This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json) Hash identifier: oYN7iXQTv2N8T0Szgjb/CJQHTNmydh/aBAEIwdAIbZs= Subject key identifier: EC:2B:72:DE:3D:FB:E5:E5:0E:50:42:6E:59:DF:06:E2:10:35:25:57 Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Certificate serial: 019AF2AD3883620B3C543765B0D4D597EEC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft Manifest number: 0156 Signing time: Sat 06 Dec 2025 08:00:29 +0000 Manifest this update: Sat 06 Dec 2025 08:00:29 +0000 Manifest next update: Sun 07 Dec 2025 08:00:29 +0000 Files and hashes: 1: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: JSjyGLJlWid96Tm9AMffAnHfZjnkbiEn3gg1w6ET37U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:38:83:62:0b:3c:54:37:65:b0:d4:d5:97:ee:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Validity Not Before: Dec 6 08:00:29 2025 GMT Not After : Dec 7 08:00:29 2025 GMT Subject: CN=ec2b72de3dfbe5e50e50426e59df06e210352557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:74:cb:9d:db:42:33:03:4a:e8:81:46:65: c3:c2:9b:21:df:d1:54:29:f3:e4:4f:e2:f7:e4:84: 2e:91:d0:ba:c5:a1:60:66:95:c4:b2:9b:47:f4:d0: 56:27:53:bc:4f:27:80:b8:76:1e:d1:05:5a:d1:76: 4a:07:7e:7f:3f:49:95:ff:54:45:d1:b7:db:24:c3: 4e:93:ad:e2:88:62:d8:b6:a7:1d:e5:d7:27:60:cb: 08:25:66:a7:b4:4b:12:8d:2c:fd:fb:67:63:42:82: 5e:47:fc:3a:b8:8f:42:5f:a2:16:47:69:a8:ae:81: cc:5a:02:9d:35:2f:57:2e:c3:37:1b:d5:69:33:71: ff:b3:32:fc:ec:54:47:e4:85:f6:38:09:d6:c0:5e: c3:2f:a6:3d:0e:48:83:ba:f4:6a:51:bf:b0:4b:23: 6c:69:e0:90:36:8e:2b:af:3f:31:c7:c5:e9:12:9c: d6:a8:53:53:c6:79:b4:85:4d:62:f0:74:6f:53:01: bc:e5:6f:21:4e:21:24:97:31:47:5e:4d:13:e8:e7: da:b3:6c:79:2a:a8:6a:65:9c:6e:a4:e8:a0:88:95: 9d:07:50:0b:c5:b7:74:f8:3e:be:44:f3:70:b3:af: fb:06:57:bd:2f:15:44:ac:8d:52:03:84:ee:57:08: 91:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2B:72:DE:3D:FB:E5:E5:0E:50:42:6E:59:DF:06:E2:10:35:25:57 X509v3 Authority Key Identifier: keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:82:1a:07:56:5c:45:34:93:59:a5:04:d3:27:4d:70:93:15: 9a:89:d8:eb:33:a2:90:64:bf:19:d4:cb:ce:95:bd:80:6f:47: 00:d9:5d:bd:91:a1:fb:e0:05:b7:88:da:91:5f:5b:57:cd:52: d2:3a:ea:f9:13:14:05:7a:bf:b7:23:52:35:ec:09:4d:4c:4a: 5c:41:89:25:25:16:06:95:a9:bb:af:ea:71:b5:e3:d2:be:03: eb:9d:81:45:32:22:b8:d3:9b:72:d5:12:27:8e:b4:67:93:b3: db:c4:2b:21:8e:48:61:c5:a9:6a:ce:e9:60:4c:4c:be:1d:ee: 82:07:6a:8d:9f:6c:91:93:79:9d:ee:c0:e6:45:81:c5:0c:7f: f8:ac:0f:fa:4b:6b:1c:34:f5:df:2b:a6:9b:d8:eb:fb:7a:d7: 0c:3c:86:c4:34:21:b3:b5:69:61:0f:e9:4d:9d:a4:99:d3:e9: ee:49:7f:5c:54:ef:b5:cb:9e:86:12:42:17:36:86:d3:26:87: 52:81:18:80:cd:9d:f8:b9:0a:d1:8e:6f:34:2e:73:39:b0:0d: 2b:87:9b:ce:2a:80:76:de:5c:fd:94:da:7a:85:03:20:82:a3: 2c:2b:4e:27:0b:0f:83:72:24:cd:40:8d:06:a4:46:63:75:39: 83:b3:f7:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTiDYgs8VDdlsNTVl+7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjI5ZDE4NGJjYzUwZmU2NTRkZGVmNDAxNWRlMTdkMjQ2 ZmQyYTMwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD EyhlYzJiNzJkZTNkZmJlNWU1MGU1MDQyNmU1OWRmMDZlMjEwMzUyNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mh0y53bQjMDSuiBRmXDwpsh39FU KfPkT+L35IQukdC6xaFgZpXEsptH9NBWJ1O8TyeAuHYe0QVa0XZKB35/P0mV/1RF 0bfbJMNOk63iiGLYtqcd5dcnYMsIJWantEsSjSz9+2djQoJeR/w6uI9CX6IWR2mo roHMWgKdNS9XLsM3G9VpM3H/szL87FRH5IX2OAnWwF7DL6Y9DkiDuvRqUb+wSyNs aeCQNo4rrz8xx8XpEpzWqFNTxnm0hU1i8HRvUwG85W8hTiEklzFHXk0T6Ofas2x5 KqhqZZxupOigiJWdB1ALxbd0+D6+RPNws6/7Ble9LxVErI1SA4TuVwiR1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwrct49++XlDlBCblnfBuIQNSVXMB8GA1UdIwQY MBaAFFHynRhLzFD+ZU3e9AFd4X0kb9KjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMt YjMzYTFmN2Q5YzI2LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMtYjMzYTFmN2Q5YzI2 LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIIaB1Zc RTSTWaUE0ydNcJMVmonY6zOikGS/GdTLzpW9gG9HANldvZGh++AFt4jakV9bV81S 0jrq+RMUBXq/tyNSNewJTUxKXEGJJSUWBpWpu6/qcbXj0r4D652BRTIiuNObctUS J460Z5Oz28QrIY5IYcWpas7pYExMvh3uggdqjZ9skZN5ne7A5kWBxQx/+KwP+ktr HDT13yumm9jr+3rXDDyGxDQhs7VpYQ/pTZ2kmdPp7kl/XFTvtcuehhJCFzaG0yaH UoEYgM2d+LkK0Y5vNC5zObANK4ebziqAdt5c/ZTaeoUDIIKjLCtOJwsPg3IkzUCN BqRGY3U5g7P38A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:57 2025 by rpki-client