This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json) Hash identifier: JR00o5UuvGgUfhC+AYNoRu80tT/BAA5D7GIttAaH/F4= Subject key identifier: 73:E7:1B:92:1D:DD:EF:F3:DB:57:F1:CF:52:57:C9:D9:B9:6B:96:1E Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Certificate serial: 019AF389B1E0790533D0F1C37CB9C561106D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft Manifest number: 14C4 Signing time: Sat 06 Dec 2025 12:01:18 +0000 Manifest this update: Sat 06 Dec 2025 12:01:18 +0000 Manifest next update: Sun 07 Dec 2025 12:01:18 +0000 Files and hashes: 1: GWpLZTUJGEVrd-2Kx1-8KQelfBQ.roa (hash: XEil5EQouHS7Pi+DjPJi6H4SvK82Cqfn0n7c1wQAZUU=) 2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: eV+U8Mmx0XzhtY0x6RL6oTNmPDsu7nEg1ac0tzh6q/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b1:e0:79:05:33:d0:f1:c3:7c:b9:c5:61:10:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Validity Not Before: Dec 6 12:01:18 2025 GMT Not After : Dec 7 12:01:18 2025 GMT Subject: CN=73e71b921dddeff3db57f1cf5257c9d9b96b961e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:ee:d9:5d:88:ed:f4:f2:91:1f:28:9a:ce: 2f:ad:87:94:ae:b9:2f:95:cd:fb:c3:06:25:ba:d3: d7:50:b0:7e:dd:71:d0:13:36:ae:4a:99:e8:56:67: b3:48:68:3f:53:d1:57:d8:63:1a:b8:00:86:50:0f: 22:90:07:17:7c:cc:74:3f:42:d2:c0:ba:5e:cf:48: 9e:90:9a:b4:f7:f7:d2:a5:06:35:2f:e8:ef:af:5a: ef:a9:e3:ea:80:cb:3d:77:1c:55:8d:4a:a3:d4:53: a1:01:f8:35:c8:a4:d4:c6:e7:bb:36:61:af:54:d7: ac:5c:ce:36:ac:cc:89:d5:74:4d:19:89:a9:2e:24: 07:c5:a3:3f:f3:53:72:c9:db:fb:2d:e3:cd:23:15: 6f:c2:16:b7:fb:6e:36:a9:87:61:4d:cb:53:15:61: 99:bd:cf:cc:c4:ac:3a:e9:b3:cf:0a:10:8e:30:b5: 62:1d:e8:74:d2:8a:52:e9:51:d2:96:4d:49:2e:77: 4a:96:1e:ef:10:c0:38:18:a4:44:ed:80:6a:6c:3a: b6:61:3e:56:d6:bc:05:47:28:83:b8:fe:30:4b:18: 30:bf:9a:1c:74:18:65:a3:a2:9a:69:05:6f:91:e2: 71:fb:86:ed:e6:1b:fd:e2:81:fa:e7:a9:31:79:87: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E7:1B:92:1D:DD:EF:F3:DB:57:F1:CF:52:57:C9:D9:B9:6B:96:1E X509v3 Authority Key Identifier: keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f3:db:16:0a:a6:15:af:bd:ea:4b:d2:49:2d:5d:95:76:23: 61:a0:c6:08:15:f3:cb:b3:f7:d4:e5:c1:da:6e:62:89:e6:7d: ce:20:7a:57:ed:00:5e:b7:44:a5:24:e3:af:6e:db:9c:71:4b: ca:e0:e9:b8:68:e5:ab:b1:c6:80:4c:e5:f0:38:68:55:0b:bc: 59:6c:42:c6:14:8d:3b:45:5a:ca:ff:ee:6c:43:7b:54:cc:c9: 56:d2:e9:ce:05:50:80:22:05:47:f0:9a:b4:02:7a:b2:db:50: 4f:fb:96:6c:d7:15:d1:b2:ec:55:c7:32:78:0b:ed:1c:75:63: 9c:75:1a:c3:3e:18:dc:e1:70:5a:a3:93:cf:ca:31:f3:45:e5: c5:58:a6:27:1e:23:f1:2f:c5:28:75:03:ae:59:0e:7f:30:37: e1:b5:ce:32:fc:67:38:09:71:b0:85:05:79:d3:c0:19:b3:17: d2:1d:86:15:e2:08:f0:cb:47:4c:84:38:82:7a:a8:7e:12:9e: 5a:0c:17:c5:86:33:88:a1:4d:36:e8:8f:2c:13:07:16:d7:50: 71:8a:80:1a:cc:06:b7:80:21:e0:4d:bf:d2:36:56:5b:ed:88: ff:77:6a:ff:ad:a7:cc:16:93:8c:75:6b:7d:9d:ca:58:ac:f6: 89:d2:5a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibHgeQUz0PHDfLnFYRBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzJkNDRkOWUwOGM4NzNkYjM1YzAyMTUxY2E0NGFlNTRi NGI4YWYwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD Eyg3M2U3MWI5MjFkZGRlZmYzZGI1N2YxY2Y1MjU3YzlkOWI5NmI5NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU/u2V2I7fTykR8oms4vrYeUrrkv lc37wwYlutPXULB+3XHQEzauSpnoVmezSGg/U9FX2GMauACGUA8ikAcXfMx0P0LS wLpez0iekJq09/fSpQY1L+jvr1rvqePqgMs9dxxVjUqj1FOhAfg1yKTUxue7NmGv VNesXM42rMyJ1XRNGYmpLiQHxaM/81Nyydv7LePNIxVvwha3+242qYdhTctTFWGZ vc/MxKw66bPPChCOMLViHeh00opS6VHSlk1JLndKlh7vEMA4GKRE7YBqbDq2YT5W 1rwFRyiDuP4wSxgwv5ocdBhlo6KaaQVvkeJx+4bt5hv94oH656kxeYcrowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPnG5Id3e/z21fxz1JXydm5a5YeMB8GA1UdIwQY MBaAFFIy1E2eCMhz2zXAIVHKRK5UtLivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYt YTY1NDFjZWIxZTQzLzEvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYtYTY1NDFjZWIxZTQz LzEvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/PbFgqm Fa+96kvSSS1dlXYjYaDGCBXzy7P31OXB2m5iieZ9ziB6V+0AXrdEpSTjr27bnHFL yuDpuGjlq7HGgEzl8DhoVQu8WWxCxhSNO0Vayv/ubEN7VMzJVtLpzgVQgCIFR/Ca tAJ6sttQT/uWbNcV0bLsVccyeAvtHHVjnHUawz4Y3OFwWqOTz8ox80XlxVimJx4j 8S/FKHUDrlkOfzA34bXOMvxnOAlxsIUFedPAGbMX0h2GFeII8MtHTIQ4gnqofhKe WgwXxYYziKFNNuiPLBMHFtdQcYqAGswGt4Ah4E2/0jZWW+2I/3dq/62nzBaTjHVr fZ3KWKz2idJapg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:56 2025 by rpki-client