This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json) Hash identifier: uCtaKovFSbw63VM8/dmAz9pqjIAWn2abqYn5xfEG7f4= Subject key identifier: 86:DC:EB:77:7A:50:BF:A6:6B:73:1A:D4:25:EB:0D:5B:7E:E1:A1:2A Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae Certificate serial: 019B2C665BA24111C84FEEEB37DA2C7AB75A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft Manifest number: 059E Signing time: Wed 17 Dec 2025 13:01:04 +0000 Manifest this update: Wed 17 Dec 2025 13:01:04 +0000 Manifest next update: Thu 18 Dec 2025 13:01:04 +0000 Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=) 2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: sGKiNsTmq2LV8RrG6cB37eAApZj0uMteP6+3TnlVQQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:5b:a2:41:11:c8:4f:ee:eb:37:da:2c:7a:b7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae Validity Not Before: Dec 17 13:01:04 2025 GMT Not After : Dec 18 13:01:04 2025 GMT Subject: CN=86dceb777a50bfa66b731ad425eb0d5b7ee1a12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:71:3b:6f:15:0b:d3:a2:d3:9d:0f:09:f1: ac:17:41:04:f8:0d:b8:81:2a:0d:37:b0:f8:5a:aa: 94:78:f3:2d:f2:66:88:8e:36:eb:8f:44:ed:87:c8: 70:76:2c:79:50:21:c3:28:a6:b3:6f:ca:50:7e:a5: 38:9c:11:67:f2:d3:58:81:22:f6:19:40:d0:82:6f: 9a:7e:66:b2:cd:d8:51:f1:17:7d:d7:d7:54:51:22: 34:59:01:c8:8d:5f:10:d3:25:03:01:36:2e:54:9a: 8b:3a:e0:2b:ff:7f:ca:e2:2f:67:9d:03:0f:d6:cb: 2b:12:12:d2:d8:84:ef:66:ac:54:0a:9b:7d:d6:19: 20:52:1d:76:4b:5e:a9:bf:24:a5:d8:a3:43:40:7c: 99:40:b2:f5:d9:06:d8:f1:1f:96:cb:4a:7b:21:40: ea:3c:b5:4d:b8:bb:e8:b8:d1:c4:ea:cc:7f:6d:e2: e0:ae:13:69:ee:3a:cd:02:9f:bb:cc:c7:51:72:5c: 14:17:d7:8d:b9:3d:f2:1d:65:41:66:d0:2b:34:32: 9d:3f:fb:06:e3:7a:c4:ac:46:94:16:c7:5d:c5:ff: 30:89:32:f7:af:e9:5c:94:dc:25:5e:56:11:a1:69: 68:12:3d:6f:8b:a5:3c:14:63:eb:cd:0a:0c:50:e9: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DC:EB:77:7A:50:BF:A6:6B:73:1A:D4:25:EB:0D:5B:7E:E1:A1:2A X509v3 Authority Key Identifier: keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:b7:fd:c0:8a:2c:6c:e8:6d:e4:9e:21:97:0f:c2:00:19: 43:37:39:6b:33:58:eb:aa:06:b5:e7:3f:0b:ef:e8:8c:c3:5d: 1c:b9:e9:76:e8:8d:2d:cd:87:07:e6:4c:da:92:2e:ac:78:cd: 94:3f:25:92:00:43:16:02:2b:db:2d:df:89:79:6c:87:fc:8c: ee:5c:61:82:44:e5:a8:21:b7:b7:2e:dc:e9:02:39:75:fd:f5: 8e:e0:12:22:d5:8e:31:b0:5d:50:f7:28:a3:26:68:bd:c5:a6: b3:26:9f:41:48:1f:a7:8d:8b:e8:4a:3b:e0:60:98:28:69:24: a5:23:04:5e:33:d5:66:c8:39:fc:2f:84:86:e7:65:96:e1:51: 8d:7e:36:c0:a1:ac:93:56:eb:f6:b5:cd:b4:58:84:6d:3d:37: 94:e9:76:4d:ce:ac:b7:2a:13:ec:08:87:b1:fa:a7:4d:50:21: 42:4e:8d:ba:15:c7:e9:7e:19:3c:42:03:65:7a:97:6e:71:cd: 0e:87:fa:3d:e6:1b:7e:4f:e9:7a:f7:44:e3:40:fa:d0:6a:19: b6:4f:5b:6f:5c:9d:22:35:c2:83:c5:2c:ab:96:0c:84:43:b1: 8e:fe:2b:97:9c:ae:ba:e0:13:ab:19:6b:fd:a1:d4:69:16:70: ac:28:1b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZluiQRHIT+7rN9oserdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGNlNzgxZGIwZGM3ZTRmOWY0OTQxNDVhMjk1ZTRjY2Ix MjFjYWUwHhcNMjUxMjE3MTMwMTA0WhcNMjUxMjE4MTMwMTA0WjAzMTEwLwYDVQQD Eyg4NmRjZWI3NzdhNTBiZmE2NmI3MzFhZDQyNWViMGQ1YjdlZTFhMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNlxO28VC9Oi050PCfGsF0EE+A24 gSoNN7D4WqqUePMt8maIjjbrj0Tth8hwdix5UCHDKKazb8pQfqU4nBFn8tNYgSL2 GUDQgm+afmayzdhR8Rd919dUUSI0WQHIjV8Q0yUDATYuVJqLOuAr/3/K4i9nnQMP 1ssrEhLS2ITvZqxUCpt91hkgUh12S16pvySl2KNDQHyZQLL12QbY8R+Wy0p7IUDq PLVNuLvouNHE6sx/beLgrhNp7jrNAp+7zMdRclwUF9eNuT3yHWVBZtArNDKdP/sG 43rErEaUFsddxf8wiTL3r+lclNwlXlYRoWloEj1vi6U8FGPrzQoMUOmocQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbc63d6UL+ma3Ma1CXrDVt+4aEqMB8GA1UdIwQY MBaAFFEM54HbDcfk+fSUFFopXkzLEhyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQt YzFkNmM4ZjMxOWMxLzEvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQtYzFkNmM4ZjMxOWMx LzEvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1G3/cCK LGzobeSeIZcPwgAZQzc5azNY66oGtec/C+/ojMNdHLnpduiNLc2HB+ZM2pIurHjN lD8lkgBDFgIr2y3fiXlsh/yM7lxhgkTlqCG3ty7c6QI5df31juASItWOMbBdUPco oyZovcWmsyafQUgfp42L6Eo74GCYKGkkpSMEXjPVZsg5/C+EhudlluFRjX42wKGs k1br9rXNtFiEbT03lOl2Tc6styoT7AiHsfqnTVAhQk6NuhXH6X4ZPEIDZXqXbnHN Dof6PeYbfk/pevdE40D60GoZtk9bb1ydIjXCg8Usq5YMhEOxjv4rl5yuuuATqxlr /aHUaRZwrCgbaQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:26:45 2025 by rpki-client