This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json) Hash identifier: FhXKK6Hv2z1MzCP6fvibzqRFuWSlATsGG4ie5Feh16k= Subject key identifier: 2E:CF:D0:9D:C4:4C:CE:71:C8:1A:20:10:BB:F5:85:A6:2A:7A:F1:49 Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880 Certificate serial: 019AF7D49009C7AD6721A5A39EF7BA7FA3FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft Manifest number: 07B1 Signing time: Sun 07 Dec 2025 08:01:34 +0000 Manifest this update: Sun 07 Dec 2025 08:01:34 +0000 Manifest next update: Mon 08 Dec 2025 08:01:34 +0000 Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: 9eV1GUCxphvOeNbHXircHzYP8swm5RSRx/9ZBm+LxPY=) 2: z_tXbjwTybgsIu8gcHGw6c-3LCI.roa (hash: +h48Ej53f4z6jTARf/DyDynXjuIZO6RWwEf4zGYnud4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:90:09:c7:ad:67:21:a5:a3:9e:f7:ba:7f:a3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880 Validity Not Before: Dec 7 08:01:34 2025 GMT Not After : Dec 8 08:01:34 2025 GMT Subject: CN=2ecfd09dc44cce71c81a2010bbf585a62a7af149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:9b:ef:4f:ef:e1:03:1a:52:aa:03:a8:12: bb:8e:81:66:98:a7:62:74:5b:73:3c:9a:9a:8d:5e: c6:df:4a:d4:a2:a0:47:1b:2a:4a:1a:16:c4:38:30: e1:22:20:a6:32:58:e2:2b:5b:38:f9:89:76:2b:a5: db:d8:d2:9c:80:43:0c:11:3f:f9:85:16:e0:50:25: 9d:c1:6d:29:25:0b:ae:b6:51:7a:9a:7a:dc:24:fc: e3:05:a3:4c:7d:f1:a8:0e:b2:00:f3:fc:b7:77:59: 47:30:b1:a0:c6:bd:f3:a2:4b:e2:ef:ad:bf:1c:b4: c0:95:f8:70:75:00:df:53:f2:62:65:6f:ae:5f:6a: 1d:90:fb:5a:11:3d:1c:77:96:80:b3:86:48:9d:3c: d1:62:1e:b3:e8:76:40:d2:91:f2:bb:68:6c:9a:7a: 5e:a8:ef:f0:8c:83:54:e5:96:d7:28:b8:ef:b5:16: ea:70:02:5b:70:56:a7:e9:33:69:e0:7a:7b:6c:44: 93:8e:35:59:6e:4b:d9:77:97:5b:06:4c:44:76:d7: 7a:27:b1:36:50:4b:da:d6:45:36:9d:b5:11:d3:aa: e8:3f:38:fa:85:a8:d3:32:33:8a:fe:5d:82:91:01: d7:e4:ad:32:50:80:ad:d2:eb:d4:2b:8c:5f:0b:08: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:D0:9D:C4:4C:CE:71:C8:1A:20:10:BB:F5:85:A6:2A:7A:F1:49 X509v3 Authority Key Identifier: keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:82:9b:8f:f5:29:65:98:1c:fc:72:97:03:83:f0:9e:96:3e: d6:e8:bb:31:87:08:d9:8d:8c:61:e0:6b:37:e2:9c:32:55:24: 9e:28:6e:4a:37:35:a5:e5:5f:a7:f4:b6:b9:68:0f:bc:fd:52: 5b:fa:a3:94:00:2b:14:80:b6:c9:a7:1f:dc:b5:61:00:ae:1c: c7:7b:c8:7a:89:89:d2:76:76:f4:1e:4b:40:bf:ea:49:bf:e9: 54:e4:e7:c5:c3:3c:af:ba:98:c7:f4:8c:d6:c3:2e:9d:71:bd: d8:ad:8f:64:54:da:0e:8d:fe:8d:17:bd:42:b3:17:f7:69:b3: 32:59:ce:04:89:de:fa:70:4d:36:f0:c8:c1:db:f8:39:95:15: 14:43:e0:7e:0e:a4:22:60:4c:29:09:86:08:d5:a6:0b:5d:5b: 0a:fc:eb:83:be:88:63:bb:63:6a:4c:1f:50:02:4a:35:50:d9: 05:df:28:e0:89:4a:ab:4a:0c:97:4d:35:d6:1e:e1:67:dd:8f: cd:01:91:f0:1a:55:63:53:ef:50:71:2d:07:68:7c:7d:09:83: 0c:68:82:46:de:6c:8d:e9:da:48:a1:16:d4:aa:8b:a7:4d:b8: 41:eb:8b:76:58:b8:68:35:5d:8f:c3:87:24:97:30:29:b8:83: a9:a4:7d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31JAJx61nIaWjnve6f6P8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5 OWY4ODAwHhcNMjUxMjA3MDgwMTM0WhcNMjUxMjA4MDgwMTM0WjAzMTEwLwYDVQQD EygyZWNmZDA5ZGM0NGNjZTcxYzgxYTIwMTBiYmY1ODVhNjJhN2FmMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkyb70/v4QMaUqoDqBK7joFmmKdi dFtzPJqajV7G30rUoqBHGypKGhbEODDhIiCmMljiK1s4+Yl2K6Xb2NKcgEMMET/5 hRbgUCWdwW0pJQuutlF6mnrcJPzjBaNMffGoDrIA8/y3d1lHMLGgxr3zokvi762/ HLTAlfhwdQDfU/JiZW+uX2odkPtaET0cd5aAs4ZInTzRYh6z6HZA0pHyu2hsmnpe qO/wjINU5ZbXKLjvtRbqcAJbcFan6TNp4Hp7bESTjjVZbkvZd5dbBkxEdtd6J7E2 UEva1kU2nbUR06roPzj6hajTMjOK/l2CkQHX5K0yUICt0uvUK4xfCwgKWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7P0J3ETM5xyBogELv1haYqevFJMB8GA1UdIwQY MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It YmU0OGI3OTI1NDc4LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4 LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYKbj/Up ZZgc/HKXA4PwnpY+1ui7MYcI2Y2MYeBrN+KcMlUknihuSjc1peVfp/S2uWgPvP1S W/qjlAArFIC2yacf3LVhAK4cx3vIeomJ0nZ29B5LQL/qSb/pVOTnxcM8r7qYx/SM 1sMunXG92K2PZFTaDo3+jRe9QrMX92mzMlnOBIne+nBNNvDIwdv4OZUVFEPgfg6k ImBMKQmGCNWmC11bCvzrg76IY7tjakwfUAJKNVDZBd8o4IlKq0oMl0011h7hZ92P zQGR8BpVY1PvUHEtB2h8fQmDDGiCRt5sjenaSKEW1KqLp024QeuLdli4aDVdj8OH JJcwKbiDqaR9gQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:43:57 2025 by rpki-client