This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json) Hash identifier: ZCFYGSo46RhuwNR88TcA3VA2dsHf1hxFtNKQzdPM+y0= Subject key identifier: 5C:3E:BB:D1:E9:A2:9C:0F:31:95:2B:B3:6A:5A:57:A5:21:F6:66:10 Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Certificate serial: 019B3F11B8E8FF1B5C57DEC3B3E8202A482A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 04:01:24 +0000 Manifest this update: Sun 21 Dec 2025 04:01:24 +0000 Manifest next update: Mon 22 Dec 2025 04:01:24 +0000 Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=) 2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: T4w+tTRmKRPRHRo5IUFrohbA4FX/h+ixv5Re2ulWynk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:b8:e8:ff:1b:5c:57:de:c3:b3:e8:20:2a:48:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Validity Not Before: Dec 21 04:01:24 2025 GMT Not After : Dec 22 04:01:24 2025 GMT Subject: CN=5c3ebbd1e9a29c0f31952bb36a5a57a521f66610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:ee:a6:cc:b6:50:fd:b6:ee:f8:cf:56:94: d9:63:3f:5e:5f:5f:bb:c8:de:74:a4:a4:a3:50:34: 35:22:4d:58:e7:1b:64:25:58:d0:5a:2f:27:f8:f7: 06:c5:40:32:41:82:e9:11:3b:11:fb:06:5e:b2:87: 85:0e:90:5b:77:55:e9:d8:fa:6e:0e:57:d4:37:a1: 72:99:a3:a8:89:33:94:09:c1:65:29:5b:49:20:80: 90:df:73:bc:63:6e:6c:95:1c:7a:7f:c0:8b:05:52: 68:26:7d:22:43:b3:fb:b7:e9:be:0a:d1:c7:04:ef: 63:76:df:f4:03:d4:59:90:30:ba:06:e8:07:aa:56: 8b:8f:bd:8b:6b:62:8b:dc:c8:e1:b2:13:f5:e2:dc: 07:d8:f2:05:27:de:77:93:58:f6:c4:7f:b3:0f:f5: ee:d4:5b:bf:8a:38:6a:6b:33:06:ab:ac:77:33:53: 20:fd:ab:85:c8:cf:db:a7:3d:32:1f:2a:ed:f5:78: f7:20:45:56:51:3d:97:07:98:36:8e:ee:0d:b5:e0: 10:88:6f:63:94:5a:76:6d:5c:0b:92:ec:83:9e:dc: b7:c2:6b:00:e1:39:04:f6:fb:04:5b:9f:a4:cb:6c: 94:eb:7a:68:dd:93:c2:dd:b2:3e:83:9b:9c:e4:fe: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3E:BB:D1:E9:A2:9C:0F:31:95:2B:B3:6A:5A:57:A5:21:F6:66:10 X509v3 Authority Key Identifier: keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:dc:ad:8a:2d:05:f9:85:06:cf:56:49:a6:9f:13:c1:f5:79: e5:b9:a5:4a:a5:29:27:c1:6f:33:38:96:a2:ca:6e:97:52:ea: 99:99:bc:29:7b:b1:26:51:4d:fb:34:e3:84:aa:79:c5:64:37: e2:c2:8e:7e:c2:cd:71:18:67:61:84:52:b4:79:1c:2c:6b:45: a4:7d:6f:39:05:a9:78:69:58:11:6a:2d:03:02:cb:1c:b1:fe: 2a:e8:da:5e:59:5c:f3:6e:8e:5a:f8:a3:ec:02:5d:eb:a1:5f: 30:e8:e4:06:a6:8f:b1:2b:64:ac:21:e2:1d:2a:49:f3:8d:48: bd:70:5a:9e:ff:f4:69:8a:32:25:1e:4a:3f:c1:d8:4c:b8:4a: b7:3c:2d:02:86:6c:ae:1a:2a:82:38:94:a5:74:df:b0:78:b8: c7:03:95:9c:79:4d:e6:6b:35:25:af:91:d0:f0:39:da:09:23: 75:af:2f:ff:c2:b9:bd:1d:02:17:ea:54:7a:32:c0:0c:fc:ca: 4c:df:a9:f6:69:c7:3b:58:7c:09:d2:a7:d3:42:2c:0d:c4:20: 21:cd:fb:e7:3f:bb:83:b1:35:a9:dd:c3:9e:c5:01:39:c0:d1: 70:b1:47:5e:23:8c:83:9a:59:1c:4f:88:03:d7:97:1f:e1:7c: 02:f4:9b:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/Ebjo/xtcV97Ds+ggKkgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOWNhNWE2ZTVkNjc0MjFmM2YyY2QyMTEzOGNiNzA3MDQ4 NTA5NTUwHhcNMjUxMjIxMDQwMTI0WhcNMjUxMjIyMDQwMTI0WjAzMTEwLwYDVQQD Eyg1YzNlYmJkMWU5YTI5YzBmMzE5NTJiYjM2YTVhNTdhNTIxZjY2NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArybupsy2UP227vjPVpTZYz9eX1+7 yN50pKSjUDQ1Ik1Y5xtkJVjQWi8n+PcGxUAyQYLpETsR+wZesoeFDpBbd1Xp2Ppu DlfUN6FymaOoiTOUCcFlKVtJIICQ33O8Y25slRx6f8CLBVJoJn0iQ7P7t+m+CtHH BO9jdt/0A9RZkDC6BugHqlaLj72La2KL3MjhshP14twH2PIFJ953k1j2xH+zD/Xu 1Fu/ijhqazMGq6x3M1Mg/auFyM/bpz0yHyrt9Xj3IEVWUT2XB5g2ju4NteAQiG9j lFp2bVwLkuyDnty3wmsA4TkE9vsEW5+ky2yU63po3ZPC3bI+g5uc5P5YxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw+u9HpopwPMZUrs2paV6Uh9mYQMB8GA1UdIwQY MBaAFFKcpabl1nQh8/LNIROMtwcEhQlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEt M2EzYTlmMDI0MmI4LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEtM2EzYTlmMDI0MmI4 LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9ytii0F +YUGz1ZJpp8TwfV55bmlSqUpJ8FvMziWospul1LqmZm8KXuxJlFN+zTjhKp5xWQ3 4sKOfsLNcRhnYYRStHkcLGtFpH1vOQWpeGlYEWotAwLLHLH+KujaXllc826OWvij 7AJd66FfMOjkBqaPsStkrCHiHSpJ841IvXBanv/0aYoyJR5KP8HYTLhKtzwtAoZs rhoqgjiUpXTfsHi4xwOVnHlN5ms1Ja+R0PA52gkjda8v/8K5vR0CF+pUejLADPzK TN+p9mnHO1h8CdKn00IsDcQgIc375z+7g7E1qd3DnsUBOcDRcLFHXiOMg5pZHE+I A9eXH+F8AvSbrg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:45 2025 by rpki-client