This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json) Hash identifier: Y+HYqWnqAdLBdZAAZ8nYmqsMrrBAS8vgJ7MyzRp0UdU= Subject key identifier: 93:67:80:AA:90:FE:28:A3:B5:00:D5:E6:5F:B0:53:0D:FC:8A:3F:68 Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53 Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753 Certificate serial: 019AF0BF44229C5C20BF960FF7102ED437D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft Manifest number: 0FDF Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: dzFSkmQtES5rJF71+wzrYDEyci+WrCOfYgvR267cask=) 2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:44:22:9c:5c:20:bf:96:0f:f7:10:2e:d4:37:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753 Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=936780aa90fe28a3b500d5e65fb0530dfc8a3f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:09:5b:03:ff:a6:65:49:0d:8b:07:04:d5: a4:1b:74:b4:a2:79:5f:53:04:6b:c2:62:ab:90:c3: 9d:77:1f:bd:1c:25:1a:d1:45:a1:14:a8:00:7c:c7: a5:7c:22:a8:1d:99:3a:bd:71:d2:3d:b7:d8:1f:34: 04:41:f5:cb:af:ed:c4:66:3b:ca:ea:51:4d:57:b2: 9b:9e:0b:98:07:93:04:b0:9d:d7:9d:a6:b6:ee:6c: 11:8e:f0:a9:7a:92:cf:9e:5b:19:01:e1:90:7a:81: 6a:97:a3:29:f8:94:91:86:9b:14:b4:6d:09:64:9c: 39:5d:f5:2e:56:6c:0b:43:0c:8b:76:6f:d2:01:43: 45:ea:73:9f:ac:cf:b2:02:ce:b0:7e:a1:be:61:a4: 54:b8:b5:61:9c:97:f6:ad:95:ab:0d:62:82:be:26: 32:e1:fa:05:d2:dd:13:a9:a0:55:c7:f0:89:22:bd: 8a:ed:82:07:ed:e3:e3:c6:13:dc:6d:69:94:cc:85: 08:4f:23:fe:ad:eb:50:19:cf:db:e8:ef:57:f5:05: 41:15:1c:51:d7:b3:ce:f3:38:c8:d1:eb:90:28:48: a7:61:a7:ab:b8:d0:5b:f1:0b:03:87:b7:3a:72:6d: 75:0c:42:d1:67:a4:ed:25:9d:82:20:66:33:c4:8c: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:67:80:AA:90:FE:28:A3:B5:00:D5:E6:5F:B0:53:0D:FC:8A:3F:68 X509v3 Authority Key Identifier: keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ee:d7:22:98:35:16:a2:34:86:c5:dd:69:0e:9c:c7:e1:c5: f7:49:b4:7c:df:e8:ab:8b:22:de:cf:68:12:b0:cc:d6:a6:28: f9:cc:d5:2a:88:1f:c0:f2:59:0a:75:9d:90:67:0d:82:61:1d: 64:54:58:14:26:2e:60:ad:08:c9:32:30:28:59:9c:6c:89:88: 5d:c4:4e:09:44:e0:2d:4c:04:31:b9:59:cf:f8:e6:c9:d2:5a: c3:47:81:11:27:d4:a9:56:37:f4:83:e3:57:a3:64:f7:23:51: af:f0:4b:94:8c:9e:e2:43:f9:30:40:40:cc:94:29:d4:1a:3c: 4d:d9:b3:16:de:18:12:96:34:0b:bf:54:83:85:ac:38:2b:cc: 7b:e8:39:8f:78:50:88:4f:1f:2e:1c:5c:60:6c:02:3d:6b:fb: 94:78:2b:e3:9a:9d:35:a2:6b:9c:52:25:87:b6:fc:f6:6e:ee: 7a:ba:c1:f1:ea:e6:bc:bd:6b:0b:c6:d6:00:41:e9:4a:e6:65: 19:3f:81:e0:84:c3:69:d0:05:6a:39:23:4b:ea:e6:5a:ae:a4: 33:bd:fd:34:76:72:27:14:c1:b8:13:2c:d0:fc:68:05:c9:ae: bb:1b:a9:b2:29:d6:b2:a8:89:b4:3d:16:75:40:75:0f:fd:7a: af:2b:15:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0QinFwgv5YP9xAu1DfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTA0NmRhNzI2YWVmOTliZWI4OGEzMGM4YTZmYWVmZTc1 MjA3NTMwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD Eyg5MzY3ODBhYTkwZmUyOGEzYjUwMGQ1ZTY1ZmIwNTMwZGZjOGEzZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9kJWwP/pmVJDYsHBNWkG3S0onlf UwRrwmKrkMOddx+9HCUa0UWhFKgAfMelfCKoHZk6vXHSPbfYHzQEQfXLr+3EZjvK 6lFNV7KbnguYB5MEsJ3Xnaa27mwRjvCpepLPnlsZAeGQeoFql6Mp+JSRhpsUtG0J ZJw5XfUuVmwLQwyLdm/SAUNF6nOfrM+yAs6wfqG+YaRUuLVhnJf2rZWrDWKCviYy 4foF0t0TqaBVx/CJIr2K7YIH7ePjxhPcbWmUzIUITyP+retQGc/b6O9X9QVBFRxR 17PO8zjI0euQKEinYaeruNBb8QsDh7c6cm11DELRZ6TtJZ2CIGYzxIyiWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNngKqQ/iijtQDV5l+wUw38ij9oMB8GA1UdIwQY MBaAFFBQRtpyau+ZvriKMMim+u/nUgdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgt MjgyZmEyYzAxMTUzLzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgtMjgyZmEyYzAxMTUz LzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADe7XIpg1 FqI0hsXdaQ6cx+HF90m0fN/oq4si3s9oErDM1qYo+czVKogfwPJZCnWdkGcNgmEd ZFRYFCYuYK0IyTIwKFmcbImIXcROCUTgLUwEMblZz/jmydJaw0eBESfUqVY39IPj V6Nk9yNRr/BLlIye4kP5MEBAzJQp1Bo8TdmzFt4YEpY0C79Ug4WsOCvMe+g5j3hQ iE8fLhxcYGwCPWv7lHgr45qdNaJrnFIlh7b89m7uerrB8ermvL1rC8bWAEHpSuZl GT+B4ITDadAFajkjS+rmWq6kM739NHZyJxTBuBMs0PxoBcmuuxupsinWsqiJtD0W dUB1D/16rysVDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:34 2025 by rpki-client