This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft File: UwUgCbp4mNI2HKLufRMBJPnSUSU.mft (raw, json) Hash identifier: POLJ3QQkPQY4rXcOGoQ/5JGeNd9RidICyRqD4p7Jz3g= Subject key identifier: DD:83:4D:5F:C5:66:B3:29:44:35:CF:53:08:C7:57:5B:E2:5B:C9:2B Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25 Certificate issuer: /CN=53052009ba7898d2361ca2ee7d130124f9d25125 Certificate serial: 019AF5E5C1F27B8D46A92494DA0309338605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 23:01:06 +0000 Manifest this update: Sat 06 Dec 2025 23:01:06 +0000 Manifest next update: Sun 07 Dec 2025 23:01:06 +0000 Files and hashes: 1: CxOk9LmHNEmsk0bxkFd_ya6kVMw.roa (hash: O9c9fUKfwHQgnelPj+XeJfzisbErQmRyHoqOIpWTkUc=) 2: UwUgCbp4mNI2HKLufRMBJPnSUSU.crl (hash: 36RfA22U/8p1AkXbvSxcFXJ3fOrk6cbQY5VvVmxpFc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c1:f2:7b:8d:46:a9:24:94:da:03:09:33:86:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125 Validity Not Before: Dec 6 23:01:06 2025 GMT Not After : Dec 7 23:01:06 2025 GMT Subject: CN=dd834d5fc566b3294435cf5308c7575be25bc92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:98:ad:7c:46:0d:79:8e:08:96:c9:62:ca: f6:9b:d9:15:14:8f:0b:c6:bc:48:ec:fd:2a:6f:2e: 36:9c:3a:4b:4a:58:db:5d:f6:c6:0e:e7:f2:24:0a: d1:99:5b:6d:5d:37:be:ad:e2:b0:ab:fe:ba:11:7e: 98:49:cc:34:18:e2:62:74:fd:85:9f:61:f2:73:03: 4c:ba:6c:cb:0c:bc:3c:4e:b1:1c:31:3d:c4:4c:12: 00:34:cb:93:4a:3b:32:09:a9:41:ed:14:b2:02:eb: 6c:bb:f4:e0:d1:bf:fc:75:59:86:49:57:2c:48:78: 66:d6:58:79:da:65:27:8c:32:48:4d:f2:3c:22:a9: 29:8b:1c:7a:5f:17:89:46:cc:45:b2:33:6d:bc:63: bb:39:34:fd:47:e0:b9:43:50:0f:0a:fd:16:ec:89: 09:de:8a:bb:02:49:cb:aa:14:28:b6:be:ba:30:20: 00:e8:dd:24:ce:a2:18:3a:53:8c:a4:de:66:c0:50: 3b:fe:f8:5c:af:7d:e1:c9:7b:af:e7:29:03:a8:ab: 33:87:03:75:6e:4d:67:75:55:d9:70:3e:9c:41:b3: 47:1c:11:24:99:d5:bd:35:23:8b:c6:a0:84:70:f8: 61:1d:62:6d:c0:8f:bf:51:f3:5c:f9:0f:e2:09:f6: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:83:4D:5F:C5:66:B3:29:44:35:CF:53:08:C7:57:5B:E2:5B:C9:2B X509v3 Authority Key Identifier: keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:7f:cf:20:58:22:d0:37:63:e6:85:47:bd:54:54:f1:5b: 22:a7:3e:aa:52:86:e1:5f:7d:e1:f8:9e:fb:6d:6f:93:0d:a0: 3b:b7:76:02:b9:0a:03:dd:e5:e2:12:3d:2b:d8:15:21:d4:3d: 47:50:4f:19:03:d8:65:da:c9:78:d7:71:10:38:35:26:a4:1b: 0d:b3:5f:74:c0:60:06:2b:23:cd:d4:1b:68:2d:48:1f:71:27: d8:3c:f2:ac:1f:00:20:35:e5:82:5a:24:db:37:50:19:36:84: 07:9c:38:7e:dc:c7:ba:91:57:f1:03:eb:7f:91:12:b6:8b:27: d4:69:9a:eb:6a:64:13:e3:76:d4:49:ce:ea:51:9f:15:ed:e7: eb:ef:3e:32:c2:3a:ea:e4:00:46:57:3f:35:8a:0e:73:1f:f1: d0:5f:d7:ae:14:e8:10:cb:db:af:a5:57:08:38:40:06:dc:9d: e6:b2:4c:63:25:74:7c:ec:1b:99:c9:d3:8b:e0:ed:e6:16:51: 8b:78:f5:13:2e:c1:c6:f9:3e:16:3b:bf:45:88:7a:1b:8b:ad: 14:53:d1:67:c7:1a:d7:97:a5:23:8c:98:66:de:df:33:84:bf: 42:b8:e0:5d:ae:ca:71:6a:f4:db:a6:4c:fe:44:9b:a4:d8:f0: 2c:c1:5f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cHye41GqSSU2gMJM4YFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMDUyMDA5YmE3ODk4ZDIzNjFjYTJlZTdkMTMwMTI0Zjlk MjUxMjUwHhcNMjUxMjA2MjMwMTA2WhcNMjUxMjA3MjMwMTA2WjAzMTEwLwYDVQQD EyhkZDgzNGQ1ZmM1NjZiMzI5NDQzNWNmNTMwOGM3NTc1YmUyNWJjOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVyYrXxGDXmOCJbJYsr2m9kVFI8L xrxI7P0qby42nDpLSljbXfbGDufyJArRmVttXTe+reKwq/66EX6YScw0GOJidP2F n2HycwNMumzLDLw8TrEcMT3ETBIANMuTSjsyCalB7RSyAutsu/Tg0b/8dVmGSVcs SHhm1lh52mUnjDJITfI8Iqkpixx6XxeJRsxFsjNtvGO7OTT9R+C5Q1APCv0W7IkJ 3oq7AknLqhQotr66MCAA6N0kzqIYOlOMpN5mwFA7/vhcr33hyXuv5ykDqKszhwN1 bk1ndVXZcD6cQbNHHBEkmdW9NSOLxqCEcPhhHWJtwI+/UfNc+Q/iCfbnFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2DTV/FZrMpRDXPUwjHV1viW8krMB8GA1UdIwQY MBaAFFMFIAm6eJjSNhyi7n0TAST50lElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXdVZ0NicDRtTkkySEtMdWZSTUJKUG5TVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85Mzg3MjItZDQxNS00MDI3LWEwYjMt YTJhYTI4NmRjNDQ4LzEvVXdVZ0NicDRtTkkySEtMdWZSTUJKUG5TVVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85Mzg3MjItZDQxNS00MDI3LWEwYjMtYTJhYTI4NmRjNDQ4 LzEvVXdVZ0NicDRtTkkySEtMdWZSTUJKUG5TVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanJ/zyBY ItA3Y+aFR71UVPFbIqc+qlKG4V994fie+21vkw2gO7d2ArkKA93l4hI9K9gVIdQ9 R1BPGQPYZdrJeNdxEDg1JqQbDbNfdMBgBisjzdQbaC1IH3En2DzyrB8AIDXlglok 2zdQGTaEB5w4ftzHupFX8QPrf5EStosn1Gma62pkE+N21EnO6lGfFe3n6+8+MsI6 6uQARlc/NYoOcx/x0F/XrhToEMvbr6VXCDhABtyd5rJMYyV0fOwbmcnTi+Dt5hZR i3j1Ey7Bxvk+Fju/RYh6G4utFFPRZ8ca15elI4yYZt7fM4S/QrjgXa7KcWr026ZM /kSbpNjwLMFfNg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:56 2025 by rpki-client