This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json) Hash identifier: 0hx/m3rhZqcVzWsY6Xth/B7wal1yObQPeEBjUqBhs+c= Subject key identifier: 0B:8D:45:C9:4B:7D:B1:81:F2:28:51:87:1F:AC:61:EA:D8:2C:F3:E1 Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46 Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346 Certificate serial: 019B0E9319D44B988674C6F77104236CF595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 18:01:20 +0000 Manifest this update: Thu 11 Dec 2025 18:01:20 +0000 Manifest next update: Fri 12 Dec 2025 18:01:20 +0000 Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=) 2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: E3fk+CBPSLYB5puFDPlSqw4FOZ1yP1RRbrMta1sO8CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:19:d4:4b:98:86:74:c6:f7:71:04:23:6c:f5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346 Validity Not Before: Dec 11 18:01:20 2025 GMT Not After : Dec 12 18:01:20 2025 GMT Subject: CN=0b8d45c94b7db181f22851871fac61ead82cf3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:7d:02:ac:9e:c5:ec:48:ab:3b:4f:a6:1e: 8a:c0:87:99:68:d8:d3:2c:58:4f:79:93:71:46:56: f2:fa:03:52:03:78:20:e1:4e:bf:6c:00:79:ec:30: 87:6e:94:d7:17:12:fa:68:fe:26:93:0f:7f:92:f8: 99:09:87:95:7b:d1:70:03:c8:77:ba:6a:c2:8f:58: 76:d6:1f:fb:85:bf:11:92:9f:5e:48:47:55:ab:de: 24:89:e1:ec:d6:ff:ce:c9:c9:d8:0f:9a:57:39:8d: 33:04:7e:6c:b5:66:d8:e7:d2:5d:4d:c8:c9:0a:fe: 38:d1:9f:22:fa:6a:4a:97:1e:c9:76:71:7b:af:3d: 14:2b:9f:fd:90:32:de:1b:bb:df:58:e5:6e:f4:86: ee:27:55:1d:5e:6b:ee:3c:d6:21:03:88:64:e3:62: 27:cc:f2:29:d7:32:fa:95:80:3c:13:45:20:86:8d: 6c:d5:b0:5c:fc:da:e3:13:c7:9d:e7:b5:bf:73:29: dc:93:a5:71:b6:11:fb:41:89:d2:af:8a:6c:4a:c8: 83:69:e0:26:78:9e:b2:08:f2:f1:5e:40:38:14:a5: 17:f4:17:df:26:a0:b2:7f:3e:e7:ae:76:07:b1:a7: ff:2f:00:1b:53:ed:3e:11:c0:7f:74:48:5b:d7:32: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8D:45:C9:4B:7D:B1:81:F2:28:51:87:1F:AC:61:EA:D8:2C:F3:E1 X509v3 Authority Key Identifier: keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:51:36:35:fe:53:eb:25:b6:51:bb:e3:34:f1:ff:db:6d:c5: 5a:8f:b7:fe:df:3f:b3:58:b5:3f:d2:73:a9:3b:d5:e9:d1:c6: e0:bc:a7:99:fc:60:f8:57:7f:28:2f:b6:8b:f4:af:96:95:d6: f8:b6:03:ec:6d:cf:56:0f:95:86:aa:25:fe:b3:be:b9:2e:d7: 36:03:2a:ac:23:ae:d5:db:a3:3b:d2:e5:be:c4:de:be:6c:73: 8a:23:5f:56:66:99:95:47:97:67:e1:51:3e:f4:48:41:54:cd: 88:cc:0c:2e:c7:67:e7:cb:b7:85:2e:3b:db:3c:68:0e:23:31: 01:8a:d0:be:7d:15:73:bc:88:cc:59:e9:67:1a:03:f1:5f:38: 62:97:20:90:57:f9:9b:6e:98:87:d6:02:91:fe:f0:9e:e5:19: 80:a9:0e:56:4e:e8:9b:8e:21:20:66:57:ab:75:70:d6:56:ec: ad:67:5e:bb:4c:50:ba:b6:32:76:9b:eb:21:86:c0:d6:f7:21: 33:4f:4b:23:1b:8b:7d:fc:8a:8d:43:0b:26:38:26:93:69:06: 5e:c9:8f:58:00:a0:d5:20:e8:07:53:ca:de:b8:15:2a:5a:f2: 8d:a6:4a:20:8e:94:5b:7e:1b:cf:ee:46:e6:aa:7c:4a:7c:b8: 2e:39:78:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxnUS5iGdMb3cQQjbPWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDNkZWQ3NDViMDVmNDAzOGU5ODNmYjlkNzhlZGY1NmYy NTEzNDYwHhcNMjUxMjExMTgwMTIwWhcNMjUxMjEyMTgwMTIwWjAzMTEwLwYDVQQD EygwYjhkNDVjOTRiN2RiMTgxZjIyODUxODcxZmFjNjFlYWQ4MmNmM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtp9AqyexexIqztPph6KwIeZaNjT LFhPeZNxRlby+gNSA3gg4U6/bAB57DCHbpTXFxL6aP4mkw9/kviZCYeVe9FwA8h3 umrCj1h21h/7hb8Rkp9eSEdVq94kieHs1v/OycnYD5pXOY0zBH5stWbY59JdTcjJ Cv440Z8i+mpKlx7JdnF7rz0UK5/9kDLeG7vfWOVu9IbuJ1UdXmvuPNYhA4hk42In zPIp1zL6lYA8E0Ugho1s1bBc/NrjE8ed57W/cynck6VxthH7QYnSr4psSsiDaeAm eJ6yCPLxXkA4FKUX9BffJqCyfz7nrnYHsaf/LwAbU+0+EcB/dEhb1zJ8pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuNRclLfbGB8ihRhx+sYerYLPPhMB8GA1UdIwQY MBaAFFJD3tdFsF9AOOmD+5147fVvJRNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMt YzUzNmRmNWMyNzRlLzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMtYzUzNmRmNWMyNzRl LzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglE2Nf5T 6yW2UbvjNPH/223FWo+3/t8/s1i1P9JzqTvV6dHG4Lynmfxg+Fd/KC+2i/SvlpXW +LYD7G3PVg+Vhqol/rO+uS7XNgMqrCOu1dujO9LlvsTevmxziiNfVmaZlUeXZ+FR PvRIQVTNiMwMLsdn58u3hS472zxoDiMxAYrQvn0Vc7yIzFnpZxoD8V84YpcgkFf5 m26Yh9YCkf7wnuUZgKkOVk7om44hIGZXq3Vw1lbsrWdeu0xQurYydpvrIYbA1vch M09LIxuLffyKjUMLJjgmk2kGXsmPWACg1SDoB1PK3rgVKlryjaZKII6UW34bz+5G 5qp8Sny4Ljl4SA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:52 2025 by rpki-client