This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft File: UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json) Hash identifier: JOzkShMeaK1dpAL70TIeYiwIWeheXVlGnqTIGgttI8Q= Subject key identifier: F1:DE:6A:0A:6B:80:F9:B0:0C:3D:FC:88:D1:CA:FF:63:7E:84:E0:D8 Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8 Certificate issuer: /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8 Certificate serial: 019B59769385FAB2154D9AAAA957D830F1A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:01:41 +0000 Manifest this update: Fri 26 Dec 2025 07:01:41 +0000 Manifest next update: Sat 27 Dec 2025 07:01:41 +0000 Files and hashes: 1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: sYNYtOI6YkPAoCiEn+IPcMeHnlgG0OjDQy+rapJLgIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:93:85:fa:b2:15:4d:9a:aa:a9:57:d8:30:f1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8 Validity Not Before: Dec 26 07:01:41 2025 GMT Not After : Dec 27 07:01:41 2025 GMT Subject: CN=f1de6a0a6b80f9b00c3dfc88d1caff637e84e0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:98:68:28:62:4e:9d:0f:47:77:cc:c4:82:25: 95:f2:bb:47:ad:e5:25:1b:c4:6d:18:47:79:2d:1d: 07:64:09:8c:67:4c:a9:5d:fb:c7:87:b9:b1:53:da: be:f7:78:3f:ce:2d:2f:7b:3c:c8:c7:cd:cf:3e:06: 24:17:63:e2:bd:a0:30:18:e9:4e:9c:31:97:6a:24: d4:d4:e4:9d:f8:b5:f5:9c:80:3c:89:2c:b8:d1:5e: 0c:e9:36:e7:40:81:db:2f:00:2b:e7:ea:a8:7e:05: 5f:e9:bd:a1:55:8d:48:74:02:8c:28:98:8e:09:59: 7b:93:db:89:40:e0:da:8a:61:42:01:44:06:5f:f5: f8:48:1b:fd:af:0c:66:3d:5a:ff:6d:21:13:60:17: 3b:18:ee:eb:a4:7c:6f:47:b8:71:71:04:a2:5f:72: 3d:b0:9f:33:e9:84:79:79:62:74:0e:07:ba:62:fc: d5:db:06:18:a1:fa:e0:d1:9c:18:8e:82:d6:84:a5: 6d:18:b4:09:96:33:a5:63:48:bb:2b:ec:c2:20:16: 7c:ea:74:a0:a0:9a:9b:8a:55:87:a6:89:c8:73:34: 18:dc:45:81:ea:7f:2e:d3:33:fd:f3:cd:af:9d:b1: cc:dd:ee:97:f5:98:68:d2:11:90:1c:e6:90:56:91: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DE:6A:0A:6B:80:F9:B0:0C:3D:FC:88:D1:CA:FF:63:7E:84:E0:D8 X509v3 Authority Key Identifier: keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b7:d5:3b:93:e6:e1:b5:92:12:f7:37:7d:e0:7e:9a:2a:61: 1e:3c:aa:48:d3:bc:c5:a8:6d:43:96:5b:56:ea:15:1f:d7:08: a1:41:2c:b2:b4:0d:79:48:80:7a:92:c1:c5:3f:fc:85:c9:ff: 7a:b6:e8:7d:36:45:ba:6a:65:f6:35:55:d8:a9:53:fa:b1:09: b2:b8:13:16:96:8a:f1:48:29:bb:d9:53:4e:49:f9:1a:a1:17: b0:ee:22:ac:20:89:35:32:c1:58:cb:05:da:74:88:8f:c4:ea: 1c:65:dc:7d:45:73:44:05:ed:fa:6f:c8:13:24:cd:bb:c6:64: 8a:62:8e:ff:a3:3e:a8:46:98:54:89:61:2b:8f:34:4c:d8:6b: 88:59:3f:43:df:79:4f:45:fc:76:dd:ee:b4:31:e5:73:35:a5: a2:40:ba:7a:98:6a:3f:82:7a:f4:e6:9f:f2:82:54:b9:f2:d2: a6:53:80:29:5b:39:91:66:1c:43:c7:7b:fe:ab:f1:3a:39:d4: 44:79:a9:67:33:9c:1c:0e:a7:c1:60:5b:9e:a0:0e:d2:c8:c8: 28:57:fb:38:57:0a:cc:53:8d:4d:2a:77:5b:db:d1:3a:fb:7b: 90:9e:7c:83:1c:89:e2:95:35:c9:61:f0:8e:d0:b5:39:c5:32: 07:74:38:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpOF+rIVTZqqqVfYMPGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGIyOTI5NzJjMTBjNjlmOTdlY2QyNGYyZmI2OWI0ZjY3 NzZkZTgwHhcNMjUxMjI2MDcwMTQxWhcNMjUxMjI3MDcwMTQxWjAzMTEwLwYDVQQD EyhmMWRlNmEwYTZiODBmOWIwMGMzZGZjODhkMWNhZmY2MzdlODRlMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJhoKGJOnQ9Hd8zEgiWV8rtHreUl G8RtGEd5LR0HZAmMZ0ypXfvHh7mxU9q+93g/zi0vezzIx83PPgYkF2PivaAwGOlO nDGXaiTU1OSd+LX1nIA8iSy40V4M6TbnQIHbLwAr5+qofgVf6b2hVY1IdAKMKJiO CVl7k9uJQODaimFCAUQGX/X4SBv9rwxmPVr/bSETYBc7GO7rpHxvR7hxcQSiX3I9 sJ8z6YR5eWJ0Dge6YvzV2wYYofrg0ZwYjoLWhKVtGLQJljOlY0i7K+zCIBZ86nSg oJqbilWHponIczQY3EWB6n8u0zP9882vnbHM3e6X9Zho0hGQHOaQVpHByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHeagprgPmwDD38iNHK/2N+hODYMB8GA1UdIwQY MBaAFFHbKSlywQxp+X7NJPL7abT2d23oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2Ut NmVhZjlkYWJhZTBmLzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2UtNmVhZjlkYWJhZTBm LzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbfVO5Pm 4bWSEvc3feB+miphHjyqSNO8xahtQ5ZbVuoVH9cIoUEssrQNeUiAepLBxT/8hcn/ erbofTZFumpl9jVV2KlT+rEJsrgTFpaK8Ugpu9lTTkn5GqEXsO4irCCJNTLBWMsF 2nSIj8TqHGXcfUVzRAXt+m/IEyTNu8ZkimKO/6M+qEaYVIlhK480TNhriFk/Q995 T0X8dt3utDHlczWlokC6ephqP4J69Oaf8oJUufLSplOAKVs5kWYcQ8d7/qvxOjnU RHmpZzOcHA6nwWBbnqAO0sjIKFf7OFcKzFONTSp3W9vROvt7kJ58gxyJ4pU1yWHw jtC1OcUyB3Q49g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:11 2025 by rpki-client