This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft File: UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json) Hash identifier: EwaS4/wYWbeV/UDiElkktWGH5y05cOUCs0YDwMO+ULs= Subject key identifier: 67:2E:30:FE:17:D8:A7:BD:78:6B:FB:48:92:0C:25:65:42:30:B8:5A Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3 Certificate issuer: /CN=5032f297789a194a8b507805f35d42ee78c0d4c3 Certificate serial: 019B0E5BFC2ACB36B0E307B55D76142F83AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft Manifest number: 1701 Signing time: Thu 11 Dec 2025 17:01:07 +0000 Manifest this update: Thu 11 Dec 2025 17:01:07 +0000 Manifest next update: Fri 12 Dec 2025 17:01:07 +0000 Files and hashes: 1: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: IC6P4/uFTuFjTSaZ9K5fQNwWZdEHTW8MhbhMQSYojGM=) 2: nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa (hash: HsNAyKM2xYLYihaIQPq7p3bRxHDLIVC8wZ1mzcn3eIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:fc:2a:cb:36:b0:e3:07:b5:5d:76:14:2f:83:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3 Validity Not Before: Dec 11 17:01:07 2025 GMT Not After : Dec 12 17:01:07 2025 GMT Subject: CN=672e30fe17d8a7bd786bfb48920c25654230b85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:70:7b:ab:01:ce:5d:0a:01:09:f1:5b:b9: e1:ed:b8:ee:9c:ca:51:dc:c8:ca:be:9b:a9:ec:b0: 74:c5:db:ee:42:ef:23:52:d1:94:18:89:23:a3:a8: 9f:4a:ce:a9:55:c2:41:01:c9:ed:14:d4:89:d3:d3: 1c:b3:38:0a:09:c3:7a:d6:76:b7:cd:34:57:f6:ce: 46:4a:10:4c:f1:6e:d3:87:28:14:fd:fa:d9:f6:37: 78:b0:38:6d:89:e5:43:7c:5b:1a:c0:9a:8f:66:b9: fb:8d:37:69:6e:bb:35:ae:d5:fa:1a:74:8f:81:b7: 39:9d:3e:4a:b9:8f:5f:87:fe:f7:3c:f6:99:2e:78: ed:3f:f5:7a:d1:70:a9:f7:cb:9a:e0:67:c8:c7:88: 86:4d:6a:28:47:7d:d2:c3:69:c7:3d:72:10:63:bf: c5:85:d9:4f:f5:6b:f2:3e:d3:14:f8:7d:15:f2:e5: 77:8c:66:d0:d5:b4:cf:0a:0b:c4:d3:df:fe:2f:0f: e6:a0:c1:82:63:ab:78:92:1e:03:d3:a4:f1:51:4d: f6:ad:b1:a8:f6:22:41:07:56:54:b2:0f:11:d4:72: 1f:ad:9e:7d:b7:a4:e6:be:07:15:92:89:57:cd:98: 77:ec:c6:f7:0d:c2:31:16:0d:08:df:b7:e9:52:17: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:30:FE:17:D8:A7:BD:78:6B:FB:48:92:0C:25:65:42:30:B8:5A X509v3 Authority Key Identifier: keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ba:e5:e3:09:10:36:ee:67:c1:fc:17:60:45:ed:1f:fd:ce: b2:cd:a5:97:84:81:9e:f6:a9:bb:98:ad:53:9c:f3:2c:6f:2c: ae:3f:80:a8:6a:0a:ed:30:74:e6:c2:ab:c0:de:64:17:6b:15: 97:e3:7a:b1:23:47:39:3e:2c:a6:6c:3b:af:6a:01:4d:0e:77: 6a:7c:7e:f5:c1:33:7c:13:3a:31:8b:d7:51:64:ad:e8:9a:df: 6f:95:ba:78:0b:b2:25:f9:f3:9f:bd:60:8e:e1:77:a0:f5:e0: 76:d7:ab:9e:29:42:2e:bd:ab:bb:99:ad:f7:d7:da:5d:51:00: 33:70:71:82:cb:29:a0:89:84:70:01:69:cc:c3:2d:91:14:e5: 99:0b:ea:a1:54:02:d8:74:4e:0a:fa:f0:48:83:5a:d6:d2:1f: 71:74:72:79:78:bb:8f:f5:a8:27:7a:ee:0f:25:17:5d:ca:1e: 38:90:50:98:e4:f3:4c:97:95:11:24:c1:61:15:5c:07:5e:ff: 92:af:08:6e:ed:1a:8c:84:20:c2:71:98:a3:4b:50:77:ad:ee: 39:31:ff:6f:9d:08:43:95:7b:af:9b:be:e7:9a:07:c9:36:a6: 88:83:71:ff:fa:60:9e:bf:0d:52:18:4d:2d:b9:02:9b:e5:8b: 0a:17:bf:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW/wqyzaw4we1XXYUL4OuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMzJmMjk3Nzg5YTE5NGE4YjUwNzgwNWYzNWQ0MmVlNzhj MGQ0YzMwHhcNMjUxMjExMTcwMTA3WhcNMjUxMjEyMTcwMTA3WjAzMTEwLwYDVQQD Eyg2NzJlMzBmZTE3ZDhhN2JkNzg2YmZiNDg5MjBjMjU2NTQyMzBiODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Nwe6sBzl0KAQnxW7nh7bjunMpR 3MjKvpup7LB0xdvuQu8jUtGUGIkjo6ifSs6pVcJBAcntFNSJ09McszgKCcN61na3 zTRX9s5GShBM8W7ThygU/frZ9jd4sDhtieVDfFsawJqPZrn7jTdpbrs1rtX6GnSP gbc5nT5KuY9fh/73PPaZLnjtP/V60XCp98ua4GfIx4iGTWooR33Sw2nHPXIQY7/F hdlP9WvyPtMU+H0V8uV3jGbQ1bTPCgvE09/+Lw/moMGCY6t4kh4D06TxUU32rbGo 9iJBB1ZUsg8R1HIfrZ59t6TmvgcVkolXzZh37Mb3DcIxFg0I37fpUhchQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcuMP4X2Ke9eGv7SJIMJWVCMLhaMB8GA1UdIwQY MBaAFFAy8pd4mhlKi1B4BfNdQu54wNTDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQt YzZiZGIxODMwNjk0LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQtYzZiZGIxODMwNjk0 LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrrl4wkQ Nu5nwfwXYEXtH/3Oss2ll4SBnvapu5itU5zzLG8srj+AqGoK7TB05sKrwN5kF2sV l+N6sSNHOT4spmw7r2oBTQ53anx+9cEzfBM6MYvXUWSt6Jrfb5W6eAuyJfnzn71g juF3oPXgdternilCLr2ru5mt99faXVEAM3BxgsspoImEcAFpzMMtkRTlmQvqoVQC 2HROCvrwSINa1tIfcXRyeXi7j/WoJ3ruDyUXXcoeOJBQmOTzTJeVESTBYRVcB17/ kq8Ibu0ajIQgwnGYo0tQd63uOTH/b50IQ5V7r5u+55oHyTamiINx//pgnr8NUhhN LbkCm+WLChe/9w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:25:08 2025 by rpki-client