This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json) Hash identifier: VIPEAqqMUz81ISuhstWND8BYaf/dmxKBooGAlxXnsgU= Subject key identifier: 5F:28:DE:CB:F2:D0:67:E3:64:A2:5F:70:C9:5B:00:E6:F0:FC:EB:0F Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Certificate serial: 019B390F2D8993392D37B5640713E2F0A356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft Manifest number: 0FE6 Signing time: Sat 20 Dec 2025 00:00:54 +0000 Manifest this update: Sat 20 Dec 2025 00:00:54 +0000 Manifest next update: Sun 21 Dec 2025 00:00:54 +0000 Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=) 2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: tkpkL0b4zVCQloJQvIhmx+l4e8K/YWb6vzCzVtZYK/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:2d:89:93:39:2d:37:b5:64:07:13:e2:f0:a3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Validity Not Before: Dec 20 00:00:54 2025 GMT Not After : Dec 21 00:00:54 2025 GMT Subject: CN=5f28decbf2d067e364a25f70c95b00e6f0fceb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:50:0b:4c:65:64:b8:5a:55:56:72:da:8c: 17:a7:8a:d0:b8:71:b4:11:f2:bc:1d:76:13:cd:2f: bd:1a:cf:da:99:1b:ac:dc:4b:1e:f2:29:8c:0c:8a: b8:10:29:cc:a3:cf:d0:23:3b:54:47:ac:19:b3:1b: c7:09:4d:36:24:9b:a5:aa:4b:1a:49:be:50:5b:4f: 01:57:28:cf:ad:65:d4:ac:34:ae:36:65:8c:a7:45: c0:24:a9:5e:be:f9:e2:bd:ee:28:8e:f5:68:c8:52: 81:1b:e2:ab:5c:b9:1f:3e:59:47:3f:ba:ca:c5:2a: a6:f6:54:4f:78:a8:ed:49:f1:49:8a:f3:ee:a3:01: 62:5f:8d:dc:5f:1b:1d:01:db:36:5a:da:cd:07:5c: 96:d2:13:bc:62:6e:0d:06:35:2b:f0:83:9d:1e:10: 56:cc:bc:d2:0b:a0:19:11:e9:cf:fc:a6:43:50:61: 70:a0:8c:c7:d0:73:9c:62:66:a7:97:28:5e:49:cc: 30:b0:9f:81:82:cc:8c:17:32:e9:6b:85:35:52:05: 37:b3:ca:6d:66:04:16:7d:9a:99:f2:83:56:f3:c5: 3d:97:7f:71:04:0d:93:65:d1:d6:e7:50:6a:b2:2a: a5:6c:0b:4b:9e:18:e4:f2:d6:e4:c2:43:2b:43:77: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:DE:CB:F2:D0:67:E3:64:A2:5F:70:C9:5B:00:E6:F0:FC:EB:0F X509v3 Authority Key Identifier: keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:c1:63:29:67:57:79:b6:a3:d3:bd:c2:39:b6:7d:b7:52: 43:3d:83:cf:fe:7e:3b:63:75:8c:ba:4a:8d:d0:8f:5a:29:1f: 66:29:92:1e:f0:d0:10:c5:93:64:6e:60:8c:ac:98:d5:d1:e7: 21:9e:4f:eb:6d:e1:23:49:c0:27:2a:bb:a2:7a:d5:7c:fb:4f: 70:6f:23:7f:fa:12:e0:a5:b9:65:fb:fc:cc:cd:96:87:ac:f9: aa:1d:ff:be:a9:b3:b0:fa:ac:90:0e:66:f6:e1:a9:10:c1:19: f2:6e:ab:d0:17:5c:6b:5f:ab:63:57:78:e4:ff:3f:37:cb:b6: 45:79:99:b1:58:c3:9a:83:a7:4a:6a:a6:9d:0c:e5:e0:45:8b: a7:9f:13:f9:c3:fa:f9:5c:9c:93:13:cd:3e:03:32:d6:08:95: 2c:85:97:b2:e6:64:e1:5c:6b:4a:71:0c:1b:40:60:09:34:76: 99:6c:aa:f7:42:22:15:ae:0a:36:11:1f:d1:c9:51:3a:2f:64: 6f:fe:40:11:9d:11:a8:45:e5:bd:5e:ba:7c:32:53:d2:68:b4: 22:7f:1f:de:35:5b:4a:5b:fc:d7:d7:c5:85:2f:5b:e5:f8:d5: 14:22:85:cc:04:6d:c2:b8:bb:78:9e:8f:11:0b:ac:31:f4:d8: 5a:14:89:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dy2JkzktN7VkBxPi8KNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTM0MzIzNTU4MWNmNDEwNDE5MGRhN2EwY2ExNzRiOWMw ZDBiZDUwHhcNMjUxMjIwMDAwMDU0WhcNMjUxMjIxMDAwMDU0WjAzMTEwLwYDVQQD Eyg1ZjI4ZGVjYmYyZDA2N2UzNjRhMjVmNzBjOTViMDBlNmYwZmNlYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAFQC0xlZLhaVVZy2owXp4rQuHG0 EfK8HXYTzS+9Gs/amRus3Ese8imMDIq4ECnMo8/QIztUR6wZsxvHCU02JJulqksa Sb5QW08BVyjPrWXUrDSuNmWMp0XAJKlevvnive4ojvVoyFKBG+KrXLkfPllHP7rK xSqm9lRPeKjtSfFJivPuowFiX43cXxsdAds2WtrNB1yW0hO8Ym4NBjUr8IOdHhBW zLzSC6AZEenP/KZDUGFwoIzH0HOcYmanlyheScwwsJ+BgsyMFzLpa4U1UgU3s8pt ZgQWfZqZ8oNW88U9l39xBA2TZdHW51BqsiqlbAtLnhjk8tbkwkMrQ3fyHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8o3svy0GfjZKJfcMlbAObw/OsPMB8GA1UdIwQY MBaAFFKTQyNVgc9BBBkNp6DKF0ucDQvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2Qt ZmNjMjIwNjQ0NTU4LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2QtZmNjMjIwNjQ0NTU4 LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYPBYyln V3m2o9O9wjm2fbdSQz2Dz/5+O2N1jLpKjdCPWikfZimSHvDQEMWTZG5gjKyY1dHn IZ5P623hI0nAJyq7onrVfPtPcG8jf/oS4KW5Zfv8zM2Wh6z5qh3/vqmzsPqskA5m 9uGpEMEZ8m6r0Bdca1+rY1d45P8/N8u2RXmZsVjDmoOnSmqmnQzl4EWLp58T+cP6 +VyckxPNPgMy1giVLIWXsuZk4VxrSnEMG0BgCTR2mWyq90IiFa4KNhEf0clROi9k b/5AEZ0RqEXlvV66fDJT0mi0In8f3jVbSlv819fFhS9b5fjVFCKFzARtwri7eJ6P EQusMfTYWhSJxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:48:09 2025 by rpki-client