This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft File: UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json) Hash identifier: u2JQdcL66JOxXuQBDgdeoNZ4yN8x76+fyW58nwYoS/M= Subject key identifier: AA:BC:D2:55:F0:5D:F1:6D:80:FE:E8:37:48:3D:D6:75:24:C4:E6:0B Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e Certificate serial: 019AF208E644BFD9F6C330C76202E99676C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: WN+edOL9RbPjK3zHxMFuk5LE5S2BBK9QzfEVQCGe5CY=) 2: Xjz46GAzHTdy9Og4DKomwuVi-1g.roa (hash: NqL6rYTZkhuuc0nFfTByZAzgwSO1D7DNJ/FzmVF0OjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e6:44:bf:d9:f6:c3:30:c7:62:02:e9:96:76:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=aabcd255f05df16d80fee837483dd67524c4e60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b8:fc:d9:54:ff:99:20:56:a9:2d:67:ef:9e: b7:4e:65:29:19:16:c0:d7:48:16:c1:f0:fa:3e:e1: 71:69:92:16:0d:08:ba:d3:23:76:e6:c4:18:45:87: d1:71:5b:68:9a:86:a7:e2:1e:25:4c:f0:20:bf:a6: 1d:3d:2a:ab:ac:b7:0d:c5:85:5b:51:48:83:82:a8: 1b:b9:e0:51:06:28:ca:aa:bb:1b:a7:bc:d4:40:7b: 0b:d6:75:43:30:68:dc:f5:5c:eb:e4:14:3a:11:1c: fa:8c:a0:81:06:24:20:43:e1:42:7c:3c:f2:cc:08: 22:3e:9f:18:d5:ba:d8:c9:61:73:8b:69:0c:66:96: 1f:4c:4a:13:9a:e5:6d:55:b6:b6:38:ab:bd:39:7a: f5:5c:05:a1:c3:de:15:09:62:41:6a:a8:85:42:6f: 44:a4:31:d7:4f:46:4c:9c:ba:74:89:7c:f5:4b:ba: b0:ad:9e:43:a0:85:91:09:f3:5b:77:e9:6f:fd:e3: 69:02:17:df:f9:5d:08:3f:56:f4:80:ce:0e:a0:f4: 6d:37:78:e0:59:6e:d3:07:d2:2e:ec:d8:bc:ac:c1: b8:01:e2:f8:aa:61:21:e0:04:ff:db:f2:21:70:6c: 90:7f:c0:a1:91:41:85:ca:36:fe:99:35:2d:30:8d: 78:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BC:D2:55:F0:5D:F1:6D:80:FE:E8:37:48:3D:D6:75:24:C4:E6:0B X509v3 Authority Key Identifier: keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f2:ad:f0:67:87:23:5e:ee:2f:1d:8b:f1:bd:93:3b:fe:8f: 93:0c:f8:55:d4:24:b3:c8:06:d5:1b:24:ad:29:4a:5d:b9:d0: 86:63:75:d5:47:6a:be:d3:80:62:31:a2:e5:1b:6e:b2:a2:b0: 41:91:47:cc:38:16:54:3d:2a:2a:8c:9b:db:be:61:fd:14:e7: af:02:5c:22:55:84:51:61:36:69:1b:6e:e5:bd:89:ae:01:69: 40:d8:af:ff:71:3f:3c:b1:80:81:dc:2f:8d:35:98:88:f5:19: de:df:c9:40:32:d6:71:2a:53:79:69:61:be:0c:37:fc:08:16: 50:86:8d:96:90:8e:f7:4e:c8:54:10:c8:ba:d1:a1:78:42:65: 90:83:05:d7:25:64:6b:a5:0c:2a:54:87:4c:cc:5f:6e:02:b0: 1d:7b:9d:73:c6:8d:a0:69:3d:ca:e5:59:93:d0:56:31:cb:74: 5b:ce:a4:a6:55:82:5d:20:8d:35:25:b3:59:b9:f6:44:1e:93: 38:f5:d1:9b:80:70:73:03:59:e3:5b:a9:63:82:e8:30:57:33: 5c:de:96:fd:7f:05:ec:b2:0c:a3:97:a5:22:63:74:27:2c:20: 67:c8:64:ba:06:6b:6c:a4:bc:ad:43:3b:86:f7:fb:42:31:37: 54:4c:05:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOZEv9n2wzDHYgLplnbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1 NzY5NmUwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EyhhYWJjZDI1NWYwNWRmMTZkODBmZWU4Mzc0ODNkZDY3NTI0YzRlNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bj82VT/mSBWqS1n7563TmUpGRbA 10gWwfD6PuFxaZIWDQi60yN25sQYRYfRcVtomoan4h4lTPAgv6YdPSqrrLcNxYVb UUiDgqgbueBRBijKqrsbp7zUQHsL1nVDMGjc9Vzr5BQ6ERz6jKCBBiQgQ+FCfDzy zAgiPp8Y1brYyWFzi2kMZpYfTEoTmuVtVba2OKu9OXr1XAWhw94VCWJBaqiFQm9E pDHXT0ZMnLp0iXz1S7qwrZ5DoIWRCfNbd+lv/eNpAhff+V0IP1b0gM4OoPRtN3jg WW7TB9Iu7Ni8rMG4AeL4qmEh4AT/2/IhcGyQf8ChkUGFyjb+mTUtMI14gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq80lXwXfFtgP7oN0g91nUkxOYLMB8GA1UdIwQY MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/Kt8GeH I17uLx2L8b2TO/6Pkwz4VdQks8gG1RskrSlKXbnQhmN11UdqvtOAYjGi5RtusqKw QZFHzDgWVD0qKoyb275h/RTnrwJcIlWEUWE2aRtu5b2JrgFpQNiv/3E/PLGAgdwv jTWYiPUZ3t/JQDLWcSpTeWlhvgw3/AgWUIaNlpCO907IVBDIutGheEJlkIMF1yVk a6UMKlSHTMxfbgKwHXudc8aNoGk9yuVZk9BWMct0W86kplWCXSCNNSWzWbn2RB6T OPXRm4BwcwNZ41upY4LoMFczXN6W/X8F7LIMo5elImN0JywgZ8hkugZrbKS8rUM7 hvf7QjE3VEwFyA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:22 2025 by rpki-client