This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json) Hash identifier: ikZBj5kKgshGEIZF9yvDvr4wtF6tKr6Q/q+P4ZsgAMo= Subject key identifier: 20:A9:76:0F:22:AF:F6:FC:4E:78:16:09:2B:05:99:CF:45:76:76:33 Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Certificate serial: 019AF12E765ADF2D24A6E1CBF966A35EAFE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft Manifest number: 1068 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: MjK_xJG6Hwcb67PomltSWuntrmM.roa (hash: aerGyiTEpiF59FAbfobUyJCn9cR81tY8N4zQCxzZAWk=) 2: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=) 3: TBmGO5t5AH5NVXED3d-86yJ2g-g.roa (hash: S/ggAtC3XkCG9e4NTbC903dmEf8ZwLiR5xsOu4Bo+Bc=) 4: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: 7IDd+KEPKa0fCH1OixRklWPogbbD0tqa3rJLpglD1aM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:76:5a:df:2d:24:a6:e1:cb:f9:66:a3:5e:af:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=20a9760f22aff6fc4e7816092b0599cf45767633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:b1:de:3e:23:57:17:93:99:e3:80:2b:35: 20:cb:37:ff:3c:09:69:99:4d:df:46:77:66:1a:b8: 09:03:0c:b1:37:03:f9:29:dd:c1:e0:7c:a3:dc:b3: 82:d7:39:07:2e:2d:8d:94:98:42:3f:ae:6d:43:1f: 22:05:03:9d:35:ac:ba:67:a6:b1:a5:c0:d9:65:05: c1:15:50:fd:c6:26:b4:c9:72:cb:4f:00:e6:b6:c1: 74:ff:9a:0a:49:2f:55:39:a1:70:34:7c:9e:66:90: d3:53:5d:f0:f5:ae:46:0c:f4:4d:b1:e4:cd:72:88: fd:be:ef:99:5e:e8:67:14:55:43:d0:56:7a:62:5e: 33:6c:fb:e1:c0:39:cd:b8:a5:b5:34:15:80:73:f1: fa:29:ec:33:bb:c7:de:f5:bd:91:a2:26:83:d1:5c: 4f:e4:3a:0e:26:74:0e:a6:a0:dc:a7:02:17:10:c3: 7f:48:c9:93:5e:33:9b:0d:01:cb:cf:d2:8d:79:0b: d7:bb:a7:62:a3:d7:51:f8:88:2a:ca:93:16:fb:c3: ee:a6:4b:03:49:ca:5f:51:08:f5:1f:7c:18:fa:52: a7:2f:ff:5d:bf:a2:69:7e:02:39:3e:28:f8:62:a2: e2:58:b7:ba:5a:ad:52:79:8a:74:8d:46:9c:88:e8: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A9:76:0F:22:AF:F6:FC:4E:78:16:09:2B:05:99:CF:45:76:76:33 X509v3 Authority Key Identifier: keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2a:e9:f0:64:7d:77:65:fb:29:d3:15:81:98:87:56:71:26: 8f:f4:49:c6:96:b7:a7:7c:5d:52:06:6c:ab:1f:34:df:06:9b: 3c:1e:32:62:b6:ec:aa:f9:db:f8:8f:6a:33:df:7e:7d:13:90: a9:5e:51:02:79:9f:a8:65:fc:a9:ff:51:f6:19:13:25:45:83: 29:49:73:59:39:97:ee:e0:58:55:7f:b3:9e:df:78:72:bb:c3: 00:bf:34:76:f2:e7:12:23:b2:e2:86:5b:6a:c7:85:2d:98:ef: 67:c1:91:97:61:ed:fd:83:1c:74:08:1f:47:2b:9e:75:57:0e: bc:c7:eb:c7:ae:1c:56:3a:74:77:77:ad:45:7c:22:71:4f:1d: ae:08:6e:65:05:7f:d5:81:c8:09:aa:1c:3c:de:99:99:eb:6d: a6:3b:68:0d:9b:24:a2:9f:17:06:dd:82:c4:5d:99:89:cb:04: 79:16:38:fb:47:fa:65:40:01:a0:f7:a7:e7:2c:df:6f:d1:25: a0:9d:b5:49:b1:65:63:a0:86:63:f8:8a:bb:87:11:c4:10:76: f0:5b:c3:20:b5:5d:7e:e7:c4:82:20:e5:a0:64:16:6a:36:13: 3e:d1:ab:f5:7c:16:ee:5e:79:2c:ec:9e:3b:99:aa:a4:94:c0: 88:95:dc:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnZa3y0kpuHL+WajXq/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz YjM3NDMwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EygyMGE5NzYwZjIyYWZmNmZjNGU3ODE2MDkyYjA1OTljZjQ1NzY3NjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NOx3j4jVxeTmeOAKzUgyzf/PAlp mU3fRndmGrgJAwyxNwP5Kd3B4Hyj3LOC1zkHLi2NlJhCP65tQx8iBQOdNay6Z6ax pcDZZQXBFVD9xia0yXLLTwDmtsF0/5oKSS9VOaFwNHyeZpDTU13w9a5GDPRNseTN coj9vu+ZXuhnFFVD0FZ6Yl4zbPvhwDnNuKW1NBWAc/H6Kewzu8fe9b2RoiaD0VxP 5DoOJnQOpqDcpwIXEMN/SMmTXjObDQHLz9KNeQvXu6dio9dR+IgqypMW+8PupksD ScpfUQj1H3wY+lKnL/9dv6JpfgI5Pij4YqLiWLe6Wq1SeYp0jUaciOhcjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCpdg8ir/b8TngWCSsFmc9FdnYzMB8GA1UdIwQY MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt MTZlZDNjZDBjNzJhLzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHirp8GR9 d2X7KdMVgZiHVnEmj/RJxpa3p3xdUgZsqx803wabPB4yYrbsqvnb+I9qM99+fROQ qV5RAnmfqGX8qf9R9hkTJUWDKUlzWTmX7uBYVX+znt94crvDAL80dvLnEiOy4oZb aseFLZjvZ8GRl2Ht/YMcdAgfRyuedVcOvMfrx64cVjp0d3etRXwicU8drghuZQV/ 1YHICaocPN6ZmettpjtoDZskop8XBt2CxF2ZicsEeRY4+0f6ZUABoPen5yzfb9El oJ21SbFlY6CGY/iKu4cRxBB28FvDILVdfufEgiDloGQWajYTPtGr9XwW7l55LOye O5mqpJTAiJXcXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:15 2025 by rpki-client