This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json) Hash identifier: O4OKyzwXmGe+Ca028b9M2Wumo6QwXs9QYaieOntQHmI= Subject key identifier: DF:26:D7:B2:B5:A7:DD:A6:6F:B2:E3:B0:A5:6C:75:2F:F2:37:92:7A Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260 Certificate serial: 019AF50BC7BC1E02AB01C512A08D1B82764D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft Manifest number: 0696 Signing time: Sat 06 Dec 2025 19:03:01 +0000 Manifest this update: Sat 06 Dec 2025 19:03:01 +0000 Manifest next update: Sun 07 Dec 2025 19:03:01 +0000 Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=) 2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: Ap8hOjVZKEaGPnu+V+6lyE+1lF2AVEJthu9nAi5fQsw=) 3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c7:bc:1e:02:ab:01:c5:12:a0:8d:1b:82:76:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260 Validity Not Before: Dec 6 19:03:01 2025 GMT Not After : Dec 7 19:03:01 2025 GMT Subject: CN=df26d7b2b5a7dda66fb2e3b0a56c752ff237927a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:5c:23:1c:66:4c:65:0c:76:83:97:c8:da: 19:e3:ac:2e:89:29:c0:b5:1e:3b:15:b2:39:00:e4: 89:51:4b:97:e1:38:c6:31:9c:82:03:a8:24:27:12: 67:de:18:cd:4c:4c:d4:80:7f:f2:b6:38:f1:20:00: 48:99:b1:af:9b:e1:67:11:7e:a4:97:16:be:9e:d6: 95:dc:96:03:1c:67:3d:2b:ba:55:b2:c4:b6:eb:ef: b0:5c:46:d4:47:73:e4:22:88:65:10:5a:96:ad:54: 79:60:17:ea:64:af:81:76:d9:5f:a9:9b:95:8a:0c: 5a:d0:3a:61:ad:cf:fd:64:ff:be:1d:7e:35:aa:86: 62:cb:91:5f:49:08:26:41:e1:70:ed:30:b3:4c:ff: 1e:5e:b0:94:c1:41:f9:42:bb:a4:97:07:b9:b7:6a: d9:a0:7d:7c:33:85:c2:f5:fc:e9:0c:3e:de:40:7f: cc:a7:da:c8:e2:60:4e:0a:3c:0f:4a:bb:aa:3a:4a: 2c:07:06:72:0d:10:c5:ae:f6:2e:ab:f2:40:0e:78: 44:8e:02:03:5f:a5:89:68:cd:ea:b4:eb:a1:f3:a2: 3c:ad:53:24:ea:f7:62:0f:cf:5e:d3:af:57:97:3a: 37:50:54:fd:32:27:36:3f:36:e1:b6:1a:c6:d5:c5: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:D7:B2:B5:A7:DD:A6:6F:B2:E3:B0:A5:6C:75:2F:F2:37:92:7A X509v3 Authority Key Identifier: keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4e:da:e6:56:e7:0f:17:2b:b6:49:a9:55:83:29:bd:d1:69: 75:dc:d2:b0:e2:3e:52:44:99:2c:81:08:9d:af:0d:27:b9:e2: 1c:55:26:21:51:6d:7b:76:90:a5:4d:00:d9:93:01:3a:f6:2d: a9:de:88:1f:6a:88:e3:91:96:fd:3f:66:31:25:53:85:1f:45: 92:75:ea:b9:42:80:a5:d8:b7:3d:b4:04:3d:85:47:c5:c3:20: 73:34:ff:70:84:93:c0:29:ac:40:1e:e0:dc:b5:f1:ce:13:89: 05:f0:c6:ee:41:fd:06:05:82:8e:59:4d:f0:5f:38:d7:cb:66: e3:30:ee:f4:4a:99:a4:5e:19:3e:11:32:e7:9c:d4:f8:34:61: 47:7a:2e:a8:25:e8:a8:33:8c:23:e9:de:8a:46:03:81:32:8d: c9:d2:21:a0:ac:ec:83:5f:b5:d2:fe:92:d2:78:21:91:6c:de: 47:36:16:85:91:81:b5:56:31:b0:d4:6e:b1:bc:b0:67:b5:87: b1:ae:d9:33:bb:cb:2e:95:eb:32:04:fb:0a:9e:43:8d:f3:3d: 4a:58:d6:72:24:1d:69:8f:ee:da:73:ce:61:c0:cb:ec:c3:6b: 46:a5:ad:00:db:6e:9b:81:a4:92:e1:1d:ab:d8:e1:52:12:53: 36:d3:f0:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8e8HgKrAcUSoI0bgnZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5 NTkyNjAwHhcNMjUxMjA2MTkwMzAxWhcNMjUxMjA3MTkwMzAxWjAzMTEwLwYDVQQD EyhkZjI2ZDdiMmI1YTdkZGE2NmZiMmUzYjBhNTZjNzUyZmYyMzc5MjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsBcIxxmTGUMdoOXyNoZ46wuiSnA tR47FbI5AOSJUUuX4TjGMZyCA6gkJxJn3hjNTEzUgH/ytjjxIABImbGvm+FnEX6k lxa+ntaV3JYDHGc9K7pVssS26++wXEbUR3PkIohlEFqWrVR5YBfqZK+BdtlfqZuV igxa0Dphrc/9ZP++HX41qoZiy5FfSQgmQeFw7TCzTP8eXrCUwUH5Qruklwe5t2rZ oH18M4XC9fzpDD7eQH/Mp9rI4mBOCjwPSruqOkosBwZyDRDFrvYuq/JADnhEjgID X6WJaM3qtOuh86I8rVMk6vdiD89e069Xlzo3UFT9Mic2PzbhthrG1cU2+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8m17K1p92mb7LjsKVsdS/yN5J6MB8GA1UdIwQY MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt MGYzYzE2NThkMGI3LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3 LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb07a5lbn DxcrtkmpVYMpvdFpddzSsOI+UkSZLIEIna8NJ7niHFUmIVFte3aQpU0A2ZMBOvYt qd6IH2qI45GW/T9mMSVThR9FknXquUKApdi3PbQEPYVHxcMgczT/cISTwCmsQB7g 3LXxzhOJBfDG7kH9BgWCjllN8F8418tm4zDu9EqZpF4ZPhEy55zU+DRhR3ouqCXo qDOMI+neikYDgTKNydIhoKzsg1+10v6S0nghkWzeRzYWhZGBtVYxsNRusbywZ7WH sa7ZM7vLLpXrMgT7Cp5DjfM9SljWciQdaY/u2nPOYcDL7MNrRqWtANtum4GkkuEd q9jhUhJTNtPwHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:50 2025 by rpki-client