This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json) Hash identifier: cTQX3IjPABKt9qANTbiF98oqKznOj4cVnljb+6Gk+qY= Subject key identifier: 93:CC:EC:59:FC:F6:B0:5F:9D:99:BF:C7:EC:03:E8:A4:ED:06:B3:C0 Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38 Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938 Certificate serial: 019B37FCB533D5E5DB17DED05335AABE6181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft Manifest number: 0E01 Signing time: Fri 19 Dec 2025 19:01:06 +0000 Manifest this update: Fri 19 Dec 2025 19:01:06 +0000 Manifest next update: Sat 20 Dec 2025 19:01:06 +0000 Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: Q2OhFgFl1jl7d70EWrNlGoRdNgO/7F9+Yfk3O3u13Zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:b5:33:d5:e5:db:17:de:d0:53:35:aa:be:61:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938 Validity Not Before: Dec 19 19:01:06 2025 GMT Not After : Dec 20 19:01:06 2025 GMT Subject: CN=93ccec59fcf6b05f9d99bfc7ec03e8a4ed06b3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:c3:3b:77:c7:ca:78:0e:e0:d8:45:21:bf: 12:d9:57:76:f0:75:fb:e0:47:bf:49:eb:74:d7:78: 1c:7a:93:a6:21:76:41:f6:26:e7:aa:da:5c:3c:7e: 52:dc:a5:4c:c6:28:53:30:02:ca:51:3f:e7:6b:29: 22:32:97:53:93:20:bd:68:e9:d4:73:26:17:f9:e2: 5f:f9:6f:61:69:47:0f:50:fc:35:bb:63:0f:cf:4c: cf:c0:33:9e:da:d9:1a:c5:23:d8:24:29:4c:78:cf: b2:88:b1:dc:ad:70:52:9f:77:4a:f8:0e:19:db:66: 98:ba:d3:4b:23:1b:ae:bd:59:66:89:8e:ad:8c:8e: 3a:5e:4b:c7:60:ec:b0:2e:17:42:47:c1:8e:19:05: 36:a1:34:58:64:8b:bc:26:1d:c8:48:15:99:8e:81: 02:f3:14:84:6a:c4:08:a9:f5:da:5e:58:86:52:00: 85:cd:c3:c7:3e:e2:35:63:6a:ce:8e:4e:89:52:e9: b8:7f:f2:a3:f4:d1:16:a6:be:7d:b0:59:60:2f:f8: 04:8a:41:3d:7a:bc:19:99:d0:54:e2:26:95:43:04: 73:f0:e9:1e:1a:8b:e0:af:78:05:d9:c2:83:80:ac: 56:3f:d7:79:ae:1c:a7:af:89:38:1e:f0:b4:ed:65: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CC:EC:59:FC:F6:B0:5F:9D:99:BF:C7:EC:03:E8:A4:ED:06:B3:C0 X509v3 Authority Key Identifier: keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7c:4f:0b:a3:76:ba:d4:0f:27:c7:e2:89:37:9e:44:df:fd: f1:f3:f2:e0:9e:7b:a9:c6:c7:21:9b:bd:b4:1e:ae:54:19:72: 66:1b:1e:18:c3:25:b5:aa:e3:a7:08:eb:e9:f7:d0:92:ab:b7: 97:f4:a2:04:34:42:0e:53:45:f5:fa:2a:04:02:12:ab:d6:4c: d6:b8:5f:c5:28:8c:0a:8c:4e:92:ce:8c:ce:cc:e1:91:24:66: 3c:ee:b5:bd:53:87:09:90:80:33:50:47:37:91:de:06:c6:6d: c7:2b:36:96:50:bd:c5:38:46:07:cf:76:63:bd:fd:b2:71:34: 99:91:4d:8d:6e:a7:15:25:80:c2:f8:b9:7b:1b:c9:a7:ce:6c: 1a:2c:b5:87:9c:80:e2:2c:62:42:56:34:af:4b:d6:da:a8:45: 38:20:da:fb:c7:e8:1d:07:43:8b:9e:7e:d9:55:70:bc:18:d3: 17:93:cf:27:92:a6:fa:c4:d8:99:b4:27:2a:e5:8a:7c:ed:1f: 2b:1a:5b:4e:70:1c:53:ab:f8:c6:22:15:88:e8:28:ee:90:62: d3:68:cb:34:33:07:35:db:41:99:f7:bf:bf:b3:fd:99:ed:4c: 4c:60:29:c5:02:6a:39:b4:01:d6:da:8e:8f:f0:e2:12:4e:8f: 44:19:a9:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/LUz1eXbF97QUzWqvmGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNDRjNDJlMWNhMzAzN2JiNmY1NDFmMWUxNDA0ZjY2MmMz Njk5MzgwHhcNMjUxMjE5MTkwMTA2WhcNMjUxMjIwMTkwMTA2WjAzMTEwLwYDVQQD Eyg5M2NjZWM1OWZjZjZiMDVmOWQ5OWJmYzdlYzAzZThhNGVkMDZiM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnArDO3fHyngO4NhFIb8S2Vd28HX7 4Ee/Set013gcepOmIXZB9ibnqtpcPH5S3KVMxihTMALKUT/naykiMpdTkyC9aOnU cyYX+eJf+W9haUcPUPw1u2MPz0zPwDOe2tkaxSPYJClMeM+yiLHcrXBSn3dK+A4Z 22aYutNLIxuuvVlmiY6tjI46XkvHYOywLhdCR8GOGQU2oTRYZIu8Jh3ISBWZjoEC 8xSEasQIqfXaXliGUgCFzcPHPuI1Y2rOjk6JUum4f/Kj9NEWpr59sFlgL/gEikE9 erwZmdBU4iaVQwRz8OkeGovgr3gF2cKDgKxWP9d5rhynr4k4HvC07WXApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPM7Fn89rBfnZm/x+wD6KTtBrPAMB8GA1UdIwQY MBaAFNFExC4cowN7tvVB8eFAT2YsNpk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEt NmEyZjRhMTA4N2Y5LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEtNmEyZjRhMTA4N2Y5 LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHxPC6N2 utQPJ8fiiTeeRN/98fPy4J57qcbHIZu9tB6uVBlyZhseGMMltarjpwjr6ffQkqu3 l/SiBDRCDlNF9foqBAISq9ZM1rhfxSiMCoxOks6MzszhkSRmPO61vVOHCZCAM1BH N5HeBsZtxys2llC9xThGB892Y739snE0mZFNjW6nFSWAwvi5exvJp85sGiy1h5yA 4ixiQlY0r0vW2qhFOCDa+8foHQdDi55+2VVwvBjTF5PPJ5Km+sTYmbQnKuWKfO0f KxpbTnAcU6v4xiIViOgo7pBi02jLNDMHNdtBmfe/v7P9me1MTGApxQJqObQB1tqO j/DiEk6PRBmpnw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:17:55 2025 by rpki-client