This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft File: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft (raw, json) Hash identifier: mhYKzgQgsOM1/okmcceClt7nlE+Sq4zf1GlNjCfp3vI= Subject key identifier: FC:97:A7:11:BA:A4:3F:BB:3D:5D:EE:5E:37:F5:17:DA:6D:D8:7D:3F Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 Certificate issuer: /CN=51f83b800bf5d66cc76d0e624847fb668e177c71 Certificate serial: 019B3F1125BED55FCB2206EE3DBA6989118F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft Manifest number: 021A Signing time: Sun 21 Dec 2025 04:00:46 +0000 Manifest this update: Sun 21 Dec 2025 04:00:46 +0000 Manifest next update: Mon 22 Dec 2025 04:00:46 +0000 Files and hashes: 1: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl (hash: NewfG6mjEBlZvmWa9FUo/2bYQyfg+G8/VF5HL31UC6Y=) 2: UzdAI9r8ururR3efFNaAcO55XaM.roa (hash: pCH+pFsUkI5n2Li26SVl8WqYpHuk5K9R9H/mh0OmiJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:25:be:d5:5f:cb:22:06:ee:3d:ba:69:89:11:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71 Validity Not Before: Dec 21 04:00:46 2025 GMT Not After : Dec 22 04:00:46 2025 GMT Subject: CN=fc97a711baa43fbb3d5dee5e37f517da6dd87d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:63:3b:07:14:0d:74:5d:20:52:ca:4c:94:34: 76:4f:67:2a:75:4e:cf:87:9b:19:34:81:40:dc:c0: df:51:0d:6e:79:de:39:3c:3e:7a:2f:72:98:3f:27: 34:32:c8:57:b2:e4:82:56:f1:bb:ad:32:c5:fb:c4: 0d:79:6a:c2:7c:c4:91:a3:fc:7c:05:fc:9c:81:60: bf:26:45:d8:74:f7:6a:b3:c8:97:6d:f8:8b:0c:df: 57:25:81:a4:90:6c:e5:75:e4:e0:a9:0d:61:c9:15: 83:ab:0a:10:8e:26:86:88:f1:66:47:ec:57:b9:9b: a8:ef:9f:fb:82:03:fb:2e:38:a8:29:1f:84:de:e2: c8:cb:f3:a0:21:ca:64:b2:71:ae:0c:bb:da:6a:09: 30:12:23:38:79:21:c6:d8:33:18:95:9e:27:89:ea: 99:9c:ed:37:9e:6d:96:f8:e4:79:95:49:1c:13:33: 7a:39:6b:27:26:ec:00:1d:10:26:4d:14:7c:ee:be: da:b1:ae:31:91:18:ab:2d:8f:b7:d7:6e:2d:1f:ea: 3b:53:78:9f:fe:11:4f:d6:bb:e6:d1:8a:f1:1f:02: ce:d4:eb:f7:f1:e8:a4:9a:5f:ec:07:91:0f:03:d2: 59:51:e8:a1:b5:09:5a:ba:ee:9a:b4:62:c4:a0:8b: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:97:A7:11:BA:A4:3F:BB:3D:5D:EE:5E:37:F5:17:DA:6D:D8:7D:3F X509v3 Authority Key Identifier: keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c5:3c:ee:8c:e4:ad:a8:6f:d4:0c:d4:5d:b0:59:ea:2c:8a: 57:eb:da:d7:c6:a1:32:c6:9a:0b:17:d5:8f:ce:a4:3d:b6:4f: 52:9d:d3:45:6f:22:77:a7:d3:4e:9a:65:88:3a:c3:9b:86:24: 8d:dd:35:9d:3a:81:10:71:e1:7a:69:df:9a:0e:62:8f:94:17: 4c:f7:54:ff:da:91:b2:7f:7b:5e:5f:c5:be:f9:ab:37:d3:7e: 28:f9:8e:ea:e7:af:b7:dc:f7:a3:1e:cc:fd:cf:da:26:94:5c: 14:16:a2:14:5e:05:e9:42:6b:4c:61:95:b4:0c:18:3f:c2:ee: 09:43:b2:8d:b4:07:5a:68:b5:6b:bb:d9:8a:c1:1b:32:6a:c1: 18:ec:fb:de:74:3a:e7:53:0e:c0:bd:b3:03:3b:5b:bd:c3:c1: 16:e0:e9:1f:ff:88:10:50:97:c8:b9:cb:cb:a1:e3:0f:98:ef: fc:f1:f7:20:50:2e:5d:17:04:16:db:fc:de:e2:53:fb:d3:e7: 87:2d:e4:bf:c6:d5:37:2d:9f:63:d9:af:38:15:e8:84:0b:52: ec:f1:db:9d:49:8c:18:d9:28:d3:21:28:7d:3a:ea:c7:7f:5d: 70:ca:5f:da:f1:cb:17:df:27:d9:cf:5b:7e:d9:1d:18:44:bd: fb:50:35:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESW+1V/LIgbuPbppiRGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjgzYjgwMGJmNWQ2NmNjNzZkMGU2MjQ4NDdmYjY2OGUx NzdjNzEwHhcNMjUxMjIxMDQwMDQ2WhcNMjUxMjIyMDQwMDQ2WjAzMTEwLwYDVQQD EyhmYzk3YTcxMWJhYTQzZmJiM2Q1ZGVlNWUzN2Y1MTdkYTZkZDg3ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GM7BxQNdF0gUspMlDR2T2cqdU7P h5sZNIFA3MDfUQ1ued45PD56L3KYPyc0MshXsuSCVvG7rTLF+8QNeWrCfMSRo/x8 BfycgWC/JkXYdPdqs8iXbfiLDN9XJYGkkGzldeTgqQ1hyRWDqwoQjiaGiPFmR+xX uZuo75/7ggP7LjioKR+E3uLIy/OgIcpksnGuDLvaagkwEiM4eSHG2DMYlZ4nieqZ nO03nm2W+OR5lUkcEzN6OWsnJuwAHRAmTRR87r7asa4xkRirLY+3124tH+o7U3if /hFP1rvm0YrxHwLO1Ov38eikml/sB5EPA9JZUeihtQlauu6atGLEoIsJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyXpxG6pD+7PV3uXjf1F9pt2H0/MB8GA1UdIwQY MBaAFFH4O4AL9dZsx20OYkhH+2aOF3xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYt ZTY5NThlZDVhN2EwLzEvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYtZTY5NThlZDVhN2Ew LzEvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8U87ozk rahv1AzUXbBZ6iyKV+va18ahMsaaCxfVj86kPbZPUp3TRW8id6fTTppliDrDm4Yk jd01nTqBEHHhemnfmg5ij5QXTPdU/9qRsn97Xl/FvvmrN9N+KPmO6uevt9z3ox7M /c/aJpRcFBaiFF4F6UJrTGGVtAwYP8LuCUOyjbQHWmi1a7vZisEbMmrBGOz73nQ6 51MOwL2zAztbvcPBFuDpH/+IEFCXyLnLy6HjD5jv/PH3IFAuXRcEFtv83uJT+9Pn hy3kv8bVNy2fY9mvOBXohAtS7PHbnUmMGNko0yEofTrqx39dcMpf2vHLF98n2c9b ftkdGES9+1A11g== -----END CERTIFICATE-----Generated at Sun Dec 21 12:19:26 2025 by rpki-client