This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft File: UFzWGp9t6drMDTySFwbffVCvvW8.mft (raw, json) Hash identifier: 2ZcljCF0M9ODySwCggO00pmjMnWxiR79dDOUHuQlwnk= Subject key identifier: EB:C5:C4:60:57:71:A8:AA:24:3E:52:03:07:9C:E2:76:2E:27:BB:A9 Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F Certificate issuer: /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f Certificate serial: 019B1E3CAF1EC893634D8BB549E5B96AC498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft Manifest number: 0DCC Signing time: Sun 14 Dec 2025 19:00:52 +0000 Manifest this update: Sun 14 Dec 2025 19:00:52 +0000 Manifest next update: Mon 15 Dec 2025 19:00:52 +0000 Files and hashes: 1: 02fZd277xqKcuTMYmhFfbwx9HwA.roa (hash: bemKy7xu5/Ii5zazW11+IHavu8JMVH9QIzpKn7l6Pf4=) 2: UFzWGp9t6drMDTySFwbffVCvvW8.crl (hash: euK59WUsrUDMDWQtX6pk29kHgq24KXvUIYc3hI3xzmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:af:1e:c8:93:63:4d:8b:b5:49:e5:b9:6a:c4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f Validity Not Before: Dec 14 19:00:52 2025 GMT Not After : Dec 15 19:00:52 2025 GMT Subject: CN=ebc5c4605771a8aa243e5203079ce2762e27bba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:ee:56:a6:c4:6b:0b:39:3f:24:75:57:f3: bd:30:1d:0f:c3:2b:0f:d5:be:c6:7e:57:0a:74:75: 41:3c:d1:62:3a:2b:63:f5:ba:b7:c1:e5:6c:fb:fb: 40:34:94:4e:bf:43:d9:21:a5:ef:fe:db:55:03:db: 7c:91:f8:f6:92:ce:da:f2:51:bb:32:30:9b:b7:fc: a2:3a:d6:e1:9a:84:ef:d0:ee:fe:d8:4b:7b:26:0e: 99:a3:ae:81:fd:90:76:08:1e:56:be:17:91:a4:1a: 68:7e:e6:a5:ef:d7:66:04:88:d1:77:2b:11:66:e5: 22:be:98:7a:c3:02:6a:db:76:a9:37:7e:34:9d:55: 14:7e:75:c1:7b:b7:cd:29:c0:bf:5e:3c:9d:1b:99: 4f:27:0c:77:19:a8:ae:a3:09:3b:0b:c7:48:41:23: 47:b7:95:35:b0:f0:ed:8c:b2:aa:12:f0:98:c6:bd: e7:1d:a2:fe:5c:a8:39:a0:1c:28:f0:8c:e6:c5:0f: 5a:08:d3:56:32:11:09:f7:ee:7b:ae:fb:9d:3a:c0: fb:7b:a7:36:e6:10:6e:11:d3:aa:65:b9:76:01:85: 6a:e5:94:14:7f:22:79:74:b8:92:e9:ba:47:bf:af: d4:87:a5:a5:7b:75:33:35:6f:43:e8:8b:fb:6e:b0: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C5:C4:60:57:71:A8:AA:24:3E:52:03:07:9C:E2:76:2E:27:BB:A9 X509v3 Authority Key Identifier: keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:63:a2:4f:9c:c7:4b:53:6a:0c:45:d5:91:81:95:67:ad:92: 52:b6:43:b9:ff:fa:aa:4b:76:4b:34:f6:c4:20:b3:79:ef:a4: 6a:08:d4:ff:8d:cc:53:f0:3a:ff:00:00:46:c6:e8:4b:65:3d: 25:29:6f:8d:6d:e5:7a:de:89:f7:e5:3f:9c:b5:d4:bb:d0:c2: 99:67:5d:04:22:0a:47:bf:73:d5:bc:a3:55:6d:bc:cd:ea:6a: 69:eb:e4:df:a4:0c:45:53:2b:91:e1:cc:40:77:51:18:ff:63: 0a:ed:ab:18:f5:7d:a5:88:dd:35:3e:84:ff:15:43:0a:c0:5a: 92:b2:1b:a8:5e:0a:6f:4a:aa:c4:c3:45:02:8b:e9:da:41:a0: 57:74:c1:67:46:1f:c1:c8:8b:3b:fb:48:d1:14:6c:14:7f:df: 42:9e:58:ff:73:e0:71:e8:0c:f7:b3:97:89:a0:fe:b2:e1:27: 81:a5:8b:36:6c:36:7b:e5:62:f6:6e:0d:72:1a:94:64:76:e7: 6f:bc:8c:37:f1:3b:98:dc:63:66:d5:7e:27:06:59:2d:26:96: ea:be:2d:3e:f8:c6:5b:ea:3f:ba:c0:f9:65:b7:c0:2c:24:a9: ab:1b:5e:7c:af:38:ae:67:fe:4a:9a:f6:ca:14:c2:89:e7:db: d2:0d:6c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePK8eyJNjTYu1SeW5asSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWNkNjFhOWY2ZGU5ZGFjYzBkM2M5MjE3MDZkZjdkNTBh ZmJkNmYwHhcNMjUxMjE0MTkwMDUyWhcNMjUxMjE1MTkwMDUyWjAzMTEwLwYDVQQD EyhlYmM1YzQ2MDU3NzFhOGFhMjQzZTUyMDMwNzljZTI3NjJlMjdiYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrfuVqbEaws5PyR1V/O9MB0PwysP 1b7GflcKdHVBPNFiOitj9bq3weVs+/tANJROv0PZIaXv/ttVA9t8kfj2ks7a8lG7 MjCbt/yiOtbhmoTv0O7+2Et7Jg6Zo66B/ZB2CB5WvheRpBpofual79dmBIjRdysR ZuUivph6wwJq23apN340nVUUfnXBe7fNKcC/XjydG5lPJwx3Gaiuowk7C8dIQSNH t5U1sPDtjLKqEvCYxr3nHaL+XKg5oBwo8IzmxQ9aCNNWMhEJ9+57rvudOsD7e6c2 5hBuEdOqZbl2AYVq5ZQUfyJ5dLiS6bpHv6/Uh6Wle3UzNW9D6Iv7brBiVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvFxGBXcaiqJD5SAwec4nYuJ7upMB8GA1UdIwQY MBaAFFBc1hqfbenazA08khcG331Qr71vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMt ZTAxMjM3YjVmYzEwLzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMtZTAxMjM3YjVmYzEw LzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2OiT5zH S1NqDEXVkYGVZ62SUrZDuf/6qkt2SzT2xCCzee+kagjU/43MU/A6/wAARsboS2U9 JSlvjW3let6J9+U/nLXUu9DCmWddBCIKR79z1byjVW28zepqaevk36QMRVMrkeHM QHdRGP9jCu2rGPV9pYjdNT6E/xVDCsBakrIbqF4Kb0qqxMNFAovp2kGgV3TBZ0Yf wciLO/tI0RRsFH/fQp5Y/3PgcegM97OXiaD+suEngaWLNmw2e+Vi9m4NchqUZHbn b7yMN/E7mNxjZtV+JwZZLSaW6r4tPvjGW+o/usD5ZbfALCSpqxtefK84rmf+Spr2 yhTCiefb0g1siw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:31 2025 by rpki-client