This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json) Hash identifier: l8sXEaGevJtlriNlITEqvgk4CGh41RYWpIzqSSaZXsY= Subject key identifier: 84:16:E9:5E:7E:93:F6:F5:AD:87:58:01:AB:0E:D8:A4:43:F1:B3:DF Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9 Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9 Certificate serial: 019AF31BF9C394A69066F73F0E88C4F3F9B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:01:27 +0000 Manifest next update: Sun 07 Dec 2025 10:01:27 +0000 Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: tBQDPgGWdNp4PfUfBe/xdI2v/3nUbifF7UayPPOJdsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f9:c3:94:a6:90:66:f7:3f:0e:88:c4:f3:f9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9 Validity Not Before: Dec 6 10:01:27 2025 GMT Not After : Dec 7 10:01:27 2025 GMT Subject: CN=8416e95e7e93f6f5ad875801ab0ed8a443f1b3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cd:33:14:a4:ed:cb:6b:e6:77:99:f4:a6:7a: 99:4b:fd:44:ff:38:5a:33:e4:fd:ff:92:65:64:99: 0a:cf:73:8f:e0:9c:78:3e:a4:ed:d0:7a:91:77:88: ef:7e:8a:32:41:cf:d4:61:86:27:2d:8b:da:02:69: 1b:53:ba:c9:1f:bb:3d:41:60:a9:b1:31:b8:d3:31: f4:26:77:ed:f7:ae:bc:2a:72:a8:28:88:06:bc:67: 9b:4c:0a:dd:80:bf:d2:0a:71:02:34:1a:4b:c4:62: 88:52:be:de:43:1c:17:13:3c:ae:41:b1:d1:8f:f8: 87:74:1e:dd:7f:6b:2c:88:6e:8a:73:29:5a:23:04: 46:8a:7c:a8:87:59:e2:56:3f:26:5d:bc:a7:86:68: d5:ef:6b:9c:03:17:f9:40:d2:bd:6c:3d:74:d1:76: 33:96:e3:a3:6b:e3:9e:0e:ee:60:17:53:51:fe:7a: c4:24:cb:72:80:da:6b:ed:c8:0b:82:a8:34:7a:e7: 5f:68:72:9e:88:e5:e9:a4:f1:87:c7:f3:cd:3f:0e: 14:22:42:fe:45:ed:8d:67:11:4a:90:ed:9f:e0:bd: ae:b0:19:96:92:5e:25:e9:56:96:33:d3:ef:28:4f: 9c:cd:fb:c3:58:e3:aa:6a:85:ef:ce:c2:b2:06:11: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:16:E9:5E:7E:93:F6:F5:AD:87:58:01:AB:0E:D8:A4:43:F1:B3:DF X509v3 Authority Key Identifier: keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:33:ff:c2:d1:5a:5e:3b:3f:69:50:4e:d5:0c:fb:25:c2:75: 88:08:5f:12:d9:77:25:9b:bd:57:d6:ec:d1:94:de:d6:e0:82: b6:39:4b:d3:9b:ff:9b:d0:45:e2:34:1b:45:cb:b2:5a:f4:b7: ab:c3:2e:4f:e8:e2:a0:d7:b1:91:f6:37:77:47:76:de:4c:25: 09:c5:e7:c1:31:f8:0e:02:bc:6d:28:cf:a7:67:f7:4f:d0:eb: ef:d6:23:eb:69:2e:cf:fa:aa:dd:e8:59:79:80:2e:ff:ac:35: 61:e4:3e:c6:af:f5:28:03:70:cc:d3:56:b3:28:95:3c:7a:4f: 03:5b:c3:88:fb:3c:47:2b:b6:8c:83:04:2a:82:44:51:2d:46: cf:f8:39:7a:6c:9a:11:3b:f7:21:7f:a5:86:4e:83:0b:a5:f7: 74:7d:8f:1a:66:4d:05:1f:22:46:7d:26:38:5e:1f:3a:ba:84: f5:1f:52:26:74:25:97:df:86:74:99:d5:10:f0:0d:5e:59:d7: 3f:24:66:cc:ed:cf:6e:27:30:b8:bf:30:d5:e8:ab:d7:16:ca: 25:8a:f0:82:7c:95:0f:d9:4d:a8:a8:b3:2c:42:b5:53:3c:4b: 11:bc:64:4b:ab:45:78:a1:0e:bc:c8:0f:42:7e:eb:88:2c:3b: 83:8f:2f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/nDlKaQZvc/DojE8/m0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTI3ODMyZDM5ODUwZTg1MWVlY2I1YTA1MTE2OTI5OTFk ZGE1ZDkwHhcNMjUxMjA2MTAwMTI3WhcNMjUxMjA3MTAwMTI3WjAzMTEwLwYDVQQD Eyg4NDE2ZTk1ZTdlOTNmNmY1YWQ4NzU4MDFhYjBlZDhhNDQzZjFiM2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+M0zFKTty2vmd5n0pnqZS/1E/zha M+T9/5JlZJkKz3OP4Jx4PqTt0HqRd4jvfooyQc/UYYYnLYvaAmkbU7rJH7s9QWCp sTG40zH0Jnft9668KnKoKIgGvGebTArdgL/SCnECNBpLxGKIUr7eQxwXEzyuQbHR j/iHdB7df2ssiG6KcylaIwRGinyoh1niVj8mXbynhmjV72ucAxf5QNK9bD100XYz luOja+OeDu5gF1NR/nrEJMtygNpr7cgLgqg0eudfaHKeiOXppPGHx/PNPw4UIkL+ Re2NZxFKkO2f4L2usBmWkl4l6VaWM9PvKE+czfvDWOOqaoXvzsKyBhEfJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQW6V5+k/b1rYdYAasO2KRD8bPfMB8GA1UdIwQY MBaAFFKSeDLTmFDoUe7LWgURaSmR3aXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTkt MjU2ZGIzZWQ4MzM1LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTktMjU2ZGIzZWQ4MzM1 LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTP/wtFa Xjs/aVBO1Qz7JcJ1iAhfEtl3JZu9V9bs0ZTe1uCCtjlL05v/m9BF4jQbRcuyWvS3 q8MuT+jioNexkfY3d0d23kwlCcXnwTH4DgK8bSjPp2f3T9Dr79Yj62kuz/qq3ehZ eYAu/6w1YeQ+xq/1KANwzNNWsyiVPHpPA1vDiPs8Ryu2jIMEKoJEUS1Gz/g5emya ETv3IX+lhk6DC6X3dH2PGmZNBR8iRn0mOF4fOrqE9R9SJnQll9+GdJnVEPANXlnX PyRmzO3PbicwuL8w1eir1xbKJYrwgnyVD9lNqKizLEK1UzxLEbxkS6tFeKEOvMgP Qn7riCw7g48vOw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:11 2025 by rpki-client