This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json) Hash identifier: AX3Pc4mqkSwlpuLEoSNnhLeEynOSeID0OIW1fLfzZiI= Subject key identifier: E9:1C:D7:E7:28:80:B9:C5:FD:09:6D:DE:4B:1B:FF:5F:47:7B:1F:C1 Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64 Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64 Certificate serial: 019B33B1CFFB1DE7112D5E307AD046D0BF62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft Manifest number: 1317 Signing time: Thu 18 Dec 2025 23:00:49 +0000 Manifest this update: Thu 18 Dec 2025 23:00:49 +0000 Manifest next update: Fri 19 Dec 2025 23:00:49 +0000 Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: U+4L97eBB6+f74b3haCBYt49AiWMQroIELYKgrw3zdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:cf:fb:1d:e7:11:2d:5e:30:7a:d0:46:d0:bf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64 Validity Not Before: Dec 18 23:00:49 2025 GMT Not After : Dec 19 23:00:49 2025 GMT Subject: CN=e91cd7e72880b9c5fd096dde4b1bff5f477b1fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:e6:ea:07:37:7e:cd:ad:cb:3c:bf:c3:d4: a6:d6:42:e7:d3:ca:52:d1:eb:d8:6b:73:03:1e:4a: 2f:bf:e1:6d:48:ef:ef:e5:fa:e0:2a:22:90:12:9d: bd:30:88:88:5b:61:25:20:54:fe:eb:d9:de:62:75: ee:2e:92:2d:66:54:96:65:40:11:d8:c2:9e:d9:e5: 38:59:2b:aa:0f:03:43:8f:a1:aa:40:1f:3a:0e:3f: a9:eb:62:34:6e:3c:10:59:b8:78:91:41:89:71:33: 2a:0e:a2:26:c9:af:de:d8:2b:d8:1b:5b:f9:bc:78: 2e:53:10:25:08:7a:1a:6c:49:f5:d8:c0:9c:82:bc: 0a:ac:7e:6c:f3:18:f8:1a:c6:75:2c:be:e1:dd:aa: a5:c5:e2:f9:1c:59:32:55:ff:af:8b:db:de:f1:23: 66:13:26:46:e2:3a:0b:5b:80:f4:31:fd:05:1e:93: 68:51:50:ac:18:b6:bc:55:5b:dc:d8:47:48:c3:00: c2:72:35:b2:0c:9b:07:2f:7b:c5:90:ff:bd:b0:cd: 63:19:42:19:2c:57:07:aa:19:1a:3a:f7:2c:38:3c: 80:a2:04:dc:b9:38:02:9f:11:74:f0:21:8c:40:6c: 88:83:e6:87:03:72:c1:4c:18:70:62:c4:1e:30:7d: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1C:D7:E7:28:80:B9:C5:FD:09:6D:DE:4B:1B:FF:5F:47:7B:1F:C1 X509v3 Authority Key Identifier: keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:e9:4d:dc:f1:b3:a9:b5:ad:73:45:91:9e:5c:c1:aa:c2: 27:c5:57:f6:b5:68:d2:e9:85:4f:85:81:fb:ba:da:49:44:5a: ad:10:62:cb:3f:7d:8a:ba:0f:18:c5:35:49:c3:bf:b9:3f:69: 4a:62:e2:d3:7b:69:ba:36:1a:dd:45:f6:c3:37:68:99:a0:ba: 57:8e:07:5d:00:2e:28:16:f0:33:44:7e:8e:49:5f:13:79:14: 2d:e2:42:06:27:a3:bb:9e:99:ef:a1:8b:42:f9:1f:95:d5:e6: c9:99:24:a6:e9:f5:7f:61:d2:e7:b5:5f:3d:81:53:d9:05:9a: 02:83:00:fe:b4:f2:ac:be:34:cb:be:98:e3:42:08:cf:19:69: 51:c8:33:a2:f1:2a:13:1c:e7:83:80:83:f5:fe:bf:3a:53:40: 71:db:cf:b7:f0:00:8d:f7:4a:01:05:9c:ef:57:29:a7:7c:98: 54:20:73:66:eb:15:52:5b:f1:15:a6:7d:6f:2c:01:a3:47:0f: e3:af:31:79:e5:04:d7:c4:4a:02:d5:5e:8d:14:eb:f0:fd:1a: a2:a0:ef:aa:7d:34:7e:9b:4a:7b:3f:5b:1e:97:6e:ef:28:2c: 1b:4c:9a:d3:7a:3c:20:21:ce:53:85:ec:95:63:58:36:27:7e: fd:f8:44:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsc/7HecRLV4wetBG0L9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzM1ZDhmYmEyYmM3MzM5ODM5NWZiZGQzZTBkNmYzZmYz ZDFiNjQwHhcNMjUxMjE4MjMwMDQ5WhcNMjUxMjE5MjMwMDQ5WjAzMTEwLwYDVQQD EyhlOTFjZDdlNzI4ODBiOWM1ZmQwOTZkZGU0YjFiZmY1ZjQ3N2IxZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfnm6gc3fs2tyzy/w9Sm1kLn08pS 0evYa3MDHkovv+FtSO/v5frgKiKQEp29MIiIW2ElIFT+69neYnXuLpItZlSWZUAR 2MKe2eU4WSuqDwNDj6GqQB86Dj+p62I0bjwQWbh4kUGJcTMqDqImya/e2CvYG1v5 vHguUxAlCHoabEn12MCcgrwKrH5s8xj4GsZ1LL7h3aqlxeL5HFkyVf+vi9ve8SNm EyZG4joLW4D0Mf0FHpNoUVCsGLa8VVvc2EdIwwDCcjWyDJsHL3vFkP+9sM1jGUIZ LFcHqhkaOvcsODyAogTcuTgCnxF08CGMQGyIg+aHA3LBTBhwYsQeMH2alQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkc1+cogLnF/Qlt3ksb/19Hex/BMB8GA1UdIwQY MBaAFFEzXY+6K8czmDlfvdPg1vP/PRtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUt YmZhOTY5ZTU2N2IxLzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUtYmZhOTY5ZTU2N2Ix LzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlfpTdzx s6m1rXNFkZ5cwarCJ8VX9rVo0umFT4WB+7raSURarRBiyz99iroPGMU1ScO/uT9p SmLi03tpujYa3UX2wzdomaC6V44HXQAuKBbwM0R+jklfE3kULeJCBieju56Z76GL QvkfldXmyZkkpun1f2HS57VfPYFT2QWaAoMA/rTyrL40y76Y40IIzxlpUcgzovEq Exzng4CD9f6/OlNAcdvPt/AAjfdKAQWc71cpp3yYVCBzZusVUlvxFaZ9bywBo0cP 468xeeUE18RKAtVejRTr8P0aoqDvqn00fptKez9bHpdu7ygsG0ya03o8ICHOU4Xs lWNYNid+/fhEnQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:54 2025 by rpki-client