This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json) Hash identifier: PaHZKwH/uIOyIV4pDFP5IVgGh1Lnk2A4sRZn8Zbt//M= Subject key identifier: BD:51:90:2D:88:DE:8F:08:71:A7:96:DC:89:7D:BE:99:9D:3B:A3:7A Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc Certificate serial: 019AF19AAE29F80B446A1E397C72BE04E8C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=) 2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: JqCK1iqMF98h0VVLWAhfbkGkg2HhjKwjEEl7fBqErho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ae:29:f8:0b:44:6a:1e:39:7c:72:be:04:e8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=bd51902d88de8f0871a796dc897dbe999d3ba37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:fc:6f:02:f3:ec:2f:3d:41:9f:f7:98:e8: 6a:cd:f1:16:b8:c9:d7:ba:04:72:23:e1:8d:51:c0: fa:31:e7:cc:0c:cd:b6:6e:72:ed:39:3e:f5:df:b9: a0:3a:c8:d9:75:dd:1a:da:78:e6:a9:39:8f:52:eb: f9:c5:5c:44:3f:b6:11:78:ab:2f:67:b9:23:f1:84: 68:c1:85:3c:86:bc:aa:23:8a:65:af:e1:af:62:1e: dc:3a:c9:bb:01:62:d7:ca:03:74:74:58:ee:0a:9c: 0f:28:60:f7:6f:62:3a:04:6b:67:6c:6a:df:c5:33: 24:99:30:6c:8a:ca:7e:e9:5e:cc:46:a6:96:c8:d8: 5a:7a:e0:f1:41:9e:aa:75:95:d2:9d:d5:8c:4c:b0: e3:cd:ec:71:e7:dd:70:19:0f:3b:7b:a6:09:7c:9e: b1:2a:79:35:60:e8:38:ab:07:ff:2a:fb:7d:af:5d: b4:17:ef:81:01:27:9c:0b:8b:78:44:41:ec:19:7d: 2c:15:bf:c1:03:2b:d7:7b:55:ef:22:01:64:ea:c3: a2:3e:41:7c:5e:20:34:27:c6:7c:30:4d:83:37:97: dd:ac:57:5d:ba:9f:8d:03:26:34:77:78:e2:d4:5d: 89:8e:28:b6:08:aa:39:b4:16:65:04:28:4c:f8:6d: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:51:90:2D:88:DE:8F:08:71:A7:96:DC:89:7D:BE:99:9D:3B:A3:7A X509v3 Authority Key Identifier: keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:38:85:ab:15:44:5c:f2:10:4f:3b:3f:64:b2:13:a1:42:67: 79:9e:7e:b5:56:ce:f9:0e:0f:f5:cf:28:99:6f:71:fa:df:d0: 9b:3f:03:4f:7f:61:7b:f6:2a:94:a7:d3:35:56:f9:b0:15:a6: f3:7c:09:5b:e1:5d:d3:39:b6:db:d0:06:9b:f4:71:5f:8d:98: 1c:fa:0a:12:2d:de:f6:a2:98:be:bc:1e:36:d2:b5:77:f7:63: 68:c5:47:69:a6:5d:16:69:97:d9:e8:ae:44:0b:e3:25:3b:c9: d7:85:71:b6:39:61:48:97:90:6b:f1:19:cb:f1:25:87:2d:4a: d2:be:6e:ed:ef:13:30:f5:5a:c5:48:f9:01:7d:04:e1:07:50: c2:38:d0:80:e6:e3:f4:d9:36:b6:64:a2:17:cb:3d:a6:0b:3e: 9b:4b:33:b4:37:ef:f0:71:86:07:a1:30:6c:14:3a:f1:fa:d4: 05:79:3f:0a:88:03:c7:bb:6d:68:9d:fa:bc:15:19:d1:0f:14: 6e:89:17:d6:f1:14:f6:e1:df:9a:7a:a4:76:fc:f5:75:b3:df: 50:8f:6d:7f:67:4b:60:46:d5:c2:85:11:db:60:f8:d7:87:39: e9:d4:fe:54:ea:89:03:07:8e:69:db:06:b8:37:12:61:68:9e: 19:d7:4d:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq4p+AtEah45fHK+BOjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh YzJiZmMwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhiZDUxOTAyZDg4ZGU4ZjA4NzFhNzk2ZGM4OTdkYmU5OTlkM2JhMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTD8bwLz7C89QZ/3mOhqzfEWuMnX ugRyI+GNUcD6MefMDM22bnLtOT7137mgOsjZdd0a2njmqTmPUuv5xVxEP7YReKsv Z7kj8YRowYU8hryqI4plr+GvYh7cOsm7AWLXygN0dFjuCpwPKGD3b2I6BGtnbGrf xTMkmTBsisp+6V7MRqaWyNhaeuDxQZ6qdZXSndWMTLDjzexx591wGQ87e6YJfJ6x Knk1YOg4qwf/Kvt9r120F++BASecC4t4REHsGX0sFb/BAyvXe1XvIgFk6sOiPkF8 XiA0J8Z8ME2DN5fdrFddup+NAyY0d3ji1F2Jjii2CKo5tBZlBChM+G3Q1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1RkC2I3o8IcaeW3Il9vpmdO6N6MB8GA1UdIwQY MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjiFqxVE XPIQTzs/ZLIToUJneZ5+tVbO+Q4P9c8omW9x+t/Qmz8DT39he/YqlKfTNVb5sBWm 83wJW+Fd0zm229AGm/RxX42YHPoKEi3e9qKYvrweNtK1d/djaMVHaaZdFmmX2eiu RAvjJTvJ14VxtjlhSJeQa/EZy/Elhy1K0r5u7e8TMPVaxUj5AX0E4QdQwjjQgObj 9Nk2tmSiF8s9pgs+m0sztDfv8HGGB6EwbBQ68frUBXk/CogDx7ttaJ36vBUZ0Q8U bokX1vEU9uHfmnqkdvz1dbPfUI9tf2dLYEbVwoUR22D414c56dT+VOqJAweOadsG uDcSYWieGddN1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:45 2025 by rpki-client