This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json) Hash identifier: 8efTNe1eC09imRX0I7hm13aVDb50bMygaCY1884qzI8= Subject key identifier: 82:2C:5D:39:F5:E1:55:27:13:21:3A:88:ED:AA:41:1E:B7:B4:34:A0 Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e Certificate serial: 019B427FF83F16897E211EB6084094186B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 20:00:41 +0000 Manifest this update: Sun 21 Dec 2025 20:00:41 +0000 Manifest next update: Mon 22 Dec 2025 20:00:41 +0000 Files and hashes: 1: ETuDi1i7QuaCZ06xCz67-_-3rS8.roa (hash: gA8InJx+hYlKiEEOwcyboW6iWIBSscTMh1nnp+mxyU8=) 2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: Hsv1GuewrHdYvoXYPBxeYagtuK349IK2IQOADgHtD6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:f8:3f:16:89:7e:21:1e:b6:08:40:94:18:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e Validity Not Before: Dec 21 20:00:41 2025 GMT Not After : Dec 22 20:00:41 2025 GMT Subject: CN=822c5d39f5e1552713213a88edaa411eb7b434a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:92:9c:26:4c:5a:31:31:64:78:66:0d:db: 3c:e6:ef:ee:93:49:4a:7f:d0:71:9e:21:6f:1f:1e: f2:f2:82:af:95:d4:2f:a3:25:60:27:d7:5a:69:21: 86:23:ff:9c:42:5b:2c:b8:83:44:8e:09:12:ff:f0: 69:ab:8a:2e:8b:be:2e:1f:0d:19:40:ea:2e:10:e0: 82:c3:97:8d:a0:b9:91:46:cb:90:a4:b7:e6:31:b5: 10:34:4f:7b:8b:f1:83:14:7b:7b:ec:68:9f:38:d0: ea:9c:76:3b:4d:dd:6b:4a:99:21:4a:89:03:a7:73: 52:21:3b:4e:74:14:41:17:58:af:85:4b:64:3b:86: dc:ac:09:8c:e7:29:c5:3a:7e:23:2b:be:34:6c:8e: 61:16:3e:1e:c3:05:b7:23:18:71:c9:c6:bf:dc:6b: 39:91:96:e4:c1:ee:e9:8f:96:ee:d0:5b:40:4e:b9: 8c:77:5c:25:8a:fc:b5:68:31:8c:70:77:7e:11:5e: 3c:e7:9e:28:c4:70:d2:27:67:cb:d3:cd:8a:eb:03: f8:dc:ea:3d:fc:98:ed:c6:bb:2c:72:19:ca:da:b9: 6d:97:42:28:b0:33:5a:0e:13:9e:6a:e4:b9:a8:7e: cc:3a:e6:4f:13:93:a0:d3:b6:13:c9:87:3f:69:a1: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:5D:39:F5:E1:55:27:13:21:3A:88:ED:AA:41:1E:B7:B4:34:A0 X509v3 Authority Key Identifier: keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d7:62:bf:db:02:e4:1e:69:27:65:48:94:27:b7:04:6f:f9: 8c:7b:cf:b2:14:71:a5:b3:43:32:61:e4:dc:ce:17:bf:3f:59: 32:c1:38:2d:51:de:05:7c:3c:21:b7:52:d3:fc:39:78:f7:b4: 3e:b3:05:3d:5d:ca:6e:e7:f3:6d:c0:ae:19:94:65:db:c7:57: 7d:bd:5c:5b:b9:c7:d8:f6:56:d8:c4:53:a7:c5:04:15:62:4e: f5:45:87:a5:1c:3e:68:ae:e2:2f:98:cd:e3:85:7a:7b:40:61: 6d:d2:80:87:a4:23:8f:ce:00:7c:81:12:a3:a2:71:1b:29:94: 0f:5b:58:6a:62:fe:65:72:77:73:fc:03:1d:ac:68:c1:00:9e: a3:5e:63:f0:98:89:f6:54:fa:f5:6a:a3:fb:8a:20:54:45:16: c8:2a:76:bf:81:2b:09:c2:fb:f4:f5:93:35:f7:c1:f4:8a:5e: 41:d3:ce:d5:67:74:eb:0e:60:c4:85:3c:de:34:9d:ef:40:a1: 74:c9:92:a8:77:04:08:1d:d0:c9:40:06:90:0b:10:a9:fa:10: a9:7e:99:64:ab:42:ed:0a:a1:fa:5f:97:51:ef:67:22:3f:c8: d9:60:51:37:e6:b9:bd:5e:2b:14:cd:c4:6c:64:5d:a4:a7:9f: 4f:e4:37:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf/g/Fol+IR62CECUGGsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Zjc2OWQ0NDMzYjc3MDRkZjcwM2QxNjQ1YjdmZWE4ZWZi ZjkyNmUwHhcNMjUxMjIxMjAwMDQxWhcNMjUxMjIyMjAwMDQxWjAzMTEwLwYDVQQD Eyg4MjJjNWQzOWY1ZTE1NTI3MTMyMTNhODhlZGFhNDExZWI3YjQzNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFOSnCZMWjExZHhmDds85u/uk0lK f9BxniFvHx7y8oKvldQvoyVgJ9daaSGGI/+cQlssuINEjgkS//Bpq4oui74uHw0Z QOouEOCCw5eNoLmRRsuQpLfmMbUQNE97i/GDFHt77GifONDqnHY7Td1rSpkhSokD p3NSITtOdBRBF1ivhUtkO4bcrAmM5ynFOn4jK740bI5hFj4ewwW3Ixhxyca/3Gs5 kZbkwe7pj5bu0FtATrmMd1wlivy1aDGMcHd+EV48554oxHDSJ2fL082K6wP43Oo9 /JjtxrsschnK2rltl0IosDNaDhOeauS5qH7MOuZPE5Og07YTyYc/aaEDkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIsXTn14VUnEyE6iO2qQR63tDSgMB8GA1UdIwQY MBaAFLn3adRDO3cE33A9FkW3/qjvv5JuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQt M2FlYjdjZGUwMzZjLzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQtM2FlYjdjZGUwMzZj LzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZddiv9sC 5B5pJ2VIlCe3BG/5jHvPshRxpbNDMmHk3M4Xvz9ZMsE4LVHeBXw8IbdS0/w5ePe0 PrMFPV3KbufzbcCuGZRl28dXfb1cW7nH2PZW2MRTp8UEFWJO9UWHpRw+aK7iL5jN 44V6e0BhbdKAh6Qjj84AfIESo6JxGymUD1tYamL+ZXJ3c/wDHaxowQCeo15j8JiJ 9lT69Wqj+4ogVEUWyCp2v4ErCcL79PWTNffB9IpeQdPO1Wd06w5gxIU83jSd70Ch dMmSqHcECB3QyUAGkAsQqfoQqX6ZZKtC7Qqh+l+XUe9nIj/I2WBRN+a5vV4rFM3E bGRdpKefT+Q3lA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:42:16 2025 by rpki-client