This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json) Hash identifier: 7k/Kfmbx9eIEvncQs1izdjidmWAhMwU4sNnjsfQyZw4= Subject key identifier: 69:07:AF:9A:BA:9F:94:BF:CC:D2:4B:69:E4:0E:EE:EB:93:9D:CF:82 Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880 Certificate serial: 019B3F488DD75FCD386C6AD41B6765D8AA16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft Manifest number: 07D6 Signing time: Sun 21 Dec 2025 05:01:18 +0000 Manifest this update: Sun 21 Dec 2025 05:01:18 +0000 Manifest next update: Mon 22 Dec 2025 05:01:18 +0000 Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: 9S/Q6+9TUCcyTIlr7DnrteO2rNvurB0SlJ3pcERYi3Q=) 2: z_tXbjwTybgsIu8gcHGw6c-3LCI.roa (hash: +h48Ej53f4z6jTARf/DyDynXjuIZO6RWwEf4zGYnud4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:8d:d7:5f:cd:38:6c:6a:d4:1b:67:65:d8:aa:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880 Validity Not Before: Dec 21 05:01:18 2025 GMT Not After : Dec 22 05:01:18 2025 GMT Subject: CN=6907af9aba9f94bfccd24b69e40eeeeb939dcf82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f1:48:21:ce:b1:1a:3f:ac:1e:76:4d:5c:3f: 1a:a7:33:4c:e8:53:b7:9c:4e:f2:0d:8f:96:76:ab: b7:8a:77:31:03:09:d7:51:f8:d0:69:4a:af:8f:7e: 0a:54:6f:a6:2e:e9:1e:38:8e:cf:9a:96:d9:d6:14: b3:2c:be:6f:f5:e8:b2:00:30:94:f5:d6:95:d8:29: a8:67:45:b0:f4:44:fe:09:3e:de:d1:4a:7e:54:66: 08:78:4a:c1:f6:e9:d0:2c:16:e7:96:bb:7e:59:e5: ec:f7:c5:82:1d:c7:7e:a2:ba:0b:31:96:d2:1a:a4: 4e:a2:96:4c:eb:22:51:4c:e7:f3:c8:4b:90:46:c3: 44:c1:08:8a:7e:dc:7b:53:27:85:6e:6b:d4:eb:32: e1:d1:3d:a6:78:37:e1:f3:91:02:a4:a3:5b:ea:8f: 14:b1:47:90:0d:28:a3:df:1e:2d:a5:fd:75:80:2a: 82:3e:62:5f:d0:09:6b:13:ba:22:c0:90:34:48:63: 45:c9:57:be:ea:3c:8f:da:52:59:c4:2a:06:e6:63: d6:70:dd:64:fb:81:61:47:f0:81:c2:a0:6a:98:f7: 21:ee:00:79:62:3f:3f:29:42:2a:0c:b8:8a:ab:33: c1:e9:07:73:58:c7:0f:b3:6c:78:c2:8c:47:14:b0: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:AF:9A:BA:9F:94:BF:CC:D2:4B:69:E4:0E:EE:EB:93:9D:CF:82 X509v3 Authority Key Identifier: keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6b:96:dc:cc:91:77:b0:b0:44:59:23:38:b7:23:08:53:14: ba:a5:55:26:e4:4e:c9:a9:e0:a7:39:99:56:e0:2c:34:7a:ba: 6d:41:a7:cf:c5:99:29:0e:38:39:ce:e3:bb:ce:35:48:6f:a7: 1b:e5:92:65:eb:9a:f4:1b:0a:39:db:e2:d3:f5:b4:57:a2:75: bf:04:a5:fa:6d:bb:c1:8c:d0:f4:fe:8c:1f:e2:18:5e:52:7e: 21:f5:62:e5:a1:19:46:74:5f:6e:07:20:40:06:a6:67:91:80: f7:7f:d2:32:48:aa:2f:75:3d:c1:31:90:c0:ec:32:bd:a2:ae: c4:7e:b2:20:5f:28:74:b8:3d:82:ff:ef:89:f5:89:9c:c5:2c: f0:98:02:15:15:d3:fa:f0:8e:7b:fd:7b:e6:d2:5b:a2:d0:4d: 4b:85:4e:b8:27:5a:72:d1:a9:36:9d:7e:d4:91:9a:0c:12:ce: c9:82:d4:41:be:2c:4c:b5:3a:b3:db:41:80:49:51:5c:84:cd: cb:af:36:36:d2:d1:50:9a:01:11:23:72:91:0c:c5:bb:e7:ee: 54:45:60:8c:bb:7a:fe:15:0c:4d:34:73:df:e9:e9:90:c8:61: fc:2f:34:d7:70:60:43:01:d1:08:20:54:b8:56:b7:f3:55:09: 53:ed:8b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SI3XX804bGrUG2dl2KoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5 OWY4ODAwHhcNMjUxMjIxMDUwMTE4WhcNMjUxMjIyMDUwMTE4WjAzMTEwLwYDVQQD Eyg2OTA3YWY5YWJhOWY5NGJmY2NkMjRiNjllNDBlZWVlYjkzOWRjZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fFIIc6xGj+sHnZNXD8apzNM6FO3 nE7yDY+Wdqu3incxAwnXUfjQaUqvj34KVG+mLukeOI7PmpbZ1hSzLL5v9eiyADCU 9daV2CmoZ0Ww9ET+CT7e0Up+VGYIeErB9unQLBbnlrt+WeXs98WCHcd+oroLMZbS GqROopZM6yJRTOfzyEuQRsNEwQiKftx7UyeFbmvU6zLh0T2meDfh85ECpKNb6o8U sUeQDSij3x4tpf11gCqCPmJf0AlrE7oiwJA0SGNFyVe+6jyP2lJZxCoG5mPWcN1k +4FhR/CBwqBqmPch7gB5Yj8/KUIqDLiKqzPB6QdzWMcPs2x4woxHFLBdNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkHr5q6n5S/zNJLaeQO7uuTnc+CMB8GA1UdIwQY MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It YmU0OGI3OTI1NDc4LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4 LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWuW3MyR d7CwRFkjOLcjCFMUuqVVJuROyangpzmZVuAsNHq6bUGnz8WZKQ44Oc7ju841SG+n G+WSZeua9BsKOdvi0/W0V6J1vwSl+m27wYzQ9P6MH+IYXlJ+IfVi5aEZRnRfbgcg QAamZ5GA93/SMkiqL3U9wTGQwOwyvaKuxH6yIF8odLg9gv/vifWJnMUs8JgCFRXT +vCOe/175tJbotBNS4VOuCdactGpNp1+1JGaDBLOyYLUQb4sTLU6s9tBgElRXITN y682NtLRUJoBESNykQzFu+fuVEVgjLt6/hUMTTRz3+npkMhh/C8013BgQwHRCCBU uFa381UJU+2LUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:21 2025 by rpki-client