This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft File: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft (raw, json) Hash identifier: mo6neLg4M/Tss1okzO39MYJW9wkKL+XtK8ilSKWenBk= Subject key identifier: 11:C4:54:D2:5B:29:4E:3B:24:F4:B7:8B:09:A9:B5:9D:22:EA:8B:8F Authority key identifier: 51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE Certificate issuer: /CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae Certificate serial: 019AF2E44FDBBCE3BC26C12C03C1D3140D06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft Manifest number: 011F Signing time: Sat 06 Dec 2025 09:00:40 +0000 Manifest this update: Sat 06 Dec 2025 09:00:40 +0000 Manifest next update: Sun 07 Dec 2025 09:00:40 +0000 Files and hashes: 1: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl (hash: 0VIext/1gomUMaiDRYas3AeNgUWePPi4M1e4bSzXgdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4f:db:bc:e3:bc:26:c1:2c:03:c1:d3:14:0d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae Validity Not Before: Dec 6 09:00:40 2025 GMT Not After : Dec 7 09:00:40 2025 GMT Subject: CN=11c454d25b294e3b24f4b78b09a9b59d22ea8b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:34:fd:ac:8d:63:0e:ef:07:63:cb:08:54: 9c:fd:27:02:99:6c:cc:f8:b1:83:2e:53:22:24:f1: e3:48:c1:93:14:14:8f:e2:40:15:b1:d5:98:60:8d: 0f:e0:9b:86:cb:63:0d:cb:d5:b2:82:2d:4a:51:f2: 8e:f4:74:a1:c6:49:d1:af:3d:10:23:5e:c8:13:91: 56:44:a6:6f:f1:a8:2b:c9:2d:b8:81:40:ce:b3:13: 46:c2:ef:18:4e:a3:69:f0:22:50:40:69:bd:66:e3: f9:89:76:07:d2:cf:6f:28:9e:cc:e9:a6:eb:b1:77: ff:36:af:c7:1f:96:68:c9:50:31:2f:27:b1:15:1c: da:4b:8a:4e:c1:ae:be:4b:a7:78:27:79:4f:6b:35: a0:a7:ad:46:57:21:7e:52:81:72:4c:32:50:c5:ce: ea:57:6a:1e:51:6a:a6:9f:b8:cd:26:d8:2a:4e:f9: f1:31:cc:d8:25:a9:e8:9d:7a:5a:b3:32:8c:f6:70: 96:a0:9d:7b:64:a1:22:0d:70:90:16:04:11:e1:15: 67:19:0c:f7:a7:82:ad:80:5a:ad:f8:2e:55:39:b2: e5:0b:51:d1:62:ea:4f:8b:ae:0a:68:9d:c3:31:1b: fc:a0:a8:5b:a3:70:e2:ad:a6:3a:d0:04:c8:4e:c1: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C4:54:D2:5B:29:4E:3B:24:F4:B7:8B:09:A9:B5:9D:22:EA:8B:8F X509v3 Authority Key Identifier: keyid:51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:69:4a:70:64:bc:04:07:a3:b7:85:9a:7c:47:15:17:73:4d: 87:1a:d6:a3:af:d9:88:55:89:24:fb:68:4f:b1:d3:31:1f:d3: a4:19:c3:87:88:ec:7a:d8:c8:c4:c9:64:94:23:b1:ac:9b:31: 68:f9:aa:0d:51:b8:90:a7:77:a6:ca:79:3f:20:dc:ae:7f:5a: 47:af:0e:a9:ec:c5:61:3d:7f:1d:cb:17:b6:2f:cd:34:1e:ef: 55:2b:11:4b:dc:53:b5:51:37:eb:98:57:a4:3f:a9:b8:90:40: da:fe:39:a0:74:88:12:5f:61:28:9a:cf:c4:4a:99:be:e6:80: 0d:c1:94:6e:7a:90:bb:7f:59:8d:77:8d:56:77:02:bc:d1:b4: 3c:3a:00:9f:e6:a4:1f:79:64:1f:54:db:d5:53:d5:15:30:64: d3:0a:95:31:da:b2:ca:e7:1e:74:3c:4d:64:74:ce:0d:10:ac: d9:41:22:e8:c0:5a:af:cf:da:ef:bb:d3:8a:e6:f4:c4:99:c8: 22:33:0f:5d:73:e0:a6:68:57:e4:70:85:ba:48:12:6c:e9:74: 3b:25:43:fe:3c:1b:99:3c:7a:78:9e:de:10:ef:70:3f:21:c1: 99:8a:11:bf:54:48:06:7d:f9:eb:a5:1a:17:f3:41:e9:3c:26: fe:84:26:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5E/bvOO8JsEsA8HTFA0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNjFkNjI4MGJkMjBkN2JjZGZkNjUyNTEwOWE0M2UyZWEz YzYyYWUwHhcNMjUxMjA2MDkwMDQwWhcNMjUxMjA3MDkwMDQwWjAzMTEwLwYDVQQD EygxMWM0NTRkMjViMjk0ZTNiMjRmNGI3OGIwOWE5YjU5ZDIyZWE4YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBs0/ayNYw7vB2PLCFSc/ScCmWzM +LGDLlMiJPHjSMGTFBSP4kAVsdWYYI0P4JuGy2MNy9Wygi1KUfKO9HShxknRrz0Q I17IE5FWRKZv8agryS24gUDOsxNGwu8YTqNp8CJQQGm9ZuP5iXYH0s9vKJ7M6abr sXf/Nq/HH5ZoyVAxLyexFRzaS4pOwa6+S6d4J3lPazWgp61GVyF+UoFyTDJQxc7q V2oeUWqmn7jNJtgqTvnxMczYJanonXpaszKM9nCWoJ17ZKEiDXCQFgQR4RVnGQz3 p4KtgFqt+C5VObLlC1HRYupPi64KaJ3DMRv8oKhbo3DiraY60ATITsHmjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHEVNJbKU47JPS3iwmptZ0i6ouPMB8GA1UdIwQY MBaAFFFh1igL0g17zf1lJRCaQ+LqPGKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjkt YTBhMTBlY2I0MmE5LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjktYTBhMTBlY2I0MmE5 LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWlKcGS8 BAejt4WafEcVF3NNhxrWo6/ZiFWJJPtoT7HTMR/TpBnDh4jsetjIxMlklCOxrJsx aPmqDVG4kKd3psp5PyDcrn9aR68OqezFYT1/HcsXti/NNB7vVSsRS9xTtVE365hX pD+puJBA2v45oHSIEl9hKJrPxEqZvuaADcGUbnqQu39ZjXeNVncCvNG0PDoAn+ak H3lkH1Tb1VPVFTBk0wqVMdqyyucedDxNZHTODRCs2UEi6MBar8/a77vTiub0xJnI IjMPXXPgpmhX5HCFukgSbOl0OyVD/jwbmTx6eJ7eEO9wPyHBmYoRv1RIBn3566Ua F/NB6Twm/oQmhA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:23 2025 by rpki-client