This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft File: UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json) Hash identifier: GFTI/Ug6mgDNFfzmO1NRWGdwnHxJO1R6Lt+6H9TaZmI= Subject key identifier: 51:FC:15:A7:EE:4A:36:F4:4E:44:32:C9:71:F3:FE:D6:78:0A:89:0C Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d Certificate serial: 019B3A911B8F0B45179DB2E7507542FDBA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft Manifest number: 105C Signing time: Sat 20 Dec 2025 07:02:26 +0000 Manifest this update: Sat 20 Dec 2025 07:02:26 +0000 Manifest next update: Sun 21 Dec 2025 07:02:26 +0000 Files and hashes: 1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: olTm3HK50AS3SATCpcyUYs7gQ/kD/IrK8d37BmfDenU=) 2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:1b:8f:0b:45:17:9d:b2:e7:50:75:42:fd:ba:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d Validity Not Before: Dec 20 07:02:26 2025 GMT Not After : Dec 21 07:02:26 2025 GMT Subject: CN=51fc15a7ee4a36f44e4432c971f3fed6780a890c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:9d:c9:ed:bd:34:f0:0e:6c:79:94:65:14: 66:14:b0:83:a4:5d:bc:54:6b:39:26:52:b5:42:df: 35:d9:c6:34:b4:20:46:0a:8d:af:64:1a:2e:89:51: 0a:bf:f3:92:57:0c:78:cc:bd:d6:a4:a0:01:aa:4a: 37:8b:6e:a6:69:82:c1:a6:5c:76:5a:a0:fa:b4:05: c7:7b:eb:36:63:da:8e:85:ae:38:4a:df:1a:fe:31: 78:ee:fd:df:4c:5e:0e:8c:c5:12:9c:02:45:a7:90: f3:9b:18:54:e6:72:10:6b:04:e6:19:cd:27:6b:c1: 93:02:c7:d1:77:30:13:55:6f:10:54:b6:6a:63:97: 69:ad:d7:12:90:90:f4:2a:78:df:dc:e5:64:86:4e: c7:81:17:1d:b0:45:04:86:0d:f2:68:86:a4:56:fe: 27:ec:dc:5d:27:96:a6:eb:6b:a3:32:b4:63:72:99: 7d:07:3f:67:8f:37:ed:d9:bf:d1:89:ac:64:b8:eb: 38:db:90:66:6a:91:46:f0:5d:1c:99:ba:1b:f6:71: 1b:98:89:51:63:06:a7:a2:b8:c6:f4:4f:dc:8a:ce: 60:55:84:9a:8f:61:66:1e:d6:f9:30:42:02:cd:3e: 24:87:1f:cf:f6:d6:62:6a:c7:42:94:e5:97:33:88: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FC:15:A7:EE:4A:36:F4:4E:44:32:C9:71:F3:FE:D6:78:0A:89:0C X509v3 Authority Key Identifier: keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2d:59:ce:03:ac:29:2d:39:b9:59:b9:21:52:9b:31:0c:6d: 50:85:36:95:e3:1e:4f:df:aa:33:99:6f:96:76:ac:87:2d:2b: 88:89:37:1a:79:68:28:00:c3:3d:90:ac:5f:ea:30:14:12:2c: 7e:42:6c:70:00:4c:ee:91:08:5c:fa:16:d5:37:bc:be:58:f0: 76:ef:55:67:93:d4:8d:f6:18:fa:25:e4:f8:f3:67:53:ef:6a: cf:87:38:24:2b:43:ed:53:5c:91:51:bd:e3:c4:5d:55:6c:b1: 3e:e5:41:b5:8e:b3:20:a5:6a:16:f4:d8:a2:e3:13:7c:55:04: 83:60:bf:d2:d3:dd:2b:fc:1e:6b:b0:62:a6:8b:3b:a8:eb:03: 32:d6:c9:ae:f8:e7:99:1b:64:da:69:56:99:cc:8d:e7:e6:8a: f6:09:80:8a:39:d8:bc:34:15:c9:48:fe:2b:2c:48:f0:9f:6d: 25:a5:27:64:07:9b:cc:2c:72:1d:d5:d6:2f:e6:47:b9:6a:88: c0:86:ce:c4:5f:bc:fb:9e:41:c3:42:b4:15:75:ed:c6:bd:6a: 27:73:25:c8:39:71:9b:6e:38:b4:da:5a:ea:93:80:7a:91:67: 7f:22:25:07:50:45:f4:11:14:e4:95:01:0f:00:d5:41:43:6e: df:3d:d2:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kRuPC0UXnbLnUHVC/bovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTY1NTQ3ZjEwOTYwNjRiNmI1NzNjMDI4MTcxNGMxZjA2 MWNkNGQwHhcNMjUxMjIwMDcwMjI2WhcNMjUxMjIxMDcwMjI2WjAzMTEwLwYDVQQD Eyg1MWZjMTVhN2VlNGEzNmY0NGU0NDMyYzk3MWYzZmVkNjc4MGE4OTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Wdye29NPAObHmUZRRmFLCDpF28 VGs5JlK1Qt812cY0tCBGCo2vZBouiVEKv/OSVwx4zL3WpKABqko3i26maYLBplx2 WqD6tAXHe+s2Y9qOha44St8a/jF47v3fTF4OjMUSnAJFp5DzmxhU5nIQawTmGc0n a8GTAsfRdzATVW8QVLZqY5dprdcSkJD0Knjf3OVkhk7HgRcdsEUEhg3yaIakVv4n 7NxdJ5am62ujMrRjcpl9Bz9njzft2b/RiaxkuOs425BmapFG8F0cmbob9nEbmIlR YwanorjG9E/cis5gVYSaj2FmHtb5MEICzT4khx/P9tZiasdClOWXM4g+5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH8FafuSjb0TkQyyXHz/tZ4CokMMB8GA1UdIwQY MBaAFFKWVUfxCWBktrVzwCgXFMHwYc1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQt NWRhM2VjODJjYzU2LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQtNWRhM2VjODJjYzU2 LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy1ZzgOs KS05uVm5IVKbMQxtUIU2leMeT9+qM5lvlnashy0riIk3GnloKADDPZCsX+owFBIs fkJscABM7pEIXPoW1Te8vljwdu9VZ5PUjfYY+iXk+PNnU+9qz4c4JCtD7VNckVG9 48RdVWyxPuVBtY6zIKVqFvTYouMTfFUEg2C/0tPdK/wea7Bipos7qOsDMtbJrvjn mRtk2mlWmcyN5+aK9gmAijnYvDQVyUj+KyxI8J9tJaUnZAebzCxyHdXWL+ZHuWqI wIbOxF+8+55Bw0K0FXXtxr1qJ3MlyDlxm244tNpa6pOAepFnfyIlB1BF9BEU5JUB DwDVQUNu3z3S/g== -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:47 2025 by rpki-client