This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json) Hash identifier: Iv1hi2FWPKck1XMdS11DI0QpLtHzDmQ5GaXahDvTrkg= Subject key identifier: A4:97:BA:6D:7A:E6:4B:32:EA:32:B5:3C:0F:B9:B2:33:68:BB:87:EA Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068 Certificate serial: 019AF3F7EF7B953CF915CEF2466166C95FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft Manifest number: 039E Signing time: Sat 06 Dec 2025 14:01:43 +0000 Manifest this update: Sat 06 Dec 2025 14:01:43 +0000 Manifest next update: Sun 07 Dec 2025 14:01:43 +0000 Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: AU5XP+gP5mg1PsA70mSuZKCiYNQ6hdZ85oeh8YXjhN0=) 2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ef:7b:95:3c:f9:15:ce:f2:46:61:66:c9:5f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068 Validity Not Before: Dec 6 14:01:43 2025 GMT Not After : Dec 7 14:01:43 2025 GMT Subject: CN=a497ba6d7ae64b32ea32b53c0fb9b23368bb87ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:ac:ed:e2:06:b0:95:d8:63:99:ab:d7:23: c7:26:bd:3d:17:fc:46:04:ce:8d:8f:7c:d9:f4:42: 9e:d1:d3:bf:14:6a:d4:de:ee:b0:e9:e8:62:9f:b3: d1:13:39:3d:51:61:3c:11:bf:fa:ab:68:ef:99:59: 75:da:f5:f3:db:6a:c7:aa:7d:f2:04:99:cf:af:7a: 9b:f3:3a:cb:9c:0a:bf:f2:18:c9:27:09:a6:6c:38: 7c:0b:7b:39:6a:2c:75:11:83:0a:cd:97:a2:da:a3: 29:e8:64:2e:8f:2b:75:c7:67:e9:0c:b5:9d:bc:2b: f2:57:88:dd:0e:c1:d8:70:96:c6:b9:36:ed:54:fa: c2:13:5b:c0:e4:36:fb:56:a6:72:0e:d5:21:a7:77: 64:97:1a:d9:52:8d:0a:10:48:c8:e7:56:1c:6a:15: 1c:3c:c1:b0:d3:5e:ea:2f:b7:c4:d7:11:91:35:4b: 79:91:c5:f2:8d:62:6c:b8:b3:7b:b3:fc:70:ae:73: 58:1d:ad:c1:4c:f6:6a:ba:58:b8:fe:fa:98:87:d7: 02:d2:44:99:36:2d:d0:be:1d:eb:27:0a:7b:1f:d2: 3c:fd:a9:0c:41:26:c5:f5:4e:ac:c9:f1:7d:09:d5: 33:ec:64:95:4e:9e:69:2d:5c:ab:1b:33:36:cd:ea: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:97:BA:6D:7A:E6:4B:32:EA:32:B5:3C:0F:B9:B2:33:68:BB:87:EA X509v3 Authority Key Identifier: keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2f:0b:94:af:1a:fb:b9:d4:8b:14:64:38:06:22:51:5f:5b: 89:a6:9c:34:0e:21:73:4a:d0:1f:d2:6f:6a:03:3b:b4:7c:3d: 3d:16:ab:17:d3:43:c4:b4:a9:6d:1c:31:f0:4d:75:d7:41:38: ad:13:d1:b5:1b:5c:6d:da:22:68:57:d8:6c:03:13:c0:2f:0b: a0:d5:0a:e1:6e:75:c0:f8:6c:4f:78:ba:fa:4c:7e:cb:66:24: c3:f2:f2:b2:88:12:16:a7:48:3c:35:23:c5:df:91:00:65:76: 0a:fc:ca:6e:9a:7b:20:10:c0:a0:0e:c1:5b:3a:5c:c6:26:48: ef:44:b0:d9:da:c8:28:a7:ba:e3:55:2f:98:dc:a4:94:77:00: b5:95:a4:6e:64:82:71:c0:9c:0c:87:a0:42:55:ec:63:04:5d: b6:04:f5:ac:d0:ff:13:0d:b0:97:62:d0:b3:cd:7b:0f:87:f2: 1b:bf:10:31:e5:d1:20:09:4f:0c:47:73:b1:88:15:83:b0:87: 56:07:82:32:2b:1a:fa:02:17:98:80:c3:03:98:02:c2:06:18: 44:42:d9:f7:2e:a2:a5:93:b9:64:48:3f:21:13:1c:59:87:9a: 8a:a3:fe:d5:d5:d5:b6:85:17:c8:a8:fd:cb:5e:c9:ab:8c:67: 30:f1:6d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+97lTz5Fc7yRmFmyV/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4 NjAwNjgwHhcNMjUxMjA2MTQwMTQzWhcNMjUxMjA3MTQwMTQzWjAzMTEwLwYDVQQD EyhhNDk3YmE2ZDdhZTY0YjMyZWEzMmI1M2MwZmI5YjIzMzY4YmI4N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Ss7eIGsJXYY5mr1yPHJr09F/xG BM6Nj3zZ9EKe0dO/FGrU3u6w6ehin7PREzk9UWE8Eb/6q2jvmVl12vXz22rHqn3y BJnPr3qb8zrLnAq/8hjJJwmmbDh8C3s5aix1EYMKzZei2qMp6GQujyt1x2fpDLWd vCvyV4jdDsHYcJbGuTbtVPrCE1vA5Db7VqZyDtUhp3dklxrZUo0KEEjI51YcahUc PMGw017qL7fE1xGRNUt5kcXyjWJsuLN7s/xwrnNYHa3BTPZquli4/vqYh9cC0kSZ Ni3Qvh3rJwp7H9I8/akMQSbF9U6syfF9CdUz7GSVTp5pLVyrGzM2zeogDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSXum165ksy6jK1PA+5sjNou4fqMB8GA1UdIwQY MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt OWQ3OTRlZTE0ZGQwLzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC8LlK8a +7nUixRkOAYiUV9biaacNA4hc0rQH9JvagM7tHw9PRarF9NDxLSpbRwx8E1110E4 rRPRtRtcbdoiaFfYbAMTwC8LoNUK4W51wPhsT3i6+kx+y2Ykw/LysogSFqdIPDUj xd+RAGV2CvzKbpp7IBDAoA7BWzpcxiZI70Sw2drIKKe641UvmNyklHcAtZWkbmSC ccCcDIegQlXsYwRdtgT1rND/Ew2wl2LQs817D4fyG78QMeXRIAlPDEdzsYgVg7CH VgeCMisa+gIXmIDDA5gCwgYYRELZ9y6ipZO5ZEg/IRMcWYeaiqP+1dXVtoUXyKj9 y17Jq4xnMPFtnA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:16 2025 by rpki-client