This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json) Hash identifier: TaiX0dt9sm36Q1u5QUhNDVnf91qMCytDpypTfRoTqP8= Subject key identifier: D4:EA:1F:9B:C4:9E:EB:50:53:74:1F:1F:20:03:B5:D7:9E:3B:DF:1D Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c Certificate serial: 019AF389AD11F2DFFA443287C5EFB5F80FE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft Manifest number: 15A8 Signing time: Sat 06 Dec 2025 12:01:17 +0000 Manifest this update: Sat 06 Dec 2025 12:01:17 +0000 Manifest next update: Sun 07 Dec 2025 12:01:17 +0000 Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: NvJyqk1VoU0SSGGTEoj8QOuYQ6dh3RYVlNBjqtUebUc=) 2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ad:11:f2:df:fa:44:32:87:c5:ef:b5:f8:0f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c Validity Not Before: Dec 6 12:01:17 2025 GMT Not After : Dec 7 12:01:17 2025 GMT Subject: CN=d4ea1f9bc49eeb5053741f1f2003b5d79e3bdf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:b7:37:7f:0b:dc:5a:8c:0e:14:ce:be:de: e8:14:68:26:10:72:99:09:d7:ff:a1:88:b5:c2:34: 04:fc:15:61:34:85:af:36:1a:dc:64:21:db:b5:0f: 79:c5:0a:d4:e6:0d:67:8d:bc:be:70:85:ba:ab:89: 3d:e3:f8:2f:cb:3a:d4:5d:10:5e:66:df:ee:28:81: 91:c5:36:f4:9c:43:73:cf:25:0a:4f:ec:a4:f3:06: e7:82:7c:14:41:25:ad:9e:52:a2:76:e7:35:51:0d: 96:47:13:d2:b5:f2:25:f1:a8:6e:e0:e4:14:33:02: 29:90:f1:0f:4e:db:db:e9:38:15:e7:0f:15:40:35: 95:0d:6b:de:95:50:24:73:81:0c:3a:7b:01:8b:fa: 18:57:9e:ff:c3:96:df:ea:a0:87:e5:7e:b7:32:ef: 65:43:7a:10:05:1c:1e:2a:a9:6a:01:bc:e2:f6:6c: a5:3b:85:79:e4:b7:f8:70:5f:29:ad:de:45:21:b2: ff:43:24:68:19:d2:a0:f5:e9:b9:2f:c6:50:87:ed: eb:89:f7:90:c7:53:b5:d5:0a:77:67:63:26:71:1c: ab:d1:f4:c3:14:d8:ac:8f:b0:6b:01:12:65:d4:fc: 4a:24:eb:65:db:ea:68:c9:2c:6b:1a:b8:f2:41:7c: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EA:1F:9B:C4:9E:EB:50:53:74:1F:1F:20:03:B5:D7:9E:3B:DF:1D X509v3 Authority Key Identifier: keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2a:d4:69:ed:57:67:ff:8a:7e:8f:98:23:bb:1f:b7:c1:2b: 56:c0:0e:38:01:ef:94:0d:34:8d:c5:0b:c4:0f:da:07:59:67: 8d:e9:27:c3:02:10:65:36:01:cb:d6:f2:a1:65:ff:c8:41:d4: ab:69:47:67:8d:cc:18:f5:00:06:ce:06:ce:83:7b:a4:b5:60: 89:87:c5:eb:df:9a:33:56:8c:be:86:dc:21:a6:91:d0:df:4a: e5:aa:1e:20:a2:d0:8c:88:ff:9f:0d:32:6e:c8:30:ab:0a:ac: e2:59:56:db:ed:21:da:e2:04:52:84:cb:98:e4:29:b0:4c:2b: 7d:d5:63:4f:a8:e0:60:8d:d5:bb:57:2d:ce:f6:6e:ba:b9:e6: f2:dc:50:c9:41:ae:d7:f1:fb:60:8e:97:57:89:05:50:c2:b7: 65:c8:7f:65:cd:f3:6e:6b:1b:70:0c:f1:ca:fe:eb:84:18:75: d0:8c:27:7c:bc:c7:ff:67:c6:e5:19:1a:d5:b2:99:54:81:d5: ce:a8:80:0a:25:df:1c:ba:53:87:e2:d9:2e:cd:ad:ea:08:7c: d6:6c:20:cc:84:38:12:57:39:52:42:12:2e:9f:f8:fd:ea:f1: 07:08:25:ae:2a:24:84:2c:bd:eb:8f:7f:e8:81:27:f8:e4:fa: 62:70:20:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzia0R8t/6RDKHxe+1+A/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy ZjFiOGMwHhcNMjUxMjA2MTIwMTE3WhcNMjUxMjA3MTIwMTE3WjAzMTEwLwYDVQQD EyhkNGVhMWY5YmM0OWVlYjUwNTM3NDFmMWYyMDAzYjVkNzllM2JkZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzu3N38L3FqMDhTOvt7oFGgmEHKZ Cdf/oYi1wjQE/BVhNIWvNhrcZCHbtQ95xQrU5g1njby+cIW6q4k94/gvyzrUXRBe Zt/uKIGRxTb0nENzzyUKT+yk8wbngnwUQSWtnlKiduc1UQ2WRxPStfIl8ahu4OQU MwIpkPEPTtvb6TgV5w8VQDWVDWvelVAkc4EMOnsBi/oYV57/w5bf6qCH5X63Mu9l Q3oQBRweKqlqAbzi9mylO4V55Lf4cF8prd5FIbL/QyRoGdKg9em5L8ZQh+3rifeQ x1O11Qp3Z2MmcRyr0fTDFNisj7BrARJl1PxKJOtl2+poySxrGrjyQXz6ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTqH5vEnutQU3QfHyADtdeeO98dMB8GA1UdIwQY MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5 LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyrUae1X Z/+Kfo+YI7sft8ErVsAOOAHvlA00jcULxA/aB1lnjeknwwIQZTYBy9byoWX/yEHU q2lHZ43MGPUABs4GzoN7pLVgiYfF69+aM1aMvobcIaaR0N9K5aoeIKLQjIj/nw0y bsgwqwqs4llW2+0h2uIEUoTLmOQpsEwrfdVjT6jgYI3Vu1ctzvZuurnm8txQyUGu 1/H7YI6XV4kFUMK3Zch/Zc3zbmsbcAzxyv7rhBh10IwnfLzH/2fG5Rka1bKZVIHV zqiACiXfHLpTh+LZLs2t6gh81mwgzIQ4Elc5UkISLp/4/erxBwglriokhCy9649/ 6IEn+OT6YnAgsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:56 2025 by rpki-client