This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json) Hash identifier: kXxq9NwbjNf3SYXKlDVI3k8QeJlMLQ7bk0EFEIipy7M= Subject key identifier: 3F:9D:72:CA:05:6C:A8:67:66:D2:79:57:BB:51:03:0B:3E:5D:3F:CE Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b Certificate serial: 019B2EF979AA692ADDE41A891C22AFCA2BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft Manifest number: 14CB Signing time: Thu 18 Dec 2025 01:01:00 +0000 Manifest this update: Thu 18 Dec 2025 01:01:00 +0000 Manifest next update: Fri 19 Dec 2025 01:01:00 +0000 Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: bPNoJ+PVfRHOLz5ZyMWEnau+OPHHyO6Hv/MzUcKw6tU=) 2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:79:aa:69:2a:dd:e4:1a:89:1c:22:af:ca:2b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50480549481968d43406127653f780abbf9a117b Validity Not Before: Dec 18 01:01:00 2025 GMT Not After : Dec 19 01:01:00 2025 GMT Subject: CN=3f9d72ca056ca86766d27957bb51030b3e5d3fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c7:3c:26:ff:4e:bf:02:3d:74:87:4d:09:0e: 27:09:1e:bb:a4:c5:bf:3f:16:e7:df:2d:6d:ca:37: 58:9e:38:21:62:a5:ee:97:0c:21:e1:b8:69:fc:0a: 27:cd:71:5d:01:28:a6:bf:e7:3c:b6:a4:ee:5e:47: f0:1f:38:28:77:29:22:9b:7d:67:bd:13:89:b4:10: 8b:c1:a9:08:d5:e7:a9:3f:7f:7b:5c:d4:86:94:65: 64:03:38:8c:3d:dc:5f:8e:0b:54:fb:8d:ed:7f:2a: d8:a3:55:3c:a7:e8:da:cf:fc:bc:41:17:0c:23:69: 27:90:b6:54:ca:44:ce:eb:16:45:ce:d2:dc:12:2f: 3d:29:a6:41:48:9f:b3:0f:6e:26:dc:79:ca:de:66: 7e:2f:93:67:87:6c:ca:fd:4f:43:62:16:52:66:d0: b9:a0:3f:43:7a:86:40:d1:be:fb:03:4b:79:4f:a8: ea:a7:80:d6:a4:c6:84:64:17:6a:e5:de:a6:9c:7c: 6c:6b:4e:77:a8:2e:ed:3f:62:3b:05:3d:73:ba:01: 19:d2:e4:68:29:b2:07:6b:65:08:98:9d:c4:cb:e6: 90:1d:3d:ed:96:f8:d8:00:2e:97:e5:a1:9c:a8:73: 62:bc:6b:c4:f3:0c:52:01:b9:6d:c7:b2:45:ef:10: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9D:72:CA:05:6C:A8:67:66:D2:79:57:BB:51:03:0B:3E:5D:3F:CE X509v3 Authority Key Identifier: keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:18:5f:e1:f8:15:de:14:e3:68:c1:d3:b0:51:07:42:0f:8e: 7b:8a:25:2f:16:fd:a5:c4:de:e2:21:ad:11:ff:30:cc:fc:23: 6a:b7:db:34:db:8e:2b:c2:5c:8b:b9:91:f5:96:1f:29:a6:a4: c1:30:99:2d:19:dd:4a:4c:62:15:74:10:6b:5b:fe:67:c2:e8: 82:e1:0b:ee:2b:e4:9c:df:f3:ca:c2:23:3f:b9:62:8b:c3:e1: 86:78:57:29:33:0c:68:a8:ac:d6:43:19:1d:80:bc:a4:bb:ad: 82:64:0d:dd:3c:41:98:78:6e:cd:5b:72:f0:0d:57:eb:78:4a: 74:4c:a5:45:00:c1:bb:7f:59:15:08:91:8d:6f:11:13:56:0d: 0c:8c:b6:49:c9:77:e4:86:9c:8e:20:2f:60:ed:dd:d3:a4:4f: c3:44:6d:c5:9c:91:45:38:5e:98:fc:3f:ae:f2:ea:ae:08:86: bd:00:e3:aa:61:fc:e6:29:a8:07:91:e1:75:0e:d6:af:83:a2: f8:4a:ff:25:80:0e:20:52:d5:87:e8:69:a4:54:c4:c9:0a:1f: 44:d1:2d:2c:64:8f:af:fb:08:7d:d2:21:56:78:8a:2f:c4:a4: 6f:d6:cc:45:f6:73:3b:a1:24:9b:2e:9f:b3:e2:42:02:aa:07: 9a:ec:e5:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+XmqaSrd5BqJHCKvyivDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNDgwNTQ5NDgxOTY4ZDQzNDA2MTI3NjUzZjc4MGFiYmY5 YTExN2IwHhcNMjUxMjE4MDEwMTAwWhcNMjUxMjE5MDEwMTAwWjAzMTEwLwYDVQQD EygzZjlkNzJjYTA1NmNhODY3NjZkMjc5NTdiYjUxMDMwYjNlNWQzZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8c8Jv9OvwI9dIdNCQ4nCR67pMW/ Pxbn3y1tyjdYnjghYqXulwwh4bhp/AonzXFdASimv+c8tqTuXkfwHzgodykim31n vROJtBCLwakI1eepP397XNSGlGVkAziMPdxfjgtU+43tfyrYo1U8p+jaz/y8QRcM I2knkLZUykTO6xZFztLcEi89KaZBSJ+zD24m3HnK3mZ+L5Nnh2zK/U9DYhZSZtC5 oD9DeoZA0b77A0t5T6jqp4DWpMaEZBdq5d6mnHxsa053qC7tP2I7BT1zugEZ0uRo KbIHa2UImJ3Ey+aQHT3tlvjYAC6X5aGcqHNivGvE8wxSAbltx7JF7xBSrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+dcsoFbKhnZtJ5V7tRAws+XT/OMB8GA1UdIwQY MBaAFFBIBUlIGWjUNAYSdlP3gKu/mhF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2Yt NzQyOWIyMjc3MmMzLzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMzg3NjctMmZjNS00YzUwLWEyN2YtNzQyOWIyMjc3MmMz LzEvVUVnRlNVZ1phTlEwQmhKMlVfZUFxNy1hRVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRhf4fgV 3hTjaMHTsFEHQg+Oe4olLxb9pcTe4iGtEf8wzPwjarfbNNuOK8Jci7mR9ZYfKaak wTCZLRndSkxiFXQQa1v+Z8LoguEL7ivknN/zysIjP7lii8PhhnhXKTMMaKis1kMZ HYC8pLutgmQN3TxBmHhuzVty8A1X63hKdEylRQDBu39ZFQiRjW8RE1YNDIy2Scl3 5IacjiAvYO3d06RPw0RtxZyRRThemPw/rvLqrgiGvQDjqmH85imoB5HhdQ7Wr4Oi +Er/JYAOIFLVh+hppFTEyQofRNEtLGSPr/sIfdIhVniKL8Skb9bMRfZzO6Ekmy6f s+JCAqoHmuzlQg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:53:41 2025 by rpki-client