This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft File: UjiBmTzw22dOidtYFebxiabGDR8.mft (raw, json) Hash identifier: NXLVCrb6oei1hbmBkwN6kwpjzurqZid1yMvzca4fUIY= Subject key identifier: 26:49:C9:5B:3A:EC:DE:D6:52:52:2B:8D:07:B8:28:33:05:02:92:69 Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F Certificate issuer: /CN=523881993cf0db674e89db5815e6f189a6c60d1f Certificate serial: 019AF19AA1ED86ABE44B43A32397C005238D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft Manifest number: 0E38 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: QrLxpXcKKlTKVqNWJjfnZ5zQego.roa (hash: JlU34SAKSUABE+VJCPnsQJhW9HL/rg4ccciJ5TxRUSY=) 2: UjiBmTzw22dOidtYFebxiabGDR8.crl (hash: 7pco2MCJJI5dkaTl8pFRwNRlKRIRivB0iKxNjTBB3Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a1:ed:86:ab:e4:4b:43:a3:23:97:c0:05:23:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=2649c95b3aecded652522b8d07b8283305029269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:7f:50:4a:ab:d5:b1:49:58:89:19:86:c8: b2:1d:28:c2:36:02:fa:da:2e:68:08:66:09:71:28: 80:39:ec:58:6d:51:42:72:91:78:c3:9b:1d:42:f9: 82:46:7b:16:b4:5f:66:99:37:5e:ec:99:1b:44:48: 08:89:08:02:1e:dd:ac:24:81:c9:28:a1:95:ed:66: df:d5:12:92:22:79:30:81:a2:f9:84:65:ac:3f:8f: e0:2e:66:b1:45:b3:0c:80:26:4c:fd:c0:cb:6e:86: 13:e9:34:da:a5:35:80:e0:15:e7:72:07:fc:7b:f7: 6e:04:ae:b5:05:e0:11:6a:52:cd:07:9c:68:59:8d: 80:52:5b:c2:18:54:e8:a2:db:0b:87:21:76:0f:3d: 8b:e4:5d:14:23:c7:e4:04:42:c3:06:d1:82:e5:c6: 68:0f:c4:88:ad:16:20:25:f9:3f:74:bf:f1:2d:a6: 46:6c:4e:65:bc:7d:38:32:ce:99:e1:e8:00:80:1a: b0:ee:39:86:7e:3b:db:15:da:6d:18:bb:56:95:f5: ae:56:6b:af:32:d9:96:61:88:3d:7d:7d:d2:27:e0: 3d:bb:f4:2f:4d:0b:a1:19:4f:a1:b2:91:e8:56:79: 48:06:4c:f4:9f:d4:48:a3:70:41:84:a3:fd:c1:ff: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:49:C9:5B:3A:EC:DE:D6:52:52:2B:8D:07:B8:28:33:05:02:92:69 X509v3 Authority Key Identifier: keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:92:8f:3e:e0:12:f6:d8:55:87:9d:7a:ec:73:26:bc:c4:c1: 3d:fc:e4:e7:fc:bd:b4:3e:c3:e8:59:bb:fe:f5:9e:d2:c0:fc: 94:ed:36:05:d7:4c:a6:d2:51:07:80:dd:de:97:0c:2b:93:e9: 9f:e7:e5:76:e2:82:39:0a:b7:cd:0a:e8:35:47:ce:e1:45:9f: 68:f7:59:98:bc:cb:fa:1c:aa:f1:16:95:29:10:2f:40:f7:5d: 12:91:d0:1c:ce:40:25:ea:b0:24:96:cd:ac:94:32:f6:0e:4b: b5:8b:4b:97:e2:72:11:9e:41:a0:31:65:02:5d:92:96:8f:27: 94:a1:45:a1:42:0c:95:6b:52:b7:19:47:ee:1c:32:9a:7c:2b: 50:35:b3:5f:de:d6:dd:ef:3d:5b:a5:64:5d:24:9f:f6:20:9c: 41:60:fb:9b:71:af:5f:fb:89:3b:f7:2e:a6:aa:37:c8:29:8a: ff:69:e5:bb:85:a3:e0:c1:90:1f:7d:a9:98:c8:1e:03:fb:a9: c2:83:26:90:65:eb:7f:ba:74:8b:1f:8a:e2:23:43:9e:43:46: fa:4c:84:dd:86:80:69:04:7e:54:c4:2f:a0:0b:df:b8:f6:0b: 05:5d:ef:f4:de:04:37:36:33:e6:db:52:12:ef:8f:4a:51:78: 20:53:75:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqHthqvkS0OjI5fABSONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzg4MTk5M2NmMGRiNjc0ZTg5ZGI1ODE1ZTZmMTg5YTZj NjBkMWYwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EygyNjQ5Yzk1YjNhZWNkZWQ2NTI1MjJiOGQwN2I4MjgzMzA1MDI5MjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gN/UEqr1bFJWIkZhsiyHSjCNgL6 2i5oCGYJcSiAOexYbVFCcpF4w5sdQvmCRnsWtF9mmTde7JkbREgIiQgCHt2sJIHJ KKGV7Wbf1RKSInkwgaL5hGWsP4/gLmaxRbMMgCZM/cDLboYT6TTapTWA4BXncgf8 e/duBK61BeARalLNB5xoWY2AUlvCGFTootsLhyF2Dz2L5F0UI8fkBELDBtGC5cZo D8SIrRYgJfk/dL/xLaZGbE5lvH04Ms6Z4egAgBqw7jmGfjvbFdptGLtWlfWuVmuv MtmWYYg9fX3SJ+A9u/QvTQuhGU+hspHoVnlIBkz0n9RIo3BBhKP9wf/l6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZJyVs67N7WUlIrjQe4KDMFApJpMB8GA1UdIwQY MBaAFFI4gZk88NtnTonbWBXm8Ymmxg0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZDAzNTMtM2E2Mi00YzM5LWJkM2Et YzNhMzUyMWU4ZjcwLzEvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83ZDAzNTMtM2E2Mi00YzM5LWJkM2EtYzNhMzUyMWU4Zjcw LzEvVWppQm1UencyMmRPaWR0WUZlYnhpYWJHRFI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZKPPuAS 9thVh5167HMmvMTBPfzk5/y9tD7D6Fm7/vWe0sD8lO02BddMptJRB4Dd3pcMK5Pp n+flduKCOQq3zQroNUfO4UWfaPdZmLzL+hyq8RaVKRAvQPddEpHQHM5AJeqwJJbN rJQy9g5LtYtLl+JyEZ5BoDFlAl2Slo8nlKFFoUIMlWtStxlH7hwymnwrUDWzX97W 3e89W6VkXSSf9iCcQWD7m3GvX/uJO/cupqo3yCmK/2nlu4Wj4MGQH32pmMgeA/up woMmkGXrf7p0ix+K4iNDnkNG+kyE3YaAaQR+VMQvoAvfuPYLBV3v9N4ENzYz5ttS Eu+PSlF4IFN1jg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:25 2025 by rpki-client