This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft File: UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json) Hash identifier: WrQH0XVqpnZTZLs80VaOLHVJsaGvfOk9sq34PE/QZBw= Subject key identifier: 69:6D:37:0E:BA:E9:44:31:FE:9F:61:4A:BD:38:65:32:58:A9:57:7D Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811 Certificate serial: 019B2175F5A1545933D4C5A3C1716A5157B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft Manifest number: 0821 Signing time: Mon 15 Dec 2025 10:02:17 +0000 Manifest this update: Mon 15 Dec 2025 10:02:17 +0000 Manifest next update: Tue 16 Dec 2025 10:02:17 +0000 Files and hashes: 1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: VfvIWeQo2YrPPSMrTG5WgbgqJGVUrSysxSpPYDqSrnI=) 2: pPr-RfjQ8TKLflLIUQw5yKTIFpY.roa (hash: oEBThZTfbjTX75q4IqjgPgOk7OlUAtwvGwGIzijgHts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:f5:a1:54:59:33:d4:c5:a3:c1:71:6a:51:57:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811 Validity Not Before: Dec 15 10:02:17 2025 GMT Not After : Dec 16 10:02:17 2025 GMT Subject: CN=696d370ebae94431fe9f614abd38653258a9577d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:f3:ec:54:af:7a:bd:e5:0e:be:fb:57:39: da:fa:0d:34:c9:ee:fa:29:97:98:48:2f:9e:f0:2b: 9f:61:ea:dc:40:82:18:f4:f4:c8:94:d7:ef:be:5a: c1:7a:75:68:01:94:02:a0:26:a5:bb:0d:a0:c4:e8: 88:ba:cc:89:59:55:94:25:6f:58:81:c1:2e:43:08: e8:95:67:cc:be:a4:05:b7:e6:11:4c:b8:de:c7:ae: c6:80:2c:8c:df:b8:6e:1c:a2:09:de:94:2b:a6:c7: 99:55:3a:90:4b:9f:9c:3b:56:98:c2:89:ae:06:ed: 08:b2:da:49:d7:22:33:8f:01:18:48:a8:09:25:3d: 77:6d:86:44:e8:ed:55:f2:42:83:de:77:4f:44:38: c6:93:94:d5:dd:bb:e8:2a:86:d4:95:9c:07:a0:92: 48:8f:57:e5:5a:93:24:5a:66:78:44:8f:72:40:f5: b4:6f:ff:2c:48:e1:97:fc:78:af:ff:84:fd:c5:cd: af:e1:69:0e:51:ad:82:e7:a1:24:13:f0:61:a0:8b: ec:66:f0:9d:1e:e6:a7:29:8d:c0:50:35:c0:7a:65: 9e:96:60:5a:81:ef:dc:86:2c:6b:0d:1c:88:29:c5: 75:35:27:75:88:29:20:a9:38:d4:35:78:aa:05:cf: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6D:37:0E:BA:E9:44:31:FE:9F:61:4A:BD:38:65:32:58:A9:57:7D X509v3 Authority Key Identifier: keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6d:bf:ac:88:f9:a2:ce:6f:f6:0f:86:6b:3d:9a:f1:df:d0: f4:79:67:9f:6c:64:d5:fd:0a:1b:23:ac:47:27:9f:45:84:2a: d2:10:28:90:c2:cc:ca:d2:7e:96:70:14:6f:1b:44:78:b9:12: 46:43:49:12:d0:b4:bd:e9:3b:17:d0:22:4d:62:c7:a6:3c:d1: 42:44:98:f9:e9:ad:61:d8:e6:a3:b2:79:2c:3e:e1:ad:6a:08: 2b:d8:7a:03:10:b8:d8:e5:a1:ae:6e:52:72:cc:1b:3e:7f:01: 8c:94:c0:4a:16:c9:8c:3b:f0:5b:b7:c3:82:a2:52:cc:f8:e0: bd:f6:ea:51:6d:7f:bc:76:ee:65:94:8d:17:02:cb:c9:a4:ef: 6e:90:aa:41:3e:c8:8f:ee:cc:65:9d:75:ae:d5:79:d8:08:1f: 8a:84:25:89:05:ea:ee:8f:f5:2e:a0:a1:ea:95:c0:a9:9f:59: 27:db:c9:94:a5:65:60:2c:65:00:fa:c0:77:9a:66:2e:ba:8a: 15:00:34:6c:2e:47:00:5f:45:6c:96:21:69:e3:11:3d:59:e0: b7:a9:a6:7a:b4:c0:69:25:a1:06:d3:56:d1:20:fa:d4:42:2c: 63:cc:70:14:f6:51:2b:27:93:06:66:9b:3c:22:ac:39:d5:54: aa:3d:b4:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdfWhVFkz1MWjwXFqUVe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDEzZjJlNTU5MDcwMDRjNWFiNjk4OWRlN2VlZDE1NDM1 MzU4MTEwHhcNMjUxMjE1MTAwMjE3WhcNMjUxMjE2MTAwMjE3WjAzMTEwLwYDVQQD Eyg2OTZkMzcwZWJhZTk0NDMxZmU5ZjYxNGFiZDM4NjUzMjU4YTk1NzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xfz7FSver3lDr77Vzna+g00ye76 KZeYSC+e8CufYercQIIY9PTIlNfvvlrBenVoAZQCoCaluw2gxOiIusyJWVWUJW9Y gcEuQwjolWfMvqQFt+YRTLjex67GgCyM37huHKIJ3pQrpseZVTqQS5+cO1aYwomu Bu0IstpJ1yIzjwEYSKgJJT13bYZE6O1V8kKD3ndPRDjGk5TV3bvoKobUlZwHoJJI j1flWpMkWmZ4RI9yQPW0b/8sSOGX/Hiv/4T9xc2v4WkOUa2C56EkE/BhoIvsZvCd HuanKY3AUDXAemWelmBage/chixrDRyIKcV1NSd1iCkgqTjUNXiqBc9tXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGltNw666UQx/p9hSr04ZTJYqVd9MB8GA1UdIwQY MBaAFFJBPy5VkHAExatpid5+7RVDU1gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQt OGJmZGI5Njk4NTljLzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQtOGJmZGI5Njk4NTlj LzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG2/rIj5 os5v9g+Gaz2a8d/Q9Hlnn2xk1f0KGyOsRyefRYQq0hAokMLMytJ+lnAUbxtEeLkS RkNJEtC0vek7F9AiTWLHpjzRQkSY+emtYdjmo7J5LD7hrWoIK9h6AxC42OWhrm5S cswbPn8BjJTAShbJjDvwW7fDgqJSzPjgvfbqUW1/vHbuZZSNFwLLyaTvbpCqQT7I j+7MZZ11rtV52AgfioQliQXq7o/1LqCh6pXAqZ9ZJ9vJlKVlYCxlAPrAd5pmLrqK FQA0bC5HAF9FbJYhaeMRPVngt6mmerTAaSWhBtNW0SD61EIsY8xwFPZRKyeTBmab PCKsOdVUqj200A== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:46 2025 by rpki-client