This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json) Hash identifier: hs/s7dYgy8Yho+xM+71U1p8vQNvImikooYTxCm9LcL4= Subject key identifier: F1:3F:AF:04:07:68:EA:AF:CB:E0:50:3B:34:5E:99:76:20:21:70:F9 Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260 Certificate serial: 019B2175F5076846C075843275FB07B89C25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft Manifest number: 06AD Signing time: Mon 15 Dec 2025 10:02:17 +0000 Manifest this update: Mon 15 Dec 2025 10:02:17 +0000 Manifest next update: Tue 16 Dec 2025 10:02:17 +0000 Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=) 2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: slBb9PUWfdFhXJ2EHylm80vI1W0L/cV/vXerE8oeAso=) 3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:f5:07:68:46:c0:75:84:32:75:fb:07:b8:9c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260 Validity Not Before: Dec 15 10:02:17 2025 GMT Not After : Dec 16 10:02:17 2025 GMT Subject: CN=f13faf040768eaafcbe0503b345e9976202170f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:e0:ef:f9:cb:48:e1:15:96:22:60:43:6d: 10:c2:f4:a6:43:00:ed:be:a0:e0:55:9f:f0:f1:59: cd:6a:35:89:fc:c6:88:65:03:60:2b:38:79:a9:c7: 61:55:89:6b:ef:3d:d4:c1:23:ef:a7:a3:5c:2a:be: db:e2:01:56:cc:2c:bf:e2:77:56:10:17:87:a5:92: 5d:89:8e:15:fa:80:77:1e:66:80:c0:56:9e:06:98: 29:c1:53:eb:e8:06:0f:e6:59:ac:5e:b8:c7:74:ec: c0:40:59:28:d6:72:8d:0f:ff:48:55:fc:e8:5a:75: 20:2b:45:a9:c6:25:35:ea:be:d5:06:63:07:61:fa: 1e:61:cc:c6:24:d0:df:96:31:58:8c:48:77:d6:96: 7a:aa:c1:91:2a:59:ac:ee:61:3c:b7:c2:d7:e1:34: 9f:ef:ce:c0:56:9a:25:be:5b:b1:e4:ad:30:a8:32: 7e:91:5f:71:ec:9e:14:c3:6b:4d:d3:db:2b:ff:bb: b5:ec:db:15:6e:63:0b:9e:cb:15:e9:af:94:43:cb: 82:7b:45:d6:3f:3a:6f:b5:2b:8c:fe:7f:b1:fa:c0: ff:5d:bc:4c:77:37:91:3e:3b:b6:32:2a:cd:0d:72: ac:9c:06:1f:b3:eb:af:3e:d9:04:e7:e5:80:e8:18: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3F:AF:04:07:68:EA:AF:CB:E0:50:3B:34:5E:99:76:20:21:70:F9 X509v3 Authority Key Identifier: keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9f:96:c0:aa:bd:ef:85:d0:4d:63:23:6c:2d:09:c7:70:10: 91:53:82:24:32:24:73:bd:98:c8:54:8a:18:df:73:0b:f8:bc: 31:56:71:eb:11:2e:3d:1a:32:33:f8:68:80:df:b8:ce:4c:84: ce:2e:1e:4c:0e:cc:ea:fa:f1:65:e8:8a:b3:71:ce:07:98:90: b1:70:95:af:c6:ef:60:bb:52:60:b9:6a:8c:40:86:80:9a:7b: 2b:66:f8:8f:28:94:38:19:4b:2b:4e:17:a7:5a:96:45:d5:cc: 2e:33:09:3c:a4:45:3f:b3:5b:56:59:f4:d6:62:3f:55:7b:b4: 5b:3a:55:fc:48:01:41:35:63:b8:04:55:99:cf:99:cc:4d:d3: d1:7c:e1:d9:d3:7d:a7:e7:91:d5:7c:a1:24:35:2d:6a:ae:61: 1c:3c:8b:9f:0c:dc:00:bd:60:a2:d0:67:2e:03:13:21:f9:3f: 8b:58:d0:4e:0c:a5:6a:8d:4c:c2:48:08:85:cc:75:30:89:63: db:ad:69:4e:e3:ac:80:c7:90:e0:50:33:cf:f5:f8:8f:b8:04: 86:0a:21:13:15:d6:38:22:ac:5a:29:38:a2:d9:ff:7f:76:7a: 1e:d7:e7:c7:df:0f:76:73:3d:ce:0c:7c:11:fb:c4:7e:2d:bd: 2e:ba:fd:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdfUHaEbAdYQydfsHuJwlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5 NTkyNjAwHhcNMjUxMjE1MTAwMjE3WhcNMjUxMjE2MTAwMjE3WjAzMTEwLwYDVQQD EyhmMTNmYWYwNDA3NjhlYWFmY2JlMDUwM2IzNDVlOTk3NjIwMjE3MGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiDg7/nLSOEVliJgQ20QwvSmQwDt vqDgVZ/w8VnNajWJ/MaIZQNgKzh5qcdhVYlr7z3UwSPvp6NcKr7b4gFWzCy/4ndW EBeHpZJdiY4V+oB3HmaAwFaeBpgpwVPr6AYP5lmsXrjHdOzAQFko1nKND/9IVfzo WnUgK0WpxiU16r7VBmMHYfoeYczGJNDfljFYjEh31pZ6qsGRKlms7mE8t8LX4TSf 787AVpolvlux5K0wqDJ+kV9x7J4Uw2tN09sr/7u17NsVbmMLnssV6a+UQ8uCe0XW PzpvtSuM/n+x+sD/XbxMdzeRPju2MirNDXKsnAYfs+uvPtkE5+WA6Bj9hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE/rwQHaOqvy+BQOzRemXYgIXD5MB8GA1UdIwQY MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt MGYzYzE2NThkMGI3LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3 LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdp+WwKq9 74XQTWMjbC0Jx3AQkVOCJDIkc72YyFSKGN9zC/i8MVZx6xEuPRoyM/hogN+4zkyE zi4eTA7M6vrxZeiKs3HOB5iQsXCVr8bvYLtSYLlqjECGgJp7K2b4jyiUOBlLK04X p1qWRdXMLjMJPKRFP7NbVln01mI/VXu0WzpV/EgBQTVjuARVmc+ZzE3T0Xzh2dN9 p+eR1XyhJDUtaq5hHDyLnwzcAL1gotBnLgMTIfk/i1jQTgylao1MwkgIhcx1MIlj 261pTuOsgMeQ4FAzz/X4j7gEhgohExXWOCKsWik4otn/f3Z6Htfnx98PdnM9zgx8 EfvEfi29Lrr9bg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:30 2025 by rpki-client