This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json) Hash identifier: DTC33lIXpdqKqtU0dIUJsIruPs4hTvxY85GjBWXtSvM= Subject key identifier: FB:5D:32:3F:7D:3A:0F:BA:BE:35:99:38:D4:61:2C:7B:45:71:2C:73 Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Certificate serial: 019B337B4AE1CB1E9AE31EBB3EE5C3B3FF76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft Manifest number: 1717 Signing time: Thu 18 Dec 2025 22:01:16 +0000 Manifest this update: Thu 18 Dec 2025 22:01:16 +0000 Manifest next update: Fri 19 Dec 2025 22:01:16 +0000 Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=) 2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: B4SbZuDO7GRPtxEQ7eXR8eBWOYdqO0SDYSX+C3+9BLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:4a:e1:cb:1e:9a:e3:1e:bb:3e:e5:c3:b3:ff:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Validity Not Before: Dec 18 22:01:16 2025 GMT Not After : Dec 19 22:01:16 2025 GMT Subject: CN=fb5d323f7d3a0fbabe359938d4612c7b45712c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:8e:a4:d0:01:dd:48:dc:b8:ad:68:79:a6: 57:2d:7b:3d:22:11:39:b9:09:56:dc:d9:cb:84:5e: 7c:cd:9f:57:39:1f:c1:f7:a1:20:31:27:92:65:67: 5d:28:75:d0:f3:2b:de:62:c2:91:c1:3e:52:2a:19: c7:b9:64:d1:b2:37:ed:5d:ce:af:a9:e1:32:6f:bc: 3a:bd:18:ee:61:93:e6:a1:91:a0:4c:d0:34:52:77: 78:1d:c4:99:15:95:36:90:63:a7:38:6e:b2:ee:bb: 63:d4:fe:68:22:31:0b:94:68:c1:22:f7:b7:24:6a: 95:d7:e1:cd:96:27:92:66:cf:f4:37:d4:f9:23:af: cd:e5:3b:34:23:dc:d6:ff:5b:20:3e:9c:56:e7:53: 96:2a:45:61:38:2b:23:9e:46:15:66:09:5b:5b:f0: d6:69:07:ae:65:e0:09:19:48:9b:2b:e6:1c:28:95: 05:3c:9f:01:47:17:32:c7:a6:6a:b1:5a:c8:d2:d0: 0d:bc:3d:8e:52:ff:69:ce:ea:cc:9a:a0:81:40:a7: aa:ec:07:16:ba:5b:00:8b:e3:2c:44:81:c1:0b:22: 41:36:9c:e2:8d:f9:6f:20:3a:ff:ee:92:6b:51:3f: ac:28:93:d7:21:dc:d3:0d:10:7b:7b:c5:33:43:97: f4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5D:32:3F:7D:3A:0F:BA:BE:35:99:38:D4:61:2C:7B:45:71:2C:73 X509v3 Authority Key Identifier: keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:56:71:a9:a0:00:89:a6:d9:25:c7:2f:ec:29:08:1a:19:ea: 42:a5:15:29:d4:fc:6c:b7:9e:b6:40:9d:c1:98:18:d0:d6:67: 49:21:17:2d:75:56:25:cc:66:42:e1:1b:ed:c6:42:82:bc:53: 5c:31:13:45:71:92:21:df:a9:95:82:5d:e5:ae:df:7b:be:33: 5e:f9:9d:aa:f2:1c:6e:7f:83:f5:01:d9:45:8e:3a:ed:41:ee: f0:c9:b4:6f:17:3c:85:f2:f2:e4:4a:1a:19:66:cb:05:9a:cf: e1:a3:71:5e:ff:b0:11:06:14:a6:5a:63:fb:4b:1a:18:8b:f8: f0:d0:71:5a:16:56:d9:14:e3:77:ab:6a:9f:e9:2f:9f:1f:57: 59:ea:e7:91:bf:97:30:84:78:53:4f:47:63:50:ec:17:0a:29: c3:f4:6b:21:5d:a1:ab:e5:03:d5:5f:d0:1f:ea:45:5c:49:5d: 6e:e1:bb:9c:dd:27:20:dd:30:89:0d:ed:14:ed:96:e7:5e:6c: f9:15:02:81:99:e0:d0:bf:e8:78:42:81:f4:75:e9:bd:47:e9: 32:fa:e1:17:05:76:42:72:8f:e7:e7:44:fe:af:5c:f8:c4:44: fb:fa:a2:85:d2:1b:fd:c3:2a:08:72:7a:13:34:c7:0b:97:98: 5e:85:49:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0rhyx6a4x67PuXDs/92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOWNhNWE2ZTVkNjc0MjFmM2YyY2QyMTEzOGNiNzA3MDQ4 NTA5NTUwHhcNMjUxMjE4MjIwMTE2WhcNMjUxMjE5MjIwMTE2WjAzMTEwLwYDVQQD EyhmYjVkMzIzZjdkM2EwZmJhYmUzNTk5MzhkNDYxMmM3YjQ1NzEyYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp6OpNAB3UjcuK1oeaZXLXs9IhE5 uQlW3NnLhF58zZ9XOR/B96EgMSeSZWddKHXQ8yveYsKRwT5SKhnHuWTRsjftXc6v qeEyb7w6vRjuYZPmoZGgTNA0Und4HcSZFZU2kGOnOG6y7rtj1P5oIjELlGjBIve3 JGqV1+HNlieSZs/0N9T5I6/N5Ts0I9zW/1sgPpxW51OWKkVhOCsjnkYVZglbW/DW aQeuZeAJGUibK+YcKJUFPJ8BRxcyx6ZqsVrI0tANvD2OUv9pzurMmqCBQKeq7AcW ulsAi+MsRIHBCyJBNpzijflvIDr/7pJrUT+sKJPXIdzTDRB7e8UzQ5f0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtdMj99Og+6vjWZONRhLHtFcSxzMB8GA1UdIwQY MBaAFFKcpabl1nQh8/LNIROMtwcEhQlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEt M2EzYTlmMDI0MmI4LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEtM2EzYTlmMDI0MmI4 LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFZxqaAA iabZJccv7CkIGhnqQqUVKdT8bLeetkCdwZgY0NZnSSEXLXVWJcxmQuEb7cZCgrxT XDETRXGSId+plYJd5a7fe74zXvmdqvIcbn+D9QHZRY467UHu8Mm0bxc8hfLy5Eoa GWbLBZrP4aNxXv+wEQYUplpj+0saGIv48NBxWhZW2RTjd6tqn+kvnx9XWernkb+X MIR4U09HY1DsFwopw/RrIV2hq+UD1V/QH+pFXEldbuG7nN0nIN0wiQ3tFO2W515s +RUCgZng0L/oeEKB9HXpvUfpMvrhFwV2QnKP5+dE/q9c+MRE+/qihdIb/cMqCHJ6 EzTHC5eYXoVJ5A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:50 2025 by rpki-client