This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json) Hash identifier: w538tl+v4TIYuIGPHzqy1X905ERKXCHRJW6GbaRL2jE= Subject key identifier: 80:EF:3B:B5:2F:9E:86:5F:C8:09:AE:D9:CB:6F:FB:50:5C:90:7D:ED Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b Certificate serial: 019AF12DF35FB5F8A32487F20C6C74DBD792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft Manifest number: 0A38 Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: FPveZDQN1HVxP6OF8U2FsgQVlYh9pNynLaHbscBB1mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f3:5f:b5:f8:a3:24:87:f2:0c:6c:74:db:d7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=80ef3bb52f9e865fc809aed9cb6ffb505c907ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:30:7a:b1:46:e2:aa:a4:b8:4f:a8:e0:9c: 88:c6:b5:d4:2e:ab:81:77:7d:60:9f:db:d8:1a:cc: 31:59:33:1d:da:a6:6b:ab:2a:42:51:ae:8e:45:60: 45:e4:a5:68:e1:13:cc:9f:2a:6c:a6:bf:0a:5a:48: 46:52:97:28:aa:34:1a:a4:97:c3:50:e9:52:20:94: ae:09:33:00:41:17:b8:77:2f:b3:77:45:89:bb:0d: bb:bb:cd:d4:8e:f1:5f:23:6e:7c:90:3c:7e:33:b9: 5b:e5:2b:67:5b:04:b4:d5:1a:16:72:19:a5:26:a5: e1:fd:36:ad:43:f9:a5:0b:9a:17:e3:0d:2c:a1:4a: fd:bd:27:b8:62:a4:72:45:3f:0b:14:6f:7d:8f:c2: 86:5b:0b:d8:da:4b:f9:93:d6:f5:a9:11:b7:16:79: 8d:19:a3:bf:92:10:5f:35:a3:a3:68:5a:92:85:8f: dd:35:d2:cb:9b:2b:7c:3e:a0:8b:b1:72:80:db:95: 93:6a:cc:18:34:00:1d:5d:9a:06:56:cc:1b:fa:c9: 83:f4:a2:57:f3:29:8a:67:25:f3:a1:05:c4:f2:a1: 2b:4f:51:af:99:24:57:39:e2:97:6a:13:70:6c:05: 7b:ca:a7:00:b8:83:cf:8a:1f:7c:94:93:9f:ce:7d: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EF:3B:B5:2F:9E:86:5F:C8:09:AE:D9:CB:6F:FB:50:5C:90:7D:ED X509v3 Authority Key Identifier: keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:14:25:bd:ec:b6:1f:ea:70:18:cb:1e:64:fb:47:ef:7d:ca: 2d:78:e8:7a:4f:f9:51:b4:ec:20:d9:99:1f:53:01:3e:be:8d: d1:f8:71:fa:b3:0a:69:4a:7c:41:a9:06:c0:c0:c8:72:30:64: bc:c0:cf:02:62:68:b8:77:70:1b:cf:68:1a:3d:ca:fb:c2:a2: f2:dd:8b:06:50:1b:e7:ae:77:f3:83:9b:7a:47:a8:31:ab:33: 96:fe:4a:2e:12:d0:76:31:05:08:0e:d0:e8:5e:f7:92:25:80: 5a:90:70:80:c4:bb:a3:fc:04:03:14:3e:18:6a:b5:db:73:e9: 9e:64:47:63:5b:57:f9:9c:29:f9:57:a5:53:a0:f3:e2:96:cc: 26:01:a9:14:0a:8a:da:c9:06:50:39:6e:bf:af:d2:b8:fe:b7: eb:d3:4b:4f:8f:6e:5f:2e:69:70:21:3e:ae:79:da:55:a0:57: 83:50:c1:4b:03:14:72:b0:57:07:76:bb:14:a9:54:46:9f:9c: f8:9e:f6:f3:96:bd:fc:a1:68:e0:84:6b:46:47:8f:3c:98:a7: 86:36:c0:01:66:4a:90:39:16:82:22:02:28:7a:7b:2e:35:6e: ad:87:bf:46:5f:70:0f:6b:bc:32:59:b5:c5:08:84:e0:ac:c7: ab:e6:af:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfNftfijJIfyDGx029eSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzVhYjVlZTgxZjc0ZmNjYTRhMGMxM2U5NzJlYzFjZmU5 Njc5M2IwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD Eyg4MGVmM2JiNTJmOWU4NjVmYzgwOWFlZDljYjZmZmI1MDVjOTA3ZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IcwerFG4qqkuE+o4JyIxrXULquB d31gn9vYGswxWTMd2qZrqypCUa6ORWBF5KVo4RPMnypspr8KWkhGUpcoqjQapJfD UOlSIJSuCTMAQRe4dy+zd0WJuw27u83UjvFfI258kDx+M7lb5StnWwS01RoWchml JqXh/TatQ/mlC5oX4w0soUr9vSe4YqRyRT8LFG99j8KGWwvY2kv5k9b1qRG3FnmN GaO/khBfNaOjaFqShY/dNdLLmyt8PqCLsXKA25WTaswYNAAdXZoGVswb+smD9KJX 8ymKZyXzoQXE8qErT1GvmSRXOeKXahNwbAV7yqcAuIPPih98lJOfzn35lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDvO7UvnoZfyAmu2ctv+1BckH3tMB8GA1UdIwQY MBaAFLo1q17oH3T8ykoME+ly7Bz+lnk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWpXclh1Z2ZkUHpLU2d3VDZYTHNIUDZXZVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jMGJkNjYtZWVkMi00MjlmLWE2Yzct MTVlZmM2Nzg1YjE2LzEvdWpXclh1Z2ZkUHpLU2d3VDZYTHNIUDZXZVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jMGJkNjYtZWVkMi00MjlmLWE2YzctMTVlZmM2Nzg1YjE2 LzEvdWpXclh1Z2ZkUHpLU2d3VDZYTHNIUDZXZVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRQlvey2 H+pwGMseZPtH733KLXjoek/5UbTsINmZH1MBPr6N0fhx+rMKaUp8QakGwMDIcjBk vMDPAmJouHdwG89oGj3K+8Ki8t2LBlAb565384ObekeoMaszlv5KLhLQdjEFCA7Q 6F73kiWAWpBwgMS7o/wEAxQ+GGq123PpnmRHY1tX+Zwp+VelU6Dz4pbMJgGpFAqK 2skGUDluv6/SuP6369NLT49uXy5pcCE+rnnaVaBXg1DBSwMUcrBXB3a7FKlURp+c +J7285a9/KFo4IRrRkePPJinhjbAAWZKkDkWgiICKHp7LjVurYe/Rl9wD2u8Mlm1 xQiE4KzHq+avQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:12 2025 by rpki-client