This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json) Hash identifier: yCIyT3mthKclDS3FCwNt0wt8xnGHKZKfdGOcgCh8d/0= Subject key identifier: 47:85:9E:0E:71:A6:B1:F5:92:98:7A:29:2A:77:C9:C3:A5:52:25:8E Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18 Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18 Certificate serial: 019B5A1A87C5DEC9B0E48C71F4887250282F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 10:00:46 +0000 Manifest this update: Fri 26 Dec 2025 10:00:46 +0000 Manifest next update: Sat 27 Dec 2025 10:00:46 +0000 Files and hashes: 1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=) 2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=) 3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: ipt/osHsGufqr4UxZFpVuwKZNYfJZla5KW4PEpad8vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:87:c5:de:c9:b0:e4:8c:71:f4:88:72:50:28:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50f88e05c898796c82ff0147568816e933420e18 Validity Not Before: Dec 26 10:00:46 2025 GMT Not After : Dec 27 10:00:46 2025 GMT Subject: CN=47859e0e71a6b1f592987a292a77c9c3a552258e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:67:ee:d0:4c:e0:0a:37:5f:e7:3f:f8:36: 83:48:c5:e4:e2:07:24:8f:77:cc:0d:60:9b:84:57: 80:b4:ee:c5:17:4a:84:9e:b1:ba:fb:27:35:c2:7b: 7c:35:53:b6:13:d8:2c:99:31:28:b3:f7:f0:a3:99: 2f:96:55:c3:82:e8:64:95:52:9f:aa:bb:d7:ff:52: d5:99:fe:c3:09:af:b6:d5:ec:45:fc:f5:8e:fa:e9: bb:b8:98:06:54:9c:b1:14:8b:f6:2c:62:02:9b:d7: 8c:64:e8:da:b0:99:33:fa:55:ff:5d:ed:43:1d:e2: ab:02:2b:06:e7:15:23:3d:a5:2f:6f:01:8f:ec:fe: 77:53:a2:0c:42:db:58:22:72:42:5b:a0:3e:80:b6: a5:6c:1d:c9:de:51:20:88:8b:34:45:f8:32:ac:7b: 1d:69:db:58:c5:a2:33:a8:91:db:90:4e:64:5f:d5: f4:96:0e:e0:06:34:96:db:7b:bb:54:59:5f:79:97: 90:45:cd:be:71:db:d9:65:41:b5:ea:6a:9d:fb:36: b4:df:d7:01:b7:73:44:ab:3e:4f:da:b2:5a:f6:0c: 69:eb:f2:2f:f1:6a:8a:aa:13:6b:df:e5:8a:43:b7: a9:07:5f:2a:09:80:66:18:6f:bb:83:cf:6f:b0:2f: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:85:9E:0E:71:A6:B1:F5:92:98:7A:29:2A:77:C9:C3:A5:52:25:8E X509v3 Authority Key Identifier: keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e1:a7:98:d0:35:2d:55:88:f0:1c:70:03:2c:ee:a9:df:37: b9:fd:0e:ee:63:4c:80:29:60:2e:b3:9b:c2:41:b2:98:a4:34: d4:a9:2c:53:5d:45:16:ba:4b:ca:fd:33:f3:48:87:48:40:a3: 21:03:cd:83:88:c3:d3:c0:ca:a8:55:0e:6c:1c:8c:1f:fd:c4: 4a:a6:a3:d0:2a:14:84:c3:48:e6:cf:05:e8:10:cb:75:9a:e0: c6:5a:e9:bd:ef:d5:5a:f0:62:20:15:3c:a0:f5:ff:e0:aa:3a: 3d:9c:a0:77:08:f8:07:08:a7:22:a5:d3:ef:7e:e4:bb:c8:ac: ae:a8:0d:1c:3d:e6:84:3b:09:99:af:ab:4b:58:19:5c:7a:35: 77:2a:98:c6:80:84:5a:cb:34:3b:b7:2d:4b:b4:38:ad:1a:74: 1f:93:52:ac:86:43:6d:86:11:0e:58:84:72:f2:f8:7a:41:9a: 6a:4a:ae:ec:05:04:f0:c0:a2:17:9b:a5:0e:54:7a:13:a4:32: d4:5c:69:f3:62:3e:45:8a:b5:c4:d5:30:6f:d3:3a:37:32:27: 6e:f0:71:40:dc:b9:f0:a7:61:28:ea:90:0b:89:5e:27:38:8c: 80:4d:85:1a:2a:38:4e:bd:82:fe:1d:c6:a7:22:83:c1:5b:b6: ef:5a:33:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGofF3smw5Ixx9IhyUCgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZjg4ZTA1Yzg5ODc5NmM4MmZmMDE0NzU2ODgxNmU5MzM0 MjBlMTgwHhcNMjUxMjI2MTAwMDQ2WhcNMjUxMjI3MTAwMDQ2WjAzMTEwLwYDVQQD Eyg0Nzg1OWUwZTcxYTZiMWY1OTI5ODdhMjkyYTc3YzljM2E1NTIyNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kln7tBM4Ao3X+c/+DaDSMXk4gck j3fMDWCbhFeAtO7FF0qEnrG6+yc1wnt8NVO2E9gsmTEos/fwo5kvllXDguhklVKf qrvX/1LVmf7DCa+21exF/PWO+um7uJgGVJyxFIv2LGICm9eMZOjasJkz+lX/Xe1D HeKrAisG5xUjPaUvbwGP7P53U6IMQttYInJCW6A+gLalbB3J3lEgiIs0RfgyrHsd adtYxaIzqJHbkE5kX9X0lg7gBjSW23u7VFlfeZeQRc2+cdvZZUG16mqd+za039cB t3NEqz5P2rJa9gxp6/Iv8WqKqhNr3+WKQ7epB18qCYBmGG+7g89vsC9tVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeFng5xprH1kph6KSp3ycOlUiWOMB8GA1UdIwQY MBaAFFD4jgXImHlsgv8BR1aIFukzQg4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYt ZmVkYmQ0YzY2YTBlLzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYtZmVkYmQ0YzY2YTBl LzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuGnmNA1 LVWI8BxwAyzuqd83uf0O7mNMgClgLrObwkGymKQ01KksU11FFrpLyv0z80iHSECj IQPNg4jD08DKqFUObByMH/3ESqaj0CoUhMNI5s8F6BDLdZrgxlrpve/VWvBiIBU8 oPX/4Ko6PZygdwj4BwinIqXT737ku8isrqgNHD3mhDsJma+rS1gZXHo1dyqYxoCE Wss0O7ctS7Q4rRp0H5NSrIZDbYYRDliEcvL4ekGaakqu7AUE8MCiF5ulDlR6E6Qy 1Fxp82I+RYq1xNUwb9M6NzInbvBxQNy58KdhKOqQC4leJziMgE2FGio4Tr2C/h3G pyKDwVu271ozTg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:25 2025 by rpki-client