This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json) Hash identifier: Kbfgpl5lZo1tqMXiMYpYSaRXcqdoVnHcvi7IZBb88d4= Subject key identifier: 61:FB:2A:F0:2D:FB:DF:95:80:A8:2F:5F:B7:6D:57:60:9F:3A:8A:91 Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3 Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3 Certificate serial: 019B3D59FFC960F24383CBEF775A0B88CD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:01:06 +0000 Manifest this update: Sat 20 Dec 2025 20:01:06 +0000 Manifest next update: Sun 21 Dec 2025 20:01:06 +0000 Files and hashes: 1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: iLjN0Ct5hWdvTY3F0QSTChnyQuAm+09xlx+FcgpLH6M=) 2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ff:c9:60:f2:43:83:cb:ef:77:5a:0b:88:cd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3 Validity Not Before: Dec 20 20:01:06 2025 GMT Not After : Dec 21 20:01:06 2025 GMT Subject: CN=61fb2af02dfbdf9580a82f5fb76d57609f3a8a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:49:91:49:ec:37:7c:36:84:a7:c1:b2:8e: 33:4c:a3:8b:39:bc:d6:e5:d6:5d:98:b4:99:c7:83: 1d:8e:d7:44:07:15:38:e8:d7:14:b7:ef:af:e0:9c: 12:ca:d6:02:77:c6:2d:af:d4:1c:20:1a:12:b3:da: 62:fe:0b:8f:ac:11:39:fb:a5:2d:fa:20:c0:45:85: 1a:4a:0e:34:27:1e:8b:c4:4c:fa:03:d5:10:6f:fd: f2:d8:a1:5e:3b:75:03:a7:71:1d:2c:16:2b:b6:14: 1a:a8:81:4f:6f:a2:a4:af:a8:39:ea:0e:cd:15:52: 22:90:e6:4a:ba:c0:67:ee:6a:5b:50:1b:a2:7e:14: e3:2f:cc:87:e3:28:57:a2:6d:b7:7d:05:22:b1:91: 46:4b:ca:a8:06:93:4d:7b:b9:b1:45:91:69:21:83: 9d:d0:e0:23:db:79:ff:88:56:6f:ac:be:f0:91:2b: 38:20:99:23:ea:5f:ee:6c:e0:b3:5d:ac:c5:32:2b: 00:79:43:0c:45:43:bf:fb:4f:fb:1d:b9:6e:62:70: 43:ad:02:dc:85:d7:01:34:f0:d5:ad:33:f3:b9:e1: c3:15:cc:88:0b:43:f0:60:3c:57:b5:c7:df:aa:57: 14:bf:7c:28:73:7b:6c:f7:40:d2:41:07:5b:50:7b: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FB:2A:F0:2D:FB:DF:95:80:A8:2F:5F:B7:6D:57:60:9F:3A:8A:91 X509v3 Authority Key Identifier: keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:74:32:1d:cb:01:0c:62:5d:3b:27:4a:03:07:29:54:23:2e: f1:3e:06:7b:94:a0:0b:ef:c1:99:41:96:e0:3d:a2:65:f2:39: 92:4f:f1:9c:06:41:a8:a0:c6:c6:35:7c:4b:2c:66:d0:cd:fa: 5f:36:62:16:47:44:df:0a:7c:08:43:47:64:62:e8:44:a7:79: 0e:66:8c:7b:81:19:59:fe:60:8b:5e:d7:da:80:85:c3:84:f4: 78:37:17:80:e5:0d:06:cf:e8:88:73:2e:4a:ee:2a:2c:95:9b: 79:b2:f2:e2:c8:9b:ed:96:29:0a:45:7e:2a:b3:d6:71:03:32: 9a:eb:cf:fc:75:a3:89:70:89:89:4e:35:17:f9:30:cd:30:81: 15:cd:d3:07:1a:6e:f4:10:1a:80:11:6a:f7:89:62:c2:66:ea: 5a:0e:f3:36:4c:e6:ec:df:d7:da:b8:52:59:59:88:bf:f0:0a: 65:e1:d6:99:66:95:2d:37:92:58:28:87:e2:f3:06:6c:1a:91: fd:ac:86:81:a2:49:6c:90:23:6a:81:d4:4f:cc:a1:7a:fa:d8: ea:55:f6:00:4e:1e:c8:a1:ea:d2:18:21:e6:b6:7f:61:86:9f: 5b:79:e2:17:e4:21:9b:4e:8c:cc:bc:5d:05:04:75:82:3f:36: 7f:26:ea:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wf/JYPJDg8vvd1oLiM0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZWE1YWNiNDQ3YjJjZWI5MzJhMDNmMjkwMDgyZGM3NmY4 ZTQwZTMwHhcNMjUxMjIwMjAwMTA2WhcNMjUxMjIxMjAwMTA2WjAzMTEwLwYDVQQD Eyg2MWZiMmFmMDJkZmJkZjk1ODBhODJmNWZiNzZkNTc2MDlmM2E4YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HJJkUnsN3w2hKfBso4zTKOLObzW 5dZdmLSZx4MdjtdEBxU46NcUt++v4JwSytYCd8Ytr9QcIBoSs9pi/guPrBE5+6Ut +iDARYUaSg40Jx6LxEz6A9UQb/3y2KFeO3UDp3EdLBYrthQaqIFPb6Kkr6g56g7N FVIikOZKusBn7mpbUBuifhTjL8yH4yhXom23fQUisZFGS8qoBpNNe7mxRZFpIYOd 0OAj23n/iFZvrL7wkSs4IJkj6l/ubOCzXazFMisAeUMMRUO/+0/7HbluYnBDrQLc hdcBNPDVrTPzueHDFcyIC0PwYDxXtcffqlcUv3woc3ts90DSQQdbUHuCaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGH7KvAt+9+VgKgvX7dtV2CfOoqRMB8GA1UdIwQY MBaAFFDqWstEeyzrkyoD8pAILcdvjkDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUt NWNhOGFjMTgwOTZkLzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUtNWNhOGFjMTgwOTZk LzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3QyHcsB DGJdOydKAwcpVCMu8T4Ge5SgC+/BmUGW4D2iZfI5kk/xnAZBqKDGxjV8Syxm0M36 XzZiFkdE3wp8CENHZGLoRKd5DmaMe4EZWf5gi17X2oCFw4T0eDcXgOUNBs/oiHMu Su4qLJWbebLy4sib7ZYpCkV+KrPWcQMymuvP/HWjiXCJiU41F/kwzTCBFc3TBxpu 9BAagBFq94liwmbqWg7zNkzm7N/X2rhSWVmIv/AKZeHWmWaVLTeSWCiH4vMGbBqR /ayGgaJJbJAjaoHUT8yhevrY6lX2AE4eyKHq0hgh5rZ/YYafW3niF+Qhm06MzLxd BQR1gj82fybqGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:14 2025 by rpki-client