This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json) Hash identifier: uA68ySInqWUCyi8p7uV9VIx1Th8CdwnON9frIY9nKZ4= Subject key identifier: 7E:97:41:BE:EB:55:A1:0B:2A:CE:55:93:F2:EB:96:19:79:1F:07:F1 Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16 Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316 Certificate serial: 019B243F3B8D479E89068F2A9C1B9335D2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft Manifest number: 145F Signing time: Mon 15 Dec 2025 23:01:22 +0000 Manifest this update: Mon 15 Dec 2025 23:01:22 +0000 Manifest next update: Tue 16 Dec 2025 23:01:22 +0000 Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: PCGFemnHA/mgnc3Fn0yUeobh/tv5woJb+/wQvlaMyMA=) 2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:3b:8d:47:9e:89:06:8f:2a:9c:1b:93:35:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316 Validity Not Before: Dec 15 23:01:22 2025 GMT Not After : Dec 16 23:01:22 2025 GMT Subject: CN=7e9741beeb55a10b2ace5593f2eb9619791f07f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:86:8e:ed:09:75:ae:fb:cc:38:a8:87:c3: 1c:30:bb:5e:c2:bf:89:28:57:f4:b8:0c:e7:58:bc: 1f:57:55:0d:44:40:15:da:11:bd:d8:52:11:2a:8a: 56:30:87:04:3f:d5:96:4d:5d:71:27:12:f3:ed:3d: 30:61:32:08:93:8c:a3:ae:c8:c5:b6:c4:8e:f1:12: 8b:7b:67:1a:58:ec:45:12:0e:22:bb:1a:da:e6:93: 94:1c:f1:fe:3f:9c:c8:6c:02:60:03:22:37:68:46: ec:6d:56:e7:8b:93:75:11:75:b8:51:99:4b:1c:a2: 2c:54:b9:a1:15:b7:2f:65:b5:9a:bc:e4:31:3c:fd: 22:04:f5:88:bd:f2:09:28:b2:ab:69:9f:e4:45:26: 55:d1:87:a2:80:30:c2:ca:4b:ac:73:33:8a:e1:fd: 0b:e3:f4:9c:43:e4:f9:fb:28:55:11:4e:1a:bd:fd: 2f:c8:af:b5:65:d4:24:24:c9:50:18:70:d4:9e:5d: e8:14:37:cb:44:49:12:e0:25:99:13:62:99:44:42: b4:ec:d6:d5:bb:32:6c:a6:3b:ba:cb:c9:26:35:96: d0:ff:67:bc:2b:35:ec:1d:ab:db:4f:28:5d:e6:30: 26:2f:5a:7e:74:c7:71:3a:92:7a:f6:d4:3a:fd:10: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:97:41:BE:EB:55:A1:0B:2A:CE:55:93:F2:EB:96:19:79:1F:07:F1 X509v3 Authority Key Identifier: keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:cb:70:e4:0a:c0:47:8b:7f:f6:08:d7:3a:f1:58:95:46:bc: 28:83:ef:70:e6:48:1c:81:55:80:a7:39:ba:21:cd:52:cb:05: fc:2e:52:b5:6c:23:31:1b:d7:1d:9c:1a:77:91:6b:cd:4d:b0: 45:c7:43:ea:a2:a7:a8:4f:70:22:b5:0a:42:e7:08:15:7c:27: f0:e7:af:3d:90:35:bf:ec:ad:93:15:fc:dc:ad:6b:b6:a5:e2: 8e:3f:2c:f1:25:37:d5:e3:35:df:96:3e:2a:f6:be:07:57:cc: 4c:ec:29:ab:cc:0f:c5:c0:f0:21:47:ae:d6:1b:12:b6:76:52: bd:6c:f9:2e:29:c9:f1:a8:c2:eb:5d:6b:26:22:51:1b:fd:2d: df:76:dd:6e:31:eb:9f:fa:65:84:6f:2f:36:72:f5:39:f8:a5: 96:11:12:18:af:27:57:b8:0c:04:c4:01:b9:c8:72:d2:78:24: 20:29:c7:5b:2c:0a:82:e5:50:f7:9d:13:9a:ae:6d:ad:b2:71: fe:db:2f:d9:b1:78:2d:eb:38:aa:4e:d0:69:8b:fe:bf:29:34: 82:59:d9:58:7e:74:72:d9:77:f2:1f:6b:7e:b7:07:30:20:de: 75:b4:c6:a5:9a:9e:ce:5d:5a:bf:ed:92:cb:27:39:90:97:21: 5f:72:ad:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPzuNR56JBo8qnBuTNdLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw MjUzMTYwHhcNMjUxMjE1MjMwMTIyWhcNMjUxMjE2MjMwMTIyWjAzMTEwLwYDVQQD Eyg3ZTk3NDFiZWViNTVhMTBiMmFjZTU1OTNmMmViOTYxOTc5MWYwN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiiGju0Jda77zDioh8McMLtewr+J KFf0uAznWLwfV1UNREAV2hG92FIRKopWMIcEP9WWTV1xJxLz7T0wYTIIk4yjrsjF tsSO8RKLe2caWOxFEg4iuxra5pOUHPH+P5zIbAJgAyI3aEbsbVbni5N1EXW4UZlL HKIsVLmhFbcvZbWavOQxPP0iBPWIvfIJKLKraZ/kRSZV0YeigDDCykusczOK4f0L 4/ScQ+T5+yhVEU4avf0vyK+1ZdQkJMlQGHDUnl3oFDfLREkS4CWZE2KZREK07NbV uzJspju6y8kmNZbQ/2e8KzXsHavbTyhd5jAmL1p+dMdxOpJ69tQ6/RBNuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6XQb7rVaELKs5Vk/Lrlhl5HwfxMB8GA1UdIwQY MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt NmZiYTZhMWUwZWU3LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3 LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMtw5ArA R4t/9gjXOvFYlUa8KIPvcOZIHIFVgKc5uiHNUssF/C5StWwjMRvXHZwad5FrzU2w RcdD6qKnqE9wIrUKQucIFXwn8OevPZA1v+ytkxX83K1rtqXijj8s8SU31eM135Y+ Kva+B1fMTOwpq8wPxcDwIUeu1hsStnZSvWz5LinJ8ajC611rJiJRG/0t33bdbjHr n/plhG8vNnL1OfillhESGK8nV7gMBMQBuchy0ngkICnHWywKguVQ950Tmq5trbJx /tsv2bF4Les4qk7QaYv+vyk0glnZWH50ctl38h9rfrcHMCDedbTGpZqezl1av+2S yyc5kJchX3KtqQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:04:09 2025 by rpki-client