This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json) Hash identifier: fQmfvhjvMtNPiuGH6bXuOlRc4/L8ChLLS95t4doYHVo= Subject key identifier: 73:8E:FA:36:41:39:5D:8D:D5:71:BC:36:63:EE:3B:E3:11:7F:B4:71 Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260 Certificate serial: 019B1013F459F55F7F89B6005E5C57CB42C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft Manifest number: 06A4 Signing time: Fri 12 Dec 2025 01:01:41 +0000 Manifest this update: Fri 12 Dec 2025 01:01:41 +0000 Manifest next update: Sat 13 Dec 2025 01:01:41 +0000 Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=) 2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: HJdV8599T2IviUvoCHzxeS7GjAMVaFBViFIdOhucqxQ=) 3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:f4:59:f5:5f:7f:89:b6:00:5e:5c:57:cb:42:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260 Validity Not Before: Dec 12 01:01:41 2025 GMT Not After : Dec 13 01:01:41 2025 GMT Subject: CN=738efa3641395d8dd571bc3663ee3be3117fb471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:2d:ab:f2:05:12:f7:82:0d:18:cc:d5:5f: 43:46:03:62:e3:20:74:dc:95:a0:9d:39:92:d7:65: 4d:85:bd:ec:73:b0:c0:67:db:e3:78:f9:8c:8c:a6: f4:1a:fd:49:0a:1b:09:8d:0a:8e:f0:09:60:8d:58: 81:d9:08:29:f3:b1:6c:b5:c7:b1:c3:ad:c4:6a:57: 97:13:16:41:3e:72:96:42:8a:12:90:3b:29:08:28: 91:6d:9a:45:63:78:4c:fb:ca:14:0d:d6:42:04:19: 2a:67:30:ab:f1:bc:4e:d6:f7:3b:29:37:e9:39:43: 08:d2:68:ed:21:ab:54:cd:6c:dd:60:36:ae:3b:cc: e3:64:03:39:3f:e4:ec:9e:db:fa:94:36:02:ec:c3: a4:55:84:f7:6b:5f:6d:da:d3:66:01:5b:ae:1c:89: f2:58:20:d5:48:c5:8f:fa:6f:26:72:33:b7:e1:17: ac:46:e6:53:5f:44:7a:af:6f:cc:7c:39:1e:ec:22: eb:f4:ef:25:fd:f5:25:ee:c8:85:1b:50:19:db:f0: 04:91:7d:24:60:1b:58:0c:0f:ec:a3:3e:fe:a6:4d: 6a:1a:a4:b7:22:99:95:9c:e4:f2:06:25:32:1a:f8: d9:23:74:40:5f:bb:56:cd:07:09:d2:4e:d9:66:40: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8E:FA:36:41:39:5D:8D:D5:71:BC:36:63:EE:3B:E3:11:7F:B4:71 X509v3 Authority Key Identifier: keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c4:08:3c:fb:64:1f:60:7c:82:e5:fc:30:1a:db:f2:8a:f1: ac:34:a5:f7:a8:47:1e:f2:30:fa:e2:b7:c3:c3:6f:1b:ef:39: 46:1c:9c:5a:31:73:3c:f3:1d:d6:2c:d0:de:4f:1f:8c:47:f9: 4c:14:21:6c:90:8f:71:64:a3:b0:14:ae:90:c5:fb:9b:d7:52: 55:ae:80:83:b9:0e:c9:47:27:90:20:e8:b9:58:8e:94:50:37: 63:3b:1a:cf:1a:01:e2:b5:e4:ed:1a:8c:09:6a:6c:e0:33:8d: a1:bb:bf:88:17:45:34:59:18:77:d5:1e:17:a3:a5:98:46:69: c4:db:0f:66:f5:91:1a:d0:f4:ab:94:90:d0:cd:11:da:f2:25: 65:34:80:82:7c:69:d9:44:5b:d5:44:ed:23:46:cf:4d:75:cb: 37:f0:78:e0:9e:97:19:34:67:63:e3:13:ab:da:e6:0a:0c:4c: 2b:94:43:ba:63:4f:d6:e0:c4:aa:b7:82:e1:16:6b:02:c2:cd: a0:6c:1b:f6:06:24:a4:91:4a:29:bc:2d:d4:67:b6:44:91:c4: 05:3e:0d:69:0d:eb:b9:21:a4:6c:a2:b0:a5:94:e4:25:fc:d5: fa:79:47:0a:7e:c7:0b:13:4b:6e:1b:ff:b7:c8:8d:7c:c2:99: c8:36:3f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/RZ9V9/ibYAXlxXy0LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5 NTkyNjAwHhcNMjUxMjEyMDEwMTQxWhcNMjUxMjEzMDEwMTQxWjAzMTEwLwYDVQQD Eyg3MzhlZmEzNjQxMzk1ZDhkZDU3MWJjMzY2M2VlM2JlMzExN2ZiNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZMtq/IFEveCDRjM1V9DRgNi4yB0 3JWgnTmS12VNhb3sc7DAZ9vjePmMjKb0Gv1JChsJjQqO8AlgjViB2Qgp87Fstcex w63EaleXExZBPnKWQooSkDspCCiRbZpFY3hM+8oUDdZCBBkqZzCr8bxO1vc7KTfp OUMI0mjtIatUzWzdYDauO8zjZAM5P+Tsntv6lDYC7MOkVYT3a19t2tNmAVuuHIny WCDVSMWP+m8mcjO34ResRuZTX0R6r2/MfDke7CLr9O8l/fUl7siFG1AZ2/AEkX0k YBtYDA/soz7+pk1qGqS3IpmVnOTyBiUyGvjZI3RAX7tWzQcJ0k7ZZkAmewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOO+jZBOV2N1XG8NmPuO+MRf7RxMB8GA1UdIwQY MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt MGYzYzE2NThkMGI3LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3 LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcQIPPtk H2B8guX8MBrb8orxrDSl96hHHvIw+uK3w8NvG+85RhycWjFzPPMd1izQ3k8fjEf5 TBQhbJCPcWSjsBSukMX7m9dSVa6Ag7kOyUcnkCDouViOlFA3YzsazxoB4rXk7RqM CWps4DONobu/iBdFNFkYd9UeF6OlmEZpxNsPZvWRGtD0q5SQ0M0R2vIlZTSAgnxp 2URb1UTtI0bPTXXLN/B44J6XGTRnY+MTq9rmCgxMK5RDumNP1uDEqreC4RZrAsLN oGwb9gYkpJFKKbwt1Ge2RJHEBT4NaQ3ruSGkbKKwpZTkJfzV+nlHCn7HCxNLbhv/ t8iNfMKZyDY/OA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:10:03 2025 by rpki-client