This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json) Hash identifier: moot7ADl1WvTfh/cQQXq/oh8kOTUOF3k+ZM6QS5tShs= Subject key identifier: 76:62:FF:A1:79:38:0F:FA:49:DE:36:60:8C:95:6B:E1:66:1F:8B:96 Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92 Certificate serial: 019B38337ACCD8E9BE05052B6DFB554899D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 20:00:56 +0000 Manifest this update: Fri 19 Dec 2025 20:00:56 +0000 Manifest next update: Sat 20 Dec 2025 20:00:56 +0000 Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=) 2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: XAGUfZUQL7o8P35EeGxb0WKVrEWS1sUxDqXxjrfbHL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:7a:cc:d8:e9:be:05:05:2b:6d:fb:55:48:99:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92 Validity Not Before: Dec 19 20:00:56 2025 GMT Not After : Dec 20 20:00:56 2025 GMT Subject: CN=7662ffa179380ffa49de36608c956be1661f8b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:6f:8d:f4:fc:07:4a:36:b9:af:a2:d5:bc: f8:20:68:05:95:11:ff:ae:1e:db:5d:6a:92:e4:0e: 6d:ae:1e:a7:9e:8e:51:64:8c:da:59:6b:69:00:c1: 92:be:50:4a:0f:c9:dd:bc:6d:e5:1a:c1:83:01:d8: 49:18:61:b5:25:9f:05:c1:dc:ea:d0:d0:9f:db:78: 80:6c:ad:f3:ad:68:bf:0e:cc:11:a3:eb:53:65:f4: f3:b3:ad:9a:1b:4f:2b:82:37:6f:96:b6:ff:45:56: 6e:9c:e3:66:38:f5:74:4e:4c:6f:c1:48:2e:df:51: 1f:7a:94:d3:d3:ab:e8:9d:64:ec:41:b4:f5:04:01: 68:aa:d8:87:db:c6:85:03:00:52:e4:9a:2e:9f:ea: 63:45:e7:e5:4a:35:19:be:bd:6c:ba:38:5d:a6:bb: c5:da:7b:bd:9c:cb:f7:b0:06:46:57:b1:e4:39:fa: db:53:4c:15:3c:6b:7a:7b:8d:97:08:bb:6b:f5:5c: d3:f8:4d:6b:3a:b1:2a:40:5b:be:b1:b3:e4:73:c4: d8:c5:d3:cf:6b:20:0f:c1:a0:de:a7:3e:3f:1c:eb: c2:03:b6:d2:31:69:ae:4c:95:f8:38:d3:0f:72:e3: 08:02:8f:b1:8f:1e:55:63:b4:58:6f:b5:08:c4:e8: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:62:FF:A1:79:38:0F:FA:49:DE:36:60:8C:95:6B:E1:66:1F:8B:96 X509v3 Authority Key Identifier: keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:45:d3:f4:39:50:5d:67:78:89:40:db:1a:1e:10:c8:68:ba: 83:13:4d:7b:36:fa:7b:9e:58:f5:0c:fb:1e:ab:6f:bd:7d:90: b5:17:72:95:98:4e:1e:99:16:68:30:6a:b2:b6:26:fe:18:64: 37:a9:f1:03:4b:92:92:b6:94:aa:b4:35:d5:ab:d4:d5:be:42: 8b:97:b7:e6:48:4b:22:1e:1b:7b:da:4c:66:8a:24:b5:90:c9: 99:02:c2:a2:8b:7d:54:ab:87:37:97:e1:31:1b:87:b4:d8:58: 22:4c:de:50:60:52:2a:0e:c8:11:e1:00:03:27:b2:ba:a6:7a: d7:6b:4d:6e:93:ac:2f:c6:63:25:f1:af:5c:79:17:02:14:fe: 00:d8:5f:21:78:e2:dc:04:00:c5:95:d8:e3:9a:2b:01:02:af: cd:f1:11:c9:e6:af:8c:a7:19:94:5e:df:d7:4f:55:2e:83:0d: b0:ee:80:1b:c4:44:4e:c5:ee:0b:98:b6:d7:9f:ba:2f:ce:a7: 28:e8:91:28:59:e4:94:bd:7c:2d:16:5b:e8:af:7d:e8:db:81: 0a:53:d7:4c:7b:d8:0a:7e:d0:d0:37:4f:52:5b:6f:50:e6:80: ab:b4:07:62:33:7b:0e:01:49:85:af:d1:73:63:0c:b5:08:3a: 60:0e:c0:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M3rM2Om+BQUrbftVSJnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTIzMWIyNDdiZmY2NWI0YzYzNDE5MDdlY2Q1ZWFiYTdm OWNhOTIwHhcNMjUxMjE5MjAwMDU2WhcNMjUxMjIwMjAwMDU2WjAzMTEwLwYDVQQD Eyg3NjYyZmZhMTc5MzgwZmZhNDlkZTM2NjA4Yzk1NmJlMTY2MWY4Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsZvjfT8B0o2ua+i1bz4IGgFlRH/ rh7bXWqS5A5trh6nno5RZIzaWWtpAMGSvlBKD8ndvG3lGsGDAdhJGGG1JZ8Fwdzq 0NCf23iAbK3zrWi/DswRo+tTZfTzs62aG08rgjdvlrb/RVZunONmOPV0TkxvwUgu 31EfepTT06vonWTsQbT1BAFoqtiH28aFAwBS5Joun+pjReflSjUZvr1sujhdprvF 2nu9nMv3sAZGV7HkOfrbU0wVPGt6e42XCLtr9VzT+E1rOrEqQFu+sbPkc8TYxdPP ayAPwaDepz4/HOvCA7bSMWmuTJX4ONMPcuMIAo+xjx5VY7RYb7UIxOgA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZi/6F5OA/6Sd42YIyVa+FmH4uWMB8GA1UdIwQY MBaAFFKSMbJHv/ZbTGNBkH7NXqun+cqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQt NjUxMzVjZjJmODE1LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQtNjUxMzVjZjJmODE1 LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekXT9DlQ XWd4iUDbGh4QyGi6gxNNezb6e55Y9Qz7HqtvvX2QtRdylZhOHpkWaDBqsrYm/hhk N6nxA0uSkraUqrQ11avU1b5Ci5e35khLIh4be9pMZooktZDJmQLCoot9VKuHN5fh MRuHtNhYIkzeUGBSKg7IEeEAAyeyuqZ612tNbpOsL8ZjJfGvXHkXAhT+ANhfIXji 3AQAxZXY45orAQKvzfERyeavjKcZlF7f109VLoMNsO6AG8RETsXuC5i215+6L86n KOiRKFnklL18LRZb6K996NuBClPXTHvYCn7Q0DdPUltvUOaAq7QHYjN7DgFJha/R c2MMtQg6YA7A8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 22:54:34 2025 by rpki-client