This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft File: UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json) Hash identifier: ZV4/ekAOC3K8QA1S/9mMz9pr3VY/YtlfIfdTLGbodEQ= Subject key identifier: 08:9C:8C:B7:79:8E:02:DE:B6:9D:06:CA:45:64:87:91:8E:45:D7:6E Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5 Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5 Certificate serial: 019B41369F4D41AA21A5FF3840040E18D033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft Manifest number: 0FA7 Signing time: Sun 21 Dec 2025 14:00:57 +0000 Manifest this update: Sun 21 Dec 2025 14:00:57 +0000 Manifest next update: Mon 22 Dec 2025 14:00:57 +0000 Files and hashes: 1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: 8YxxmcOLya2/iLgNzUfM729/fYglh+AZH/X5hX1dWzI=) 2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:9f:4d:41:aa:21:a5:ff:38:40:04:0e:18:d0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5 Validity Not Before: Dec 21 14:00:57 2025 GMT Not After : Dec 22 14:00:57 2025 GMT Subject: CN=089c8cb7798e02deb69d06ca456487918e45d76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:2e:68:ce:54:23:b6:d5:ba:1f:fd:87:68: 79:2d:3e:48:02:0e:b7:cd:4b:88:1f:ee:1c:92:89: 14:d9:43:ae:9b:db:c3:69:8b:0d:f4:8f:00:3c:cb: ed:3b:e3:76:a0:71:9d:f5:6a:30:8a:28:1f:9b:aa: 8f:22:01:7b:36:53:05:fb:95:eb:0c:b2:94:d1:14: b1:6e:8e:d3:ec:d3:29:b1:e8:fb:3f:7c:6d:83:19: b0:cc:b6:71:f2:88:07:36:c5:68:a2:1c:73:87:e0: f3:2e:60:60:17:a7:5f:8a:e3:47:5e:bd:00:15:9c: 70:8f:a7:fc:81:ec:eb:09:a3:ab:ef:97:7d:ad:b1: 08:3a:87:29:6b:75:fc:a4:fa:9d:41:fc:89:fb:62: df:a2:a3:79:68:d7:1a:55:70:07:47:12:67:26:18: 94:b7:a1:06:82:d7:3a:a0:5d:d0:63:ff:db:3a:5e: 29:fc:20:c3:dc:5b:e9:7f:44:55:3c:75:7e:ca:ba: cb:d0:c4:20:49:25:f8:f7:ee:af:06:a8:f8:7e:a7: 86:e1:43:8a:2b:a8:46:69:01:a2:0a:6b:3d:a6:78: a5:f6:51:2e:9a:cc:3f:cb:3e:b1:28:65:4b:04:9d: 96:fb:55:e8:91:8b:b0:fc:da:0a:c7:47:6b:69:24: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9C:8C:B7:79:8E:02:DE:B6:9D:06:CA:45:64:87:91:8E:45:D7:6E X509v3 Authority Key Identifier: keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:df:7f:c9:75:d4:a0:95:86:6c:82:82:1f:76:03:fa:c0:d7: 02:4e:b6:9c:b3:5c:ed:a7:78:ea:2d:9a:67:91:12:b9:62:2c: 73:7b:86:74:c1:2e:a9:43:30:0b:67:3b:0d:ab:50:ba:58:d2: 42:a9:3a:11:98:41:f2:d1:66:1a:eb:c8:bc:a0:6d:b2:6b:ef: 92:6b:e5:7d:12:df:59:42:28:2f:0a:9c:f0:7c:83:21:88:2d: 1f:8a:ca:e7:25:bb:6c:28:b1:41:17:52:15:b6:2c:0e:2c:7a: a1:4a:a2:23:83:46:46:42:13:45:33:8f:c3:b0:cc:e9:c0:3e: 5c:41:ad:f4:0a:b4:0a:47:5c:02:6e:3e:75:65:f2:e7:0b:c8: aa:5a:75:bb:26:86:0b:11:8a:2c:c1:10:01:f3:26:39:c3:bc: 34:85:9c:11:19:ff:b0:fe:1c:47:b6:d0:fb:27:55:86:7f:5e: dd:6b:f9:41:38:18:98:e0:bf:c4:d4:52:3a:7d:40:06:36:e5: 8c:f3:03:24:44:cd:49:e6:1b:2d:13:1f:ad:24:91:0d:65:80: 5a:54:53:7f:6d:92:77:7a:4e:2e:5b:1b:e1:a7:98:27:5f:2c: 87:41:7e:b5:8d:32:9f:6b:4e:64:5c:88:c3:79:01:3c:1c:ac: c2:0a:16:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNp9NQaohpf84QAQOGNAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNjU2Y2I0Nzc3ZDE0YjVlYjI2NGM2YjAzMmM4YmEzNzU2 ZjJhZTUwHhcNMjUxMjIxMTQwMDU3WhcNMjUxMjIyMTQwMDU3WjAzMTEwLwYDVQQD EygwODljOGNiNzc5OGUwMmRlYjY5ZDA2Y2E0NTY0ODc5MThlNDVkNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWwuaM5UI7bVuh/9h2h5LT5IAg63 zUuIH+4ckokU2UOum9vDaYsN9I8APMvtO+N2oHGd9Wowiigfm6qPIgF7NlMF+5Xr DLKU0RSxbo7T7NMpsej7P3xtgxmwzLZx8ogHNsVoohxzh+DzLmBgF6dfiuNHXr0A FZxwj6f8gezrCaOr75d9rbEIOocpa3X8pPqdQfyJ+2LfoqN5aNcaVXAHRxJnJhiU t6EGgtc6oF3QY//bOl4p/CDD3Fvpf0RVPHV+yrrL0MQgSSX49+6vBqj4fqeG4UOK K6hGaQGiCms9pnil9lEumsw/yz6xKGVLBJ2W+1XokYuw/NoKx0draSTJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAicjLd5jgLetp0GykVkh5GORdduMB8GA1UdIwQY MBaAFFBlbLR3fRS16yZMawMsi6N1byrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUt ZTdjNDQ0MzQ2NzYwLzEvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUtZTdjNDQ0MzQ2NzYw LzEvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARN9/yXXU oJWGbIKCH3YD+sDXAk62nLNc7ad46i2aZ5ESuWIsc3uGdMEuqUMwC2c7DatQuljS Qqk6EZhB8tFmGuvIvKBtsmvvkmvlfRLfWUIoLwqc8HyDIYgtH4rK5yW7bCixQRdS FbYsDix6oUqiI4NGRkITRTOPw7DM6cA+XEGt9Aq0CkdcAm4+dWXy5wvIqlp1uyaG CxGKLMEQAfMmOcO8NIWcERn/sP4cR7bQ+ydVhn9e3Wv5QTgYmOC/xNRSOn1ABjbl jPMDJETNSeYbLRMfrSSRDWWAWlRTf22Sd3pOLlsb4aeYJ18sh0F+tY0yn2tOZFyI w3kBPByswgoWcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:55:19 2025 by rpki-client