This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft File: ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json) Hash identifier: f0F7DEw0wdFAN/l4jOC2CffK6u+wlPgM0WAaPdjNjk8= Subject key identifier: 46:C0:34:F5:81:DF:6F:29:D7:F4:C4:89:E7:07:77:48:E5:2F:AB:97 Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6 Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6 Certificate serial: 019B34C49A2E4E92E3E06DA80C8006C6AB28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft Manifest number: 0CBA Signing time: Fri 19 Dec 2025 04:00:58 +0000 Manifest this update: Fri 19 Dec 2025 04:00:58 +0000 Manifest next update: Sat 20 Dec 2025 04:00:58 +0000 Files and hashes: 1: 5AZ3tR0kmtggSX8GQL0nk_9vkNM.roa (hash: o7jn9b/bWLBA/ntIWwkYzFbMhpkdc8Mhco9rAn9gsO0=) 2: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: H7U3t6/LdBz123DbdGAUk3qDudHhLvhhiPP0Xepp9OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:9a:2e:4e:92:e3:e0:6d:a8:0c:80:06:c6:ab:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6 Validity Not Before: Dec 19 04:00:58 2025 GMT Not After : Dec 20 04:00:58 2025 GMT Subject: CN=46c034f581df6f29d7f4c489e7077748e52fab97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:4d:08:a5:01:40:df:9a:b0:2a:aa:dd:c0: df:4c:40:66:cd:27:33:5c:6e:66:3e:9b:8d:a3:2c: ed:2c:36:ee:30:67:d2:0f:f5:ac:07:8f:bf:16:5a: 70:8c:66:0d:48:d3:92:53:17:20:71:b3:bf:e9:21: 08:cd:31:93:dc:84:59:18:a1:c7:19:21:e4:f7:99: 2c:6a:83:00:c1:53:b7:e1:0f:41:73:90:50:22:08: 09:74:87:c5:55:62:b3:04:51:5c:ac:5c:ad:55:66: 1c:17:4b:18:fe:4e:32:0c:c2:8b:dc:4d:29:9b:0a: 58:71:8f:29:72:4b:9e:8a:61:6e:56:b2:d9:ab:08: fe:9b:37:b4:7e:d0:52:92:fe:85:92:5c:2c:9e:c2: 46:98:b2:65:5e:99:1e:65:ce:06:6f:39:cd:9a:b5: c7:4e:38:2b:8e:01:70:dc:c2:d6:6a:82:ed:40:ab: 42:6d:7e:1b:f5:8d:a5:bd:ef:1a:ad:93:65:0c:d7: a4:d6:70:bc:bc:df:66:98:e3:df:67:62:e1:55:74: 8b:09:a0:a2:31:1b:5b:bd:7f:ae:46:b4:cc:cf:d4: de:f3:e0:bc:96:67:6e:85:ff:db:c3:d4:53:38:77: f8:ca:13:82:cc:82:e9:c6:44:31:28:e7:1b:dc:b5: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C0:34:F5:81:DF:6F:29:D7:F4:C4:89:E7:07:77:48:E5:2F:AB:97 X509v3 Authority Key Identifier: keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8d:65:74:85:ba:46:76:06:ac:e9:8c:0c:29:88:a4:43:e1: e6:d2:b2:85:16:b0:ab:9b:7f:99:bd:6b:8a:98:13:4c:86:00: e5:ce:3a:d3:2a:16:ab:fc:21:f5:27:da:52:e8:67:06:bd:33: 35:af:c5:a3:13:57:ab:45:61:04:e4:6a:a2:35:ef:cb:48:ff: 7f:f5:ab:60:6a:0f:e0:86:c2:e7:fb:b4:c6:f2:b3:b5:bb:b4: ec:1f:c5:13:0e:de:28:08:6d:a7:63:78:95:c1:06:94:e1:c5: ae:05:3f:3d:e1:20:9d:ec:97:2d:52:90:70:0f:1a:1d:04:bf: 97:44:9f:1f:9b:28:21:55:11:8f:3c:f9:4a:2b:56:db:65:48: 3d:f2:0b:01:b9:24:2e:bd:78:c7:c3:31:e2:dd:a8:9a:19:b5: 2a:79:c7:68:62:1b:cf:a3:90:8b:a3:cb:f0:5b:50:a0:04:5f: 8c:6f:9a:35:4d:b3:18:9b:9d:ba:e8:7f:f1:3d:16:84:84:95: 12:94:d1:72:80:7b:d5:d9:f3:bd:7f:1e:ac:80:9d:ee:9e:be: 48:d1:56:74:8a:04:3a:84:4c:fe:e6:3d:7f:1f:5f:fe:fc:be: 77:66:ec:b9:cb:f9:c4:a6:ed:b5:74:66:55:b8:5f:9e:10:fc: 9f:34:24:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xJouTpLj4G2oDIAGxqsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Zjc0YTQ3YTZkMWEwYmY0YzIxNmU1ZmFiNGQ5MWZiMTI5 ZGYzZDYwHhcNMjUxMjE5MDQwMDU4WhcNMjUxMjIwMDQwMDU4WjAzMTEwLwYDVQQD Eyg0NmMwMzRmNTgxZGY2ZjI5ZDdmNGM0ODllNzA3Nzc0OGU1MmZhYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MNNCKUBQN+asCqq3cDfTEBmzScz XG5mPpuNoyztLDbuMGfSD/WsB4+/FlpwjGYNSNOSUxcgcbO/6SEIzTGT3IRZGKHH GSHk95ksaoMAwVO34Q9Bc5BQIggJdIfFVWKzBFFcrFytVWYcF0sY/k4yDMKL3E0p mwpYcY8pckueimFuVrLZqwj+mze0ftBSkv6FklwsnsJGmLJlXpkeZc4GbznNmrXH TjgrjgFw3MLWaoLtQKtCbX4b9Y2lve8arZNlDNek1nC8vN9mmOPfZ2LhVXSLCaCi MRtbvX+uRrTMz9Te8+C8lmduhf/bw9RTOHf4yhOCzILpxkQxKOcb3LUAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbANPWB328p1/TEiecHd0jlL6uXMB8GA1UdIwQY MBaAFLn3Skem0aC/TCFuX6tNkfsSnfPWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2Qt MzBmNjA4YWRlNDhkLzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2QtMzBmNjA4YWRlNDhk LzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACI1ldIW6 RnYGrOmMDCmIpEPh5tKyhRawq5t/mb1ripgTTIYA5c460yoWq/wh9SfaUuhnBr0z Na/FoxNXq0VhBORqojXvy0j/f/WrYGoP4IbC5/u0xvKztbu07B/FEw7eKAhtp2N4 lcEGlOHFrgU/PeEgneyXLVKQcA8aHQS/l0SfH5soIVURjzz5SitW22VIPfILAbkk Lr14x8Mx4t2omhm1KnnHaGIbz6OQi6PL8FtQoARfjG+aNU2zGJuduuh/8T0WhISV EpTRcoB71dnzvX8erICd7p6+SNFWdIoEOoRM/uY9fx9f/vy+d2bsucv5xKbttXRm VbhfnhD8nzQk5A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:45 2025 by rpki-client