This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json) Hash identifier: bC2ClZ56P95DgaGKLJ+h1eWc9vBZ1K/anZTzWs+uH9Q= Subject key identifier: A3:01:51:3B:43:3F:C7:B5:8B:A4:1F:F8:78:1B:58:B4:E5:E8:5D:2E Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260 Certificate serial: 019B3C7FB765D6CAC2F2F0A03109A72E54E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft Manifest number: 06BB Signing time: Sat 20 Dec 2025 16:02:41 +0000 Manifest this update: Sat 20 Dec 2025 16:02:41 +0000 Manifest next update: Sun 21 Dec 2025 16:02:41 +0000 Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=) 2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: MaTceYlYqgUz9EIrMQAQgd7i1jGWQTI/4chUWQk9IqE=) 3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b7:65:d6:ca:c2:f2:f0:a0:31:09:a7:2e:54:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260 Validity Not Before: Dec 20 16:02:41 2025 GMT Not After : Dec 21 16:02:41 2025 GMT Subject: CN=a301513b433fc7b58ba41ff8781b58b4e5e85d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:86:82:29:4e:6f:78:4f:ec:43:7c:6f:0d: ba:e8:e7:b9:88:22:4c:50:47:f0:24:5e:d5:66:e3: e2:47:aa:68:95:25:d7:52:d8:72:3d:ff:dc:e4:34: 0a:90:6c:b7:c0:b5:60:cf:f2:fa:a4:09:4d:2b:c9: 9c:de:96:df:0f:11:5e:03:cb:d9:97:36:1c:6c:8f: b2:d5:91:f3:e3:c0:c8:ee:95:38:a9:eb:3f:bd:6a: 79:96:3b:4e:89:26:58:b0:d7:00:b1:e0:4b:81:0e: a5:40:d6:5f:e0:c8:14:ca:4b:1b:8a:56:d8:59:f3: d2:54:a4:8e:b9:9f:d0:0e:4c:aa:9a:ba:83:06:9d: d1:7a:32:ea:1f:b1:f7:c8:7c:7e:6d:73:e9:61:25: 26:ac:08:ff:5f:eb:17:6e:ad:29:ef:0a:5b:a5:ba: 4a:97:99:36:e6:9c:13:80:b2:77:e6:65:2f:ed:e9: 55:77:60:f7:1b:a3:2a:61:b7:73:87:51:0f:5f:f9: 3d:a1:95:26:3f:a8:0f:b0:11:ff:ec:a2:da:e7:a6: 05:68:fe:d5:b7:38:6c:52:7f:af:12:aa:79:bf:68: 07:bf:8b:5d:af:3c:85:f6:a5:d5:b9:b0:03:3e:e9: d1:27:31:48:60:77:af:25:d9:46:70:f9:0b:08:11: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:01:51:3B:43:3F:C7:B5:8B:A4:1F:F8:78:1B:58:B4:E5:E8:5D:2E X509v3 Authority Key Identifier: keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2c:53:7d:23:48:a3:e9:12:62:c2:9f:2a:2d:91:e5:14:b5: a6:fb:4b:39:9e:5e:a5:60:ed:c9:9c:35:0e:f2:30:ca:36:a9: 5a:31:31:72:4f:f2:87:4d:33:1d:59:7b:1d:24:b2:fe:93:22: 00:3a:c1:37:12:24:2f:cc:58:2b:26:ec:a3:dc:9a:8d:73:7b: c1:22:6a:45:de:04:30:72:cd:f0:1c:93:99:ba:3d:6c:98:ff: 70:4e:59:14:4b:4a:5d:b5:c1:d7:64:7d:82:3c:54:1d:ca:1f: d1:63:ec:89:fd:d1:c6:3d:8f:d2:64:cd:34:ab:fb:09:38:66: bd:67:0e:f5:aa:90:f5:65:92:27:9e:91:e0:d1:59:a4:e5:18: 7f:24:ae:d0:2d:8d:ac:a3:f7:fc:01:c2:bb:a6:b6:96:68:e6: 7b:d9:4a:61:33:c8:9d:74:b8:66:fc:09:d4:d1:a3:e8:3f:d1: 3c:69:07:ce:a2:4a:f3:6b:06:b4:b1:9a:43:38:67:aa:e5:d6: 8a:66:d0:ef:00:f0:f5:52:75:04:c1:63:88:3a:cb:a5:4e:d2: c6:4b:3c:23:1a:2e:ee:83:b1:02:b1:aa:e9:f1:c2:00:7b:57: 00:63:20:db:3b:bc:26:9a:a6:fc:11:4b:ce:1a:47:b4:5c:74: f9:25:67:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7dl1srC8vCgMQmnLlTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5 NTkyNjAwHhcNMjUxMjIwMTYwMjQxWhcNMjUxMjIxMTYwMjQxWjAzMTEwLwYDVQQD EyhhMzAxNTEzYjQzM2ZjN2I1OGJhNDFmZjg3ODFiNThiNGU1ZTg1ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZuGgilOb3hP7EN8bw266Oe5iCJM UEfwJF7VZuPiR6polSXXUthyPf/c5DQKkGy3wLVgz/L6pAlNK8mc3pbfDxFeA8vZ lzYcbI+y1ZHz48DI7pU4qes/vWp5ljtOiSZYsNcAseBLgQ6lQNZf4MgUyksbilbY WfPSVKSOuZ/QDkyqmrqDBp3RejLqH7H3yHx+bXPpYSUmrAj/X+sXbq0p7wpbpbpK l5k25pwTgLJ35mUv7elVd2D3G6MqYbdzh1EPX/k9oZUmP6gPsBH/7KLa56YFaP7V tzhsUn+vEqp5v2gHv4tdrzyF9qXVubADPunRJzFIYHevJdlGcPkLCBEomwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMBUTtDP8e1i6Qf+HgbWLTl6F0uMB8GA1UdIwQY MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt MGYzYzE2NThkMGI3LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3 LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCxTfSNI o+kSYsKfKi2R5RS1pvtLOZ5epWDtyZw1DvIwyjapWjExck/yh00zHVl7HSSy/pMi ADrBNxIkL8xYKybso9yajXN7wSJqRd4EMHLN8ByTmbo9bJj/cE5ZFEtKXbXB12R9 gjxUHcof0WPsif3Rxj2P0mTNNKv7CThmvWcO9aqQ9WWSJ56R4NFZpOUYfySu0C2N rKP3/AHCu6a2lmjme9lKYTPInXS4ZvwJ1NGj6D/RPGkHzqJK82sGtLGaQzhnquXW imbQ7wDw9VJ1BMFjiDrLpU7Sxks8Ixou7oOxArGq6fHCAHtXAGMg2zu8Jpqm/BFL zhpHtFx0+SVn1w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:51:37 2025 by rpki-client