This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft File: UPLWshZg-tH2Di350L18bM-VwxE.mft (raw, json) Hash identifier: oC2M1wJesE/zq32hMp9Jka2q2OMRsy45asmEDN3XXYI= Subject key identifier: 01:EA:1B:0D:21:CF:FD:4B:D6:93:3C:E2:51:14:50:56:91:D2:42:C4 Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11 Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311 Certificate serial: 019B2E8B3FC0B050260D127B50DBAAC70226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft Manifest number: 1788 Signing time: Wed 17 Dec 2025 23:00:36 +0000 Manifest this update: Wed 17 Dec 2025 23:00:36 +0000 Manifest next update: Thu 18 Dec 2025 23:00:36 +0000 Files and hashes: 1: 680g9QNm1e-ThM3i1QaScS4bSbw.roa (hash: npGuthO7au6knt0v4xQS1R1nwKbXpzRRvDz8rwf17yQ=) 2: UPLWshZg-tH2Di350L18bM-VwxE.crl (hash: BHX2doGWH8QpvwrljmmBVDswewZhhrjgCprXxUL90TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:3f:c0:b0:50:26:0d:12:7b:50:db:aa:c7:02:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311 Validity Not Before: Dec 17 23:00:36 2025 GMT Not After : Dec 18 23:00:36 2025 GMT Subject: CN=01ea1b0d21cffd4bd6933ce25114505691d242c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:cc:70:d8:af:d6:0e:94:d6:ef:09:6e:7c: ea:0a:84:13:76:77:cd:0f:f7:54:75:a3:f0:9e:d6: b8:1a:94:95:69:10:21:35:30:58:66:ae:94:12:73: 0d:34:0a:0b:d1:10:a7:c8:d2:87:09:49:ac:ba:4d: ab:e4:ee:2b:b8:03:61:c2:58:cc:cc:6c:b8:8f:03: 32:d3:4b:57:fa:01:78:8b:e0:07:f2:c5:8a:8c:6d: cb:7a:65:a5:84:07:2a:e2:0b:92:e7:fc:a2:0d:61: 27:9d:84:0b:d9:8e:14:d0:73:10:d9:b8:12:d6:ad: be:e4:db:07:3b:92:38:fa:de:f6:3f:37:51:8f:6b: 91:6d:2a:3a:c4:1b:26:fd:cd:ac:44:cd:24:0e:e0: e8:e3:80:5e:ba:2a:bb:25:b1:23:02:13:b7:85:05: 1d:8a:e4:cd:64:84:eb:da:5e:19:f7:bd:55:79:55: 26:61:2c:15:40:a1:c5:ad:e3:83:94:6f:65:2e:84: 6a:01:e4:14:a1:3a:21:e3:e4:6c:ee:c6:35:a9:fb: c1:6c:fa:34:82:35:45:db:a0:d4:d4:43:67:be:36: 7c:e2:08:3d:34:bf:b3:39:eb:f0:c9:66:b9:ac:7e: d7:6e:c4:18:1d:c1:96:2b:61:f7:99:6a:80:ae:01: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EA:1B:0D:21:CF:FD:4B:D6:93:3C:E2:51:14:50:56:91:D2:42:C4 X509v3 Authority Key Identifier: keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:83:c9:37:b0:80:19:b8:33:91:06:3c:b9:c3:62:e0:97:88: cb:76:01:0f:f6:fd:a7:56:fc:8d:e4:59:31:f3:64:68:75:41: 97:f9:3e:e6:a5:27:29:c5:47:56:a0:e7:16:01:f1:cb:5a:80: a9:d6:41:fa:20:fb:f3:66:bd:e0:f9:78:58:e1:f2:bd:6f:b0: 6e:f1:07:98:3d:08:8a:40:3b:57:0a:34:66:79:a6:32:91:90: 16:c1:89:25:2f:2d:3c:a8:e2:dc:e5:31:95:98:1c:50:92:2e: 06:ff:48:a3:42:95:e5:c9:95:bd:ae:cb:a4:6f:14:a1:1a:9e: 65:85:0a:9b:bf:2a:41:d4:51:2a:32:15:c8:b0:f7:9e:73:07: 9a:98:43:7a:60:3a:19:78:b5:9e:82:58:87:80:26:91:72:5b: 8c:bf:e2:ad:e7:12:6d:b6:e2:f7:8e:23:51:b1:f7:39:5d:e0: 3d:12:70:20:d0:90:43:20:6e:d0:42:45:53:d1:f0:15:e6:9d: 9c:ce:0c:9f:d5:34:c5:85:d8:83:17:1f:68:22:7e:89:44:eb: 9b:b7:1a:32:03:57:8f:35:ff:30:6a:18:50:55:aa:e6:64:e7: f8:aa:cb:da:48:7d:50:2d:7c:de:a4:20:41:85:f0:90:6c:56: eb:29:f6:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuiz/AsFAmDRJ7UNuqxwImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZjJkNmIyMTY2MGZhZDFmNjBlMmRmOWQwYmQ3YzZjY2Y5 NWMzMTEwHhcNMjUxMjE3MjMwMDM2WhcNMjUxMjE4MjMwMDM2WjAzMTEwLwYDVQQD EygwMWVhMWIwZDIxY2ZmZDRiZDY5MzNjZTI1MTE0NTA1NjkxZDI0MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknTMcNiv1g6U1u8JbnzqCoQTdnfN D/dUdaPwnta4GpSVaRAhNTBYZq6UEnMNNAoL0RCnyNKHCUmsuk2r5O4ruANhwljM zGy4jwMy00tX+gF4i+AH8sWKjG3LemWlhAcq4guS5/yiDWEnnYQL2Y4U0HMQ2bgS 1q2+5NsHO5I4+t72PzdRj2uRbSo6xBsm/c2sRM0kDuDo44Beuiq7JbEjAhO3hQUd iuTNZITr2l4Z971VeVUmYSwVQKHFreODlG9lLoRqAeQUoToh4+Rs7sY1qfvBbPo0 gjVF26DU1ENnvjZ84gg9NL+zOevwyWa5rH7XbsQYHcGWK2H3mWqArgHoLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHqGw0hz/1L1pM84lEUUFaR0kLEMB8GA1UdIwQY MBaAFFDy1rIWYPrR9g4t+dC9fGzPlcMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYt YWIzZGQ1ZGM2NzA5LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYtYWIzZGQ1ZGM2NzA5 LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4PJN7CA GbgzkQY8ucNi4JeIy3YBD/b9p1b8jeRZMfNkaHVBl/k+5qUnKcVHVqDnFgHxy1qA qdZB+iD782a94Pl4WOHyvW+wbvEHmD0IikA7Vwo0ZnmmMpGQFsGJJS8tPKji3OUx lZgcUJIuBv9Io0KV5cmVva7LpG8UoRqeZYUKm78qQdRRKjIVyLD3nnMHmphDemA6 GXi1noJYh4AmkXJbjL/irecSbbbi944jUbH3OV3gPRJwINCQQyBu0EJFU9HwFead nM4Mn9U0xYXYgxcfaCJ+iUTrm7caMgNXjzX/MGoYUFWq5mTn+KrL2kh9UC183qQg QYXwkGxW6yn2OQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:00:31 2025 by rpki-client