This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json) Hash identifier: MMwRBMqJih81iq4pQvO98LdKxX+ANmnifXohjNd9Eq0= Subject key identifier: 12:33:0F:F9:56:FB:C4:54:D8:93:DF:2E:C9:CC:B5:AF:F6:8D:76:5B Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c Certificate serial: 019B2F9ED30E01E05BB914F67920B58621BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft Manifest number: 03CA Signing time: Thu 18 Dec 2025 04:01:36 +0000 Manifest this update: Thu 18 Dec 2025 04:01:36 +0000 Manifest next update: Fri 19 Dec 2025 04:01:36 +0000 Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: N5NnYh5V58+EPm2atfTbLAIQ/YGT+uBa/2zhEymVUXU=) 2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:d3:0e:01:e0:5b:b9:14:f6:79:20:b5:86:21:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c Validity Not Before: Dec 18 04:01:36 2025 GMT Not After : Dec 19 04:01:36 2025 GMT Subject: CN=12330ff956fbc454d893df2ec9ccb5aff68d765b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:3f:1e:77:51:15:9d:a5:08:50:db:ee:9f: aa:7e:dd:7f:6f:76:1f:92:60:7c:43:ee:4d:6b:53: 64:6a:bf:42:78:e2:3c:2d:85:8c:4a:a4:d3:75:23: d5:fd:26:6b:ce:dd:90:2f:a8:51:9f:80:10:0f:3a: d1:da:29:b8:77:30:df:aa:9e:cc:ba:bc:10:f1:00: 14:be:be:a2:79:07:12:3d:f4:86:77:2e:53:8a:a9: e9:69:38:4e:8e:63:99:0b:5c:b4:b8:34:ae:3c:1f: 6f:02:b3:3b:7b:6f:18:c0:f5:93:5c:37:3a:6f:8a: 06:95:64:bf:84:9b:e6:1e:bf:c8:61:bc:0e:ec:b8: c1:f2:4c:55:77:62:45:29:c6:8e:8a:4c:dc:28:59: 80:90:8e:96:b0:d0:ed:41:fd:d4:93:3f:cc:05:af: be:ab:c4:fb:f6:84:5c:d7:f9:82:79:64:05:12:d5: b8:0d:d0:80:04:12:bd:ed:c2:14:40:95:8a:ae:ca: 3e:8e:43:f8:dc:83:ff:ff:f5:20:73:9f:b4:e9:62: 5d:1f:76:af:d6:30:52:a1:23:db:be:5c:b1:72:c8: 3e:64:20:e9:52:65:ed:58:28:ba:70:31:6e:2a:75: b7:65:38:9d:ea:1a:94:74:9c:53:9a:69:e0:64:1a: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:33:0F:F9:56:FB:C4:54:D8:93:DF:2E:C9:CC:B5:AF:F6:8D:76:5B X509v3 Authority Key Identifier: keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2c:47:fa:59:2a:09:b8:47:d4:d9:e5:5b:26:7f:f2:1f:54: 98:ab:2c:3e:6a:15:53:b4:b9:4a:d9:30:5c:63:d7:e2:18:17: 0d:b6:04:c3:fa:bb:95:f0:0b:e8:4c:39:65:d4:15:76:36:09: ac:4a:b3:ce:46:10:35:97:b2:65:ca:9e:b4:8c:65:4e:1f:b5: 22:b9:66:2f:20:99:b1:6b:43:42:02:6f:e6:b5:94:91:36:23: 3d:ec:c3:dd:42:84:26:d5:5b:ef:f5:03:37:71:15:aa:94:e9: ba:8f:87:de:6b:cc:4c:61:22:79:57:c6:ab:4a:d6:bd:c6:18: 03:2d:fb:e5:85:8d:67:78:7b:36:97:db:9e:a4:3d:d3:1e:f0: 15:23:7c:a5:da:d2:4e:9d:3b:92:92:5a:11:71:28:d0:be:65: 8c:40:ef:fc:7b:65:b2:eb:a0:d9:22:8e:9a:fe:a8:e5:81:05: d5:50:d7:c1:3d:44:f1:86:72:5f:e2:e0:30:97:95:15:bd:81: b4:61:a6:c9:0f:a6:7a:39:a9:9e:4e:ef:c3:4c:c0:32:89:f6: 54:a4:f6:7c:7f:34:69:92:01:bf:cf:56:5e:b1:96:7a:ee:b0: 93:fd:31:b8:b7:65:a2:6e:53:18:01:9d:91:0e:68:f3:8a:54: 9a:4b:42:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvntMOAeBbuRT2eSC1hiG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM0OWZlOTNhM2Y2MmFkZDRjZTk4OTFkOTAzM2VhZDgz ZDk4OGMwHhcNMjUxMjE4MDQwMTM2WhcNMjUxMjE5MDQwMTM2WjAzMTEwLwYDVQQD EygxMjMzMGZmOTU2ZmJjNDU0ZDg5M2RmMmVjOWNjYjVhZmY2OGQ3NjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWw/HndRFZ2lCFDb7p+qft1/b3Yf kmB8Q+5Na1Nkar9CeOI8LYWMSqTTdSPV/SZrzt2QL6hRn4AQDzrR2im4dzDfqp7M urwQ8QAUvr6ieQcSPfSGdy5TiqnpaThOjmOZC1y0uDSuPB9vArM7e28YwPWTXDc6 b4oGlWS/hJvmHr/IYbwO7LjB8kxVd2JFKcaOikzcKFmAkI6WsNDtQf3Ukz/MBa++ q8T79oRc1/mCeWQFEtW4DdCABBK97cIUQJWKrso+jkP43IP///Ugc5+06WJdH3av 1jBSoSPbvlyxcsg+ZCDpUmXtWCi6cDFuKnW3ZTid6hqUdJxTmmngZBoX3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIzD/lW+8RU2JPfLsnMta/2jXZbMB8GA1UdIwQY MBaAFFLcSf6To/Yq3UzpiR2QM+rYPZiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEt NmRlYzQ2OTk0YmE0LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEtNmRlYzQ2OTk0YmE0 LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKixH+lkq CbhH1NnlWyZ/8h9UmKssPmoVU7S5StkwXGPX4hgXDbYEw/q7lfAL6Ew5ZdQVdjYJ rEqzzkYQNZeyZcqetIxlTh+1IrlmLyCZsWtDQgJv5rWUkTYjPezD3UKEJtVb7/UD N3EVqpTpuo+H3mvMTGEieVfGq0rWvcYYAy375YWNZ3h7NpfbnqQ90x7wFSN8pdrS Tp07kpJaEXEo0L5ljEDv/Htlsuug2SKOmv6o5YEF1VDXwT1E8YZyX+LgMJeVFb2B tGGmyQ+mejmpnk7vw0zAMon2VKT2fH80aZIBv89WXrGWeu6wk/0xuLdlom5TGAGd kQ5o84pUmktCFg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:56 2025 by rpki-client