This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json) Hash identifier: Vai00AXZCEPcakAHpwFgeR3qAU0ueSCOLQguTI3I7yQ= Subject key identifier: 21:3E:8B:F5:44:E9:7D:B7:D5:B5:BC:A6:A8:F9:5D:0B:05:12:23:B9 Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b Certificate serial: 019B19BB3AF2851462EA3693AB6EBAF53203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft Manifest number: 14C0 Signing time: Sat 13 Dec 2025 22:00:59 +0000 Manifest this update: Sat 13 Dec 2025 22:00:59 +0000 Manifest next update: Sun 14 Dec 2025 22:00:59 +0000 Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: vATG2pEVAH1YWQ64Bm2nHfpq6YKFFmGSq+6vR5ZtL7c=) 2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:3a:f2:85:14:62:ea:36:93:ab:6e:ba:f5:32:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50480549481968d43406127653f780abbf9a117b Validity Not Before: Dec 13 22:00:59 2025 GMT Not After : Dec 14 22:00:59 2025 GMT Subject: CN=213e8bf544e97db7d5b5bca6a8f95d0b051223b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:42:fc:4e:9b:a6:b7:aa:81:58:97:fb:4b: 47:e6:b8:be:0f:a4:cf:e3:5e:bd:90:48:d0:15:ea: 05:be:b9:e4:5c:c8:dc:36:e6:2b:d6:f0:46:77:98: 02:73:22:45:2c:ac:50:f9:19:8f:e0:eb:53:1f:3f: bf:e0:8b:4d:61:5a:fe:bc:d5:c2:e2:2f:ea:90:f6: b4:af:c0:e5:b8:ba:fc:47:d5:32:85:8b:0a:9d:f6: df:bf:8f:17:41:e8:1f:40:68:1e:e6:ad:4c:a1:8c: 09:4e:1b:98:cc:fe:ee:28:d0:f8:b3:dd:ae:5e:05: 05:79:6c:21:2c:5d:16:20:7f:3c:41:5b:8e:9b:0a: 92:29:b5:2c:74:93:f1:9d:78:d2:74:3d:0f:f0:8f: 65:74:ff:0c:cf:c8:ad:96:0e:82:12:b4:8a:50:7a: 20:7c:38:a6:0c:a3:68:1d:73:f6:27:28:a7:3f:6f: ea:73:2c:1c:90:f3:ac:81:80:f3:c1:04:0c:ec:3b: 3b:2b:71:97:b6:2e:e5:fa:9b:e7:96:8c:19:21:99: 40:84:4d:4d:a1:69:81:08:33:88:0d:70:26:3b:58: dd:9b:20:53:e7:7e:b0:c6:ae:db:48:e7:e9:fa:37: 32:7a:1f:83:b7:7d:22:4e:e0:61:1a:bb:8f:6d:77: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3E:8B:F5:44:E9:7D:B7:D5:B5:BC:A6:A8:F9:5D:0B:05:12:23:B9 X509v3 Authority Key Identifier: keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4a:1d:fe:62:53:ca:d4:ec:e8:86:be:0c:28:6a:7f:bf:a9: c9:06:c6:1c:0b:e2:32:85:e9:ec:6d:e9:3d:c3:73:4a:a5:9b: bd:69:82:67:db:1d:f8:b3:df:61:31:4f:96:dd:23:c6:65:9a: 82:b1:40:c8:ad:c6:10:d6:9f:36:ab:85:06:db:f2:dc:29:29: f5:c6:79:93:4c:b2:93:bb:d8:e6:79:bc:b3:b6:e3:45:51:de: 41:32:88:06:19:3c:3a:47:69:a9:45:7b:67:53:94:3d:69:39: 73:0b:6e:2a:54:0c:21:ad:2a:c2:8a:1b:09:43:17:6f:c6:c5: 3e:60:6d:ab:cc:45:e1:81:bf:f1:f2:01:c0:e5:33:a5:27:88: 9f:64:71:21:c1:be:9c:b6:cf:56:12:96:45:ad:08:ef:e3:68: a6:21:30:43:8b:a4:62:96:d5:93:04:2a:8a:dd:02:54:b2:62: cc:cb:81:dd:69:08:22:15:ec:79:55:4d:fd:db:f1:63:53:66: b9:17:b2:e1:9c:d0:f2:5c:63:2b:cc:dd:7d:9c:f8:30:e1:a3: 3e:ee:81:6e:62:cb:f4:14:01:48:50:b5:7b:0b:49:ae:8f:96: c4:9d:84:52:44:f4:7e:2e:b3:1e:24:37:fd:97:26:b2:0c:06: 9d:dd:41:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuzryhRRi6jaTq2669TIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNDgwNTQ5NDgxOTY4ZDQzNDA2MTI3NjUzZjc4MGFiYmY5 YTExN2IwHhcNMjUxMjEzMjIwMDU5WhcNMjUxMjE0MjIwMDU5WjAzMTEwLwYDVQQD EygyMTNlOGJmNTQ0ZTk3ZGI3ZDViNWJjYTZhOGY5NWQwYjA1MTIyM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrVC/E6bpreqgViX+0tH5ri+D6TP 4169kEjQFeoFvrnkXMjcNuYr1vBGd5gCcyJFLKxQ+RmP4OtTHz+/4ItNYVr+vNXC 4i/qkPa0r8DluLr8R9UyhYsKnfbfv48XQegfQGge5q1MoYwJThuYzP7uKND4s92u XgUFeWwhLF0WIH88QVuOmwqSKbUsdJPxnXjSdD0P8I9ldP8Mz8itlg6CErSKUHog fDimDKNoHXP2JyinP2/qcywckPOsgYDzwQQM7Ds7K3GXti7l+pvnlowZIZlAhE1N oWmBCDOIDXAmO1jdmyBT536wxq7bSOfp+jcyeh+Dt30iTuBhGruPbXeSFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE+i/VE6X231bW8pqj5XQsFEiO5MB8GA1UdIwQY MBaAFFBIBUlIGWjUNAYSdlP3gKu/mhF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2Yt NzQyOWIyMjc3MmMzLzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2YtNzQyOWIyMjc3MmMz LzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkod/mJT ytTs6Ia+DChqf7+pyQbGHAviMoXp7G3pPcNzSqWbvWmCZ9sd+LPfYTFPlt0jxmWa grFAyK3GENafNquFBtvy3Ckp9cZ5k0yyk7vY5nm8s7bjRVHeQTKIBhk8OkdpqUV7 Z1OUPWk5cwtuKlQMIa0qwoobCUMXb8bFPmBtq8xF4YG/8fIBwOUzpSeIn2RxIcG+ nLbPVhKWRa0I7+NopiEwQ4ukYpbVkwQqit0CVLJizMuB3WkIIhXseVVN/dvxY1Nm uRey4ZzQ8lxjK8zdfZz4MOGjPu6BbmLL9BQBSFC1ewtJro+WxJ2EUkT0fi6zHiQ3 /ZcmsgwGnd1BXQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:50 2025 by rpki-client