This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft File: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft (raw, json) Hash identifier: wUWkI16ZxC6fW9y5PsLot+rpLYL/vhpOIzbRF536EYw= Subject key identifier: B2:D0:BE:54:99:63:16:E7:F1:05:02:F8:FA:F9:0C:39:C7:A1:A5:09 Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a Certificate serial: 019B36B38A92C81DC056A6D17EE90074389E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft Manifest number: 60 Signing time: Fri 19 Dec 2025 13:01:34 +0000 Manifest this update: Fri 19 Dec 2025 13:01:34 +0000 Manifest next update: Sat 20 Dec 2025 13:01:34 +0000 Files and hashes: 1: 3p0Wlr49r2oy-mqOd40rAvvmW3w.roa (hash: z1wQ/dZS1Nu1TOpyODQg46+I11CB0aKuZl5lRQ8vxEI=) 2: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl (hash: UJcY1Sg1fnGKR3dTYSm1vEJGViZghlx3KCEuLH+WRdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:8a:92:c8:1d:c0:56:a6:d1:7e:e9:00:74:38:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a Validity Not Before: Dec 19 13:01:34 2025 GMT Not After : Dec 20 13:01:34 2025 GMT Subject: CN=b2d0be54996316e7f10502f8faf90c39c7a1a509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:4a:da:45:d7:27:46:9b:25:da:35:b2:d4: ee:03:4b:56:5e:59:3f:90:cf:a4:64:d1:a9:e8:d2: 68:d6:ce:43:0c:ff:1d:db:33:21:f4:c8:1c:c7:9d: 7d:12:2d:b9:51:71:d6:4a:91:a4:89:92:01:61:2e: ed:3d:94:3f:df:6e:b3:4c:6d:81:41:d6:cb:86:34: 89:41:65:c6:11:91:e0:66:9d:d1:98:02:49:36:73: 20:6f:04:47:47:46:30:36:7b:a1:67:d0:9c:82:5d: d0:cb:0f:77:84:b5:cf:0e:a5:63:e7:5e:36:7d:78: fd:99:c4:39:18:07:fa:02:ff:86:d3:8b:18:ac:ca: 7c:92:c4:14:d5:5d:c9:d7:41:bf:6b:52:66:ea:d2: 97:70:e9:9a:4b:64:98:de:77:5f:f7:2f:69:25:87: 23:ec:3b:93:cf:8d:46:b6:d0:ec:ea:72:c4:59:37: 2c:22:26:5c:69:45:cd:13:ec:f2:77:2f:46:52:e4: f7:9b:b9:fe:21:58:2f:09:3b:26:ee:eb:9a:5a:9e: ed:98:6b:72:cf:57:1d:98:36:9f:8d:9c:e5:ab:63: 4c:3f:62:fa:db:88:c3:76:bf:90:7c:60:b1:db:89: 77:50:97:f3:6f:47:1f:d2:88:1a:34:45:69:a0:b7: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D0:BE:54:99:63:16:E7:F1:05:02:F8:FA:F9:0C:39:C7:A1:A5:09 X509v3 Authority Key Identifier: keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:12:63:c1:3e:9f:56:c3:c1:e9:87:b0:be:78:eb:00:37:0e: 13:5b:8e:eb:64:21:5c:c4:52:76:d7:36:ea:04:52:75:dc:7c: 43:d7:67:57:5e:b0:8f:62:e8:d8:cd:a8:07:c0:24:d4:52:80: 06:4f:88:cc:d0:9e:29:43:6b:c7:4e:93:ab:29:ea:0a:19:96: 30:9e:aa:2a:b3:e8:12:ce:05:76:93:33:4d:24:dc:bc:74:ab: 2d:4f:67:58:00:10:ac:f1:f5:f3:39:6b:e3:53:8d:50:9e:9f: 4e:43:83:14:71:42:f1:23:e0:7f:6b:10:2f:e1:fb:ba:14:95: d8:d4:e7:5b:7e:88:e2:ee:78:f2:2f:a7:c2:87:3b:6c:4c:8d: da:79:6c:19:40:6e:34:9e:cb:b1:e4:57:a7:31:36:87:82:18: f6:e0:df:d6:7b:01:16:bb:9e:f7:7b:da:1e:0f:df:92:dd:53: 3f:7f:ee:f4:f1:84:b5:8b:55:78:fb:5c:6f:a7:ec:b0:91:95: 84:7f:28:ca:06:8a:3a:97:2d:2c:8a:33:64:ea:b5:9b:f2:64: 59:b9:03:05:01:5b:63:0a:df:f7:d6:58:83:01:4f:43:27:60: e4:2d:c7:13:c9:40:50:a8:18:9a:a6:c4:ef:4f:05:67:3d:98: 75:1a:83:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s4qSyB3AVqbRfukAdDieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyMmY0ZGVhN2RmMzkyN2Q0MDExYjMwODdkNGQwNjdm OWQxOWEwHhcNMjUxMjE5MTMwMTM0WhcNMjUxMjIwMTMwMTM0WjAzMTEwLwYDVQQD EyhiMmQwYmU1NDk5NjMxNmU3ZjEwNTAyZjhmYWY5MGMzOWM3YTFhNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4hK2kXXJ0abJdo1stTuA0tWXlk/ kM+kZNGp6NJo1s5DDP8d2zMh9Mgcx519Ei25UXHWSpGkiZIBYS7tPZQ/326zTG2B QdbLhjSJQWXGEZHgZp3RmAJJNnMgbwRHR0YwNnuhZ9Ccgl3Qyw93hLXPDqVj5142 fXj9mcQ5GAf6Av+G04sYrMp8ksQU1V3J10G/a1Jm6tKXcOmaS2SY3ndf9y9pJYcj 7DuTz41GttDs6nLEWTcsIiZcaUXNE+zydy9GUuT3m7n+IVgvCTsm7uuaWp7tmGty z1cdmDafjZzlq2NMP2L624jDdr+QfGCx24l3UJfzb0cf0ogaNEVpoLfdAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLQvlSZYxbn8QUC+Pr5DDnHoaUJMB8GA1UdIwQY MBaAFFBRIvTep985J9QBGzCH1NBn+dGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQt ZDNmMjRhZTdiODdiLzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQtZDNmMjRhZTdiODdi LzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxJjwT6f VsPB6YewvnjrADcOE1uO62QhXMRSdtc26gRSddx8Q9dnV16wj2Lo2M2oB8Ak1FKA Bk+IzNCeKUNrx06TqynqChmWMJ6qKrPoEs4FdpMzTSTcvHSrLU9nWAAQrPH18zlr 41ONUJ6fTkODFHFC8SPgf2sQL+H7uhSV2NTnW36I4u548i+nwoc7bEyN2nlsGUBu NJ7LseRXpzE2h4IY9uDf1nsBFrue93vaHg/fkt1TP3/u9PGEtYtVePtcb6fssJGV hH8oygaKOpctLIozZOq1m/JkWbkDBQFbYwrf99ZYgwFPQydg5C3HE8lAUKgYmqbE 708FZz2YdRqD5A== -----END CERTIFICATE-----Generated at Fri Dec 19 16:48:58 2025 by rpki-client