This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json) Hash identifier: 4VmT8PKkkTwI1i4KXg5CRxYl3fnl3bS7WdswO83iOYw= Subject key identifier: DB:59:64:20:FD:5B:6F:BA:BF:2A:1A:11:F2:30:DD:A1:D5:AB:50:7B Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c Certificate serial: 019B3FB5F3E0774EE89EADD4105A220A7F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft Manifest number: 109E Signing time: Sun 21 Dec 2025 07:00:47 +0000 Manifest this update: Sun 21 Dec 2025 07:00:47 +0000 Manifest next update: Mon 22 Dec 2025 07:00:47 +0000 Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=) 2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: Fquck7+TViA5v778PZ1dnXrYPmdtPd2HjWYZysUIQug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f3:e0:77:4e:e8:9e:ad:d4:10:5a:22:0a:7f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c Validity Not Before: Dec 21 07:00:47 2025 GMT Not After : Dec 22 07:00:47 2025 GMT Subject: CN=db596420fd5b6fbabf2a1a11f230dda1d5ab507b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:d3:8d:49:f2:33:d8:ba:4c:75:d8:5d:12: 95:72:7d:6b:85:e0:57:cc:c3:ec:e9:3d:de:4f:f5: 60:4e:dc:31:16:f3:da:0d:80:86:23:39:d4:9e:54: ed:db:51:1c:b3:3d:11:c2:b3:aa:8f:93:30:e8:de: 1a:ae:54:00:c6:20:f9:07:97:67:bc:5f:4d:ea:75: 78:76:c5:f0:d2:df:43:9f:09:20:22:44:a2:ac:f4: c4:82:99:77:3a:3f:89:cb:c9:78:1c:98:d8:01:84: e6:f7:16:c5:08:97:3e:5c:77:35:8e:37:57:ec:22: 40:36:a4:7b:a7:6b:31:8a:8a:4f:f3:da:18:0d:96: 5c:87:e2:6e:ca:2b:8a:4f:37:fb:69:4b:39:a2:1b: 19:c3:47:13:db:f9:1d:2a:9e:1b:d8:ab:c4:34:50: ba:12:c8:8f:08:76:4d:b0:fb:6a:af:97:4a:e5:8c: bc:71:19:42:b9:8c:fa:eb:e1:ac:34:8a:29:75:8e: 24:3e:5e:57:74:90:e3:f3:8f:e9:7a:94:88:de:60: 0c:4f:63:24:1b:17:d2:b1:92:6c:db:7a:4a:19:e1: b5:f6:1c:55:0c:36:29:aa:55:a0:57:2c:a2:77:6e: e3:9b:f3:58:d8:57:d6:35:94:7b:27:27:e2:c5:69: 03:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:64:20:FD:5B:6F:BA:BF:2A:1A:11:F2:30:DD:A1:D5:AB:50:7B X509v3 Authority Key Identifier: keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9a:46:79:59:81:8b:21:f7:09:cd:ae:f6:8b:2f:d8:87:1e: b0:5c:a7:b9:e4:8e:bd:54:47:f3:f4:67:91:89:60:7d:91:c7: 0a:5f:b7:bc:66:0d:92:78:e8:96:70:ef:d9:dd:b5:e7:30:79: 88:86:3e:df:08:40:93:c1:16:14:2c:a1:af:05:22:55:99:27: 55:40:fb:c0:81:8f:ac:53:64:3b:0b:96:04:96:01:7f:41:21: 70:ee:e3:0b:08:cb:17:23:21:f4:df:1f:cf:bc:e9:eb:9f:98: 3a:60:0d:b8:a4:1d:5d:41:d3:61:7a:49:98:5e:aa:2f:c5:d6: fc:ba:bd:e1:3f:ea:2f:61:56:9c:0b:22:19:9c:c7:71:76:e2: f8:b1:f1:f6:29:4a:6d:2f:8d:6e:30:53:a5:ee:b5:c5:28:ab: d4:8e:54:27:b7:aa:ef:d1:7f:06:f1:c3:76:3e:34:5b:ba:7f: de:00:14:06:eb:41:9a:60:16:fd:82:b2:e2:ad:af:1d:33:26: eb:38:db:56:53:d7:b9:fd:d6:ef:11:64:f2:bc:18:91:ef:af: 2a:ee:3f:18:fd:63:51:44:c7:dc:c2:b9:75:b2:83:ae:bc:9c: e2:30:58:2a:10:61:d6:cb:c0:51:13:80:e2:89:19:a6:45:3b: ea:9f:66:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfPgd07onq3UEFoiCn8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTIyZTAzYTg0MWI4ODc4OTYzYWZmZmY2OTVjYTRmOWZk MDY4MmMwHhcNMjUxMjIxMDcwMDQ3WhcNMjUxMjIyMDcwMDQ3WjAzMTEwLwYDVQQD EyhkYjU5NjQyMGZkNWI2ZmJhYmYyYTFhMTFmMjMwZGRhMWQ1YWI1MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRfTjUnyM9i6THXYXRKVcn1rheBX zMPs6T3eT/VgTtwxFvPaDYCGIznUnlTt21Ecsz0RwrOqj5Mw6N4arlQAxiD5B5dn vF9N6nV4dsXw0t9DnwkgIkSirPTEgpl3Oj+Jy8l4HJjYAYTm9xbFCJc+XHc1jjdX 7CJANqR7p2sxiopP89oYDZZch+JuyiuKTzf7aUs5ohsZw0cT2/kdKp4b2KvENFC6 EsiPCHZNsPtqr5dK5Yy8cRlCuYz66+GsNIopdY4kPl5XdJDj84/pepSI3mAMT2Mk GxfSsZJs23pKGeG19hxVDDYpqlWgVyyid27jm/NY2FfWNZR7JyfixWkDgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtZZCD9W2+6vyoaEfIw3aHVq1B7MB8GA1UdIwQY MBaAFFMSLgOoQbiHiWOv//aVyk+f0GgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUt Y2U4ZDJkZDQzMDY2LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUtY2U4ZDJkZDQzMDY2 LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJpGeVmB iyH3Cc2u9osv2IcesFynueSOvVRH8/RnkYlgfZHHCl+3vGYNknjolnDv2d215zB5 iIY+3whAk8EWFCyhrwUiVZknVUD7wIGPrFNkOwuWBJYBf0EhcO7jCwjLFyMh9N8f z7zp65+YOmANuKQdXUHTYXpJmF6qL8XW/Lq94T/qL2FWnAsiGZzHcXbi+LHx9ilK bS+NbjBTpe61xSir1I5UJ7eq79F/BvHDdj40W7p/3gAUButBmmAW/YKy4q2vHTMm 6zjbVlPXuf3W7xFk8rwYke+vKu4/GP1jUUTH3MK5dbKDrryc4jBYKhBh1svAUROA 4okZpkU76p9mSA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:20:41 2025 by rpki-client