This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft File: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft (raw, json) Hash identifier: OnDZOgoCYnjqGjpYOOL0a0v55qopkva5o/7lUvRBRiM= Subject key identifier: E1:E7:FD:48:A0:44:71:5D:B1:E9:CE:E7:48:3E:81:83:51:E7:C2:A4 Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56 Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56 Certificate serial: 019B27777878B0BB62504E872E2EB54C6DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft Manifest number: 0F16 Signing time: Tue 16 Dec 2025 14:01:39 +0000 Manifest this update: Tue 16 Dec 2025 14:01:39 +0000 Manifest next update: Wed 17 Dec 2025 14:01:39 +0000 Files and hashes: 1: 41DTuek1VatXKqyOZ16zPIzA15c.roa (hash: xDUrI4pP1nTL2y1WCMAWoY6BskvJrsSqrtvmAaoQnEQ=) 2: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl (hash: 5ajJqOK5FTJi2Q6JaH6yad3RBDJoEPtDCo4ka77sXwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:78:78:b0:bb:62:50:4e:87:2e:2e:b5:4c:6d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56 Validity Not Before: Dec 16 14:01:39 2025 GMT Not After : Dec 17 14:01:39 2025 GMT Subject: CN=e1e7fd48a044715db1e9cee7483e818351e7c2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:f1:3c:76:cc:c6:f0:d3:0b:18:2d:de:ad: c8:2b:29:06:eb:d7:f0:00:5a:7d:a4:8a:69:d9:26: 83:df:4f:68:d5:a1:c7:56:0c:d1:6f:de:85:32:89: 6e:da:94:b9:43:98:29:98:ec:df:53:8d:a6:bf:00: 5e:fb:65:b8:2e:81:7c:be:9f:db:74:cd:5d:98:1f: 4c:e1:fb:2c:b2:da:3d:2a:61:a8:42:b0:b6:e3:95: 81:26:5f:7d:fb:70:3b:ef:f7:13:85:47:7d:75:4f: 6d:c2:a3:92:33:82:8c:56:04:78:b0:65:0e:c6:be: 3d:92:5a:2b:9d:b6:a7:de:8f:56:7e:26:80:0f:d0: 66:96:98:ca:7f:53:65:45:79:ff:f2:b3:bf:cc:05: bd:6a:66:a2:6b:0d:c2:94:bc:14:3e:82:43:4d:ff: a4:cf:71:b3:d3:4d:f5:7a:04:66:d4:75:15:bc:75: 0d:d2:65:e2:23:1e:42:93:0f:ca:5f:3c:29:88:28: c2:91:26:e2:83:a7:e4:d6:7a:82:81:e2:bd:34:93: 0e:33:8b:49:5d:3d:17:01:fc:3c:a6:fd:67:36:b5: ac:bd:c1:79:e3:95:fb:68:5a:45:f5:d4:7b:8c:7a: 5e:ac:94:a0:96:e8:e4:39:26:30:f0:68:7f:36:3c: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E7:FD:48:A0:44:71:5D:B1:E9:CE:E7:48:3E:81:83:51:E7:C2:A4 X509v3 Authority Key Identifier: keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c0:5f:55:bc:bc:cd:82:dc:38:82:17:7a:42:6f:78:5b:80: ac:09:ed:7f:4c:8c:f5:13:88:6b:5c:88:9b:7e:1d:6a:56:d9: 03:c3:26:fe:63:01:4a:fc:4b:ed:94:25:fb:06:c7:1c:cb:45: 27:c0:3e:c8:be:bd:0a:12:f3:0c:e1:15:ed:fe:aa:28:be:b1: f1:83:45:21:b1:c2:ab:86:86:11:0e:fa:83:7f:7c:fa:e5:b8: 11:f8:0e:84:62:e0:b8:7c:ab:bd:cb:b2:e4:7d:4d:3e:91:e9: 7c:44:af:29:14:d5:c9:c2:1c:9f:13:7c:46:90:c1:b8:7d:26: 3b:86:4e:cd:4f:47:c9:a4:21:d1:a4:a4:b0:01:ef:fc:8e:2b: 52:2a:d4:b1:2e:4c:ce:db:8c:9b:dc:f3:3f:57:64:fb:35:54: a6:dc:42:be:0c:29:96:46:df:2d:5d:4c:c1:47:36:40:94:d6: 1b:30:0a:3c:3b:a1:25:0d:67:6d:95:4a:f2:c5:9a:be:25:02: 56:b9:69:3f:75:15:7f:9c:f3:68:f2:9a:5e:91:70:ef:34:45: 6c:bb:1b:a5:14:f7:2a:1c:5c:b9:1c:c3:76:01:e7:31:f8:a3: 25:89:24:84:f2:05:e8:85:26:43:79:10:dd:23:e0:cc:b6:fb: ed:0b:7b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd3h4sLtiUE6HLi61TG3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGEzZDMyNTk3YjUwNTE5MzJmNmNhOTE4MmQ0YjlhMmZi MDViNTYwHhcNMjUxMjE2MTQwMTM5WhcNMjUxMjE3MTQwMTM5WjAzMTEwLwYDVQQD EyhlMWU3ZmQ0OGEwNDQ3MTVkYjFlOWNlZTc0ODNlODE4MzUxZTdjMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV7xPHbMxvDTCxgt3q3IKykG69fw AFp9pIpp2SaD309o1aHHVgzRb96FMolu2pS5Q5gpmOzfU42mvwBe+2W4LoF8vp/b dM1dmB9M4fsssto9KmGoQrC245WBJl99+3A77/cThUd9dU9twqOSM4KMVgR4sGUO xr49klornban3o9WfiaAD9BmlpjKf1NlRXn/8rO/zAW9amaiaw3ClLwUPoJDTf+k z3Gz0031egRm1HUVvHUN0mXiIx5Ckw/KXzwpiCjCkSbig6fk1nqCgeK9NJMOM4tJ XT0XAfw8pv1nNrWsvcF545X7aFpF9dR7jHperJSglujkOSYw8Gh/NjwXEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHn/UigRHFdsenO50g+gYNR58KkMB8GA1UdIwQY MBaAFFHaPTJZe1BRky9sqRgtS5ovsFtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYt MDBhNTQ5ZTFiMWQ3LzEvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMjJhM2UtZmNkYi00YTcxLTg5NzYtMDBhNTQ5ZTFiMWQ3 LzEvVWRvOU1sbDdVRkdUTDJ5cEdDMUxtaS13VzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcBfVby8 zYLcOIIXekJveFuArAntf0yM9ROIa1yIm34dalbZA8Mm/mMBSvxL7ZQl+wbHHMtF J8A+yL69ChLzDOEV7f6qKL6x8YNFIbHCq4aGEQ76g398+uW4EfgOhGLguHyrvcuy 5H1NPpHpfESvKRTVycIcnxN8RpDBuH0mO4ZOzU9HyaQh0aSksAHv/I4rUirUsS5M ztuMm9zzP1dk+zVUptxCvgwplkbfLV1MwUc2QJTWGzAKPDuhJQ1nbZVK8sWaviUC VrlpP3UVf5zzaPKaXpFw7zRFbLsbpRT3KhxcuRzDdgHnMfijJYkkhPIF6IUmQ3kQ 3SPgzLb77Qt7Xg== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:20 2025 by rpki-client