This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json) Hash identifier: 21x2Kb26quH+4QcbPZl4x1jqWdwuSP475qRiicxSVYQ= Subject key identifier: B9:C2:C4:AF:BB:9A:F4:95:5E:9E:1F:25:4C:7A:2F:FD:BF:06:A0:3E Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068 Certificate serial: 019B35A0D7AB05234DED9BFC98FBA10C5D2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft Manifest number: 03C0 Signing time: Fri 19 Dec 2025 08:01:31 +0000 Manifest this update: Fri 19 Dec 2025 08:01:31 +0000 Manifest next update: Sat 20 Dec 2025 08:01:31 +0000 Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: cGSkHERuL81bsB2+kGGb2QdzM6xx2e2a8HJCa4BPrMs=) 2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:d7:ab:05:23:4d:ed:9b:fc:98:fb:a1:0c:5d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068 Validity Not Before: Dec 19 08:01:31 2025 GMT Not After : Dec 20 08:01:31 2025 GMT Subject: CN=b9c2c4afbb9af4955e9e1f254c7a2ffdbf06a03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:fd:b4:02:fa:b0:94:68:bf:df:6f:6f:f7: 8d:00:d5:65:8d:79:07:a6:91:f7:7b:40:20:89:91: 4c:40:6a:f3:5e:51:46:be:0e:d7:07:f2:44:bd:9b: 93:a1:70:28:42:1c:db:2a:fb:cb:53:d0:ba:fc:2b: 4e:ab:24:55:ca:4c:25:8f:d0:0d:fe:b9:5d:7a:4d: d8:34:0b:c1:c2:25:39:01:e8:74:0a:60:ae:25:52: 05:db:38:4a:da:07:f6:82:00:9b:b2:23:d6:f6:24: 22:38:c9:4a:61:fe:93:5e:1d:bb:08:36:dc:20:0d: 1e:9a:06:1e:24:a9:5d:93:6b:ed:2f:77:d2:b8:f7: 49:a6:ab:63:e8:bb:fa:e8:99:c8:34:da:d5:c3:6a: 8b:23:0d:91:6a:da:43:e2:de:90:8a:d5:68:14:87: ab:bf:d7:f1:29:1d:e1:d7:9d:aa:20:5c:0e:40:1b: 47:86:cb:94:85:e5:e8:39:72:29:05:c6:0d:51:2e: 53:81:a7:df:85:f1:9e:fe:d8:54:cd:b4:69:44:c0: 20:69:8c:e8:0b:01:fc:59:53:14:1c:16:96:9f:93: 36:dc:c3:ac:37:f1:0b:53:a7:91:cb:1c:95:d8:61: 85:b6:c3:86:c7:d9:32:00:f5:46:0b:87:0c:74:14: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:C4:AF:BB:9A:F4:95:5E:9E:1F:25:4C:7A:2F:FD:BF:06:A0:3E X509v3 Authority Key Identifier: keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:86:60:ba:58:31:4b:e3:56:44:86:a8:fc:32:b2:2b:65:78: dd:03:2d:11:3f:51:53:fd:9f:71:54:d3:39:97:1d:65:fb:02: 2f:2a:79:fa:53:b1:b6:c2:3d:f9:99:bc:62:e8:21:03:be:67: f0:14:21:44:e6:68:78:d8:09:a2:46:ad:81:50:0b:a5:ff:ac: c2:b3:c3:b3:23:e5:7a:c0:b9:c2:51:d4:1c:46:2b:4e:1c:5f: f3:5b:7d:2a:2c:14:3d:d8:95:cd:8b:65:cf:72:97:d3:84:10: 6a:d9:d6:b9:e2:2b:49:a8:b8:13:15:8b:cf:45:39:c1:ec:31: d9:09:a3:dd:f4:30:93:bc:b5:a3:50:fe:43:c0:af:f0:4b:47: 81:f8:39:18:fd:54:af:33:96:db:08:9d:6e:06:3f:38:51:f2: e2:8d:8d:9c:68:16:bb:e3:1b:15:b8:7d:be:9c:08:6a:66:6a: a7:e7:cb:08:eb:a4:e1:90:7b:26:e0:41:58:20:83:10:78:59: 43:70:16:c5:08:1b:5c:7f:0d:84:c3:df:cd:cc:8e:23:7e:22: 0a:75:49:ae:f0:0c:5e:30:3f:2b:6a:72:41:eb:32:1c:11:b3: 7d:a1:1f:b6:55:f7:77:30:03:15:2f:4d:cc:6d:08:74:e9:e4: c8:82:24:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oNerBSNN7Zv8mPuhDF0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4 NjAwNjgwHhcNMjUxMjE5MDgwMTMxWhcNMjUxMjIwMDgwMTMxWjAzMTEwLwYDVQQD EyhiOWMyYzRhZmJiOWFmNDk1NWU5ZTFmMjU0YzdhMmZmZGJmMDZhMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgr9tAL6sJRov99vb/eNANVljXkH ppH3e0AgiZFMQGrzXlFGvg7XB/JEvZuToXAoQhzbKvvLU9C6/CtOqyRVykwlj9AN /rldek3YNAvBwiU5Aeh0CmCuJVIF2zhK2gf2ggCbsiPW9iQiOMlKYf6TXh27CDbc IA0emgYeJKldk2vtL3fSuPdJpqtj6Lv66JnINNrVw2qLIw2RatpD4t6QitVoFIer v9fxKR3h152qIFwOQBtHhsuUheXoOXIpBcYNUS5TgaffhfGe/thUzbRpRMAgaYzo CwH8WVMUHBaWn5M23MOsN/ELU6eRyxyV2GGFtsOGx9kyAPVGC4cMdBTwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnCxK+7mvSVXp4fJUx6L/2/BqA+MB8GA1UdIwQY MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt OWQ3OTRlZTE0ZGQwLzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIZgulgx S+NWRIao/DKyK2V43QMtET9RU/2fcVTTOZcdZfsCLyp5+lOxtsI9+Zm8YughA75n 8BQhROZoeNgJokatgVALpf+swrPDsyPlesC5wlHUHEYrThxf81t9KiwUPdiVzYtl z3KX04QQatnWueIrSai4ExWLz0U5wewx2Qmj3fQwk7y1o1D+Q8Cv8EtHgfg5GP1U rzOW2widbgY/OFHy4o2NnGgWu+MbFbh9vpwIamZqp+fLCOuk4ZB7JuBBWCCDEHhZ Q3AWxQgbXH8NhMPfzcyOI34iCnVJrvAMXjA/K2pyQesyHBGzfaEftlX3dzADFS9N zG0IdOnkyIIkdg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:31 2025 by rpki-client