This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json) Hash identifier: k6/BuJq1qj0SqmuaE+J+h0NdnDTqNZDr4aBweY+RydU= Subject key identifier: 60:2C:45:31:C6:11:B9:85:32:AE:92:11:7C:2D:73:C4:88:E6:35:D4 Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf Certificate serial: 019B3BD8FD94C244BEE11D3A453CA2D823D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:00:34 +0000 Manifest this update: Sat 20 Dec 2025 13:00:34 +0000 Manifest next update: Sun 21 Dec 2025 13:00:34 +0000 Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: ojh0QjxydJ6exRIh9j3XE59veK1t/cQ94gqLJ1uJnt8=) 2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:fd:94:c2:44:be:e1:1d:3a:45:3c:a2:d8:23:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf Validity Not Before: Dec 20 13:00:34 2025 GMT Not After : Dec 21 13:00:34 2025 GMT Subject: CN=602c4531c611b98532ae92117c2d73c488e635d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:62:ba:8b:24:8e:71:32:bb:ae:f0:56:88: af:9e:b8:15:98:6d:68:4c:87:0f:3a:6c:21:60:21: 63:28:06:f8:13:91:8a:ca:13:a5:27:de:a6:82:3b: e3:38:d1:3f:55:0a:56:3e:bc:32:d5:78:af:a9:32: 60:74:0d:8e:f9:47:86:63:7e:7c:e4:5f:81:e0:e4: 8c:36:f7:13:ef:2b:2c:40:52:1d:3e:38:61:c3:ca: 6c:6d:eb:01:23:29:26:97:3f:d3:63:1a:e3:30:7c: 42:a4:bd:0f:40:20:80:53:7f:52:f6:f6:43:0f:1a: 6b:ce:39:ef:34:33:2c:6a:56:53:57:be:18:13:62: 2b:c2:34:df:c3:18:fb:d4:3c:5e:58:5c:3a:46:84: 3c:4e:cf:45:09:b3:a7:05:79:77:7f:c2:0d:9a:03: 3d:83:d4:55:37:7a:8c:c3:dc:52:12:62:f0:40:dd: 07:9d:f6:61:47:c1:78:89:76:9d:e2:b1:11:8a:64: 6b:73:5b:f1:c9:12:00:07:25:7f:a6:f5:c1:18:d2: 76:97:2e:fd:17:1b:6b:0b:71:76:ac:08:2d:b3:96: 21:ff:bf:38:55:25:20:48:92:39:ea:02:d7:69:63: 94:51:b9:35:3c:24:90:8a:92:b1:8f:46:43:51:35: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2C:45:31:C6:11:B9:85:32:AE:92:11:7C:2D:73:C4:88:E6:35:D4 X509v3 Authority Key Identifier: keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2f:e3:df:f0:51:93:94:6d:21:65:fa:e5:37:b2:71:1d:da: 62:c2:c9:ae:06:74:4f:80:9e:03:fb:7d:18:8b:a1:76:3e:71: 90:f8:1e:d9:41:c2:64:9c:f0:dc:5c:a4:98:f8:09:12:fc:c5: 2e:7b:37:4d:3d:5c:a1:40:74:c3:b7:4b:b5:ba:36:76:1f:66: 6e:30:41:25:76:99:67:e4:f7:44:7d:8d:91:29:30:07:12:38: 68:9a:13:90:93:89:66:d5:fb:54:6e:da:91:ee:3c:06:8a:72: 6b:65:ba:71:f7:d1:a4:6f:85:28:77:e2:a0:1b:8d:40:70:4b: da:45:6d:70:72:d6:c6:29:b8:8d:38:50:b4:00:b3:14:86:85: de:4e:e8:85:d5:d4:56:ac:ad:56:6d:8d:1f:0c:36:1d:e3:af: f0:f9:91:12:02:4a:25:bf:26:b2:05:c3:dd:d1:e7:8e:8f:9d: fd:1c:9d:9c:d8:7f:e1:12:71:28:a0:58:9d:2b:34:84:a8:ae: 3c:7e:ce:7b:e3:e8:24:a8:9f:f0:2c:bb:e2:a4:36:e0:9b:ae: f1:77:49:79:63:04:00:c8:d8:7b:29:de:a0:9f:79:ce:7f:33: 65:47:01:92:57:ec:a9:5c:58:fc:bc:16:b5:67:13:bb:4c:ea: 26:7b:d3:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72P2UwkS+4R06RTyi2CPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl Y2VkZGYwHhcNMjUxMjIwMTMwMDM0WhcNMjUxMjIxMTMwMDM0WjAzMTEwLwYDVQQD Eyg2MDJjNDUzMWM2MTFiOTg1MzJhZTkyMTE3YzJkNzNjNDg4ZTYzNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jtiuoskjnEyu67wVoivnrgVmG1o TIcPOmwhYCFjKAb4E5GKyhOlJ96mgjvjONE/VQpWPrwy1XivqTJgdA2O+UeGY358 5F+B4OSMNvcT7yssQFIdPjhhw8psbesBIykmlz/TYxrjMHxCpL0PQCCAU39S9vZD DxprzjnvNDMsalZTV74YE2IrwjTfwxj71DxeWFw6RoQ8Ts9FCbOnBXl3f8INmgM9 g9RVN3qMw9xSEmLwQN0HnfZhR8F4iXad4rERimRrc1vxyRIAByV/pvXBGNJ2ly79 FxtrC3F2rAgts5Yh/784VSUgSJI56gLXaWOUUbk1PCSQipKxj0ZDUTX/8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAsRTHGEbmFMq6SEXwtc8SI5jXUMB8GA1UdIwQY MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut Y2Q4MWZjNTgwZjQ3LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3 LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaS/j3/BR k5RtIWX65TeycR3aYsLJrgZ0T4CeA/t9GIuhdj5xkPge2UHCZJzw3FykmPgJEvzF Lns3TT1coUB0w7dLtbo2dh9mbjBBJXaZZ+T3RH2NkSkwBxI4aJoTkJOJZtX7VG7a ke48Bopya2W6cffRpG+FKHfioBuNQHBL2kVtcHLWxim4jThQtACzFIaF3k7ohdXU VqytVm2NHww2HeOv8PmREgJKJb8msgXD3dHnjo+d/RydnNh/4RJxKKBYnSs0hKiu PH7Oe+PoJKif8Cy74qQ24Juu8XdJeWMEAMjYeyneoJ95zn8zZUcBklfsqVxY/LwW tWcTu0zqJnvTmw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:20:23 2025 by rpki-client