This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json) Hash identifier: VGeAGfrADQGqow+qHqIzt1PcvMwAS9gzye928idX/mQ= Subject key identifier: 02:6E:11:9E:CF:D6:F1:2D:69:9D:6D:BF:F4:72:5A:B6:06:B1:DA:B3 Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82 Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982 Certificate serial: 019B1C4EA4173C6D1554C6F2555783AB9A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft Manifest number: 08EA Signing time: Sun 14 Dec 2025 10:01:14 +0000 Manifest this update: Sun 14 Dec 2025 10:01:14 +0000 Manifest next update: Mon 15 Dec 2025 10:01:14 +0000 Files and hashes: 1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=) 2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: cJj06djKhIEsBZM/Cb4qxc+TGun/IFzo3Tcb6pSNt6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:a4:17:3c:6d:15:54:c6:f2:55:57:83:ab:9a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982 Validity Not Before: Dec 14 10:01:14 2025 GMT Not After : Dec 15 10:01:14 2025 GMT Subject: CN=026e119ecfd6f12d699d6dbff4725ab606b1dab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:fd:52:de:84:c7:65:2b:7e:d3:4d:8e:2d: 73:8f:7d:9d:ac:f4:8c:6c:01:f2:b4:be:4f:9d:4a: 43:de:73:c1:58:6e:6c:d3:b8:7b:2e:52:99:a1:dc: 0d:41:01:90:d9:3b:97:c5:62:f8:7d:fe:78:45:11: 16:fa:77:0d:92:6a:cf:68:c8:7b:ad:d8:9e:f3:3d: e4:cd:a5:55:de:c8:14:1a:cc:f8:e2:4e:ac:af:08: a1:30:40:6f:1a:ec:96:7c:d9:b4:9f:6f:a1:50:74: dd:cd:66:f9:18:d2:e8:5f:ad:20:85:d9:1e:0f:40: da:c9:74:af:d3:40:fc:ea:64:bc:49:5d:fc:85:da: 51:7d:e2:e0:74:f6:42:01:b3:7f:72:c7:02:e1:9d: b7:1e:4c:81:52:e4:d9:d6:20:81:33:18:38:f5:33: 0e:fb:3b:57:a5:76:09:78:40:87:4b:12:02:68:00: 8d:ed:82:23:ce:6d:47:ed:4a:86:6b:08:83:04:ff: a9:d7:00:0a:7d:32:14:86:cd:aa:2c:5b:60:1f:31: 20:d9:3f:66:af:3a:3d:2f:9b:30:69:7e:ac:66:85: 28:19:d8:f5:b9:18:4c:ac:7d:e0:e6:f3:b0:e7:9d: d3:73:04:b7:c7:70:8f:47:63:cd:62:36:cf:cd:d1: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6E:11:9E:CF:D6:F1:2D:69:9D:6D:BF:F4:72:5A:B6:06:B1:DA:B3 X509v3 Authority Key Identifier: keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d0:05:9e:4b:c8:fe:f5:04:56:4d:e7:be:8c:67:85:fe:24: cf:7f:c0:cc:0c:cd:6d:d0:54:fb:d0:dc:9a:ff:05:21:d1:ec: fd:93:58:1d:b4:5e:04:f1:36:be:9e:3a:d5:0d:b9:1e:af:52: 40:d6:46:68:f9:85:66:22:59:d2:a2:ec:20:ed:9a:ff:4f:ca: 42:63:91:e5:77:a4:9c:3f:3b:b3:2b:1f:16:97:c3:02:0e:8b: ce:d0:29:b0:3d:50:67:ef:9f:86:3e:d4:3a:47:8e:e6:29:5c: bf:c4:69:37:88:13:54:5a:46:ec:85:14:f4:f5:2c:57:ba:96: 5d:18:dd:06:c1:db:b3:79:74:50:cb:3a:19:3c:40:bf:2d:a5: 3f:2e:d0:b7:f3:bc:24:bd:c0:13:6e:78:50:a1:46:12:36:71: 9d:9c:1e:73:d1:92:22:51:84:9f:2b:dd:b5:bc:e8:c8:e5:57: 8c:e5:0b:4f:33:e4:f7:7f:91:41:af:a2:cf:9a:b7:35:da:56: 16:d8:c3:84:57:83:99:88:7c:1d:5d:fe:57:d2:a5:8c:5d:b6: 44:27:2e:c2:c7:01:d0:96:53:31:a6:61:5c:c4:52:c3:5c:7d: 41:26:c9:60:27:a5:1d:f4:a5:a0:2a:06:5f:76:b8:97:f4:4e: 63:b3:76:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTqQXPG0VVMbyVVeDq5pPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZDkzMDVmY2JkNTljZGE0YjY4Zjg4OGRmNjAyMDQ4NWI3 NGU5ODIwHhcNMjUxMjE0MTAwMTE0WhcNMjUxMjE1MTAwMTE0WjAzMTEwLwYDVQQD EygwMjZlMTE5ZWNmZDZmMTJkNjk5ZDZkYmZmNDcyNWFiNjA2YjFkYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwD9Ut6Ex2UrftNNji1zj32drPSM bAHytL5PnUpD3nPBWG5s07h7LlKZodwNQQGQ2TuXxWL4ff54RREW+ncNkmrPaMh7 rdie8z3kzaVV3sgUGsz44k6srwihMEBvGuyWfNm0n2+hUHTdzWb5GNLoX60ghdke D0DayXSv00D86mS8SV38hdpRfeLgdPZCAbN/cscC4Z23HkyBUuTZ1iCBMxg49TMO +ztXpXYJeECHSxICaACN7YIjzm1H7UqGawiDBP+p1wAKfTIUhs2qLFtgHzEg2T9m rzo9L5swaX6sZoUoGdj1uRhMrH3g5vOw553TcwS3x3CPR2PNYjbPzdENjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJuEZ7P1vEtaZ1tv/RyWrYGsdqzMB8GA1UdIwQY MBaAFLnZMF/L1ZzaS2j4iN9gIEhbdOmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYt MWQwOWM3OWIyNTQwLzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYtMWQwOWM3OWIyNTQw LzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddAFnkvI /vUEVk3nvoxnhf4kz3/AzAzNbdBU+9Dcmv8FIdHs/ZNYHbReBPE2vp461Q25Hq9S QNZGaPmFZiJZ0qLsIO2a/0/KQmOR5XeknD87sysfFpfDAg6LztApsD1QZ++fhj7U OkeO5ilcv8RpN4gTVFpG7IUU9PUsV7qWXRjdBsHbs3l0UMs6GTxAvy2lPy7Qt/O8 JL3AE254UKFGEjZxnZwec9GSIlGEnyvdtbzoyOVXjOULTzPk93+RQa+iz5q3NdpW FtjDhFeDmYh8HV3+V9KljF22RCcuwscB0JZTMaZhXMRSw1x9QSbJYCelHfSloCoG X3a4l/ROY7N2Ug== -----END CERTIFICATE-----Generated at Sun Dec 14 17:24:25 2025 by rpki-client