This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json) Hash identifier: RkTRuF3k6TF4TJcVpLZF4wUGQ8ChhPua3XVC4qnMn7E= Subject key identifier: ED:67:49:11:E0:F4:7F:C9:08:48:42:D3:E0:A0:42:B1:94:FE:C9:49 Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb Certificate serial: 019AF276AE0936D6094AC084959C9F2D8A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=) 2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: 3y6HxLrUR7aCLfd4M2JErc8jDf/wNqo+89oxPNr7AlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ae:09:36:d6:09:4a:c0:84:95:9c:9f:2d:8a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=ed674911e0f47fc9084842d3e0a042b194fec949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:9a:51:57:e1:d0:5c:04:35:fd:b3:32:cd: 6e:64:9a:2d:5e:fc:1f:36:43:fa:2e:59:8d:93:02: c9:ec:06:af:4c:ab:07:8d:7b:f2:f6:13:6b:e5:d6: a8:ef:cd:5f:30:02:57:39:02:50:1d:a7:84:18:ed: 84:93:ef:51:8c:89:60:19:c4:91:5c:f9:2a:c0:fd: b5:10:81:32:ed:f3:d3:cc:87:d5:f1:33:0e:65:97: 9b:57:bf:7c:c1:6d:62:4b:ed:81:ce:c1:e0:b8:95: e8:92:8c:45:7e:08:2c:3f:1b:12:83:1c:c4:88:cf: 4d:8f:42:69:0c:7d:a7:48:8f:dd:d0:d7:58:99:58: 02:43:a6:04:7e:77:c7:23:b5:c9:6c:f6:2b:8b:42: 02:91:8a:2c:69:9a:93:a8:94:d4:47:1c:07:a6:2c: 0d:d2:a7:16:b3:8e:36:d6:f1:ea:8e:b7:4e:50:e5: 90:cd:86:9e:24:ec:c2:5d:81:64:26:d6:f7:18:5e: f0:da:27:75:90:b2:a6:98:f4:dd:80:96:63:e3:92: f8:1d:0d:4b:3f:b6:85:b7:17:58:b2:16:84:77:0b: a8:8f:e7:c9:74:5c:ef:2e:4c:43:9d:ee:0f:c2:48: 1b:32:3a:70:6b:b6:40:19:56:8c:18:85:ac:95:31: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:67:49:11:E0:F4:7F:C9:08:48:42:D3:E0:A0:42:B1:94:FE:C9:49 X509v3 Authority Key Identifier: keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ae:29:40:d2:e3:5d:c5:3c:21:57:0e:3a:ca:9d:02:c8:d5: e2:f6:79:94:78:fa:9b:b5:2e:6d:f9:cd:8a:f4:22:26:68:57: ce:de:42:22:de:70:89:29:5f:59:75:e8:9d:44:6b:6d:8f:b6: 4f:d6:94:59:18:e3:aa:0a:28:d9:b2:ec:e1:79:9d:03:69:6c: aa:87:1b:64:03:88:49:c0:66:fe:24:19:7e:7f:86:d3:d5:4b: 7c:7b:6b:b7:95:00:84:10:86:c0:58:f4:6c:0e:b7:03:c3:3c: f4:5c:75:dd:a2:59:ab:b4:8a:6d:d0:6c:9b:8b:ff:58:1c:97: 70:06:f3:ff:da:f2:fd:1e:67:4a:0c:6f:4b:40:74:ad:84:50: 5b:37:c0:d9:62:fe:da:b0:9b:73:44:3c:20:ba:3e:f3:5f:d2: 80:06:fa:df:e0:cc:05:f8:ef:19:21:b6:90:2c:7e:b6:f5:86: db:9d:93:d0:f8:91:6a:57:68:72:4b:36:f2:3b:6f:94:5c:65: f5:4e:ad:f4:29:ea:19:47:73:d1:43:27:31:13:a1:0f:41:d2: a4:46:e2:36:a4:08:f1:26:b9:82:6f:b7:05:4c:dd:61:46:ff: 0d:cf:80:31:c8:fd:28:83:aa:89:e9:1c:97:b7:60:15:3e:9e: 70:3e:1a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydq4JNtYJSsCElZyfLYpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZjYyOWYzNGNkMDgzYmM2ODA1NDA2OWIxY2M1ZWU3OTcx ZjhiYmIwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD EyhlZDY3NDkxMWUwZjQ3ZmM5MDg0ODQyZDNlMGEwNDJiMTk0ZmVjOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdiaUVfh0FwENf2zMs1uZJotXvwf NkP6LlmNkwLJ7AavTKsHjXvy9hNr5dao781fMAJXOQJQHaeEGO2Ek+9RjIlgGcSR XPkqwP21EIEy7fPTzIfV8TMOZZebV798wW1iS+2BzsHguJXokoxFfggsPxsSgxzE iM9Nj0JpDH2nSI/d0NdYmVgCQ6YEfnfHI7XJbPYri0ICkYosaZqTqJTURxwHpiwN 0qcWs4421vHqjrdOUOWQzYaeJOzCXYFkJtb3GF7w2id1kLKmmPTdgJZj45L4HQ1L P7aFtxdYshaEdwuoj+fJdFzvLkxDne4PwkgbMjpwa7ZAGVaMGIWslTEwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1nSRHg9H/JCEhC0+CgQrGU/slJMB8GA1UdIwQY MBaAFFL2KfNM0IO8aAVAabHMXueXH4u7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEt OTdhNDI4M2I2MjkyLzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEtOTdhNDI4M2I2Mjky LzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY64pQNLj XcU8IVcOOsqdAsjV4vZ5lHj6m7UubfnNivQiJmhXzt5CIt5wiSlfWXXonURrbY+2 T9aUWRjjqgoo2bLs4XmdA2lsqocbZAOIScBm/iQZfn+G09VLfHtrt5UAhBCGwFj0 bA63A8M89Fx13aJZq7SKbdBsm4v/WByXcAbz/9ry/R5nSgxvS0B0rYRQWzfA2WL+ 2rCbc0Q8ILo+81/SgAb63+DMBfjvGSG2kCx+tvWG252T0PiRaldocks28jtvlFxl 9U6t9CnqGUdz0UMnMROhD0HSpEbiNqQI8Sa5gm+3BUzdYUb/Dc+AMcj9KIOqiekc l7dgFT6ecD4azw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:53 2025 by rpki-client