This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json) Hash identifier: DL/3eMsM+lr2j6oDu+lPWB/LSpHE27InDn0xP98v9u8= Subject key identifier: B9:63:62:D4:57:C6:B7:D0:A1:FE:35:44:CD:EC:E7:9E:81:CF:F5:9E Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Certificate serial: 019B251A559B91D2C6EF5F1178B8498ED6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft Manifest number: 0171 Signing time: Tue 16 Dec 2025 03:00:41 +0000 Manifest this update: Tue 16 Dec 2025 03:00:41 +0000 Manifest next update: Wed 17 Dec 2025 03:00:41 +0000 Files and hashes: 1: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: YPbNMhmTfZq6pAf9+UPx/45dG6nL96vIss1pwEhGIdo=) 2: hMbkCVfPlSQM1RyXU6Khqzma-bQ.asa (hash: i/C6QBRxr8zH4mV/ZGP1gtZscxRkotTct2vhglyzNbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:55:9b:91:d2:c6:ef:5f:11:78:b8:49:8e:d6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Validity Not Before: Dec 16 03:00:41 2025 GMT Not After : Dec 17 03:00:41 2025 GMT Subject: CN=b96362d457c6b7d0a1fe3544cdece79e81cff59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:dc:de:71:cb:b9:52:98:b0:d4:64:10:ef: d6:9a:1e:f4:3d:c7:55:3f:ed:a0:b9:3b:d1:22:69: 4d:62:e1:e4:cd:0a:a8:a8:47:df:98:05:30:12:98: fc:c8:e2:87:67:d9:c1:8d:8f:3f:06:53:2f:0e:56: 38:5d:63:d9:94:22:57:d9:19:e0:92:bf:ca:78:7e: 55:82:59:e7:d8:7c:c3:ab:cb:ed:72:6c:f7:a4:54: 72:51:00:bc:f4:b2:44:9d:36:3f:7b:c1:7a:de:7d: be:d4:86:39:20:0c:3f:c5:6d:0c:89:b8:0a:7f:a7: d8:95:83:52:78:8a:11:d4:e2:57:23:9d:d4:c0:52: a7:5f:12:5b:d2:fe:30:cd:e2:3e:b5:09:8a:53:5d: 56:0e:6f:55:3c:66:dd:7e:1a:62:30:a3:a5:2c:cd: 3d:6f:bf:e1:e7:9a:4e:82:4c:aa:2b:f3:f2:06:e8: b7:9c:52:59:59:60:b3:d4:be:5c:1f:8c:45:01:6f: ff:45:33:ff:02:01:6e:67:7e:37:38:c9:9d:9f:c8: 25:62:2e:59:f3:09:7a:97:44:7d:c7:19:69:eb:f6: 01:23:40:78:1e:ff:f9:9a:7c:fe:3a:eb:1e:ee:e5: 11:8b:a6:a9:0f:3e:31:3e:74:34:53:1f:7a:6e:96: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:63:62:D4:57:C6:B7:D0:A1:FE:35:44:CD:EC:E7:9E:81:CF:F5:9E X509v3 Authority Key Identifier: keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:63:1e:ae:66:1e:eb:be:94:f0:d0:b5:65:1d:d4:53:9e:aa: de:84:3f:b1:74:d0:bb:62:76:ca:16:72:2a:68:cc:73:e5:0b: 84:20:03:7f:0b:10:4c:24:29:8d:83:eb:6e:de:0c:ee:8c:0d: 7c:c9:c7:0c:ec:8e:01:ef:9b:b9:27:c5:e5:06:d2:22:da:6e: bd:c8:38:5a:56:31:7f:9b:06:e6:75:14:ee:2e:25:bc:e5:9f: fe:50:a4:4a:3c:c8:d6:26:a4:28:49:1c:d9:d5:2a:b2:88:4a: e5:c8:f4:f6:56:cd:77:54:4f:26:fa:e3:aa:e1:b6:11:e7:dc: e9:95:4b:ee:74:41:47:b1:9b:d1:4d:29:e9:58:1c:1d:15:83: d6:96:00:1d:c5:9a:ea:61:81:cf:71:cd:f3:3f:5b:2f:cd:2d: aa:45:2e:67:eb:82:08:16:8e:f9:d8:95:9e:56:dc:87:d6:03: 05:c2:66:4b:2a:b7:d7:af:2e:52:4f:55:e4:8f:4b:d7:1c:f5: bc:26:7b:fd:02:91:fe:e7:9a:eb:98:3a:ba:a5:22:74:e1:5a: fc:d8:00:29:4a:97:ea:76:35:b0:aa:05:5c:46:50:aa:a1:28: 56:f7:e8:18:97:50:2e:44:56:47:8c:df:2e:bb:c3:34:51:8b: ed:c6:7f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGlWbkdLG718ReLhJjta0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjI5ZDE4NGJjYzUwZmU2NTRkZGVmNDAxNWRlMTdkMjQ2 ZmQyYTMwHhcNMjUxMjE2MDMwMDQxWhcNMjUxMjE3MDMwMDQxWjAzMTEwLwYDVQQD EyhiOTYzNjJkNDU3YzZiN2QwYTFmZTM1NDRjZGVjZTc5ZTgxY2ZmNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXrc3nHLuVKYsNRkEO/Wmh70PcdV P+2guTvRImlNYuHkzQqoqEffmAUwEpj8yOKHZ9nBjY8/BlMvDlY4XWPZlCJX2Rng kr/KeH5Vglnn2HzDq8vtcmz3pFRyUQC89LJEnTY/e8F63n2+1IY5IAw/xW0MibgK f6fYlYNSeIoR1OJXI53UwFKnXxJb0v4wzeI+tQmKU11WDm9VPGbdfhpiMKOlLM09 b7/h55pOgkyqK/PyBui3nFJZWWCz1L5cH4xFAW//RTP/AgFuZ343OMmdn8glYi5Z 8wl6l0R9xxlp6/YBI0B4Hv/5mnz+Ouse7uURi6apDz4xPnQ0Ux96bpYAZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLljYtRXxrfQof41RM3s556Bz/WeMB8GA1UdIwQY MBaAFFHynRhLzFD+ZU3e9AFd4X0kb9KjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMt YjMzYTFmN2Q5YzI2LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMtYjMzYTFmN2Q5YzI2 LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmMermYe 676U8NC1ZR3UU56q3oQ/sXTQu2J2yhZyKmjMc+ULhCADfwsQTCQpjYPrbt4M7owN fMnHDOyOAe+buSfF5QbSItpuvcg4WlYxf5sG5nUU7i4lvOWf/lCkSjzI1iakKEkc 2dUqsohK5cj09lbNd1RPJvrjquG2Eefc6ZVL7nRBR7Gb0U0p6VgcHRWD1pYAHcWa 6mGBz3HN8z9bL80tqkUuZ+uCCBaO+diVnlbch9YDBcJmSyq3168uUk9V5I9L1xz1 vCZ7/QKR/uea65g6uqUidOFa/NgAKUqX6nY1sKoFXEZQqqEoVvfoGJdQLkRWR4zf LrvDNFGL7cZ/Hw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:39:18 2025 by rpki-client