This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json) Hash identifier: OcpOz1jpJ02d2p3Rsipf38Sq8ZjgsvVxj5iELKb8YnY= Subject key identifier: C5:42:6F:D0:ED:CD:33:57:B9:EC:EF:31:BA:F3:01:3B:A5:A6:03:C5 Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c Certificate serial: 019B2F67243BD7C4EA8436E7225D019C5938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft Manifest number: 15C7 Signing time: Thu 18 Dec 2025 03:00:47 +0000 Manifest this update: Thu 18 Dec 2025 03:00:47 +0000 Manifest next update: Fri 19 Dec 2025 03:00:47 +0000 Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: qNuast2xJqGfzY9G7rDTxtaaisNs7NbrV8rMKUuVE2Y=) 2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:24:3b:d7:c4:ea:84:36:e7:22:5d:01:9c:59:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c Validity Not Before: Dec 18 03:00:47 2025 GMT Not After : Dec 19 03:00:47 2025 GMT Subject: CN=c5426fd0edcd3357b9ecef31baf3013ba5a603c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:7d:98:06:5e:6e:29:e3:7d:15:c1:fa:96: 37:72:94:5e:95:ca:8b:28:37:fb:38:14:d2:29:d3: 39:19:35:09:2a:a5:13:05:72:7b:47:d2:da:f3:ff: 6a:36:b8:81:f4:a3:25:fb:68:dd:60:54:af:0a:10: 2d:ad:0b:6e:af:d2:ff:22:bd:4e:ea:cb:8d:78:90: 53:d6:14:9e:28:6b:96:b4:04:df:75:0d:52:cc:3a: 33:f0:fa:8a:15:7b:69:ec:99:9d:79:a5:4f:42:1f: c5:39:be:25:4f:c5:c9:ea:cb:ba:59:cf:bc:29:d4: 5c:99:98:b2:30:68:02:22:c0:35:a4:c5:bb:59:43: c7:d2:d3:9c:6a:79:31:f5:12:c0:ce:a3:d8:00:83: 28:6d:7f:43:96:f6:5f:38:da:ae:4d:3f:73:6a:7c: 15:eb:1f:7d:02:1a:f6:c8:e5:88:14:d7:9f:84:a7: 31:3a:e0:d4:08:f7:96:3b:74:03:96:50:1a:16:5f: ab:8b:06:d6:da:45:53:36:8a:58:a3:86:f8:92:fc: 2d:f6:37:0b:65:4d:80:44:9b:eb:2d:52:c7:fb:f4: ff:ff:07:0f:e1:3b:eb:c1:60:5c:13:af:83:9b:a7: 35:5b:7b:50:7b:46:6f:b5:88:f7:7b:ff:54:9a:ef: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:42:6F:D0:ED:CD:33:57:B9:EC:EF:31:BA:F3:01:3B:A5:A6:03:C5 X509v3 Authority Key Identifier: keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:51:4a:11:e9:bc:d1:fb:28:4c:de:f4:80:40:70:4b:d3:28: 27:67:47:86:b0:76:cf:11:4e:97:18:55:93:7e:3c:0a:c5:e1: 2e:a4:00:3d:06:4b:c9:1e:7b:8c:dc:30:a0:ff:04:4a:a9:7e: bb:30:e4:c8:58:5b:49:85:54:8a:bc:8e:fb:bd:28:55:08:a9: cf:60:1b:e9:6f:93:e7:35:2e:c9:28:9f:7a:07:cf:b9:e5:4e: db:80:32:ca:9e:97:89:2b:ab:f5:3c:33:52:52:b3:51:cd:db: 12:a4:c0:dd:9b:cf:6c:27:a0:52:bd:c3:b4:2e:b6:6c:1b:de: f9:ac:a3:71:e7:b5:8d:f3:3b:a1:6a:36:d1:db:28:f4:b3:d1: 22:72:e7:4a:40:e6:76:58:29:d1:c4:ad:d4:86:16:88:42:10: 4b:97:82:aa:28:00:cc:7a:25:26:23:78:e1:6d:35:37:8b:44: b3:88:c7:d0:11:18:12:f3:a7:5b:a9:46:d6:7e:cc:6e:e5:12: a2:10:67:49:6a:aa:71:75:35:6a:a6:6b:7b:52:ef:51:75:c7: 56:de:d5:79:9e:7c:73:84:8a:6b:4d:50:f4:69:47:22:be:d5: 44:30:6f:d9:1a:48:c1:66:c4:18:ac:f8:5a:0b:b0:61:69:1b: 9c:f5:15:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyQ718TqhDbnIl0BnFk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy ZjFiOGMwHhcNMjUxMjE4MDMwMDQ3WhcNMjUxMjE5MDMwMDQ3WjAzMTEwLwYDVQQD EyhjNTQyNmZkMGVkY2QzMzU3YjllY2VmMzFiYWYzMDEzYmE1YTYwM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy699mAZebinjfRXB+pY3cpRelcqL KDf7OBTSKdM5GTUJKqUTBXJ7R9La8/9qNriB9KMl+2jdYFSvChAtrQtur9L/Ir1O 6suNeJBT1hSeKGuWtATfdQ1SzDoz8PqKFXtp7JmdeaVPQh/FOb4lT8XJ6su6Wc+8 KdRcmZiyMGgCIsA1pMW7WUPH0tOcankx9RLAzqPYAIMobX9DlvZfONquTT9zanwV 6x99Ahr2yOWIFNefhKcxOuDUCPeWO3QDllAaFl+riwbW2kVTNopYo4b4kvwt9jcL ZU2ARJvrLVLH+/T//wcP4TvrwWBcE6+Dm6c1W3tQe0ZvtYj3e/9Umu97XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVCb9DtzTNXuezvMbrzATulpgPFMB8GA1UdIwQY MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5 LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1FKEem8 0fsoTN70gEBwS9MoJ2dHhrB2zxFOlxhVk348CsXhLqQAPQZLyR57jNwwoP8ESql+ uzDkyFhbSYVUiryO+70oVQipz2Ab6W+T5zUuySifegfPueVO24Ayyp6XiSur9Twz UlKzUc3bEqTA3ZvPbCegUr3DtC62bBve+ayjcee1jfM7oWo20dso9LPRInLnSkDm dlgp0cSt1IYWiEIQS5eCqigAzHolJiN44W01N4tEs4jH0BEYEvOnW6lG1n7MbuUS ohBnSWqqcXU1aqZre1LvUXXHVt7VeZ58c4SKa01Q9GlHIr7VRDBv2RpIwWbEGKz4 WguwYWkbnPUVYw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:09:31 2025 by rpki-client