:06:ad:66:dc:13:ac:77:0a:1c: a7:ad:a4:2d:80:6c:21:5b:8b:1c:ae:da:f1:35:df: 9b:c1:37:69:f2:57:a2:92:98:a4:4b:a6:ba:b5:fa: 31:68:b0:f0:5f:72:55:d0:55:13:ff:71:57:0f:dc: f8:c0:e5:4a:c7:75:66:23:3e:58:77:b7:b7:93:72: ee:6d:90:76:b7:7b:40:5e:c7:e6:c4:32:5c:71:db: 09:b4:c6:01:77:b5:dc:bf:d0:a3:af:b1:71:ec:2f: 07:dd:93:e0:e3:89:b8:56:16:1e:11:2c:52:b7:10: 2b:7e:ce:a4:11:18:d1:62:2d:4b:bd:7a:77:bb:27: ae:00:c5:4b:20:d8:0e:88:0b:df:ba:dc:4a:53:4c: 39:ef:66:4b:e2:af:c3:0b:2b:f5:fc:85:65:19:3d: cf:8b:ff:3c:77:76:af:71:b9:ae:81:cc:4b:b7:bc: 6b:b2:27:b7:ae:f1:a2:d3:6e:b5:d4:5a:6e:29:78: b7:6c:d5:db:7c:2b:25:13:99:b4:0b:29:95:1e:19: 14:fb:81:2e:ae:bc:cf:e3:bf:7e:14:39:34:3a:c0: bc:21:c1:be:9b:82:bd:8a:b8:6b:1a:ae:33:c9:11: 17:57:99:39:51:b4:68:b5:4c:60:47:71:93:86:c6: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:60:5B:FE:58:03:CF:45:BC:33:66:DD:1E:9D:95:D4:96:E7:B4:32 X509v3 Authority Key Identifier: keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:49:44:49:2b:a7:71:a1:ab:24:ef:cd:7f:bd:fd:1f:99:33: 5e:fa:88:91:f8:f5:1d:20:aa:5a:c5:40:26:4a:cf:3b:8f:92: 18:a1:db:a7:e4:66:42:b1:71:a7:da:68:af:53:7a:38:f8:08: c0:47:94:e9:b8:75:d3:e5:7d:ce:79:64:38:30:27:6a:44:3d: 16:7c:cc:8b:6f:4d:d7:a4:ab:01:b0:f6:1b:0e:7e:8c:72:28: 79:16:d5:dd:be:38:b2:dd:23:c4:fd:57:bc:11:79:d2:ce:08: 3e:0b:a6:31:9c:3d:0a:6f:6b:7d:77:cd:c2:f5:19:e0:26:11: 23:80:78:f3:c8:db:b9:22:63:dc:d2:15:b5:69:af:28:4c:6e: 71:7c:83:24:83:90:6f:a4:28:a0:ae:fc:ee:18:ae:82:1f:c2: 14:10:bb:1e:f2:e0:36:09:7f:ac:40:07:72:d3:08:57:15:01: 8c:69:db:01:09:f8:68:a2:2c:92:f4:e8:98:4c:86:d7:1d:00: 0f:55:f4:aa:8f:03:67:fe:e7:2f:d4:46:9b:d5:9b:0c:20:ec: 37:99:e8:92:b3:45:ff:c7:88:d6:06:6d:c6:df:c4:1e:7a:f1: 0d:8b:c8:8e:4c:64:6f:f8:1e:98:7e:fd:f4:3a:5f:86:34:e2: 5c:d4:83:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42GXDI5cVjhWih10TQiB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWFkMTdmNGM2MjBkNThkNDUzZDVmNmQ3YzkyMzNmY2Ux MjY0OTkwHhcNMjUxMjE5MjMwMTA0WhcNMjUxMjIwMjMwMTA0WjAzMTEwLwYDVQQD EyhkNDYwNWJmZTU4MDNjZjQ1YmMzMzY2ZGQxZTlkOTVkNDk2ZTdiNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xSyQZ0GrWbcE6x3ChynraQtgGwh W4scrtrxNd+bwTdp8leikpikS6a6tfoxaLDwX3JV0FUT/3FXD9z4wOVKx3VmIz5Y d7e3k3LubZB2t3tAXsfmxDJccdsJtMYBd7Xcv9Cjr7Fx7C8H3ZPg44m4VhYeESxS txArfs6kERjRYi1LvXp3uyeuAMVLINgOiAvfutxKU0w572ZL4q/DCyv1/IVlGT3P i/88d3avcbmugcxLt7xrsie3rvGi02611FpuKXi3bNXbfCslE5m0CymVHhkU+4Eu rrzP479+FDk0OsC8IcG+m4K9irhrGq4zyREXV5k5UbRotUxgR3GThsaNJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRgW/5YA89FvDNm3R6dldSW57QyMB8GA1UdIwQY MBaAFFBa0X9MYg1Y1FPV9tfJIz/OEmSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEt ZmU2YmIwNDkzMzdkLzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEtZmU2YmIwNDkzMzdk LzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0lESSun caGrJO/Nf739H5kzXvqIkfj1HSCqWsVAJkrPO4+SGKHbp+RmQrFxp9por1N6OPgI wEeU6bh10+V9znlkODAnakQ9FnzMi29N16SrAbD2Gw5+jHIoeRbV3b44st0jxP1X vBF50s4IPgumMZw9Cm9rfXfNwvUZ4CYRI4B488jbuSJj3NIVtWmvKExucXyDJIOQ b6QooK787hiugh/CFBC7HvLgNgl/rEAHctMIVxUBjGnbAQn4aKIskvTomEyG1x0A D1X0qo8DZ/7nL9RGm9WbDCDsN5nokrNF/8eI1gZtxt/EHnrxDYvIjkxkb/gemH79 9DpfhjTiXNSDFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:53:15 2025 by rpki-client