This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json) Hash identifier: 297/L82kZZ9b2lh6a48RldhQ6MDHyIA193nlPwbcYAw= Subject key identifier: 58:EE:0F:BA:7A:58:3F:F0:BC:7A:4E:6F:4A:F2:F1:59:AD:8F:6D:CC Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56 Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56 Certificate serial: 019B38A1A2A78438F35E4D5D8824A57AD457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 22:01:15 +0000 Manifest this update: Fri 19 Dec 2025 22:01:15 +0000 Manifest next update: Sat 20 Dec 2025 22:01:15 +0000 Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=) 2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: DKZzfNF7VRbhgzS4TwALeNEs/ZV44qd9+p0nSy0P/5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:a2:a7:84:38:f3:5e:4d:5d:88:24:a5:7a:d4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56 Validity Not Before: Dec 19 22:01:15 2025 GMT Not After : Dec 20 22:01:15 2025 GMT Subject: CN=58ee0fba7a583ff0bc7a4e6f4af2f159ad8f6dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:11:a4:ee:e5:75:7e:ae:30:07:14:30:17:67: c7:73:cc:c4:dc:2d:b6:6c:0c:3a:c4:40:8a:31:67: f0:5b:c1:ef:fd:2f:12:c4:14:b2:5d:4a:b0:fa:21: 51:82:b1:63:a8:60:41:f3:24:85:b9:b9:38:58:15: ef:37:c4:fb:bc:70:0f:9e:93:6b:5d:01:a3:3e:78: 6e:05:6c:14:65:33:88:2a:c8:33:58:a2:a9:c0:63: 11:b7:53:db:08:de:a3:2f:f9:8f:1a:09:a3:b5:26: 43:d9:e8:16:6a:62:e0:1e:f9:30:63:3a:cb:12:e0: b8:97:e4:3b:9d:1c:1b:59:78:a8:e3:86:32:3a:2c: 29:71:85:d1:49:71:f9:44:cf:58:ce:57:97:36:45: a7:9c:fb:b9:c9:97:58:42:c4:42:37:cc:7b:b1:8a: 09:37:0b:79:11:8a:5a:b8:cb:7a:31:42:32:fb:3b: 4e:23:b3:21:dc:20:22:51:09:99:95:09:11:3d:35: da:94:a0:47:83:97:a1:54:a4:48:83:61:3c:22:88: 88:6b:08:4c:fd:da:04:ed:62:e7:c5:00:6e:6a:02: ee:d5:f2:bd:52:89:c9:a0:a2:7b:0d:03:dd:7a:f4: 7c:84:6d:5c:39:cc:e3:ec:30:a4:16:4d:d8:51:a0: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EE:0F:BA:7A:58:3F:F0:BC:7A:4E:6F:4A:F2:F1:59:AD:8F:6D:CC X509v3 Authority Key Identifier: keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3b:2e:f2:f7:07:e7:ca:b8:3a:32:21:cf:ce:25:c8:0c:20: ec:63:c6:73:40:9b:eb:e4:28:cc:b8:fa:9f:7a:fc:89:a7:f6: 6a:60:27:eb:c9:01:0d:62:ba:61:e4:ef:5a:db:93:ea:37:8d: 93:e4:9d:db:b9:29:b6:fd:94:e2:4f:09:b4:37:4d:f9:b0:04: e5:13:1c:5f:90:b2:d4:1d:29:30:35:5a:ac:1c:d9:96:08:28: 3b:a9:35:59:cc:30:da:21:e1:e2:db:33:ff:97:00:7a:3c:40: 7d:a8:d3:be:f3:10:b7:2b:0b:af:0d:dc:92:57:f3:f8:6c:2c: 01:4d:38:87:fe:6b:d4:c3:38:ba:64:5c:3f:8c:f6:d3:34:e6: 73:15:9b:a5:95:fa:ee:10:1e:08:67:6f:44:5a:2e:14:09:5b: 59:ff:e1:91:57:8b:58:f1:d2:28:26:3f:b7:fa:8e:34:49:75: f2:d4:99:a0:1a:62:34:35:b5:03:66:ba:ce:c4:e7:a0:ed:98: 2b:18:69:90:2f:ce:2c:df:db:46:1a:32:2c:9b:1f:aa:c7:14: 4f:f1:72:df:fb:5b:2a:fc:82:7c:ca:ba:3b:95:e4:58:e9:15: 9c:ed:5e:a8:72:f6:2a:08:d4:0b:f8:15:67:43:76:3d:2d:d6: 54:7f:5d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oaKnhDjzXk1diCSletRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMjY0YzNmMDk4MzFjY2Q4ODk3MTJmNGZhYjVjNWIxYmUw Y2FkNTYwHhcNMjUxMjE5MjIwMTE1WhcNMjUxMjIwMjIwMTE1WjAzMTEwLwYDVQQD Eyg1OGVlMGZiYTdhNTgzZmYwYmM3YTRlNmY0YWYyZjE1OWFkOGY2ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RGk7uV1fq4wBxQwF2fHc8zE3C22 bAw6xECKMWfwW8Hv/S8SxBSyXUqw+iFRgrFjqGBB8ySFubk4WBXvN8T7vHAPnpNr XQGjPnhuBWwUZTOIKsgzWKKpwGMRt1PbCN6jL/mPGgmjtSZD2egWamLgHvkwYzrL EuC4l+Q7nRwbWXio44YyOiwpcYXRSXH5RM9YzleXNkWnnPu5yZdYQsRCN8x7sYoJ Nwt5EYpauMt6MUIy+ztOI7Mh3CAiUQmZlQkRPTXalKBHg5ehVKRIg2E8IoiIawhM /doE7WLnxQBuagLu1fK9UonJoKJ7DQPdevR8hG1cOczj7DCkFk3YUaC5SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjuD7p6WD/wvHpOb0ry8Vmtj23MMB8GA1UdIwQY MBaAFFAmTD8JgxzNiJcS9Pq1xbG+DK1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTIt NzE0Zjk2MjZkMDIxLzEvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTItNzE0Zjk2MjZkMDIx LzEvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzsu8vcH 58q4OjIhz84lyAwg7GPGc0Cb6+QozLj6n3r8iaf2amAn68kBDWK6YeTvWtuT6jeN k+Sd27kptv2U4k8JtDdN+bAE5RMcX5Cy1B0pMDVarBzZlggoO6k1Wcww2iHh4tsz /5cAejxAfajTvvMQtysLrw3cklfz+GwsAU04h/5r1MM4umRcP4z20zTmcxWbpZX6 7hAeCGdvRFouFAlbWf/hkVeLWPHSKCY/t/qONEl18tSZoBpiNDW1A2a6zsTnoO2Y KxhpkC/OLN/bRhoyLJsfqscUT/Fy3/tbKvyCfMq6O5XkWOkVnO1eqHL2KgjUC/gV Z0N2PS3WVH9daA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:12:51 2025 by rpki-client