This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json) Hash identifier: zSp0Oig2yxZiRe5WAKS/3cA1jeA/WK1TcC0+qH/6yzw= Subject key identifier: CF:E3:6F:17:F8:92:0C:05:D0:71:03:27:0C:32:E7:AC:5D:86:36:A0 Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99 Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499 Certificate serial: 019B40918B3F4B188E5B988FC8384E32CA95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft Manifest number: 0814 Signing time: Sun 21 Dec 2025 11:00:38 +0000 Manifest this update: Sun 21 Dec 2025 11:00:38 +0000 Manifest next update: Mon 22 Dec 2025 11:00:38 +0000 Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: mbGFPEqKNAvDJQ4Wfouxk7SdkWf2Rsm2N8/+50NXol0=) 2: z0gK7j1eTNv7dmhYM5fYU83PlcI.roa (hash: F9PSIbqhKjRh7i/sDNMQoDtTGb+P8gRfs9+wZwKnUuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:8b:3f:4b:18:8e:5b:98:8f:c8:38:4e:32:ca:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499 Validity Not Before: Dec 21 11:00:38 2025 GMT Not After : Dec 22 11:00:38 2025 GMT Subject: CN=cfe36f17f8920c05d07103270c32e7ac5d8636a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:70:ff:a8:b4:e0:3b:c6:5b:9e:45:4e:f3: ef:8b:4b:aa:65:c4:3b:16:1a:7b:73:2f:49:b1:39: bf:cf:3c:03:c3:7a:2b:df:2d:54:a8:8c:8f:04:b4: e7:f5:f0:1b:ba:94:a5:69:b3:90:e4:58:bd:9a:89: 03:8f:8f:27:a8:2f:b8:48:fa:c9:a5:7d:a4:02:b2: 35:e9:68:d7:2c:32:14:54:2f:63:b9:d8:38:7f:cb: 1a:a5:61:ee:34:35:30:fb:cb:fe:ab:e8:45:23:97: 83:f3:da:d3:6f:8c:19:dc:a0:41:ed:66:48:48:ea: 41:f0:c7:67:68:db:c0:72:87:47:0b:7a:18:46:22: 53:00:cd:9e:d9:cd:2a:f5:4d:8a:7f:a8:92:87:4e: c3:93:6f:17:21:b3:ab:41:38:08:30:05:c0:5a:cf: ea:e7:32:b2:b9:d3:85:f5:32:e7:16:3e:8f:f9:ff: 7c:5b:54:0f:1f:e9:49:b9:86:8e:1d:ac:b9:35:6b: 53:56:74:48:1a:73:63:5b:db:9e:a3:24:35:a2:dd: 45:fe:28:a3:41:c9:3f:9e:e9:81:dd:87:d8:81:d1: f7:e2:30:6a:c4:fe:cc:9a:ce:fc:3f:26:67:cf:98: 85:ed:bd:64:15:71:3f:4b:7c:bd:ef:28:8e:89:0e: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E3:6F:17:F8:92:0C:05:D0:71:03:27:0C:32:E7:AC:5D:86:36:A0 X509v3 Authority Key Identifier: keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a4:59:f4:15:b3:93:f8:92:25:01:08:1b:02:65:c3:31:df: f8:25:df:2f:05:c8:f6:db:b4:fd:7a:a3:8e:90:94:33:83:19: 40:a2:40:38:b5:2b:4e:e4:2f:ce:c4:c0:30:99:0b:ab:5f:28: d0:da:2f:f0:08:4b:6a:ef:69:7f:48:b9:a8:50:b9:6a:01:cf: 76:73:d2:7d:1a:4c:a2:9f:a9:ad:69:56:6c:6c:7a:c4:8b:00: ca:26:b5:09:9f:a2:b7:91:fd:05:2e:85:c9:53:22:63:e9:45: 17:78:fc:4b:28:ef:89:ce:dc:6d:d3:a9:7a:ea:fd:b4:64:ba: ef:c3:e7:dc:12:34:2b:b8:07:34:34:a9:e2:bc:e4:86:0c:90: 9e:8e:0b:1a:ab:28:13:e8:64:05:56:32:e8:e3:65:db:92:19: 96:9a:85:67:60:1f:98:ee:c8:74:5b:d8:3f:24:d0:56:4f:7f: 99:1b:e5:41:b7:c2:58:b0:e8:fd:87:3e:d5:4b:de:c9:a3:2f: f2:3a:2e:a6:93:ab:2b:9e:77:8b:84:53:90:98:6a:9a:0c:0c: 53:d9:c9:49:1d:fe:92:fb:c8:e9:fc:fd:02:23:28:86:1a:1f: 6c:2a:98:b0:f8:7d:88:53:8b:63:55:5d:ab:49:99:c2:ad:68: 84:e2:87:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkYs/SxiOW5iPyDhOMsqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWFkMTdmNGM2MjBkNThkNDUzZDVmNmQ3YzkyMzNmY2Ux MjY0OTkwHhcNMjUxMjIxMTEwMDM4WhcNMjUxMjIyMTEwMDM4WjAzMTEwLwYDVQQD EyhjZmUzNmYxN2Y4OTIwYzA1ZDA3MTAzMjcwYzMyZTdhYzVkODYzNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTtw/6i04DvGW55FTvPvi0uqZcQ7 Fhp7cy9JsTm/zzwDw3or3y1UqIyPBLTn9fAbupSlabOQ5Fi9mokDj48nqC+4SPrJ pX2kArI16WjXLDIUVC9judg4f8sapWHuNDUw+8v+q+hFI5eD89rTb4wZ3KBB7WZI SOpB8MdnaNvAcodHC3oYRiJTAM2e2c0q9U2Kf6iSh07Dk28XIbOrQTgIMAXAWs/q 5zKyudOF9TLnFj6P+f98W1QPH+lJuYaOHay5NWtTVnRIGnNjW9ueoyQ1ot1F/iij Qck/numB3YfYgdH34jBqxP7Mms78PyZnz5iF7b1kFXE/S3y97yiOiQ5FxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/jbxf4kgwF0HEDJwwy56xdhjagMB8GA1UdIwQY MBaAFFBa0X9MYg1Y1FPV9tfJIz/OEmSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEt ZmU2YmIwNDkzMzdkLzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEtZmU2YmIwNDkzMzdk LzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKRZ9BWz k/iSJQEIGwJlwzHf+CXfLwXI9tu0/XqjjpCUM4MZQKJAOLUrTuQvzsTAMJkLq18o 0Nov8AhLau9pf0i5qFC5agHPdnPSfRpMop+prWlWbGx6xIsAyia1CZ+it5H9BS6F yVMiY+lFF3j8Syjvic7cbdOpeur9tGS678Pn3BI0K7gHNDSp4rzkhgyQno4LGqso E+hkBVYy6ONl25IZlpqFZ2AfmO7IdFvYPyTQVk9/mRvlQbfCWLDo/Yc+1UveyaMv 8jouppOrK553i4RTkJhqmgwMU9nJSR3+kvvI6fz9AiMohhofbCqYsPh9iFOLY1Vd q0mZwq1ohOKHjg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:43 2025 by rpki-client