This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft File: UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json) Hash identifier: wvrtzovsQfT7br0Ew8Zc8Z9o2YEUuZThLjTnS5IOi34= Subject key identifier: 62:5E:B4:12:59:95:5C:0E:2D:E1:56:21:D2:70:AA:43:29:CE:23:13 Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d Certificate serial: 019B631F43B56F3773273DFC3945630B37EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft Manifest number: 1071 Signing time: Sun 28 Dec 2025 04:02:31 +0000 Manifest this update: Sun 28 Dec 2025 04:02:31 +0000 Manifest next update: Mon 29 Dec 2025 04:02:31 +0000 Files and hashes: 1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: vi0P4seHk0AA3E4XjFoMhIMhgcOjYsSEDGukjjIqlsU=) 2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:43:b5:6f:37:73:27:3d:fc:39:45:63:0b:37:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d Validity Not Before: Dec 28 04:02:31 2025 GMT Not After : Dec 29 04:02:31 2025 GMT Subject: CN=625eb41259955c0e2de15621d270aa4329ce2313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:aa:29:04:6e:03:56:3a:36:98:3e:e1:3f: 24:6f:49:54:a3:02:1f:5d:37:53:03:c6:1a:79:f0: 2d:48:f3:66:23:d8:95:b2:ff:f0:df:cd:44:bd:e6: 40:f7:9d:6d:09:d3:80:53:f9:17:6e:9a:45:71:1e: a9:c7:d3:09:be:35:ee:54:9d:65:3b:2d:86:2c:ec: fa:d0:a4:ba:1f:73:dc:3f:57:84:e3:22:c7:4a:d3: 7d:17:7d:97:37:df:1e:82:9e:b8:d0:94:b1:2b:83: 8f:0b:be:ad:bd:1c:cb:b5:54:9e:d2:e3:d1:16:ea: 8a:58:26:70:8a:c3:ee:33:21:cd:d8:8e:fb:ab:43: 96:cf:3e:1c:4c:d7:70:4f:8c:a9:de:4d:45:01:82: 8b:d0:ee:19:6f:c9:c3:38:f6:1a:09:82:ed:00:ae: 51:98:0f:58:6d:bb:6b:fa:1c:4b:e5:9f:49:ed:ab: 09:7b:72:e0:4f:fa:be:08:35:f2:21:56:52:5b:b7: cb:ab:63:cf:17:32:06:0d:20:ab:99:95:1b:7a:22: 13:c8:21:1d:4e:42:21:0d:26:02:3f:62:15:3f:e4: 08:5c:9e:b2:7c:8b:7c:e3:84:2b:84:fa:78:7f:3e: 01:04:e4:22:2e:d8:2b:94:b5:51:56:91:d8:22:c4: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5E:B4:12:59:95:5C:0E:2D:E1:56:21:D2:70:AA:43:29:CE:23:13 X509v3 Authority Key Identifier: keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b6:a9:a9:31:e4:78:ed:34:c4:aa:50:70:d8:6d:18:fb:4b: 0c:ee:c7:4d:21:b3:d3:3f:45:74:0c:bd:ff:95:5c:14:b4:c3: 4c:43:4b:03:c0:bb:31:91:c7:77:b0:0c:d9:be:2c:82:ca:73: 0f:0d:32:cd:c3:e6:7a:d5:bf:9b:52:87:ec:b0:ac:ae:50:a0: b2:bd:b7:2a:09:33:f1:98:34:c4:68:29:a1:09:89:d3:c3:0c: 00:8c:b8:ab:74:49:6d:f9:e4:47:5c:6c:57:18:c1:51:d2:69: 0d:46:f8:5a:91:a5:9e:81:e9:6c:9e:3c:04:41:15:19:fb:a4: 9a:02:24:f0:18:cb:2b:dc:e2:e6:da:83:53:23:7c:08:42:84: 4f:83:ff:54:77:19:9b:48:90:85:f7:e2:44:6c:be:3d:c5:31: 7f:dc:50:1e:17:25:9c:e8:02:98:05:9c:54:fb:72:4d:b9:b0: d5:46:96:19:e2:47:a8:55:cb:0d:c9:ca:3e:f2:9e:48:9e:cf: 71:46:81:e2:d2:27:1d:36:cc:01:6c:c0:b8:d0:6d:e6:ba:2f: f5:82:6d:fd:90:44:c1:45:40:84:a9:8e:80:83:d1:23:0c:3c: f1:68:53:1c:d7:54:54:67:13:1b:3a:b3:ef:b8:e6:db:62:54: 61:3a:fd:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjH0O1bzdzJz38OUVjCzfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTY1NTQ3ZjEwOTYwNjRiNmI1NzNjMDI4MTcxNGMxZjA2 MWNkNGQwHhcNMjUxMjI4MDQwMjMxWhcNMjUxMjI5MDQwMjMxWjAzMTEwLwYDVQQD Eyg2MjVlYjQxMjU5OTU1YzBlMmRlMTU2MjFkMjcwYWE0MzI5Y2UyMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9qqKQRuA1Y6Npg+4T8kb0lUowIf XTdTA8YaefAtSPNmI9iVsv/w381EveZA951tCdOAU/kXbppFcR6px9MJvjXuVJ1l Oy2GLOz60KS6H3PcP1eE4yLHStN9F32XN98egp640JSxK4OPC76tvRzLtVSe0uPR FuqKWCZwisPuMyHN2I77q0OWzz4cTNdwT4yp3k1FAYKL0O4Zb8nDOPYaCYLtAK5R mA9Ybbtr+hxL5Z9J7asJe3LgT/q+CDXyIVZSW7fLq2PPFzIGDSCrmZUbeiITyCEd TkIhDSYCP2IVP+QIXJ6yfIt844QrhPp4fz4BBOQiLtgrlLVRVpHYIsTDtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJetBJZlVwOLeFWIdJwqkMpziMTMB8GA1UdIwQY MBaAFFKWVUfxCWBktrVzwCgXFMHwYc1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQt NWRhM2VjODJjYzU2LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQtNWRhM2VjODJjYzU2 LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErapqTHk eO00xKpQcNhtGPtLDO7HTSGz0z9FdAy9/5VcFLTDTENLA8C7MZHHd7AM2b4sgspz Dw0yzcPmetW/m1KH7LCsrlCgsr23Kgkz8Zg0xGgpoQmJ08MMAIy4q3RJbfnkR1xs VxjBUdJpDUb4WpGlnoHpbJ48BEEVGfukmgIk8BjLK9zi5tqDUyN8CEKET4P/VHcZ m0iQhffiRGy+PcUxf9xQHhclnOgCmAWcVPtyTbmw1UaWGeJHqFXLDcnKPvKeSJ7P cUaB4tInHTbMAWzAuNBt5rov9YJt/ZBEwUVAhKmOgIPRIww88WhTHNdUVGcTGzqz 77jm22JUYTr9RA== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:48 2025 by rpki-client