This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json) Hash identifier: q9ya0CAe5YbKRDFvVnGFlPc73nc7YH3dZ0KoUE5OwnE= Subject key identifier: 3D:9A:1C:C2:FA:32:BB:AD:24:92:44:37:9E:74:49:F2:02:7F:1C:B6 Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Certificate serial: 019AF5AEAC16F63501BF132AD98C585BC90C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 22:00:56 +0000 Manifest this update: Sat 06 Dec 2025 22:00:56 +0000 Manifest next update: Sun 07 Dec 2025 22:00:56 +0000 Files and hashes: 1: TFo1gtP034QimxoONKR9cO3Rea0.roa (hash: ZbKyuz+8pa9I1RSPWJwZNU5a7S31Y7QOYHmJtNh9TXA=) 2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: L+//L8yjC5AzoNeHGmUXh55rwrFqWWZrxQCVSfQ+b7k=) 3: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ac:16:f6:35:01:bf:13:2a:d9:8c:58:5b:c9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Validity Not Before: Dec 6 22:00:56 2025 GMT Not After : Dec 7 22:00:56 2025 GMT Subject: CN=3d9a1cc2fa32bbad249244379e7449f2027f1cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:38:4c:22:1d:02:56:8f:9b:57:69:b1:01: 73:2a:fe:3e:53:61:2a:4a:cc:2d:83:76:30:a7:f3: d1:72:77:ec:2f:3f:c8:de:02:6b:99:bb:ee:2d:56: 0f:fd:d0:76:f9:67:1b:0f:89:a8:e7:84:36:fc:6c: e8:47:0d:c7:6c:43:2e:60:21:e0:13:44:01:e6:7a: 4f:69:0c:2b:a2:85:71:1e:cf:9a:b1:67:d3:b2:c8: 62:55:b9:96:60:a9:cb:08:38:43:82:c0:62:35:49: 69:97:e8:86:bd:1c:97:39:57:c4:02:24:bc:d3:ea: 9f:9c:5d:d4:f5:55:f6:f1:6a:a9:de:60:2c:db:fc: 9d:95:c1:1d:98:54:02:6c:ad:d2:e0:11:d7:43:89: 00:cd:2f:6b:79:98:07:6b:51:c4:cf:fc:ac:c0:6b: ba:a8:8b:c1:47:b6:6b:29:73:8e:98:40:6a:91:60: 90:66:c6:f8:99:9f:ae:74:47:c4:66:ad:98:50:8a: ff:d7:cf:b5:b0:31:17:e9:fa:55:cc:25:af:7b:33: 9f:c9:6e:0a:10:04:bc:8b:fa:73:52:10:b6:af:7d: 7f:16:ce:9c:6f:8f:d4:89:d2:e9:f1:80:bb:53:04: a2:69:06:7f:a3:48:72:52:4b:a2:bb:1d:64:69:47: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9A:1C:C2:FA:32:BB:AD:24:92:44:37:9E:74:49:F2:02:7F:1C:B6 X509v3 Authority Key Identifier: keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:24:5f:2f:90:e6:3f:60:46:b8:ca:e2:0e:b1:02:9b:f1:52: e1:c9:c7:fa:0b:53:0e:b2:bd:38:33:ce:85:de:f2:af:a2:76: 03:98:72:da:67:22:71:ea:1f:76:5c:27:39:ff:6b:1c:6b:86: 36:49:ec:d9:c2:00:6f:df:fd:be:aa:dd:9a:a6:7f:e2:59:49: 21:f7:84:4b:25:54:34:0d:a9:cd:4b:86:5f:78:b0:98:47:ee: d1:35:74:f2:48:19:21:9f:1d:65:72:2a:8c:2d:98:c7:6d:a9: 02:9c:31:58:48:20:4f:14:6c:3f:6a:72:fb:6c:16:11:fc:1a: 0e:59:25:fb:5f:51:7d:01:18:05:68:42:7d:cd:12:7c:c0:e0: 3e:d6:7e:2a:a7:96:8f:b5:70:dd:fd:5d:99:55:ba:b9:74:7e: b5:8d:d1:fe:6a:36:85:b6:81:a8:b2:81:82:98:05:a4:1d:19: 75:9f:2c:db:63:a6:7d:4d:de:66:1c:e6:ab:d7:5c:da:72:6f: 93:a8:f7:f3:ae:83:33:55:08:cd:99:db:10:3c:55:5b:5d:81: fb:4c:04:9f:91:ca:d9:1c:10:84:c7:0a:76:b2:d7:3c:07:40: 6e:dd:05:01:93:95:15:c4:1f:26:5e:98:12:f1:3e:f9:1a:3b: ff:a9:9e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqwW9jUBvxMq2YxYW8kMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1 NDYzOWUwHhcNMjUxMjA2MjIwMDU2WhcNMjUxMjA3MjIwMDU2WjAzMTEwLwYDVQQD EygzZDlhMWNjMmZhMzJiYmFkMjQ5MjQ0Mzc5ZTc0NDlmMjAyN2YxY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD04TCIdAlaPm1dpsQFzKv4+U2Eq Sswtg3Ywp/PRcnfsLz/I3gJrmbvuLVYP/dB2+WcbD4mo54Q2/GzoRw3HbEMuYCHg E0QB5npPaQwrooVxHs+asWfTsshiVbmWYKnLCDhDgsBiNUlpl+iGvRyXOVfEAiS8 0+qfnF3U9VX28Wqp3mAs2/ydlcEdmFQCbK3S4BHXQ4kAzS9reZgHa1HEz/yswGu6 qIvBR7ZrKXOOmEBqkWCQZsb4mZ+udEfEZq2YUIr/18+1sDEX6fpVzCWvezOfyW4K EAS8i/pzUhC2r31/Fs6cb4/UidLp8YC7UwSiaQZ/o0hyUkuiux1kaUeUEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2aHML6MrutJJJEN550SfICfxy2MB8GA1UdIwQY MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSRfL5Dm P2BGuMriDrECm/FS4cnH+gtTDrK9ODPOhd7yr6J2A5hy2mciceofdlwnOf9rHGuG Nkns2cIAb9/9vqrdmqZ/4llJIfeESyVUNA2pzUuGX3iwmEfu0TV08kgZIZ8dZXIq jC2Yx22pApwxWEggTxRsP2py+2wWEfwaDlkl+19RfQEYBWhCfc0SfMDgPtZ+KqeW j7Vw3f1dmVW6uXR+tY3R/mo2hbaBqLKBgpgFpB0ZdZ8s22OmfU3eZhzmq9dc2nJv k6j3866DM1UIzZnbEDxVW12B+0wEn5HK2RwQhMcKdrLXPAdAbt0FAZOVFcQfJl6Y EvE++Ro7/6meQw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:26 2025 by rpki-client