This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json) Hash identifier: HSXSxxqu3nwbz94ADuLdcj5IVGUUWtgrD3d7gyt/VNs= Subject key identifier: EA:E8:59:13:73:C4:ED:89:63:0E:CF:8A:16:06:AD:4E:27:0A:07:F2 Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Certificate serial: 019AF3C08AB887F068D67BB3CB00746431A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:01:13 +0000 Manifest this update: Sat 06 Dec 2025 13:01:13 +0000 Manifest next update: Sun 07 Dec 2025 13:01:13 +0000 Files and hashes: 1: TFo1gtP034QimxoONKR9cO3Rea0.roa (hash: ZbKyuz+8pa9I1RSPWJwZNU5a7S31Y7QOYHmJtNh9TXA=) 2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: 4OuOTnFJ1uPJ0l1C0LzJgF+DEch0ybgVX5hJoARI1dM=) 3: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:8a:b8:87:f0:68:d6:7b:b3:cb:00:74:64:31:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Validity Not Before: Dec 6 13:01:13 2025 GMT Not After : Dec 7 13:01:13 2025 GMT Subject: CN=eae8591373c4ed89630ecf8a1606ad4e270a07f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:72:f3:a7:56:e8:6a:36:f7:6c:e1:eb:08: a1:f8:d0:02:5e:b3:24:93:12:07:a4:a8:e9:ae:32: 71:2a:55:a1:9a:f3:bd:f1:2f:25:42:52:12:17:e3: ec:1a:4e:26:16:4e:7e:04:fa:d5:9e:d6:f9:09:66: fd:d2:66:ea:bc:32:75:ba:7b:63:25:6a:32:f4:1e: f7:8e:65:25:6b:da:d1:a2:9d:28:97:18:0c:c0:d3: ba:d6:d7:3c:b0:71:f5:de:08:1b:53:1e:2e:51:26: 0a:6b:7b:02:86:fb:e3:7d:72:0f:27:88:c9:bd:97: 1b:2e:1e:64:21:b3:a7:b0:76:e4:b6:e6:b5:7b:78: 24:de:29:4d:2e:c7:a3:f4:a1:96:ce:89:d8:2d:d2: 4f:dc:27:fc:d1:fb:f8:f6:21:1b:0d:80:bb:98:b3: 96:f0:34:a6:d3:d3:e0:41:6b:38:6f:c9:14:f9:c5: 31:23:c2:cc:90:cc:fd:b9:84:dd:5c:02:73:3a:d0: c3:15:82:d0:6d:cb:0d:c7:05:cb:79:fd:bd:9e:2f: 9b:bd:0f:ea:7e:f1:6e:b1:fa:7b:9f:18:f6:7f:b3: 24:33:f1:3e:85:14:f5:a2:da:48:5c:40:cb:d7:02: 0b:6d:a9:fa:3e:12:b2:98:cc:f0:bd:7a:c8:94:15: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E8:59:13:73:C4:ED:89:63:0E:CF:8A:16:06:AD:4E:27:0A:07:F2 X509v3 Authority Key Identifier: keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fd:b3:4c:b8:87:a7:72:0b:41:38:b2:77:b2:b2:a3:ba:d5: 26:99:59:28:ad:0a:75:25:3a:66:b7:0f:36:cd:6d:f4:b8:8e: 01:d3:77:12:6c:1a:fc:96:41:e0:5e:4b:90:9e:19:14:b7:3b: d2:03:62:25:4c:b4:f2:28:20:ef:7c:e4:73:65:a0:06:7c:89: df:8f:4e:fc:ad:89:f2:27:f9:f4:fe:21:af:95:15:27:6f:69: e4:94:f1:58:1a:d5:d7:b1:b2:81:53:27:81:d8:e8:4a:5a:2f: 0c:20:46:48:d8:d8:3f:e4:a5:84:54:3b:34:c2:ac:61:92:0f: 6a:a3:94:a6:60:e9:1f:1e:fa:3b:da:2c:37:c5:be:93:69:f7: 49:3f:ff:b0:fb:7c:3a:bb:6d:a3:23:52:b8:26:ab:b2:c0:e7: 3c:bd:f4:7f:41:a2:9b:11:2c:87:b7:4c:5d:be:5f:89:4c:45: b1:27:c1:ec:c5:9b:f9:a8:63:b4:c9:4f:58:04:4d:c4:0e:ee: ee:3d:26:ce:41:84:c1:42:89:15:ae:a1:c1:29:da:fe:f3:20: c2:35:07:59:18:97:01:cd:46:c4:4a:2e:4e:1e:34:07:ff:97: 85:7e:ce:bb:42:3c:09:10:a5:de:9d:77:83:d7:20:49:20:86: 7c:af:e8:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIq4h/Bo1nuzywB0ZDGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1 NDYzOWUwHhcNMjUxMjA2MTMwMTEzWhcNMjUxMjA3MTMwMTEzWjAzMTEwLwYDVQQD EyhlYWU4NTkxMzczYzRlZDg5NjMwZWNmOGExNjA2YWQ0ZTI3MGEwN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysZy86dW6Go292zh6wih+NACXrMk kxIHpKjprjJxKlWhmvO98S8lQlISF+PsGk4mFk5+BPrVntb5CWb90mbqvDJ1untj JWoy9B73jmUla9rRop0olxgMwNO61tc8sHH13ggbUx4uUSYKa3sChvvjfXIPJ4jJ vZcbLh5kIbOnsHbktua1e3gk3ilNLsej9KGWzonYLdJP3Cf80fv49iEbDYC7mLOW 8DSm09PgQWs4b8kU+cUxI8LMkMz9uYTdXAJzOtDDFYLQbcsNxwXLef29ni+bvQ/q fvFusfp7nxj2f7MkM/E+hRT1otpIXEDL1wILban6PhKymMzwvXrIlBW1SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOroWRNzxO2JYw7PihYGrU4nCgfyMB8GA1UdIwQY MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOv2zTLiH p3ILQTiyd7Kyo7rVJplZKK0KdSU6ZrcPNs1t9LiOAdN3Emwa/JZB4F5LkJ4ZFLc7 0gNiJUy08igg73zkc2WgBnyJ349O/K2J8if59P4hr5UVJ29p5JTxWBrV17GygVMn gdjoSlovDCBGSNjYP+SlhFQ7NMKsYZIPaqOUpmDpHx76O9osN8W+k2n3ST//sPt8 OrttoyNSuCarssDnPL30f0GimxEsh7dMXb5fiUxFsSfB7MWb+ahjtMlPWARNxA7u 7j0mzkGEwUKJFa6hwSna/vMgwjUHWRiXAc1GxEouTh40B/+XhX7Ou0I8CRCl3p13 g9cgSSCGfK/ocA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:03 2025 by rpki-client