This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json) Hash identifier: txlLQXqHURBEm1ZrlcofZLv+PD6BFn4PynsQcY+eDgM= Subject key identifier: 9C:D6:99:43:09:50:FA:1E:06:18:32:B4:07:43:45:F6:3A:4A:C5:EC Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9 Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9 Certificate serial: 019B21768F5BAEEE215D9424BE3E47F9D760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 10:02:56 +0000 Manifest this update: Mon 15 Dec 2025 10:02:56 +0000 Manifest next update: Tue 16 Dec 2025 10:02:56 +0000 Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: Sfu5TCpIuGZPTOxhp4k62QleXyV6hlEx+inCSpqlsuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:8f:5b:ae:ee:21:5d:94:24:be:3e:47:f9:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9 Validity Not Before: Dec 15 10:02:56 2025 GMT Not After : Dec 16 10:02:56 2025 GMT Subject: CN=9cd699430950fa1e061832b4074345f63a4ac5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:6b:15:41:4b:13:d4:ed:81:b1:b2:99:be: da:9f:a4:1a:af:00:31:d1:5d:64:f1:d5:52:72:de: d9:8b:14:2a:c1:f2:b1:4a:cb:e9:21:45:a7:0b:9f: bf:57:cd:12:80:97:7b:3d:a6:53:4e:00:6e:36:d6: d6:df:27:8d:62:d4:91:cc:23:9e:f0:66:01:56:88: e8:e1:b3:0e:cc:25:f7:2a:9e:5e:d5:47:e0:a7:07: 19:2f:aa:ad:19:6d:78:31:61:6f:a9:fd:a9:73:73: 44:b5:79:52:39:79:67:75:bc:94:7d:47:fe:a9:5c: 92:28:71:cd:b1:fc:5b:ed:fb:84:67:87:06:46:13: 00:ab:cc:10:7a:14:4f:10:12:5f:a4:9a:91:2e:92: 50:a6:cd:ba:22:6d:60:de:c2:01:93:bb:08:72:9c: bf:f3:77:f3:67:4f:c2:0c:d0:53:1e:62:a6:8a:7e: a1:cc:d7:d7:f4:21:83:05:13:96:8a:03:91:f5:e4: ed:de:5a:5a:c6:fb:20:e3:4a:a3:e7:7c:43:64:5c: a8:7a:c0:72:ec:56:95:77:a0:cc:45:67:3a:05:57: c6:d6:8a:08:71:4b:25:36:0c:85:b0:ca:99:44:ea: 56:f9:ed:cf:97:48:6f:22:89:0b:a2:c1:68:b9:87: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D6:99:43:09:50:FA:1E:06:18:32:B4:07:43:45:F6:3A:4A:C5:EC X509v3 Authority Key Identifier: keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:68:c0:12:96:4a:12:42:22:d5:0e:30:a5:37:f1:bd:8d:be: d9:25:5f:ae:92:2a:79:49:c1:46:ca:dc:92:b0:1c:66:99:15: 5b:e3:68:8f:ba:e7:86:6e:75:ff:77:6d:02:16:f8:64:5b:25: 75:2b:c4:de:98:e1:0f:df:28:e0:16:7c:42:ea:73:ff:33:3b: 5f:10:94:23:84:fc:5f:41:d4:f4:36:0d:ed:41:91:ec:5e:d2: 80:4f:98:9a:da:57:67:37:c0:dd:14:47:ac:cc:0e:e9:ce:0e: 82:1f:8f:60:f6:15:1c:0d:f2:20:ae:c2:e8:a9:58:f0:a4:31: 52:89:e3:6e:8f:b8:45:ae:81:c7:d5:77:7a:1b:23:a4:7e:b8: 1a:5c:0d:a6:1d:37:bb:b3:0b:35:c8:34:06:95:a4:11:4d:b2: 1f:ec:b7:8b:6f:6c:6e:ff:4f:96:15:6d:da:11:9d:4d:bd:60: 72:97:6d:0a:f6:b6:af:e0:09:af:8c:a9:d2:09:b9:50:05:54: af:5c:fa:f2:24:58:dd:13:be:00:f7:5c:f7:26:2a:e5:d6:d2: c0:48:39:e6:c9:01:5f:c6:e1:b1:e3:2d:7f:27:3b:61:22:17: fc:5d:68:ad:c3:80:77:b2:c5:0a:27:60:a7:40:8a:cf:ad:92: 39:ea:f7:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdo9bru4hXZQkvj5H+ddgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTI3ODMyZDM5ODUwZTg1MWVlY2I1YTA1MTE2OTI5OTFk ZGE1ZDkwHhcNMjUxMjE1MTAwMjU2WhcNMjUxMjE2MTAwMjU2WjAzMTEwLwYDVQQD Eyg5Y2Q2OTk0MzA5NTBmYTFlMDYxODMyYjQwNzQzNDVmNjNhNGFjNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKBrFUFLE9TtgbGymb7an6QarwAx 0V1k8dVSct7ZixQqwfKxSsvpIUWnC5+/V80SgJd7PaZTTgBuNtbW3yeNYtSRzCOe 8GYBVojo4bMOzCX3Kp5e1UfgpwcZL6qtGW14MWFvqf2pc3NEtXlSOXlndbyUfUf+ qVySKHHNsfxb7fuEZ4cGRhMAq8wQehRPEBJfpJqRLpJQps26Im1g3sIBk7sIcpy/ 83fzZ0/CDNBTHmKmin6hzNfX9CGDBROWigOR9eTt3lpaxvsg40qj53xDZFyoesBy 7FaVd6DMRWc6BVfG1ooIcUslNgyFsMqZROpW+e3Pl0hvIokLosFouYdm+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzWmUMJUPoeBhgytAdDRfY6SsXsMB8GA1UdIwQY MBaAFFKSeDLTmFDoUe7LWgURaSmR3aXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTkt MjU2ZGIzZWQ4MzM1LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTktMjU2ZGIzZWQ4MzM1 LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2jAEpZK EkIi1Q4wpTfxvY2+2SVfrpIqeUnBRsrckrAcZpkVW+Noj7rnhm51/3dtAhb4ZFsl dSvE3pjhD98o4BZ8Qupz/zM7XxCUI4T8X0HU9DYN7UGR7F7SgE+YmtpXZzfA3RRH rMwO6c4Ogh+PYPYVHA3yIK7C6KlY8KQxUonjbo+4Ra6Bx9V3ehsjpH64GlwNph03 u7MLNcg0BpWkEU2yH+y3i29sbv9PlhVt2hGdTb1gcpdtCva2r+AJr4yp0gm5UAVU r1z68iRY3RO+APdc9yYq5dbSwEg55skBX8bhseMtfyc7YSIX/F1orcOAd7LFCidg p0CKz62SOer3eg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:27 2025 by rpki-client