This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json) Hash identifier: eW7MUh3Zi3nQBW4t/sEuMxE+2U0jhZi6I861dlh0Vbw= Subject key identifier: 97:02:9D:99:BA:AA:29:38:77:E7:61:64:C2:9C:39:B8:F8:60:01:4B Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64 Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64 Certificate serial: 019AF3F75F7A39774B0E0DC531587E0A3679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft Manifest number: 12F6 Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: 9ezqj8VyjtEMelj85GeBwwc6TWqlzefpZyJWDNKBpH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5f:7a:39:77:4b:0e:0d:c5:31:58:7e:0a:36:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64 Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=97029d99baaa293877e76164c29c39b8f860014b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:be:f0:80:3b:b8:0d:a9:1a:52:8d:b5:b4: 77:9f:72:94:ee:4f:a7:a4:b0:fc:dd:80:1f:07:7a: 56:19:65:98:49:7b:4d:31:95:5d:b1:ec:2b:c9:33: 91:a2:af:cf:e1:9e:4a:ce:f8:ce:33:c8:80:d8:ef: 7a:61:8a:ba:b1:3c:8e:b4:64:98:7c:91:9c:54:b7: 80:7d:57:5f:03:2f:6a:92:65:6b:c8:4f:8e:dc:c5: d6:90:db:10:e2:66:95:36:d2:a4:e0:39:80:8a:e6: bd:5b:c3:47:ce:a6:e4:5b:84:8b:63:a4:d7:3b:13: cb:8b:36:e1:12:27:fd:ee:a4:77:d3:59:4c:33:94: 01:26:7b:b7:60:50:e3:c6:7f:77:e2:db:67:5a:94: 0a:aa:68:c3:1c:a0:7e:2c:38:bd:9b:0c:ed:01:02: e6:f1:91:2f:f9:c5:6f:29:4b:9e:65:a9:d5:c3:c1: 10:6d:8d:1b:a7:89:19:db:03:8a:ed:af:87:f3:19: 75:b5:c4:6c:38:32:63:da:8b:05:f6:4a:a9:db:f7: fc:ea:d1:61:24:42:db:c5:4f:4c:cc:be:04:24:e4: fd:26:4e:3a:e2:85:fe:d7:e3:2b:51:d6:07:dc:b8: 7a:7a:c2:db:78:4d:25:89:6d:bd:d6:5e:c2:25:3b: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:02:9D:99:BA:AA:29:38:77:E7:61:64:C2:9C:39:B8:F8:60:01:4B X509v3 Authority Key Identifier: keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:aa:88:55:46:c3:b5:dd:4e:4a:22:07:92:58:35:61:0e:be: f5:b4:90:06:9d:b3:a8:9b:77:60:7b:a6:18:d7:bd:8d:4d:ab: f0:c4:95:20:4a:6d:b0:be:e8:fb:ea:bc:55:23:95:ad:3b:93: 45:bb:15:56:d5:43:97:f9:02:10:49:66:f8:2a:19:18:4b:39: 13:41:f7:09:39:c3:4f:ef:25:28:63:47:c4:6f:b8:b1:e8:26: 8c:b9:c7:f8:09:43:ed:4b:6a:60:50:e9:87:0e:c2:40:9c:9d: a0:28:97:8c:37:ee:ab:30:a9:56:18:22:0d:22:fa:7b:d8:f7: 42:44:71:d4:bc:5c:71:d4:b5:07:ee:52:5c:2d:a8:34:cf:55: 15:11:39:b2:12:f1:5f:61:f2:dd:29:ed:64:e0:93:20:7f:8e: 3e:de:75:96:99:9d:05:5f:68:e3:69:bf:c8:fb:4f:36:c3:bb: 40:b0:20:b4:e2:24:12:5f:57:91:a6:36:08:32:af:c5:fd:26: a2:5a:02:83:0a:5e:27:bf:f7:bd:6c:90:8e:76:31:55:a2:f8: 27:a5:a0:3b:d7:09:90:d5:9d:9c:d8:0c:6a:e8:4e:a9:fd:ef: d4:73:17:b2:7e:87:cb:25:e5:7d:53:cd:a7:08:1b:10:6b:2c: 8b:a7:1e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9196OXdLDg3FMVh+CjZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzM1ZDhmYmEyYmM3MzM5ODM5NWZiZGQzZTBkNmYzZmYz ZDFiNjQwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD Eyg5NzAyOWQ5OWJhYWEyOTM4NzdlNzYxNjRjMjljMzliOGY4NjAwMTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnS+8IA7uA2pGlKNtbR3n3KU7k+n pLD83YAfB3pWGWWYSXtNMZVdsewryTORoq/P4Z5KzvjOM8iA2O96YYq6sTyOtGSY fJGcVLeAfVdfAy9qkmVryE+O3MXWkNsQ4maVNtKk4DmAiua9W8NHzqbkW4SLY6TX OxPLizbhEif97qR301lMM5QBJnu3YFDjxn934ttnWpQKqmjDHKB+LDi9mwztAQLm 8ZEv+cVvKUueZanVw8EQbY0bp4kZ2wOK7a+H8xl1tcRsODJj2osF9kqp2/f86tFh JELbxU9MzL4EJOT9Jk464oX+1+MrUdYH3Lh6esLbeE0liW291l7CJTuqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcCnZm6qik4d+dhZMKcObj4YAFLMB8GA1UdIwQY MBaAFFEzXY+6K8czmDlfvdPg1vP/PRtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUt YmZhOTY5ZTU2N2IxLzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUtYmZhOTY5ZTU2N2Ix LzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqqIVUbD td1OSiIHklg1YQ6+9bSQBp2zqJt3YHumGNe9jU2r8MSVIEptsL7o++q8VSOVrTuT RbsVVtVDl/kCEElm+CoZGEs5E0H3CTnDT+8lKGNHxG+4segmjLnH+AlD7UtqYFDp hw7CQJydoCiXjDfuqzCpVhgiDSL6e9j3QkRx1LxccdS1B+5SXC2oNM9VFRE5shLx X2Hy3SntZOCTIH+OPt51lpmdBV9o42m/yPtPNsO7QLAgtOIkEl9XkaY2CDKvxf0m oloCgwpeJ7/3vWyQjnYxVaL4J6WgO9cJkNWdnNgMauhOqf3v1HMXsn6HyyXlfVPN pwgbEGssi6ceaA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:06 2025 by rpki-client