This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json) Hash identifier: FqAXv8vVps74opEwI3xixlhnH8D87pYNeEtS9rgZ4dg= Subject key identifier: BC:46:42:BB:48:2A:02:27:1C:65:AE:55:B8:76:AE:EB:BE:45:B9:FC Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7 Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7 Certificate serial: 019AF2AD69AD7484EB4C170AF12A325CB978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft Manifest number: 05F5 Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: Csohn3q2n8K3KWIK6z1wLJyQQDnLVVgC4Kg3nZW/MEk=) 2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=) 3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:69:ad:74:84:eb:4c:17:0a:f1:2a:32:5c:b9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7 Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=bc4642bb482a02271c65ae55b876aeebbe45b9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:7b:31:3a:19:a4:e0:56:ac:51:f9:ed:e8: 4c:ed:8b:c7:57:af:98:fc:ca:56:18:d9:01:d8:66: 36:4f:24:a2:d6:f5:26:f4:52:bd:dd:6d:55:f7:c6: b9:ed:38:02:44:2f:b5:d1:42:6d:5c:52:b1:58:53: 21:a2:09:48:f3:93:0f:f1:3a:2d:0d:31:34:70:be: 43:dc:40:3b:70:dd:5c:65:0e:65:77:b2:73:9f:a2: c2:a5:17:56:0b:cd:da:ca:f1:2a:ef:2a:14:36:c1: 46:b7:95:36:a8:57:c5:9d:e7:5f:f0:80:08:2b:7c: ec:c8:e7:f8:8a:73:08:29:13:03:a4:f9:ce:8e:4f: 56:7f:10:2b:f7:2a:61:d0:eb:b4:32:07:d3:5b:b6: 34:30:93:c0:a2:a2:23:ac:39:96:fa:14:82:58:5f: 63:b2:bb:8f:d7:c6:59:98:ae:89:84:f2:db:63:18: 23:49:9a:dc:ae:83:07:08:24:f1:38:1e:31:32:7a: af:2f:ca:cc:1d:20:37:67:e0:ad:9d:fc:14:46:c7: 09:87:67:2d:32:f2:57:fe:0e:a8:6b:30:fb:a1:4a: bc:6e:71:9f:68:83:6c:c7:d6:0a:ea:0c:14:7b:97: ec:b1:94:d1:c6:ca:00:c3:0a:7d:46:aa:1c:85:f5: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:42:BB:48:2A:02:27:1C:65:AE:55:B8:76:AE:EB:BE:45:B9:FC X509v3 Authority Key Identifier: keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:54:62:1d:a4:b3:bb:33:91:5a:1b:23:fa:9a:e9:c5:a4:2c: ae:dd:60:53:e8:e5:1d:83:ec:ec:44:3f:61:75:7b:de:53:be: c3:6a:e1:28:7b:8c:5c:2c:66:95:5e:4b:1a:0a:2c:6e:8d:79: b0:8e:ea:c8:e5:ac:aa:62:4b:bf:53:df:35:5c:8e:bd:85:7c: f1:97:09:e3:9d:e4:48:16:43:4d:3c:a9:ff:c1:9b:c2:8c:39: d1:be:a9:b6:fe:b8:98:6a:c1:e6:d0:18:dc:61:ea:fb:15:dc: cd:a3:1b:c3:fd:ff:31:27:1b:d0:0d:6b:7d:47:71:69:27:36: 76:47:15:e0:8a:3e:30:7b:38:24:37:bb:cb:65:6e:43:47:5c: 8a:06:b2:8c:f2:8b:7a:5e:b9:6b:19:02:65:ea:b7:af:d4:12: 9a:b5:8f:3e:3b:ef:bf:61:04:fc:22:f0:87:1d:bb:32:35:67: c0:3e:7b:c1:f4:cd:92:e0:3a:62:d7:47:b0:6f:f4:09:ff:1a: 42:99:3f:2a:40:ba:7b:f1:d8:b3:1c:c0:77:dc:ad:6a:da:e9: f9:b4:df:a9:bf:fc:38:2a:32:4b:51:44:f1:4c:5f:65:62:d4: 6c:46:b7:8c:21:b9:cd:b5:1d:8a:3b:7e:c4:f4:bf:88:dc:7b: ac:6c:ad:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWmtdITrTBcK8SoyXLl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNTE4MjRjMTJiZDNlMmFmN2E5ODc1MjRhN2EzM2E4ZjE5 ZDgxZTcwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD EyhiYzQ2NDJiYjQ4MmEwMjI3MWM2NWFlNTViODc2YWVlYmJlNDViOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcx7MToZpOBWrFH57ehM7YvHV6+Y /MpWGNkB2GY2TySi1vUm9FK93W1V98a57TgCRC+10UJtXFKxWFMhoglI85MP8Tot DTE0cL5D3EA7cN1cZQ5ld7Jzn6LCpRdWC83ayvEq7yoUNsFGt5U2qFfFnedf8IAI K3zsyOf4inMIKRMDpPnOjk9WfxAr9yph0Ou0MgfTW7Y0MJPAoqIjrDmW+hSCWF9j sruP18ZZmK6JhPLbYxgjSZrcroMHCCTxOB4xMnqvL8rMHSA3Z+CtnfwURscJh2ct MvJX/g6oazD7oUq8bnGfaINsx9YK6gwUe5fssZTRxsoAwwp9RqochfX/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxGQrtIKgInHGWuVbh2ruu+Rbn8MB8GA1UdIwQY MBaAFFFRgkwSvT4q96mHUkp6M6jxnYHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYt ZmFhZmU0NzhiZGNlLzEvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYtZmFhZmU0NzhiZGNl LzEvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlRiHaSz uzORWhsj+prpxaQsrt1gU+jlHYPs7EQ/YXV73lO+w2rhKHuMXCxmlV5LGgosbo15 sI7qyOWsqmJLv1PfNVyOvYV88ZcJ453kSBZDTTyp/8Gbwow50b6ptv64mGrB5tAY 3GHq+xXczaMbw/3/MScb0A1rfUdxaSc2dkcV4Io+MHs4JDe7y2VuQ0dcigayjPKL el65axkCZeq3r9QSmrWPPjvvv2EE/CLwhx27MjVnwD57wfTNkuA6YtdHsG/0Cf8a Qpk/KkC6e/HYsxzAd9ytatrp+bTfqb/8OCoyS1FE8UxfZWLUbEa3jCG5zbUdijt+ xPS/iNx7rGytZw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:57 2025 by rpki-client