This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft File: UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json) Hash identifier: MhDoSN45rDcx2ItvnYPMe6K4iShdJ1hsN83nUHSDZi4= Subject key identifier: 4B:41:05:5D:0B:B4:DD:D5:71:A9:30:4A:BB:65:E2:C6:76:CA:B0:13 Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77 Certificate issuer: /CN=5053c7da9c8fffea5ced97a7990200d4beee4177 Certificate serial: 019B39B41766E79A309169AE591B11A469F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft Manifest number: 06D2 Signing time: Sat 20 Dec 2025 03:01:02 +0000 Manifest this update: Sat 20 Dec 2025 03:01:02 +0000 Manifest next update: Sun 21 Dec 2025 03:01:02 +0000 Files and hashes: 1: CtRLEvt809yNddQQC3-YdVEz8S0.roa (hash: iOnEw767paDA6G2cUVNf8J3Qp7lK0IUOS20QbdMgtb4=) 2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: JoI7wdd2Ks2X2Xn50KuO5DaYIk5yjOFjt3cv+iai3C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:17:66:e7:9a:30:91:69:ae:59:1b:11:a4:69:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177 Validity Not Before: Dec 20 03:01:02 2025 GMT Not After : Dec 21 03:01:02 2025 GMT Subject: CN=4b41055d0bb4ddd571a9304abb65e2c676cab013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:3a:79:4c:e8:0d:96:48:b7:de:94:98:70: 4d:e0:73:32:9f:27:81:d1:d7:bc:4d:11:be:9a:2e: 7f:65:d4:26:77:3e:4d:f4:6d:83:f2:ac:50:1c:25: 74:27:62:cf:14:06:78:71:8d:d3:31:f7:3b:e3:1d: 5b:d0:0e:fb:eb:b1:21:6e:a3:c2:ef:48:ff:f7:8d: 8b:4c:5c:40:f3:7d:ab:c0:af:87:8b:11:2e:83:a6: c7:c7:b0:1a:9c:ff:57:ae:f0:23:68:0a:de:79:c6: 7e:31:f6:b9:bd:65:ad:c7:15:34:c6:d7:3f:b5:eb: 5b:25:d1:a1:c2:66:f7:52:c1:b8:c3:fd:2d:33:bb: ec:56:86:e3:cf:d8:66:64:a0:6a:af:53:46:e5:62: 4b:83:45:c3:29:59:31:07:9e:a1:c0:ed:b8:fc:8a: e0:d2:4c:f9:bc:39:ed:7a:20:ae:39:55:40:40:de: b1:60:11:41:53:ec:a3:b5:48:44:bc:f2:b4:f0:41: b7:30:60:70:44:7f:6a:f0:2b:63:98:63:29:ab:c7: 3e:95:d3:31:d4:65:4b:2b:81:28:5e:05:e6:5e:a8: 2a:a0:c6:67:bf:78:9a:ef:7b:42:c1:3c:d5:2d:cd: dc:87:63:ce:44:7c:53:ef:ad:e1:9c:54:ae:0f:8f: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:05:5D:0B:B4:DD:D5:71:A9:30:4A:BB:65:E2:C6:76:CA:B0:13 X509v3 Authority Key Identifier: keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:88:2e:fb:42:6c:84:50:57:a7:aa:07:33:06:11:84:63:d3: 6d:d9:6b:02:9b:2e:a1:e9:37:b7:f9:a3:1b:24:70:82:a5:fb: 24:96:df:97:0b:64:74:f1:5d:46:3d:fd:d5:67:e4:57:c8:ab: b3:af:63:33:9f:da:c4:cc:9c:be:46:05:c7:0f:a1:91:a8:8d: cb:49:d9:6f:0a:5e:63:cd:ac:1c:76:73:07:9c:ae:e2:c7:0a: 8a:68:49:2b:79:90:71:ca:a6:f2:b2:de:8a:39:03:8c:5b:8a: b9:70:e5:db:b9:6a:47:22:03:5a:f6:86:75:0f:0a:24:03:b5: 17:b9:7e:9d:ba:6e:a3:63:8b:ce:98:f6:7f:e8:36:24:5c:ba: 49:84:ba:ba:47:51:2e:ca:46:7f:96:30:db:35:04:44:4e:de: f9:4f:ed:41:b3:64:8b:9f:5c:d8:17:ac:92:2a:d8:2a:e9:09: 0d:fe:58:fa:53:d6:c1:86:fa:53:67:6f:d8:09:55:d5:70:93: d4:b5:33:29:8d:a5:23:46:d8:34:82:fb:18:8b:49:22:a6:70: be:b9:ad:f6:50:69:3a:e8:43:ba:9a:1d:54:ce:99:13:c5:a1: 8f:4e:c8:28:1d:51:fc:e1:74:24:95:19:c7:34:11:b2:83:dc: f3:4b:46:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tBdm55owkWmuWRsRpGnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTNjN2RhOWM4ZmZmZWE1Y2VkOTdhNzk5MDIwMGQ0YmVl ZTQxNzcwHhcNMjUxMjIwMDMwMTAyWhcNMjUxMjIxMDMwMTAyWjAzMTEwLwYDVQQD Eyg0YjQxMDU1ZDBiYjRkZGQ1NzFhOTMwNGFiYjY1ZTJjNjc2Y2FiMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1I6eUzoDZZIt96UmHBN4HMynyeB 0de8TRG+mi5/ZdQmdz5N9G2D8qxQHCV0J2LPFAZ4cY3TMfc74x1b0A7767EhbqPC 70j/942LTFxA832rwK+HixEug6bHx7AanP9XrvAjaAreecZ+Mfa5vWWtxxU0xtc/ tetbJdGhwmb3UsG4w/0tM7vsVobjz9hmZKBqr1NG5WJLg0XDKVkxB56hwO24/Irg 0kz5vDnteiCuOVVAQN6xYBFBU+yjtUhEvPK08EG3MGBwRH9q8CtjmGMpq8c+ldMx 1GVLK4EoXgXmXqgqoMZnv3ia73tCwTzVLc3ch2PORHxT763hnFSuD4+jyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtBBV0LtN3VcakwSrtl4sZ2yrATMB8GA1UdIwQY MBaAFFBTx9qcj//qXO2Xp5kCANS+7kF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wZjhjZTctY2E5Ni00MzViLTg1NzQt YWM2MjBkYTJmODdlLzEvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wZjhjZTctY2E5Ni00MzViLTg1NzQtYWM2MjBkYTJmODdl LzEvVUZQSDJweVBfLXBjN1plbm1RSUExTDd1UVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALogu+0Js hFBXp6oHMwYRhGPTbdlrApsuoek3t/mjGyRwgqX7JJbflwtkdPFdRj391WfkV8ir s69jM5/axMycvkYFxw+hkaiNy0nZbwpeY82sHHZzB5yu4scKimhJK3mQccqm8rLe ijkDjFuKuXDl27lqRyIDWvaGdQ8KJAO1F7l+nbpuo2OLzpj2f+g2JFy6SYS6ukdR LspGf5Yw2zUERE7e+U/tQbNki59c2BeskirYKukJDf5Y+lPWwYb6U2dv2AlV1XCT 1LUzKY2lI0bYNIL7GItJIqZwvrmt9lBpOuhDupodVM6ZE8Whj07IKB1R/OF0JJUZ xzQRsoPc80tGcA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:32 2025 by rpki-client