This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json) Hash identifier: NbefmgAw4m42ZuuZSJuQXNov1+1UZ9JwUz7lIge6Z/s= Subject key identifier: EC:76:1A:E5:26:91:A9:61:90:E3:4D:45:E6:76:9A:3C:DB:91:90:6C Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92 Certificate serial: 019B6E46169E80F0CDE6FA3FDD7BA75E0B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 08:00:45 +0000 Manifest this update: Tue 30 Dec 2025 08:00:45 +0000 Manifest next update: Wed 31 Dec 2025 08:00:45 +0000 Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=) 2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: fJinyjI59nSft/WLKJgE72RYQE2ndp4npcqEQDdvuNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:46:16:9e:80:f0:cd:e6:fa:3f:dd:7b:a7:5e:0b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92 Validity Not Before: Dec 30 08:00:45 2025 GMT Not After : Dec 31 08:00:45 2025 GMT Subject: CN=ec761ae52691a96190e34d45e6769a3cdb91906c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:be:1d:b7:7d:9b:c1:c6:d6:76:69:ad:de:35: ed:13:5f:2e:5b:f5:fe:07:1e:b6:92:8f:d4:f2:67: 7d:d7:8b:e7:be:12:46:a5:65:eb:18:45:b0:f8:2f: b6:b1:f0:64:b3:18:37:29:88:c0:01:94:02:bb:64: af:32:8e:da:9c:85:84:f6:83:19:24:0b:c5:d2:16: 45:19:07:5d:d8:95:74:b2:c1:69:1c:ab:75:07:c2: c4:f7:1a:4b:b9:a7:4b:65:0f:d1:f2:1c:d2:dd:51: de:f7:9b:53:6e:c4:7c:ec:3d:a9:9d:6f:15:d3:cc: 42:69:06:60:7e:c2:71:f7:36:00:80:18:ab:fc:21: ab:60:f4:2d:ff:95:ba:f9:90:b2:c0:94:f7:2a:1e: a1:62:bb:bf:bc:21:2f:73:58:b5:69:18:2d:56:40: 08:8e:a8:1d:7a:66:80:90:ba:13:ec:2a:e0:cd:1f: 49:9f:6e:92:99:5c:bc:5f:6f:f2:ed:de:bd:6f:e5: 06:86:46:f6:c2:5f:cd:ef:29:90:44:ad:d8:bb:b9: 54:2d:e9:1c:1e:ff:9a:ba:8d:1f:12:07:87:39:f9: fa:59:84:f9:3c:14:d5:d9:a6:e1:b0:ed:fe:4c:81: 76:c9:e3:b1:38:38:57:a5:20:52:08:52:69:df:15: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:76:1A:E5:26:91:A9:61:90:E3:4D:45:E6:76:9A:3C:DB:91:90:6C X509v3 Authority Key Identifier: keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:15:07:5d:67:a8:33:71:35:ca:60:e4:b9:f1:78:20:95:4a: 8e:01:d9:6e:18:a5:76:39:42:0b:fb:aa:36:34:d9:eb:c0:50: bf:9c:43:db:85:11:8d:df:10:fe:e3:8e:49:09:3f:81:84:22: f8:7d:02:ae:c9:85:ed:28:a9:42:f7:f1:b1:4b:4a:ec:95:25: 8d:4d:e0:72:23:78:48:d8:59:09:5d:d3:ac:3e:11:c5:61:b6: f0:58:29:e7:94:80:a0:b9:2e:32:eb:85:b9:1b:83:f8:9f:f9: fe:05:04:86:2c:d2:af:3a:b0:85:87:1b:81:89:f1:b0:86:ce: 08:d8:e8:96:6d:26:b7:b6:0a:f7:a1:86:55:4b:bc:96:dc:e1: c4:fc:a6:ed:50:e1:b0:cf:bf:4d:9a:df:ef:47:e5:ef:c6:bf: 06:8c:e3:d8:82:3b:ba:da:66:ae:c4:11:ed:bc:2d:7e:e8:a7: 4c:79:f3:db:7e:08:c7:49:88:32:f1:87:1b:d4:0c:86:62:87: 6c:8b:bd:22:5f:6d:15:17:a1:18:5f:f2:a4:69:8f:8a:ab:2d: 8a:9b:7b:49:83:96:13:64:a6:a6:50:5d:fb:8c:e3:a4:36:a2: 10:70:64:fc:e5:1b:0f:16:76:d4:00:23:bc:4a:96:18:11:66: fc:8c:c0:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRhaegPDN5vo/3XunXgsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTIzMWIyNDdiZmY2NWI0YzYzNDE5MDdlY2Q1ZWFiYTdm OWNhOTIwHhcNMjUxMjMwMDgwMDQ1WhcNMjUxMjMxMDgwMDQ1WjAzMTEwLwYDVQQD EyhlYzc2MWFlNTI2OTFhOTYxOTBlMzRkNDVlNjc2OWEzY2RiOTE5MDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r4dt32bwcbWdmmt3jXtE18uW/X+ Bx62ko/U8md914vnvhJGpWXrGEWw+C+2sfBksxg3KYjAAZQCu2SvMo7anIWE9oMZ JAvF0hZFGQdd2JV0ssFpHKt1B8LE9xpLuadLZQ/R8hzS3VHe95tTbsR87D2pnW8V 08xCaQZgfsJx9zYAgBir/CGrYPQt/5W6+ZCywJT3Kh6hYru/vCEvc1i1aRgtVkAI jqgdemaAkLoT7CrgzR9Jn26SmVy8X2/y7d69b+UGhkb2wl/N7ymQRK3Yu7lULekc Hv+auo0fEgeHOfn6WYT5PBTV2abhsO3+TIF2yeOxODhXpSBSCFJp3xXv2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOx2GuUmkalhkONNReZ2mjzbkZBsMB8GA1UdIwQY MBaAFFKSMbJHv/ZbTGNBkH7NXqun+cqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQt NjUxMzVjZjJmODE1LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQtNjUxMzVjZjJmODE1 LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRUHXWeo M3E1ymDkufF4IJVKjgHZbhildjlCC/uqNjTZ68BQv5xD24URjd8Q/uOOSQk/gYQi +H0CrsmF7SipQvfxsUtK7JUljU3gciN4SNhZCV3TrD4RxWG28Fgp55SAoLkuMuuF uRuD+J/5/gUEhizSrzqwhYcbgYnxsIbOCNjolm0mt7YK96GGVUu8ltzhxPym7VDh sM+/TZrf70fl78a/Bozj2II7utpmrsQR7bwtfuinTHnz234Ix0mIMvGHG9QMhmKH bIu9Il9tFRehGF/ypGmPiqstipt7SYOWE2SmplBd+4zjpDaiEHBk/OUbDxZ21AAj vEqWGBFm/IzANg== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:22 2025 by rpki-client