This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft File: UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json) Hash identifier: yGA/kAyan6mUtn+Lmn0ZgxlHqPPeBXUt0wGYSsAlyx0= Subject key identifier: F9:1D:C0:41:C8:6E:BF:EA:73:09:FD:23:EA:0D:54:FD:57:41:C3:75 Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8 Certificate issuer: /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8 Certificate serial: 019B51BD192AE9AE59268E7D950892720D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 19:01:45 +0000 Manifest this update: Wed 24 Dec 2025 19:01:45 +0000 Manifest next update: Thu 25 Dec 2025 19:01:45 +0000 Files and hashes: 1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: SKDFyxQMZUfyV3m3/jtiMNE32jJa5jVJ3AIjm7Egr/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:19:2a:e9:ae:59:26:8e:7d:95:08:92:72:0d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8 Validity Not Before: Dec 24 19:01:45 2025 GMT Not After : Dec 25 19:01:45 2025 GMT Subject: CN=f91dc041c86ebfea7309fd23ea0d54fd5741c375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:7e:01:3b:15:d0:5e:36:de:d0:1f:c5:64: f2:3a:fa:7c:56:c4:e0:55:ca:e2:06:b0:2b:45:65: 75:e9:4d:ac:fd:09:bb:55:fa:c2:af:7d:54:36:e0: 14:65:6e:db:24:ef:89:e7:26:67:2b:df:fa:d0:f3: 9a:47:df:1a:5d:50:fa:52:0a:c9:7b:24:93:ba:c9: b9:ac:14:85:38:b6:e4:dd:e4:d5:44:23:24:85:d1: 50:4c:db:29:c5:1d:e4:e5:1a:a7:10:01:20:c3:60: 48:82:37:b5:e2:5e:7f:32:0a:98:e8:91:84:3a:61: d5:40:e6:5b:a0:d3:6d:99:53:9d:5e:64:18:50:2f: ab:86:36:01:6c:77:65:22:e1:29:cb:2b:93:27:09: fb:8d:a8:d5:e9:68:73:db:85:3c:25:1d:aa:63:0e: 4b:8a:f5:ae:00:69:31:33:42:6f:32:fd:17:4c:df: b4:27:08:d9:53:54:64:28:bf:a8:b6:f8:7e:36:29: df:a3:22:93:88:be:22:21:a9:8b:50:26:94:6f:d7: b3:fc:db:56:77:4d:6f:52:c3:1b:cb:bd:d4:4e:f5: 9a:e0:73:b3:aa:85:5a:71:75:8e:e8:63:ae:2f:52: a0:0e:35:73:39:78:a7:35:db:ce:7d:e4:e3:48:1c: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1D:C0:41:C8:6E:BF:EA:73:09:FD:23:EA:0D:54:FD:57:41:C3:75 X509v3 Authority Key Identifier: keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:78:87:a3:94:ed:de:7d:fe:5b:be:a8:11:b6:00:f9:93:78: 7d:b6:5a:aa:08:8e:af:eb:ef:b2:10:b3:d5:cc:56:ec:19:73: 81:89:bf:9f:20:20:b0:40:47:08:ac:c3:98:cb:e7:3c:5c:01: 88:a8:d0:d6:9d:ed:77:fa:17:77:7f:04:a3:ef:2b:e9:1b:44: c9:a4:b6:6c:bd:e4:6c:a0:49:ae:82:a5:21:15:8e:e0:c1:0a: 8a:54:d9:ad:a8:2a:3e:99:11:68:ae:ac:0b:b4:6e:f7:7e:d8: 15:3a:cf:e8:85:a6:d4:74:35:17:79:fc:a5:82:90:09:f4:38: d0:0b:39:6f:69:e8:ff:f9:46:a3:fa:fc:84:37:5b:b8:7f:e2: 1a:f5:a9:34:7b:44:0a:d7:88:09:7a:41:f5:9a:ad:67:f9:09: da:c1:1f:1c:d3:dd:e0:0f:d5:d2:f9:7b:c5:e8:29:b9:d0:b3: e6:4f:f4:f4:11:9c:3a:d5:15:51:2a:6f:a4:bf:4c:2b:ae:21: 92:24:72:7c:95:c6:8e:1d:a3:4a:49:ea:8a:61:6c:c0:58:80: 3e:68:93:8f:84:07:32:fd:1e:f6:f9:36:23:f0:98:57:41:9f: 8d:db:df:9a:46:60:c4:47:d3:89:bc:7d:3e:ec:61:73:d7:5b: d0:63:d5:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvRkq6a5ZJo59lQiScg1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGIyOTI5NzJjMTBjNjlmOTdlY2QyNGYyZmI2OWI0ZjY3 NzZkZTgwHhcNMjUxMjI0MTkwMTQ1WhcNMjUxMjI1MTkwMTQ1WjAzMTEwLwYDVQQD EyhmOTFkYzA0MWM4NmViZmVhNzMwOWZkMjNlYTBkNTRmZDU3NDFjMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1F+ATsV0F423tAfxWTyOvp8VsTg VcriBrArRWV16U2s/Qm7VfrCr31UNuAUZW7bJO+J5yZnK9/60POaR98aXVD6UgrJ eySTusm5rBSFOLbk3eTVRCMkhdFQTNspxR3k5RqnEAEgw2BIgje14l5/MgqY6JGE OmHVQOZboNNtmVOdXmQYUC+rhjYBbHdlIuEpyyuTJwn7jajV6Whz24U8JR2qYw5L ivWuAGkxM0JvMv0XTN+0JwjZU1RkKL+otvh+NinfoyKTiL4iIamLUCaUb9ez/NtW d01vUsMby73UTvWa4HOzqoVacXWO6GOuL1KgDjVzOXinNdvOfeTjSByGWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkdwEHIbr/qcwn9I+oNVP1XQcN1MB8GA1UdIwQY MBaAFFHbKSlywQxp+X7NJPL7abT2d23oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2Ut NmVhZjlkYWJhZTBmLzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2UtNmVhZjlkYWJhZTBm LzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXiHo5Tt 3n3+W76oEbYA+ZN4fbZaqgiOr+vvshCz1cxW7BlzgYm/nyAgsEBHCKzDmMvnPFwB iKjQ1p3td/oXd38Eo+8r6RtEyaS2bL3kbKBJroKlIRWO4MEKilTZragqPpkRaK6s C7Ru937YFTrP6IWm1HQ1F3n8pYKQCfQ40As5b2no//lGo/r8hDdbuH/iGvWpNHtE CteICXpB9ZqtZ/kJ2sEfHNPd4A/V0vl7xegpudCz5k/09BGcOtUVUSpvpL9MK64h kiRyfJXGjh2jSknqimFswFiAPmiTj4QHMv0e9vk2I/CYV0GfjdvfmkZgxEfTibx9 Puxhc9db0GPVog== -----END CERTIFICATE-----Generated at Thu Dec 25 03:25:53 2025 by rpki-client