This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json) Hash identifier: e7SBXvtKIcMQMjecEEqb6ZsgooP6iPs9AxtzQ0ZEzTA= Subject key identifier: 89:23:1A:22:7A:56:F1:40:62:07:12:06:97:0B:C7:F4:83:B9:EF:9B Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068 Certificate serial: 019B33B1A34F1957FA3BEDB2111F004045F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft Manifest number: 03BF Signing time: Thu 18 Dec 2025 23:00:38 +0000 Manifest this update: Thu 18 Dec 2025 23:00:38 +0000 Manifest next update: Fri 19 Dec 2025 23:00:38 +0000 Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: tSkWDxCiK5pLXcTQNxegbrVyT6XYunSRDw9yd1eUrBY=) 2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:a3:4f:19:57:fa:3b:ed:b2:11:1f:00:40:45:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068 Validity Not Before: Dec 18 23:00:38 2025 GMT Not After : Dec 19 23:00:38 2025 GMT Subject: CN=89231a227a56f14062071206970bc7f483b9ef9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:41:e4:69:47:b1:60:3d:56:d2:9c:44:02: 9e:36:d8:7e:01:84:ff:4c:b2:80:7a:e5:63:0f:d6: fe:9b:02:1c:e0:93:3e:65:3b:fd:be:d9:b4:59:b0: 33:f9:b0:7b:7f:5e:49:2d:28:12:8a:a0:6a:12:38: bd:d9:5c:60:80:99:92:13:28:ec:31:4c:88:d3:4e: 24:2f:fb:c6:83:e4:24:fc:1a:d1:d9:ce:26:7f:59: d2:e7:3b:7f:59:f4:93:5f:18:5a:54:6f:c2:ea:8a: 21:21:9a:3f:18:d1:fa:70:04:4a:3c:52:90:5c:5d: 33:99:06:46:d7:ea:ed:3e:a5:66:82:f3:59:f9:2a: c8:ce:43:72:09:d4:64:c5:8a:cd:ca:8f:79:81:37: 8d:af:11:be:99:f3:85:10:17:a6:39:94:6c:26:81: 2d:fc:0f:0a:fe:22:47:0e:6b:ff:4b:7d:64:15:e3: ff:9e:68:b9:3a:76:14:d2:43:73:46:08:12:46:b4: f2:76:9c:3e:aa:7d:76:25:2f:d9:4f:3c:91:ca:18: 9d:2d:81:f2:5f:85:ed:e1:e8:c5:a4:c2:b1:69:7a: 5a:99:46:35:ce:e9:45:e3:a4:e8:9f:24:e9:1b:74: 84:c0:20:32:c7:23:0f:b3:4e:14:24:13:08:82:1c: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:23:1A:22:7A:56:F1:40:62:07:12:06:97:0B:C7:F4:83:B9:EF:9B X509v3 Authority Key Identifier: keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2e:6d:e3:97:b7:e4:46:c7:84:5c:c6:24:1f:21:d3:85:e4: 34:e7:05:9f:5b:b0:04:9b:99:2c:97:0c:13:e2:d8:43:08:60: b5:7b:4d:4b:cd:12:09:98:ec:d5:ea:08:03:89:46:51:3b:d4: ce:64:bc:ac:bd:1b:a4:76:0a:05:75:2a:70:fd:00:ce:58:5f: ed:8d:e6:03:4d:fc:6e:2b:36:88:15:6a:e1:95:70:b5:9a:54: 9e:47:02:99:75:db:5c:0a:37:bc:17:b8:37:42:3d:2a:fe:44: f9:e0:ed:e0:6c:fb:bf:c8:15:e3:f6:a9:80:f9:20:3c:b3:98: 55:ad:02:44:b9:a7:76:12:04:9b:23:c1:6f:ab:84:e4:54:1e: a0:a8:a4:b5:f8:20:61:3a:54:53:48:df:68:15:51:28:e7:f8: a3:5d:fe:8c:be:bd:be:55:3b:01:28:46:2e:7e:db:b2:a3:da: 6a:62:f7:43:85:01:a6:91:47:89:9a:cc:48:03:d2:c6:f6:50: 2a:f2:62:0a:4a:b1:9e:85:96:db:c0:8a:1c:d0:2c:d3:68:c7: be:1b:3c:7f:59:80:c6:a6:a8:c4:b0:3c:49:dd:a6:64:15:57: 83:7d:40:bd:1e:ca:9e:fe:8c:7b:7d:a6:b4:f5:39:fe:38:77: 33:ae:7f:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsaNPGVf6O+2yER8AQEX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4 NjAwNjgwHhcNMjUxMjE4MjMwMDM4WhcNMjUxMjE5MjMwMDM4WjAzMTEwLwYDVQQD Eyg4OTIzMWEyMjdhNTZmMTQwNjIwNzEyMDY5NzBiYzdmNDgzYjllZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSBB5GlHsWA9VtKcRAKeNth+AYT/ TLKAeuVjD9b+mwIc4JM+ZTv9vtm0WbAz+bB7f15JLSgSiqBqEji92VxggJmSEyjs MUyI004kL/vGg+Qk/BrR2c4mf1nS5zt/WfSTXxhaVG/C6oohIZo/GNH6cARKPFKQ XF0zmQZG1+rtPqVmgvNZ+SrIzkNyCdRkxYrNyo95gTeNrxG+mfOFEBemOZRsJoEt /A8K/iJHDmv/S31kFeP/nmi5OnYU0kNzRggSRrTydpw+qn12JS/ZTzyRyhidLYHy X4Xt4ejFpMKxaXpamUY1zulF46TonyTpG3SEwCAyxyMPs04UJBMIghwjKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkjGiJ6VvFAYgcSBpcLx/SDue+bMB8GA1UdIwQY MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt OWQ3OTRlZTE0ZGQwLzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC5t45e3 5EbHhFzGJB8h04XkNOcFn1uwBJuZLJcME+LYQwhgtXtNS80SCZjs1eoIA4lGUTvU zmS8rL0bpHYKBXUqcP0Azlhf7Y3mA038bis2iBVq4ZVwtZpUnkcCmXXbXAo3vBe4 N0I9Kv5E+eDt4Gz7v8gV4/apgPkgPLOYVa0CRLmndhIEmyPBb6uE5FQeoKiktfgg YTpUU0jfaBVRKOf4o13+jL69vlU7AShGLn7bsqPaamL3Q4UBppFHiZrMSAPSxvZQ KvJiCkqxnoWW28CKHNAs02jHvhs8f1mAxqaoxLA8Sd2mZBVXg31AvR7Knv6Me32m tPU5/jh3M65/CA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:20 2025 by rpki-client