This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft File: UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json) Hash identifier: DWJyYsnuMgTn61RNoFAhhu186lZw2TlEY80gtjo3y5E= Subject key identifier: 45:3D:3D:28:10:80:B0:80:2C:5E:FA:D4:1D:9F:A0:12:1A:33:2A:D3 Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB Certificate issuer: /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb Certificate serial: 019B428049077D95E213546571B49572C5E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft Manifest number: 1063 Signing time: Sun 21 Dec 2025 20:01:02 +0000 Manifest this update: Sun 21 Dec 2025 20:01:02 +0000 Manifest next update: Mon 22 Dec 2025 20:01:02 +0000 Files and hashes: 1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: EwC03s+UFJHIkPHZl2gzUoGYLKj8dnrGbU0BfJXpOzc=) 2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:49:07:7d:95:e2:13:54:65:71:b4:95:72:c5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb Validity Not Before: Dec 21 20:01:02 2025 GMT Not After : Dec 22 20:01:02 2025 GMT Subject: CN=453d3d281080b0802c5efad41d9fa0121a332ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1f:d9:25:cd:d9:a3:7f:8d:4c:28:20:d3:8a: 41:0e:56:33:48:36:b9:be:dc:53:75:be:ca:1c:80: c6:58:7c:98:65:91:04:5b:f3:9e:46:2f:45:40:61: 95:19:aa:d4:5c:46:87:be:18:35:40:ac:60:58:fc: 9e:e7:c5:19:ef:15:ad:27:b1:b2:56:da:a3:9d:b2: 15:93:8d:25:59:50:ce:0e:61:5b:51:13:25:13:9e: b3:bb:03:7c:55:f2:88:8b:4e:cf:d9:cb:9f:9c:11: fc:94:7f:2d:27:4b:0b:b4:44:70:51:6f:9a:08:7f: d5:dd:d4:ab:ac:f3:67:da:a7:fd:ad:be:56:71:a8: d3:13:af:b6:13:9a:83:3e:af:c5:84:48:c8:ff:83: 55:b0:88:98:18:04:30:4d:f4:3b:02:a1:e4:c0:55: e2:90:6b:b6:cc:bc:61:28:d8:c0:56:c1:ff:6e:f0: 01:e7:81:a0:7f:54:d0:1c:f2:59:bd:cc:e8:6b:c7: fa:15:09:31:bf:51:2a:26:3c:38:58:5d:f2:74:a0: fd:ff:b9:73:c6:f3:23:34:79:ee:7d:54:51:3f:36: 9a:e2:bc:fb:9d:48:f9:11:33:2d:b4:d6:9c:05:d6: 57:30:b4:4b:4b:0e:6a:9b:b5:9d:3f:88:b8:58:45: 75:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3D:3D:28:10:80:B0:80:2C:5E:FA:D4:1D:9F:A0:12:1A:33:2A:D3 X509v3 Authority Key Identifier: keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2a:0a:29:82:22:0e:d4:da:ba:c0:59:9f:9f:e1:eb:78:42: 22:65:a3:98:8c:6d:56:d0:7d:a5:82:ad:45:51:85:37:1c:bc: 43:01:ed:3a:30:81:3f:ab:44:6b:4f:e4:8d:42:dd:68:20:75: 6e:5d:8c:d3:ad:62:cc:95:5a:44:c4:3f:7e:50:02:f5:61:43: ae:38:99:3c:ee:fd:41:c3:2d:fd:fe:dc:96:dc:66:f6:dd:38: 0d:8c:08:be:1c:4e:d4:0f:7e:5b:01:a3:20:f4:93:1c:6f:3e: 1a:38:f4:7a:c9:6d:c3:a6:19:24:d8:df:20:e7:1c:73:71:96: 00:bc:51:ee:48:80:68:cb:13:9b:18:dc:d0:a6:38:85:ea:cc: bd:5c:b7:a8:98:8c:1d:1d:e4:c7:a6:35:c4:36:89:ab:df:de: 7c:1e:10:d6:2b:95:bb:40:fc:76:4f:9e:38:9e:db:a7:18:3d: 64:bb:86:ab:fd:78:88:53:54:1d:2b:10:a5:e2:01:94:e9:0c: f5:fc:8f:85:6c:2d:5e:21:64:cf:9f:4e:88:ee:65:bc:53:b1: e6:74:d6:d9:52:30:2f:fb:b4:43:2a:cd:68:1e:96:2b:f5:cf: d3:88:66:79:a3:ce:13:7f:9f:8d:49:fa:6b:0a:0f:8c:41:9e: e4:2d:3c:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgEkHfZXiE1RlcbSVcsXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWZlN2U4YjlkZTY3NTkxMzEyMWU3ZWJiNDIyNmI2MmQw M2IxY2IwHhcNMjUxMjIxMjAwMTAyWhcNMjUxMjIyMjAwMTAyWjAzMTEwLwYDVQQD Eyg0NTNkM2QyODEwODBiMDgwMmM1ZWZhZDQxZDlmYTAxMjFhMzMyYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h/ZJc3Zo3+NTCgg04pBDlYzSDa5 vtxTdb7KHIDGWHyYZZEEW/OeRi9FQGGVGarUXEaHvhg1QKxgWPye58UZ7xWtJ7Gy VtqjnbIVk40lWVDODmFbURMlE56zuwN8VfKIi07P2cufnBH8lH8tJ0sLtERwUW+a CH/V3dSrrPNn2qf9rb5WcajTE6+2E5qDPq/FhEjI/4NVsIiYGAQwTfQ7AqHkwFXi kGu2zLxhKNjAVsH/bvAB54Ggf1TQHPJZvczoa8f6FQkxv1EqJjw4WF3ydKD9/7lz xvMjNHnufVRRPzaa4rz7nUj5ETMttNacBdZXMLRLSw5qm7WdP4i4WEV1gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU9PSgQgLCALF761B2foBIaMyrTMB8GA1UdIwQY MBaAFFCf5+i53mdZExIefrtCJrYtA7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMt MGI0NzdjYTczYWM2LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMtMGI0NzdjYTczYWM2 LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCoKKYIi DtTausBZn5/h63hCImWjmIxtVtB9pYKtRVGFNxy8QwHtOjCBP6tEa0/kjULdaCB1 bl2M061izJVaRMQ/flAC9WFDrjiZPO79QcMt/f7cltxm9t04DYwIvhxO1A9+WwGj IPSTHG8+Gjj0esltw6YZJNjfIOccc3GWALxR7kiAaMsTmxjc0KY4herMvVy3qJiM HR3kx6Y1xDaJq9/efB4Q1iuVu0D8dk+eOJ7bpxg9ZLuGq/14iFNUHSsQpeIBlOkM 9fyPhWwtXiFkz59OiO5lvFOx5nTW2VIwL/u0QyrNaB6WK/XP04hmeaPOE3+fjUn6 awoPjEGe5C08Wg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:34:42 2025 by rpki-client