This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: H1nhIf1p7kILjn1TkGvjRGaZyKR7laqaJk3AjCXpRn4= Subject key identifier: 86:08:3B:E9:E9:64:C3:95:C1:67:8F:FF:33:23:7D:AA:13:21:DE:CB Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019AF3F7F78765F99FE503BF85AA8F4C61F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 161C Signing time: Sat 06 Dec 2025 14:01:45 +0000 Manifest this update: Sat 06 Dec 2025 14:01:45 +0000 Manifest next update: Sun 07 Dec 2025 14:01:45 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: P8cvY1KoEOXBQ03DYJYP2FMMa2I.roa (hash: MK5h14W8ZCBQORWeYdGBDra0AA5OtxnFwGtkpjQblMk=) 8: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: W8R8BLkt0Ly0/ah1FSR7/jP2beEVzlHfRakmNx1mU34=) 9: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 10: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:f7:87:65:f9:9f:e5:03:bf:85:aa:8f:4c:61:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Dec 6 14:01:45 2025 GMT Not After : Dec 7 14:01:45 2025 GMT Subject: CN=86083be9e964c395c1678fff33237daa1321decb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:d4:7f:5e:6f:c3:05:cd:54:ec:87:a5:14: 43:22:09:e0:7c:f0:84:91:cf:ad:d3:59:ea:a7:a9: 85:e8:25:4d:9b:41:eb:2e:37:46:52:9e:d4:c9:e2: 95:04:a7:dd:36:79:02:c9:db:dc:90:3c:54:69:9d: 08:87:dd:5b:a3:3e:c8:e3:e1:b3:f9:d6:86:f8:a5: 2e:0e:e4:26:c0:45:7a:25:73:dc:9f:94:dd:28:73: 6c:07:5a:ad:e9:3a:71:d7:b5:52:b5:12:97:bd:96: 8b:93:69:2d:18:8f:7f:5a:95:72:e3:f5:17:bd:e5: 1b:47:4a:98:27:d6:23:44:e2:64:e2:b9:23:15:38: b3:77:5a:6f:b8:ba:cf:de:57:a4:63:99:69:0d:10: d0:5a:f2:44:b7:07:96:bf:a0:a9:6f:24:d2:2f:48: 53:17:fa:62:77:7c:08:e7:dc:f0:80:e1:1b:79:a2: de:c5:ed:fd:d0:46:e6:bb:7c:bf:83:2b:1e:ad:a0: 03:6f:e1:68:a9:a1:b6:c2:ba:89:e8:5b:ea:46:92: 4e:eb:5b:0d:a6:ae:00:0f:ef:40:3b:40:d8:65:f2: 45:ad:9a:0b:26:ef:70:c5:26:37:97:92:71:c0:02: 06:a6:78:ad:15:c4:4b:df:ac:59:2f:78:16:57:0f: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:08:3B:E9:E9:64:C3:95:C1:67:8F:FF:33:23:7D:AA:13:21:DE:CB X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:cb:15:82:6d:7a:22:12:2b:b3:c8:a3:58:87:e1:74:37:9c: 67:8a:7f:fd:27:8a:45:9d:f8:59:bd:da:db:59:18:c7:18:37: 7c:68:d6:c2:ca:45:fe:c7:2f:df:95:67:16:c4:d3:cc:83:a6: dc:c9:93:39:8c:4b:73:74:39:c2:57:73:be:0f:6f:45:a5:97: 09:99:02:59:6b:07:4f:91:f5:66:f7:38:29:f7:e9:23:1e:00: 8a:e8:ea:71:c1:fb:58:9b:01:cf:6d:57:78:a8:82:26:81:e2: 0a:dd:c1:7d:80:2b:a0:39:d1:c0:41:93:d8:e4:9a:8a:6f:6f: d7:5c:a1:dc:f6:03:df:52:35:f8:80:6b:9a:a8:b1:12:11:f8: cd:8a:4a:f7:1c:8a:02:13:24:d0:cb:8a:fe:24:3e:d5:8d:14: b1:1c:64:c8:10:49:f1:35:15:88:e6:74:62:8e:1e:e1:65:db: 67:fa:f8:b7:6b:25:bf:18:71:8c:c0:10:ed:fb:4f:5a:f2:f2: 81:22:7e:9a:bc:2c:ef:0d:5f:8d:d3:b2:44:67:90:a9:01:91: f2:ad:75:2e:6a:4a:fd:b1:85:f2:66:b8:bd:35:af:1a:bb:f9: 95:d2:b5:e1:c0:0b:99:40:57:f0:49:c4:a2:95:72:70:ad:c8: d3:0c:7b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/eHZfmf5QO/haqPTGH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUxMjA2MTQwMTQ1WhcNMjUxMjA3MTQwMTQ1WjAzMTEwLwYDVQQD Eyg4NjA4M2JlOWU5NjRjMzk1YzE2NzhmZmYzMzIzN2RhYTEzMjFkZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVzUf15vwwXNVOyHpRRDIgngfPCE kc+t01nqp6mF6CVNm0HrLjdGUp7UyeKVBKfdNnkCydvckDxUaZ0Ih91boz7I4+Gz +daG+KUuDuQmwEV6JXPcn5TdKHNsB1qt6Tpx17VStRKXvZaLk2ktGI9/WpVy4/UX veUbR0qYJ9YjROJk4rkjFTizd1pvuLrP3lekY5lpDRDQWvJEtweWv6CpbyTSL0hT F/pid3wI59zwgOEbeaLexe390Ebmu3y/gyseraADb+FoqaG2wrqJ6FvqRpJO61sN pq4AD+9AO0DYZfJFrZoLJu9wxSY3l5JxwAIGpnitFcRL36xZL3gWVw+1LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYIO+npZMOVwWeP/zMjfaoTId7LMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVssVgm16 IhIrs8ijWIfhdDecZ4p//SeKRZ34Wb3a21kYxxg3fGjWwspF/scv35VnFsTTzIOm 3MmTOYxLc3Q5wldzvg9vRaWXCZkCWWsHT5H1Zvc4KffpIx4AiujqccH7WJsBz21X eKiCJoHiCt3BfYAroDnRwEGT2OSaim9v11yh3PYD31I1+IBrmqixEhH4zYpK9xyK AhMk0MuK/iQ+1Y0UsRxkyBBJ8TUViOZ0Yo4e4WXbZ/r4t2slvxhxjMAQ7ftPWvLy gSJ+mrws7w1fjdOyRGeQqQGR8q11LmpK/bGF8ma4vTWvGrv5ldK14cALmUBX8EnE opVycK3I0wx70A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:49:12 2025 by rpki-client