This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft File: UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json) Hash identifier: ePKQupTwR9BYA1y6adMrzDXsJpdjPom17wDI5Xq6kcQ= Subject key identifier: 51:80:30:24:70:EE:4E:59:72:3B:31:4E:56:B6:B0:AC:FB:88:81:57 Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB Certificate issuer: /CN=50445e52444423193f495fbcc45774e4c8e47bdb Certificate serial: 019AF19AB9A3B9BC62F7F5B882CEDB362C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft Manifest number: 0EF2 Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: FvoYtcaCYUtGT6m3KrBFmfYjcpsYZWpiKxTVMgIONe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b9:a3:b9:bc:62:f7:f5:b8:82:ce:db:36:2c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=5180302470ee4e59723b314e56b6b0acfb888157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:59:17:2d:40:f3:b7:41:c5:0e:07:47:90: e3:22:18:e7:81:82:40:82:52:d1:fd:bc:c7:0d:12: b1:aa:74:39:93:2b:6f:d3:15:16:c3:1a:78:42:d6: 92:f8:36:ff:05:a0:f6:60:c7:02:0f:66:b3:fd:ac: 78:c1:3c:c4:4f:cc:07:e0:4f:c6:a6:53:8b:46:9e: 17:01:5f:ca:79:d5:bc:1d:5b:00:b8:c9:42:27:fa: 37:5a:9b:dd:2a:79:e1:0c:4d:ab:e5:bb:e8:93:b9: e0:1e:89:69:ef:4a:ab:80:6b:e5:30:15:00:16:b3: e6:ba:33:f3:c7:21:06:dd:20:9e:df:a6:a0:05:2a: d2:c2:bd:7e:ca:db:c5:8f:27:c8:3f:08:ae:0a:34: 33:ac:73:18:7c:db:64:cc:a0:f3:6f:24:2d:6b:dd: 33:4a:ad:06:b0:67:e2:f0:54:6f:f6:11:00:80:78: 52:29:d8:20:41:a5:52:7f:6f:2c:93:9c:17:fe:b0: 41:db:1e:9d:ef:0a:9d:43:2b:0b:ac:53:9c:2a:bf: be:1d:5b:46:49:fd:58:0f:e0:87:c9:8f:ed:b6:6c: 0e:7c:6e:30:81:e4:09:2e:5e:73:39:24:17:a3:2c: b2:2e:24:cf:48:f7:6a:66:9e:7f:a7:2e:7f:0e:ad: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:80:30:24:70:EE:4E:59:72:3B:31:4E:56:B6:B0:AC:FB:88:81:57 X509v3 Authority Key Identifier: keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:02:3d:ce:08:2d:e0:bd:00:6d:d0:10:b8:c8:98:03:02: 89:70:5f:34:67:86:b8:08:0e:78:77:fa:77:51:56:af:0f:d8: 0a:6a:02:fa:c8:ef:0d:91:95:b3:e6:eb:5c:26:73:5b:37:54: 5c:d8:57:d2:10:eb:d3:b2:9e:47:2c:30:fe:a0:a4:51:c3:86: 3b:4a:c7:a4:42:05:3e:e1:14:5c:26:94:f7:54:a9:6c:de:ba: 2d:36:21:64:c8:cf:80:27:0e:22:b2:58:2f:13:d0:5c:a0:0f: 72:3c:a0:a9:3f:5a:bd:0c:6b:90:b4:8c:82:3d:53:68:a9:d4: 60:40:87:9e:20:50:c4:3b:68:7a:49:42:36:e7:13:f9:7d:01: 0d:dd:b1:70:1b:eb:fe:3d:03:19:80:93:b7:7f:5c:2f:2b:00: 89:d5:a7:9f:7e:2d:c5:6e:11:4d:b8:e9:ce:97:00:2f:e5:ec: 59:6f:ff:c0:cf:90:da:5e:26:22:eb:08:4d:8e:f9:b7:af:b2: f4:4e:fb:bf:d7:e8:b3:28:d1:d9:15:ac:31:68:87:9b:da:1f: 96:4d:b0:b1:9b:3c:3a:1d:3a:23:3d:79:d3:03:90:ac:a7:4b: 22:cd:3f:bd:36:13:e8:a6:2e:2d:7e:c0:2b:4c:58:85:84:ac: 28:46:04:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrmjubxi9/W4gs7bNiwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNDQ1ZTUyNDQ0NDIzMTkzZjQ5NWZiY2M0NTc3NGU0Yzhl NDdiZGIwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD Eyg1MTgwMzAyNDcwZWU0ZTU5NzIzYjMxNGU1NmI2YjBhY2ZiODg4MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D9ZFy1A87dBxQ4HR5DjIhjngYJA glLR/bzHDRKxqnQ5kytv0xUWwxp4QtaS+Db/BaD2YMcCD2az/ax4wTzET8wH4E/G plOLRp4XAV/KedW8HVsAuMlCJ/o3WpvdKnnhDE2r5bvok7ngHolp70qrgGvlMBUA FrPmujPzxyEG3SCe36agBSrSwr1+ytvFjyfIPwiuCjQzrHMYfNtkzKDzbyQta90z Sq0GsGfi8FRv9hEAgHhSKdggQaVSf28sk5wX/rBB2x6d7wqdQysLrFOcKr++HVtG Sf1YD+CHyY/ttmwOfG4wgeQJLl5zOSQXoyyyLiTPSPdqZp5/py5/Dq2InQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGAMCRw7k5ZcjsxTla2sKz7iIFXMB8GA1UdIwQY MBaAFFBEXlJERCMZP0lfvMRXdOTI5HvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEt ZjgzOTljMDhlMzliLzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEtZjgzOTljMDhlMzli LzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1UCPc4I LeC9AG3QELjImAMCiXBfNGeGuAgOeHf6d1FWrw/YCmoC+sjvDZGVs+brXCZzWzdU XNhX0hDr07KeRyww/qCkUcOGO0rHpEIFPuEUXCaU91SpbN66LTYhZMjPgCcOIrJY LxPQXKAPcjygqT9avQxrkLSMgj1TaKnUYECHniBQxDtoeklCNucT+X0BDd2xcBvr /j0DGYCTt39cLysAidWnn34txW4RTbjpzpcAL+XsWW//wM+Q2l4mIusITY75t6+y 9E77v9fosyjR2RWsMWiHm9oflk2wsZs8Oh06Iz150wOQrKdLIs0/vTYT6KYuLX7A K0xYhYSsKEYEPg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:32 2025 by rpki-client