This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json) Hash identifier: 1XN+HVLV+FUh7/lvYDSf8KO5o10z5687/HxNEPZ9dvY= Subject key identifier: A9:A0:42:47:AC:92:A9:1D:FC:80:1D:B6:C9:72:D1:B4:BE:47:2E:67 Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e Certificate serial: 019B34C5FAEA33CA953B6C2DBFD45538C729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft Manifest number: 177E Signing time: Fri 19 Dec 2025 04:02:28 +0000 Manifest this update: Fri 19 Dec 2025 04:02:28 +0000 Manifest next update: Sat 20 Dec 2025 04:02:28 +0000 Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: 9LYITWRO5UUVs3jVsmBRDydBAgrACdxqylRiuRk/86w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:fa:ea:33:ca:95:3b:6c:2d:bf:d4:55:38:c7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e Validity Not Before: Dec 19 04:02:28 2025 GMT Not After : Dec 20 04:02:28 2025 GMT Subject: CN=a9a04247ac92a91dfc801db6c972d1b4be472e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:a7:cf:6c:41:d1:79:aa:87:53:8e:b7:b1: 94:2f:24:58:90:30:aa:a7:ce:5c:78:e4:7f:b5:b2: c7:e1:ba:f3:48:d4:09:dd:13:10:99:2b:20:2d:94: c1:65:c9:a3:98:aa:69:42:0d:4b:a1:29:e0:70:7c: cd:ba:c8:4c:95:27:f0:4d:65:f8:a3:31:35:ea:c2: a2:5c:b0:fa:6d:e4:b0:5d:3e:87:87:38:8d:36:a2: be:80:d4:eb:86:65:53:ad:4c:95:09:42:d1:23:81: 04:ff:08:1f:97:69:19:08:ec:96:29:f6:8f:31:81: ff:09:77:6b:b3:97:ec:80:8a:34:4a:73:e7:1a:dc: a9:12:9e:22:9f:e2:56:57:47:a9:56:33:c7:d0:34: 91:06:88:a4:80:55:29:49:0d:83:0b:3b:10:cb:20: c3:1c:23:8d:db:39:ba:57:43:bf:19:a8:ce:94:d7: 0d:32:0e:ef:5a:4e:c4:01:ef:2b:61:8d:da:1d:31: 8c:c6:b1:3c:a3:d6:18:a0:5d:f6:b6:47:bb:21:a0: 37:1b:7c:bd:54:2c:d3:de:c5:33:65:19:e7:d8:c0: cc:0f:bb:fb:fd:e2:98:49:5c:da:21:5e:99:5e:e7: 34:6e:d1:44:30:a3:9e:3c:90:6c:cc:f2:14:4a:57: ca:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A0:42:47:AC:92:A9:1D:FC:80:1D:B6:C9:72:D1:B4:BE:47:2E:67 X509v3 Authority Key Identifier: keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7b:da:7f:b6:1a:de:0c:d2:e2:10:86:f3:9c:b4:c3:da:7f: 8c:88:95:35:7c:29:ae:78:f6:6f:32:4a:08:4b:95:8d:fb:59: 04:c1:aa:5a:b3:44:9f:9f:56:14:f4:f1:b0:b1:4f:ef:78:8a: 48:89:ff:36:25:85:6b:6b:4f:c4:3d:1a:09:2c:7d:79:76:c2: ba:c3:a6:13:49:a2:e1:9e:f1:24:e5:4f:e6:9a:6b:0b:8b:e5: ba:34:48:52:f8:79:fd:b8:e8:a8:78:a5:f1:27:23:80:58:17: 92:98:1e:d9:24:26:a7:c4:4b:9a:6e:ad:2f:23:d9:9f:d0:6e: dc:f9:d4:45:db:ed:10:5b:4a:fd:4a:5e:89:19:9c:7b:9b:ad: 5a:ed:30:d2:9a:89:2b:ca:20:0f:74:90:58:59:25:21:08:10: a2:28:43:26:e3:33:b5:ee:37:76:d3:5c:c0:5a:91:59:dc:c7: 73:48:1d:3c:87:23:54:df:18:9d:81:f0:44:72:12:76:de:46: 84:d1:4d:3b:0c:03:9e:74:7c:c1:cb:30:8c:eb:e7:ca:06:82: 77:45:99:fc:13:51:07:fe:2d:b5:f1:54:0e:5d:b1:43:a2:49: 31:d2:74:e6:e2:02:8d:ba:0b:13:54:51:a6:2b:c6:e1:98:aa: cd:94:67:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xfrqM8qVO2wtv9RVOMcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOTg1NjdhMDM5ZTVjY2UyM2VlOTM3NDA5NmVlZDU3YmJi YTI5OGUwHhcNMjUxMjE5MDQwMjI4WhcNMjUxMjIwMDQwMjI4WjAzMTEwLwYDVQQD EyhhOWEwNDI0N2FjOTJhOTFkZmM4MDFkYjZjOTcyZDFiNGJlNDcyZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndynz2xB0Xmqh1OOt7GULyRYkDCq p85ceOR/tbLH4brzSNQJ3RMQmSsgLZTBZcmjmKppQg1LoSngcHzNushMlSfwTWX4 ozE16sKiXLD6beSwXT6HhziNNqK+gNTrhmVTrUyVCULRI4EE/wgfl2kZCOyWKfaP MYH/CXdrs5fsgIo0SnPnGtypEp4in+JWV0epVjPH0DSRBoikgFUpSQ2DCzsQyyDD HCON2zm6V0O/GajOlNcNMg7vWk7EAe8rYY3aHTGMxrE8o9YYoF32tke7IaA3G3y9 VCzT3sUzZRnn2MDMD7v7/eKYSVzaIV6ZXuc0btFEMKOePJBszPIUSlfKjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmgQkeskqkd/IAdtsly0bS+Ry5nMB8GA1UdIwQY MBaAFFGYVnoDnlzOI+6TdAlu7Ve7uimOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQt ODhhYTgxNDg2NzgzLzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQtODhhYTgxNDg2Nzgz LzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXvaf7Ya 3gzS4hCG85y0w9p/jIiVNXwprnj2bzJKCEuVjftZBMGqWrNEn59WFPTxsLFP73iK SIn/NiWFa2tPxD0aCSx9eXbCusOmE0mi4Z7xJOVP5pprC4vlujRIUvh5/bjoqHil 8ScjgFgXkpge2SQmp8RLmm6tLyPZn9Bu3PnURdvtEFtK/UpeiRmce5utWu0w0pqJ K8ogD3SQWFklIQgQoihDJuMzte43dtNcwFqRWdzHc0gdPIcjVN8YnYHwRHISdt5G hNFNOwwDnnR8wcswjOvnygaCd0WZ/BNRB/4ttfFUDl2xQ6JJMdJ05uICjboLE1RR pivG4ZiqzZRnRg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:56:03 2025 by rpki-client