This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json) Hash identifier: r1OQrHlP8J9rRaOp2Idtxr8Sio0BO1qtIPDFKIoFlrU= Subject key identifier: FC:E7:5F:A2:94:66:0D:78:56:27:14:53:BD:A2:6A:8D:4D:07:EB:D3 Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Certificate serial: 019B4EF1ED2A03983D8485D86F53BB841585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft Manifest number: 151E Signing time: Wed 24 Dec 2025 06:00:36 +0000 Manifest this update: Wed 24 Dec 2025 06:00:36 +0000 Manifest next update: Thu 25 Dec 2025 06:00:36 +0000 Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: a+h0tZ5aB42PkWlCA2JBI1cW9Oj/e7ehPFbLFzek+zE=) 2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f1:ed:2a:03:98:3d:84:85:d8:6f:53:bb:84:15:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8 Validity Not Before: Dec 24 06:00:36 2025 GMT Not After : Dec 25 06:00:36 2025 GMT Subject: CN=fce75fa294660d7856271453bda26a8d4d07ebd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:7c:f6:97:e6:2c:7b:5f:50:03:09:86:10: 13:50:ab:d1:32:a6:56:b1:52:67:d9:49:15:f1:72: 38:e5:c8:d4:47:3d:d5:e4:2c:d3:3c:cd:85:37:f9: 6c:57:3e:82:43:1b:1e:6b:b1:22:31:d3:51:85:6a: c7:08:cf:43:03:10:a3:69:e7:c7:a4:30:36:df:09: 28:0e:11:8c:78:d8:93:ab:e1:83:93:5e:25:3a:0c: fb:58:ce:30:ad:cf:5f:07:b7:b6:42:7e:af:0c:fd: e0:77:40:d8:46:35:9e:b2:7e:e5:74:d0:cd:b5:c8: 18:96:2e:9f:cb:11:cb:8f:0b:2b:e1:60:07:10:ee: aa:60:2b:f9:30:70:9d:a6:9d:70:68:18:2f:ec:56: d1:b8:e5:05:2b:e6:b8:e6:d1:aa:7f:6b:c8:20:e1: a6:6e:75:d9:86:f4:e7:13:93:0f:15:30:5c:20:da: 1c:70:75:98:90:15:8b:f1:5b:ed:a8:00:b2:79:04: 2c:16:a9:0e:9d:56:78:2e:58:9a:63:34:4d:6e:9f: b9:88:3f:74:a1:13:a5:8c:f5:82:db:e2:39:93:d9: eb:6f:33:e2:51:7c:78:a1:60:7d:2b:39:ed:00:cb: 7e:91:fa:63:ee:03:69:ca:43:6c:e6:e0:8e:e6:a3: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:5F:A2:94:66:0D:78:56:27:14:53:BD:A2:6A:8D:4D:07:EB:D3 X509v3 Authority Key Identifier: keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ba:f9:dc:0d:ac:eb:3e:3d:ae:a2:10:e0:86:e0:73:27:e3: b2:4f:ae:0a:d0:91:3d:cb:5f:55:68:c3:f8:7f:c3:9d:fb:ce: 36:cd:2c:15:db:e1:ed:36:03:a5:22:8c:f9:73:c8:d5:c8:59: d6:2b:e2:40:03:c0:b3:b6:e2:14:53:b8:f0:de:c5:ac:a9:14: e8:a1:b0:bb:bb:ad:43:b5:1e:92:61:f1:c5:c8:73:63:f2:20: a7:1f:0c:e4:eb:4f:ee:e8:48:52:50:f4:05:06:6f:2f:4a:34: 21:e5:f1:b4:7a:47:a5:1d:2b:b8:01:5c:49:00:a8:a4:ee:94: 80:08:39:e6:99:2b:11:a0:19:14:9c:f0:06:fb:e6:75:b4:f6: a4:93:3c:03:fd:1a:ce:11:fb:3e:fa:58:12:6a:87:80:37:73: 95:40:20:61:a8:9d:73:b3:8c:93:03:4f:bc:18:11:d9:1c:42: df:b3:e8:b0:ce:48:cc:7c:50:6f:08:c7:17:9e:1b:92:89:5a: ca:90:cd:8b:8c:40:2d:61:38:17:1a:4b:f3:8d:10:65:98:bb: a7:03:58:12:5b:8f:23:7a:a2:8e:2d:d9:c8:b8:77:91:30:2e: 77:0c:f1:96:24:f0:00:14:25:79:47:ae:e8:f8:7b:c7:b2:dc: 01:00:cb:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8e0qA5g9hIXYb1O7hBWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjUwYThkZTk3MWY4NTQ3ZjViNTZjOTdjMzZjMjg3ZWY1 NGJkYjgwHhcNMjUxMjI0MDYwMDM2WhcNMjUxMjI1MDYwMDM2WjAzMTEwLwYDVQQD EyhmY2U3NWZhMjk0NjYwZDc4NTYyNzE0NTNiZGEyNmE4ZDRkMDdlYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g989pfmLHtfUAMJhhATUKvRMqZW sVJn2UkV8XI45cjURz3V5CzTPM2FN/lsVz6CQxsea7EiMdNRhWrHCM9DAxCjaefH pDA23wkoDhGMeNiTq+GDk14lOgz7WM4wrc9fB7e2Qn6vDP3gd0DYRjWesn7ldNDN tcgYli6fyxHLjwsr4WAHEO6qYCv5MHCdpp1waBgv7FbRuOUFK+a45tGqf2vIIOGm bnXZhvTnE5MPFTBcINoccHWYkBWL8VvtqACyeQQsFqkOnVZ4LliaYzRNbp+5iD90 oROljPWC2+I5k9nrbzPiUXx4oWB9KzntAMt+kfpj7gNpykNs5uCO5qNg/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPznX6KUZg14VicUU72iao1NB+vTMB8GA1UdIwQY MBaAFDP1Co3pcfhUf1tWyXw2wofvVL24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUt Mjc0ZjEwYTVlMWUzLzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOGZkMDctZDVjNy00ZWQzLTgwNzUtMjc0ZjEwYTVlMWUz LzEvTV9VS2plbHgtRlJfVzFiSmZEYkNoLTlVdmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7r53A2s 6z49rqIQ4Ibgcyfjsk+uCtCRPctfVWjD+H/DnfvONs0sFdvh7TYDpSKM+XPI1chZ 1iviQAPAs7biFFO48N7FrKkU6KGwu7utQ7UekmHxxchzY/Igpx8M5OtP7uhIUlD0 BQZvL0o0IeXxtHpHpR0ruAFcSQCopO6UgAg55pkrEaAZFJzwBvvmdbT2pJM8A/0a zhH7PvpYEmqHgDdzlUAgYaidc7OMkwNPvBgR2RxC37PosM5IzHxQbwjHF54bkola ypDNi4xALWE4FxpL840QZZi7pwNYEluPI3qiji3ZyLh3kTAudwzxliTwABQleUeu 6Ph7x7LcAQDL+Q== -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:10 2025 by rpki-client