This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json) Hash identifier: SmiHPVMLUIOXvpZg+6yDB1dy/ifPx+97mUz5XsvLnrM= Subject key identifier: CA:72:B6:3B:83:78:CE:B2:B2:57:A6:5A:2A:D4:C0:66:30:36:59:41 Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068 Certificate serial: 019B281B548F742501175C323144ECDF4FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft Manifest number: 03B9 Signing time: Tue 16 Dec 2025 17:00:38 +0000 Manifest this update: Tue 16 Dec 2025 17:00:38 +0000 Manifest next update: Wed 17 Dec 2025 17:00:38 +0000 Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: JhXqzbWjSaLCA8fs//xU8c8Bb+2MNlBJ+ADN3fSEMnI=) 2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:54:8f:74:25:01:17:5c:32:31:44:ec:df:4f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068 Validity Not Before: Dec 16 17:00:38 2025 GMT Not After : Dec 17 17:00:38 2025 GMT Subject: CN=ca72b63b8378ceb2b257a65a2ad4c06630365941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:d3:8a:3b:91:ef:fd:4f:cf:21:5b:fa:db: 71:ce:28:30:84:3b:5e:c4:a2:36:e1:12:09:1e:55: 02:4d:db:64:e5:b7:30:0d:c8:64:c5:f1:a2:97:b5: 94:e7:6c:cb:69:c9:a9:3d:10:ee:f9:48:2b:ac:62: 22:87:8f:7e:71:9e:77:52:db:e4:ef:2a:bc:35:b4: 4c:e3:85:d9:c4:f1:b3:5d:76:79:49:9f:dc:47:55: c1:4b:18:ab:a8:69:4d:45:52:6e:75:5e:c5:db:44: 95:6c:17:87:ed:9c:89:14:49:1e:00:23:99:ba:11: 31:2e:99:f9:24:52:f7:e5:dd:a1:15:29:5f:89:d3: df:c8:cc:aa:14:6f:6a:c0:46:56:53:b8:36:03:a2: 86:25:82:e3:c4:2f:65:cd:8f:a1:74:93:d2:2c:21: 1e:bb:5f:e9:11:08:14:2f:38:81:76:3e:be:00:78: 31:e0:00:68:52:9f:1d:0f:61:72:a5:22:78:8d:6e: 5d:a5:d2:8f:c1:65:ce:f9:ca:c6:02:a2:6e:d2:4c: cd:31:f3:49:e1:1e:fb:8d:1c:d6:d0:4a:a9:31:a1: 6c:38:a9:55:20:0a:55:24:64:25:3a:05:dd:88:07: 8b:12:f0:06:4f:f3:d0:dc:02:4e:7e:2f:a6:3b:40: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:B6:3B:83:78:CE:B2:B2:57:A6:5A:2A:D4:C0:66:30:36:59:41 X509v3 Authority Key Identifier: keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a6:9c:76:27:40:1b:25:2e:12:eb:27:a4:32:0f:09:17:da: c9:1c:7c:d1:8c:f4:3d:1c:b5:be:7a:b6:fc:76:da:cb:bd:8d: 86:c0:74:1c:c9:c2:a0:e8:f7:3e:14:a2:2f:9f:63:e2:ee:88: 90:57:31:d9:0b:0c:37:0c:d9:cf:8e:a9:01:a3:12:fa:7d:3a: 93:50:3e:bc:f8:4a:60:7a:22:81:1f:94:2c:fa:e6:15:24:6e: 30:71:24:47:b0:8b:59:7e:87:e9:18:9c:aa:2b:62:51:0f:10: 6d:3c:bd:bd:ad:a9:0c:82:cd:c5:68:af:47:50:09:36:e3:12: 2d:fe:56:66:fe:c5:ea:cb:e1:a3:44:3f:30:93:7c:be:ca:31: 34:ae:85:84:87:2d:d1:56:3c:9b:a6:1f:fa:ee:0b:80:fb:4c: 30:47:d1:c1:fd:c9:e0:ab:02:2b:8e:9f:d0:58:64:39:7d:ea: ac:e1:37:71:1f:a5:1a:ea:10:78:b7:ec:76:8a:02:c8:75:3c: 05:0b:64:94:6f:7e:f1:65:40:ef:eb:fb:99:95:50:74:b2:76: 59:01:4f:2d:d6:23:cf:c1:da:06:e4:c8:e1:e0:c0:6f:f2:dd: 6a:d2:9a:21:b6:90:ee:df:23:8d:c4:df:fb:85:89:44:36:02: d4:a6:50:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG1SPdCUBF1wyMUTs30+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4 NjAwNjgwHhcNMjUxMjE2MTcwMDM4WhcNMjUxMjE3MTcwMDM4WjAzMTEwLwYDVQQD EyhjYTcyYjYzYjgzNzhjZWIyYjI1N2E2NWEyYWQ0YzA2NjMwMzY1OTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T3TijuR7/1PzyFb+ttxzigwhDte xKI24RIJHlUCTdtk5bcwDchkxfGil7WU52zLacmpPRDu+UgrrGIih49+cZ53Utvk 7yq8NbRM44XZxPGzXXZ5SZ/cR1XBSxirqGlNRVJudV7F20SVbBeH7ZyJFEkeACOZ uhExLpn5JFL35d2hFSlfidPfyMyqFG9qwEZWU7g2A6KGJYLjxC9lzY+hdJPSLCEe u1/pEQgULziBdj6+AHgx4ABoUp8dD2FypSJ4jW5dpdKPwWXO+crGAqJu0kzNMfNJ 4R77jRzW0EqpMaFsOKlVIApVJGQlOgXdiAeLEvAGT/PQ3AJOfi+mO0CT7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpytjuDeM6yslemWirUwGYwNllBMB8GA1UdIwQY MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt OWQ3OTRlZTE0ZGQwLzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaacdidA GyUuEusnpDIPCRfayRx80Yz0PRy1vnq2/Hbay72NhsB0HMnCoOj3PhSiL59j4u6I kFcx2QsMNwzZz46pAaMS+n06k1A+vPhKYHoigR+ULPrmFSRuMHEkR7CLWX6H6Ric qitiUQ8QbTy9va2pDILNxWivR1AJNuMSLf5WZv7F6svho0Q/MJN8vsoxNK6FhIct 0VY8m6Yf+u4LgPtMMEfRwf3J4KsCK46f0FhkOX3qrOE3cR+lGuoQeLfsdooCyHU8 BQtklG9+8WVA7+v7mZVQdLJ2WQFPLdYjz8HaBuTI4eDAb/LdatKaIbaQ7t8jjcTf +4WJRDYC1KZQBQ== -----END CERTIFICATE-----Generated at Tue Dec 16 21:19:35 2025 by rpki-client