This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json) Hash identifier: WdghGFtoiqDUiDdf1/F8+I6S2c4mnAd5xTAVEHqUCWw= Subject key identifier: FC:F1:10:52:B5:8C:CE:8B:13:99:29:A9:54:AC:7F:C4:61:1C:E3:F2 Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e Certificate serial: 019B2EFA64BB8AF0A9435315D639D1CCE157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft Manifest number: 0B8E Signing time: Thu 18 Dec 2025 01:02:00 +0000 Manifest this update: Thu 18 Dec 2025 01:02:00 +0000 Manifest next update: Fri 19 Dec 2025 01:02:00 +0000 Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=) 2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: vHCxLhPwvSyk9vh6r9Xn7ZmJ3Lqhu+IT5ru3FVWTCwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:64:bb:8a:f0:a9:43:53:15:d6:39:d1:cc:e1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e Validity Not Before: Dec 18 01:02:00 2025 GMT Not After : Dec 19 01:02:00 2025 GMT Subject: CN=fcf11052b58cce8b139929a954ac7fc4611ce3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:b4:0c:fa:d1:14:74:22:24:b5:20:47:11: 63:36:4a:f6:5d:18:8e:c6:c7:51:90:63:0e:f2:44: 78:51:48:33:7b:74:35:a5:b9:c9:20:73:06:37:89: d7:3b:dd:2a:11:1e:fa:68:64:75:26:f6:5f:24:e3: 04:d6:a2:0c:a4:57:a2:53:76:bd:25:9b:de:ee:95: 4f:71:39:f3:6e:a2:3c:ec:a2:e4:58:b0:4a:66:df: 5a:b3:07:16:24:1a:a1:0e:ab:55:62:20:d2:29:d1: 15:59:da:a8:44:2d:be:a8:06:79:35:92:8d:51:49: 2b:8f:07:3b:b3:9d:63:3f:6c:c3:0c:d4:89:c6:92: b5:7c:f8:0f:14:0a:a7:6b:42:74:0d:27:90:f1:2b: c2:6a:70:27:70:4b:26:fe:8d:b6:2c:54:ec:c8:f2: 7f:09:31:d4:f0:67:e6:98:65:6d:d5:9b:f2:5e:95: 40:8b:7b:1f:b7:89:f3:79:d8:b8:1d:20:23:2f:86: bf:b3:30:d7:7a:89:b0:26:9d:75:29:6b:f2:ed:dc: 7c:e8:af:ed:ab:44:81:2b:9a:96:87:59:81:d1:ab: 09:43:57:46:1f:94:ef:0e:6e:53:37:41:05:f8:0a: 0e:71:37:b4:0b:dc:5d:fe:b2:6b:5a:c8:d9:f4:33: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F1:10:52:B5:8C:CE:8B:13:99:29:A9:54:AC:7F:C4:61:1C:E3:F2 X509v3 Authority Key Identifier: keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:82:be:9f:fd:9a:8c:d6:a0:39:3b:19:59:6f:8a:ff:3a:2c: 28:c4:c7:b1:93:2d:8e:2a:56:cb:24:49:9e:3d:3b:33:0b:fe: fe:46:c3:7d:99:0e:26:8a:c8:52:2d:32:25:74:2d:af:0c:5e: b4:60:6a:2a:18:e8:aa:07:64:53:bc:ec:f2:fd:df:07:d3:29: 32:8f:18:c4:83:1a:c7:9e:22:22:97:14:5c:67:22:77:26:c0: 07:24:b6:3b:5f:b4:38:c1:0e:1e:60:23:ce:c0:40:27:bb:c0: 41:f6:90:fc:c2:e7:3d:74:44:b1:52:67:54:fb:98:6b:14:b4: 45:91:9e:46:1b:d4:d8:53:db:ee:d5:d6:02:36:fb:79:40:61: ea:3c:c9:33:b4:8d:ff:4f:6d:3b:b6:fe:d7:ee:e0:06:ab:ad: 0d:05:a9:67:6d:b6:be:b7:04:62:6c:5b:b6:1a:91:ab:e1:5b: a4:49:7e:e3:0d:56:28:ad:9b:ec:bd:a0:ef:8c:4d:10:5d:c4: f8:46:c7:cb:b7:dc:0f:fd:71:a6:6f:eb:f4:db:06:da:13:fd: 1a:60:85:6b:46:8c:72:83:59:cd:33:1d:38:5a:32:00:f7:97: eb:9a:a0:6d:51:54:15:32:6a:e2:77:17:55:42:2d:90:cb:cc: f0:1c:5a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+mS7ivCpQ1MV1jnRzOFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTg2YjE0MWM1MWM2NWVlYWJkNmU2MmVhNTIyZWRjNTk4 ODUyNmUwHhcNMjUxMjE4MDEwMjAwWhcNMjUxMjE5MDEwMjAwWjAzMTEwLwYDVQQD EyhmY2YxMTA1MmI1OGNjZThiMTM5OTI5YTk1NGFjN2ZjNDYxMWNlM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtym0DPrRFHQiJLUgRxFjNkr2XRiO xsdRkGMO8kR4UUgze3Q1pbnJIHMGN4nXO90qER76aGR1JvZfJOME1qIMpFeiU3a9 JZve7pVPcTnzbqI87KLkWLBKZt9aswcWJBqhDqtVYiDSKdEVWdqoRC2+qAZ5NZKN UUkrjwc7s51jP2zDDNSJxpK1fPgPFAqna0J0DSeQ8SvCanAncEsm/o22LFTsyPJ/ CTHU8GfmmGVt1ZvyXpVAi3sft4nzedi4HSAjL4a/szDXeomwJp11KWvy7dx86K/t q0SBK5qWh1mB0asJQ1dGH5TvDm5TN0EF+AoOcTe0C9xd/rJrWsjZ9DPGnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzxEFK1jM6LE5kpqVSsf8RhHOPyMB8GA1UdIwQY MBaAFFLoaxQcUcZe6r1uYupSLtxZiFJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQt YzY4N2U3OTJiMjVkLzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQtYzY4N2U3OTJiMjVk LzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYK+n/2a jNagOTsZWW+K/zosKMTHsZMtjipWyyRJnj07Mwv+/kbDfZkOJorIUi0yJXQtrwxe tGBqKhjoqgdkU7zs8v3fB9MpMo8YxIMax54iIpcUXGcidybAByS2O1+0OMEOHmAj zsBAJ7vAQfaQ/MLnPXREsVJnVPuYaxS0RZGeRhvU2FPb7tXWAjb7eUBh6jzJM7SN /09tO7b+1+7gBqutDQWpZ222vrcEYmxbthqRq+FbpEl+4w1WKK2b7L2g74xNEF3E +EbHy7fcD/1xpm/r9NsG2hP9GmCFa0aMcoNZzTMdOFoyAPeX65qgbVFUFTJq4ncX VUItkMvM8BxahQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:32 2025 by rpki-client