This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json) Hash identifier: Na2AFuEGbrpnqaQ3EjbvKOcuVgshwNNsBcCBQZQf63M= Subject key identifier: 94:87:3A:0D:29:04:91:C2:1F:A7:E8:90:A6:38:49:6D:FC:AB:14:DF Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe Certificate serial: 019B262DDF137A6606D423D2BB30418DCAED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 08:01:38 +0000 Manifest this update: Tue 16 Dec 2025 08:01:38 +0000 Manifest next update: Wed 17 Dec 2025 08:01:38 +0000 Files and hashes: 1: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: vP4SgY5Oy3WtTpC+RoAsuOJcJxAgY52g3iHptob20us=) 2: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (hash: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:df:13:7a:66:06:d4:23:d2:bb:30:41:8d:ca:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe Validity Not Before: Dec 16 08:01:38 2025 GMT Not After : Dec 17 08:01:38 2025 GMT Subject: CN=94873a0d290491c21fa7e890a638496dfcab14df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9e:5e:4b:f0:03:34:f6:4d:63:e8:74:bf:66: fe:d7:d5:a7:f6:db:b5:4b:ef:ec:dd:10:cf:eb:78: dc:7a:29:c1:a3:92:ee:7c:06:e0:34:7a:48:b0:86: 96:6a:01:ad:2a:08:b5:53:d5:ce:22:8a:7e:e6:ec: af:73:09:4d:ae:ed:45:f0:41:6b:55:4f:85:c0:37: 87:88:b9:df:c4:8a:f3:15:c8:ee:57:69:ef:a0:4d: fd:b9:d5:5e:67:8a:d9:e7:e0:df:e9:ed:fe:8b:61: 43:87:44:8c:68:70:5a:04:6f:f3:b8:21:7f:0c:20: b6:c9:23:14:9e:ae:b8:c0:11:f7:02:d9:f9:b3:15: 71:cc:39:56:45:2f:4b:65:bc:7a:07:fe:94:31:42: 3c:93:fb:f0:a5:9e:48:54:7b:b4:fc:c6:46:b3:d4: 77:6a:5c:8a:f5:7d:db:1c:9b:96:1f:01:55:3d:9c: af:64:f7:81:9f:d5:6d:4e:1a:d5:0d:95:14:58:b1: 09:f2:a4:45:f4:38:d6:d5:0f:f0:03:1e:a8:f9:7e: c2:b5:ad:e8:3f:1f:62:8f:5e:62:b2:1f:27:4c:6c: b9:b5:3f:07:7d:56:36:27:a7:d9:3c:b5:a3:9c:0b: 7c:27:5a:83:a4:4c:58:1b:28:71:61:65:ac:5f:f9: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:87:3A:0D:29:04:91:C2:1F:A7:E8:90:A6:38:49:6D:FC:AB:14:DF X509v3 Authority Key Identifier: keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2d:4d:e1:cd:17:dc:f8:dc:27:79:ef:b9:c3:95:61:a6:27: 2f:25:b3:d7:85:e7:84:4c:0a:fe:fb:70:f8:ec:a2:b3:e1:6f: fd:9e:2f:a3:a3:f6:ad:12:ea:00:1a:f9:fd:e4:ec:47:d7:3b: a9:ff:21:7e:ea:e5:d2:4f:e1:b5:de:ed:49:a2:a6:aa:91:42: bf:c0:95:fe:2c:bb:98:ce:52:b0:27:08:03:17:40:8b:35:ca: 26:37:03:69:8a:4a:bd:31:f7:be:c3:c7:fb:dc:7b:96:d4:f4: ee:13:4f:49:6d:fd:40:b5:f8:11:a1:1d:f5:f2:c7:5c:b0:33: 77:9c:f0:79:07:5c:34:26:86:01:55:de:a7:33:30:df:c0:17: 75:a3:76:ee:ca:3a:ca:dd:8a:80:b2:8b:2a:2e:75:3f:f7:17: 54:d5:6a:f1:1b:f5:17:11:8f:3f:29:25:3f:a3:d7:d5:8a:94: e5:83:a4:4b:5c:1b:6e:08:5d:5c:07:40:98:b0:d4:3d:e2:f9: 0b:f2:c9:21:b4:d2:83:6b:a6:f8:5b:09:4a:f1:00:e4:ef:25: 28:ab:6e:ac:e5:74:dd:fd:23:0b:10:e2:15:26:bb:dc:52:d3: 7c:e5:6e:d9:17:ce:e7:23:67:d4:84:0f:6e:a8:c2:0a:f5:41: 04:ca:9f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLd8TemYG1CPSuzBBjcrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2Q1OTQzOGNjMjAxZGNhMmZjMWNlN2E2ODc3M2JkNzFi ZTBlYmUwHhcNMjUxMjE2MDgwMTM4WhcNMjUxMjE3MDgwMTM4WjAzMTEwLwYDVQQD Eyg5NDg3M2EwZDI5MDQ5MWMyMWZhN2U4OTBhNjM4NDk2ZGZjYWIxNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA555eS/ADNPZNY+h0v2b+19Wn9tu1 S+/s3RDP63jceinBo5LufAbgNHpIsIaWagGtKgi1U9XOIop+5uyvcwlNru1F8EFr VU+FwDeHiLnfxIrzFcjuV2nvoE39udVeZ4rZ5+Df6e3+i2FDh0SMaHBaBG/zuCF/ DCC2ySMUnq64wBH3Atn5sxVxzDlWRS9LZbx6B/6UMUI8k/vwpZ5IVHu0/MZGs9R3 alyK9X3bHJuWHwFVPZyvZPeBn9VtThrVDZUUWLEJ8qRF9DjW1Q/wAx6o+X7Cta3o Px9ij15ish8nTGy5tT8HfVY2J6fZPLWjnAt8J1qDpExYGyhxYWWsX/l0yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSHOg0pBJHCH6fokKY4SW38qxTfMB8GA1UdIwQY MBaAFFF9WUOMwgHcovwc56aHc71xvg6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYt OGIzMWUyMzM4MmRhLzEvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi81MGY1YmEtYmRmNC00YTcxLWE4MzYtOGIzMWUyMzM4MmRh LzEvVVgxWlE0ekNBZHlpX0J6bnBvZHp2WEctRHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABi1N4c0X 3PjcJ3nvucOVYaYnLyWz14XnhEwK/vtw+Oyis+Fv/Z4vo6P2rRLqABr5/eTsR9c7 qf8hfurl0k/htd7tSaKmqpFCv8CV/iy7mM5SsCcIAxdAizXKJjcDaYpKvTH3vsPH +9x7ltT07hNPSW39QLX4EaEd9fLHXLAzd5zweQdcNCaGAVXepzMw38AXdaN27so6 yt2KgLKLKi51P/cXVNVq8Rv1FxGPPyklP6PX1YqU5YOkS1wbbghdXAdAmLDUPeL5 C/LJIbTSg2um+FsJSvEA5O8lKKturOV03f0jCxDiFSa73FLTfOVu2RfO5yNn1IQP bqjCCvVBBMqfHA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:22:41 2025 by rpki-client