This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json) Hash identifier: F60ILpE4DMwWT5xihwnUZk9CHdBE9XZ+tQ2tIwdJFyI= Subject key identifier: 8C:A0:36:38:58:AD:24:8B:4D:85:1E:1E:2C:DD:0E:DA:5E:BA:96:9E Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Certificate serial: 019B0AB5D3E7E21AA663EB5FD2457AECAF4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft Manifest number: 0FCE Signing time: Thu 11 Dec 2025 00:00:46 +0000 Manifest this update: Thu 11 Dec 2025 00:00:46 +0000 Manifest next update: Fri 12 Dec 2025 00:00:46 +0000 Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=) 2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: rEev40DjVcnhwFXXYey3mKCf9eU1Ah5J5awFj8hznRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:b5:d3:e7:e2:1a:a6:63:eb:5f:d2:45:7a:ec:af:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Validity Not Before: Dec 11 00:00:46 2025 GMT Not After : Dec 12 00:00:46 2025 GMT Subject: CN=8ca0363858ad248b4d851e1e2cdd0eda5eba969e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b1:84:d5:a6:6d:d5:2d:83:25:5e:55:8b:11: a0:f0:9c:98:a2:bc:13:f3:05:d3:54:fb:6f:c7:6d: 85:4c:fb:4d:d5:a6:b7:a8:59:53:1d:6f:e6:ee:67: 26:06:f1:0e:cb:3e:4f:f7:69:45:a4:77:42:fb:fb: 95:0e:8d:9d:d3:3b:2f:ea:fe:24:7b:51:d8:4e:0c: 79:1f:e5:f6:9c:d8:67:92:b8:05:29:74:b5:31:6d: b0:14:bf:b1:b4:6d:dd:ef:46:ba:e6:ea:05:1f:ed: 49:6f:b4:d2:44:3b:ee:bd:18:20:6c:02:48:ba:07: f5:a3:eb:3d:8e:77:5d:b5:66:78:93:fb:40:1f:db: f0:fa:2c:96:44:81:00:dc:41:41:bd:ce:05:53:83: 6c:44:86:38:48:06:0a:1e:1c:c7:13:e8:66:6c:a8: 04:a1:11:0c:67:0d:89:e3:eb:fc:ad:f5:bf:57:89: 25:d1:df:8d:c2:2d:7a:7e:1c:52:98:a2:ab:0e:44: 5c:ab:54:44:bd:2f:27:2a:94:3c:d7:d7:3b:f1:d3: a2:4b:d2:61:e0:21:12:53:43:db:b4:bb:6c:2b:74: f3:ba:66:2d:c4:ab:77:55:5e:74:f8:6f:27:05:cf: b9:dc:c6:80:ed:a9:6e:97:49:b7:4c:4d:51:53:de: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:36:38:58:AD:24:8B:4D:85:1E:1E:2C:DD:0E:DA:5E:BA:96:9E X509v3 Authority Key Identifier: keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e8:ad:8d:fe:b7:f7:0e:60:e1:1a:f0:86:a3:ea:4c:77:0f: ab:1d:71:8a:b8:97:ec:e8:fa:d2:87:fd:8d:24:33:65:85:20: 27:c7:03:e9:a7:40:70:f0:21:08:2a:9f:1b:44:a3:48:b1:30: ce:86:88:7d:ff:1c:24:80:28:c9:74:b5:e1:62:a6:9d:53:2f: 31:47:01:6e:6f:5c:11:4b:0b:f6:9b:33:59:55:e8:64:ac:4e: 89:e5:a6:14:4c:d9:e7:b9:57:c3:02:96:97:02:1f:4f:12:78: f8:8d:c6:0a:bf:71:da:e9:15:94:c9:2c:4c:2e:2d:57:3e:6b: 87:0c:30:71:56:b9:4b:c2:ab:43:38:bc:e2:8e:37:8d:cf:2a: a1:46:a5:17:79:d2:75:cb:68:f2:5f:e0:6b:90:24:5d:f7:58: 04:64:b7:59:c0:c2:94:a2:82:5a:41:fc:30:6d:ce:7b:68:95: f8:1c:22:d3:19:d4:d6:41:20:4a:e7:ae:dd:01:56:07:df:75: 4f:b5:f4:f6:19:b2:76:49:52:0a:75:21:bc:73:97:0a:42:45: 76:63:e0:bf:25:44:98:ac:21:f9:57:2f:11:99:b9:cd:30:85: 62:b0:6e:58:55:10:e1:b9:51:a6:33:81:73:6d:46:56:8b:06: 89:d7:a3:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKtdPn4hqmY+tf0kV67K9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTM0MzIzNTU4MWNmNDEwNDE5MGRhN2EwY2ExNzRiOWMw ZDBiZDUwHhcNMjUxMjExMDAwMDQ2WhcNMjUxMjEyMDAwMDQ2WjAzMTEwLwYDVQQD Eyg4Y2EwMzYzODU4YWQyNDhiNGQ4NTFlMWUyY2RkMGVkYTVlYmE5NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bGE1aZt1S2DJV5VixGg8JyYorwT 8wXTVPtvx22FTPtN1aa3qFlTHW/m7mcmBvEOyz5P92lFpHdC+/uVDo2d0zsv6v4k e1HYTgx5H+X2nNhnkrgFKXS1MW2wFL+xtG3d70a65uoFH+1Jb7TSRDvuvRggbAJI ugf1o+s9jnddtWZ4k/tAH9vw+iyWRIEA3EFBvc4FU4NsRIY4SAYKHhzHE+hmbKgE oREMZw2J4+v8rfW/V4kl0d+Nwi16fhxSmKKrDkRcq1REvS8nKpQ819c78dOiS9Jh 4CESU0PbtLtsK3TzumYtxKt3VV50+G8nBc+53MaA7alul0m3TE1RU94kGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIygNjhYrSSLTYUeHizdDtpeupaeMB8GA1UdIwQY MBaAFFKTQyNVgc9BBBkNp6DKF0ucDQvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2Qt ZmNjMjIwNjQ0NTU4LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2QtZmNjMjIwNjQ0NTU4 LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+itjf63 9w5g4RrwhqPqTHcPqx1xiriX7Oj60of9jSQzZYUgJ8cD6adAcPAhCCqfG0SjSLEw zoaIff8cJIAoyXS14WKmnVMvMUcBbm9cEUsL9pszWVXoZKxOieWmFEzZ57lXwwKW lwIfTxJ4+I3GCr9x2ukVlMksTC4tVz5rhwwwcVa5S8KrQzi84o43jc8qoUalF3nS dcto8l/ga5AkXfdYBGS3WcDClKKCWkH8MG3Oe2iV+Bwi0xnU1kEgSueu3QFWB991 T7X09hmydklSCnUhvHOXCkJFdmPgvyVEmKwh+VcvEZm5zTCFYrBuWFUQ4blRpjOB c21GVosGidejfg== -----END CERTIFICATE-----Generated at Thu Dec 11 05:18:57 2025 by rpki-client