This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json) Hash identifier: tb5iAdIxUqthBSu4UkEpqqDJC5nZAohNUjwHnyerDpQ= Subject key identifier: 66:E7:64:F6:FF:0D:0E:97:03:A3:4D:E5:B3:93:A7:D1:BF:DE:CF:D6 Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa Certificate serial: 019AF088ADD39AA6867027E6961BF7CDA877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft Manifest number: 01B6 Signing time: Fri 05 Dec 2025 22:01:20 +0000 Manifest this update: Fri 05 Dec 2025 22:01:20 +0000 Manifest next update: Sat 06 Dec 2025 22:01:20 +0000 Files and hashes: 1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: Xr2rDebFSPmhQ31HVr9WepbrqoRuK6T5ZCu1WjikY38=) 2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ad:d3:9a:a6:86:70:27:e6:96:1b:f7:cd:a8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa Validity Not Before: Dec 5 22:01:20 2025 GMT Not After : Dec 6 22:01:20 2025 GMT Subject: CN=66e764f6ff0d0e9703a34de5b393a7d1bfdecfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:9b:93:5f:1a:f6:17:a0:99:20:32:94:9d: d1:c9:41:bb:1b:82:95:93:2b:36:19:64:39:eb:2d: 28:51:56:42:47:0c:4d:d9:9d:58:6b:4f:26:70:d2: 44:60:9b:43:b4:b3:8d:5a:ad:75:59:d6:b6:d7:a0: ba:c6:b9:65:e2:4b:79:4e:2a:60:c0:53:6b:1a:55: 94:75:1a:30:75:ad:11:96:8d:09:bb:33:29:23:ad: b6:58:85:c8:db:25:35:79:9e:36:a7:98:1a:0c:ff: 22:ab:f1:69:9d:21:2a:61:bd:12:8a:6b:7c:18:af: 1d:fc:c7:c2:73:1d:6a:57:70:39:90:c4:88:76:e2: 06:66:72:a3:96:5b:5a:69:ac:bd:94:51:f4:56:c8: 8f:4b:ac:ab:32:b5:96:9c:c5:f7:64:06:7d:12:55: 33:70:b2:00:94:7e:0b:3e:11:c4:1d:1a:da:00:e1: 38:96:b3:e0:ff:9c:37:02:a6:a5:ac:96:f6:90:ff: 91:33:72:8c:53:cc:dd:f3:20:82:a7:82:cd:5d:b4: 52:b1:46:fd:f8:1c:ea:e9:00:b5:5c:e5:0b:48:ca: a9:59:12:90:0e:7c:1f:eb:25:10:23:e9:12:a2:e8: f2:e5:f9:6a:ff:34:15:03:15:45:7b:0b:66:fd:c3: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E7:64:F6:FF:0D:0E:97:03:A3:4D:E5:B3:93:A7:D1:BF:DE:CF:D6 X509v3 Authority Key Identifier: keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:58:8d:35:72:67:93:3e:39:83:99:a0:b8:64:9c:b2:99:17: 6d:f4:54:e0:bf:8d:36:58:f9:0a:c9:6f:b1:22:a5:0f:90:8c: 08:bb:12:85:bf:66:a0:d1:4f:37:91:ce:1c:c4:f2:40:8e:db: be:86:72:66:07:6a:04:2d:0d:09:95:97:61:05:96:d2:5a:8a: d0:21:cd:71:89:71:a1:6f:23:0d:b7:da:a5:63:c5:84:4e:62: 68:a7:96:61:cc:f0:8f:f1:af:dc:20:55:db:e4:b9:0d:c1:07: f1:28:02:d8:bd:be:8b:6b:fb:fb:54:b7:88:21:64:da:d9:bb: 48:f0:6b:15:34:15:8c:bc:aa:87:0b:92:fb:d4:c6:3f:37:80: 3e:00:20:92:0b:6a:16:b8:9a:2a:75:a7:16:62:f7:89:5a:de: 20:f0:f9:e9:f7:bd:b9:0e:62:97:39:af:0b:43:00:b8:2e:dc: a2:e1:f9:7c:27:45:91:b7:dc:0c:bb:56:bb:98:ff:a1:50:5e: 9a:84:56:35:15:e9:7a:f7:3c:0f:b3:31:11:7f:19:d6:11:60: 19:0b:5d:ff:fa:12:f3:f9:77:91:9d:e9:a8:d2:dc:4f:07:9d: 6e:ee:95:41:4f:e7:b8:8a:ab:43:30:67:14:01:e0:09:99:d4: b0:d2:35:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiK3TmqaGcCfmlhv3zah3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZDAwNDYzMjBiZDJiMzEzNzQyOGI5OWNjYzM0YjE4NGEw NmFjYWEwHhcNMjUxMjA1MjIwMTIwWhcNMjUxMjA2MjIwMTIwWjAzMTEwLwYDVQQD Eyg2NmU3NjRmNmZmMGQwZTk3MDNhMzRkZTViMzkzYTdkMWJmZGVjZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR2bk18a9hegmSAylJ3RyUG7G4KV kys2GWQ56y0oUVZCRwxN2Z1Ya08mcNJEYJtDtLONWq11Wda216C6xrll4kt5Tipg wFNrGlWUdRowda0Rlo0JuzMpI622WIXI2yU1eZ42p5gaDP8iq/FpnSEqYb0Simt8 GK8d/MfCcx1qV3A5kMSIduIGZnKjlltaaay9lFH0VsiPS6yrMrWWnMX3ZAZ9ElUz cLIAlH4LPhHEHRraAOE4lrPg/5w3AqalrJb2kP+RM3KMU8zd8yCCp4LNXbRSsUb9 +Bzq6QC1XOULSMqpWRKQDnwf6yUQI+kSoujy5flq/zQVAxVFewtm/cN0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbnZPb/DQ6XA6NN5bOTp9G/3s/WMB8GA1UdIwQY MBaAFFLQBGMgvSsxN0KLmczDSxhKBqyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgt MzBkNGM1NzI5MTQ2LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgtMzBkNGM1NzI5MTQ2 LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIViNNXJn kz45g5mguGScspkXbfRU4L+NNlj5CslvsSKlD5CMCLsShb9moNFPN5HOHMTyQI7b voZyZgdqBC0NCZWXYQWW0lqK0CHNcYlxoW8jDbfapWPFhE5iaKeWYczwj/Gv3CBV 2+S5DcEH8SgC2L2+i2v7+1S3iCFk2tm7SPBrFTQVjLyqhwuS+9TGPzeAPgAgkgtq FriaKnWnFmL3iVreIPD56fe9uQ5ilzmvC0MAuC7couH5fCdFkbfcDLtWu5j/oVBe moRWNRXpevc8D7MxEX8Z1hFgGQtd//oS8/l3kZ3pqNLcTwedbu6VQU/nuIqrQzBn FAHgCZnUsNI1pw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:16:24 2025 by rpki-client