This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json) Hash identifier: KtokbMJ3GjkEw76xX9yXo8G9zSrSfa/Zg9Zvo2enKxU= Subject key identifier: 17:BC:4F:FC:08:3D:38:4F:EC:0D:3F:43:BA:C6:85:0D:AE:CC:41:B2 Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Certificate serial: 019B21E276F2EE67E9DEF4C5536DE5522F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft Manifest number: 1787 Signing time: Mon 15 Dec 2025 12:00:48 +0000 Manifest this update: Mon 15 Dec 2025 12:00:48 +0000 Manifest next update: Tue 16 Dec 2025 12:00:48 +0000 Files and hashes: 1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=) 2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: 63XlS67ral9ygAel98P3fw3/+6A/jRtHHweeCcrDq+E=) 3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=) 4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=) 5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=) 6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:76:f2:ee:67:e9:de:f4:c5:53:6d:e5:52:2f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Validity Not Before: Dec 15 12:00:48 2025 GMT Not After : Dec 16 12:00:48 2025 GMT Subject: CN=17bc4ffc083d384fec0d3f43bac6850daecc41b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:5b:d3:38:0c:6c:dd:15:c4:00:4a:d1:07: f0:d6:f9:01:aa:ef:79:9a:5b:bf:06:a1:b0:80:72: 4f:64:bb:1e:cf:74:4c:bc:4c:e4:11:61:d2:6d:1a: c6:d0:1c:36:e9:4b:d0:12:f2:16:0a:a3:83:e0:e4: a8:0c:90:b3:d7:e7:99:18:fa:8e:9e:b9:18:5a:5d: a9:29:81:9e:30:88:df:60:cc:de:ba:da:d2:d2:68: b5:1a:19:42:bf:25:61:45:e7:c2:70:1b:b9:08:22: 14:81:19:ed:07:f2:2f:69:ae:55:b9:c2:14:40:a2: 42:b6:fa:aa:10:e5:c4:36:e3:7e:61:10:4a:0a:d7: d9:44:c7:d2:e9:cf:3f:15:09:fd:24:f4:e4:34:0c: d1:63:66:a0:08:db:b6:1f:80:67:39:bc:ea:3a:36: 34:33:ab:11:f7:8e:de:e8:c8:d6:7c:f2:ea:2c:de: a0:66:1b:70:6c:92:5d:9a:13:8c:ec:f3:c3:b0:23: 28:e0:5e:eb:08:c1:ef:01:55:c2:a3:83:eb:c8:87: 5e:e0:dc:ec:e8:ba:26:b0:26:e3:6f:5c:d8:77:8d: 98:4f:45:85:8c:8d:55:8c:9e:bc:ef:f2:56:97:86: 30:67:92:12:37:aa:a9:68:e2:43:a5:86:fb:e8:a4: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BC:4F:FC:08:3D:38:4F:EC:0D:3F:43:BA:C6:85:0D:AE:CC:41:B2 X509v3 Authority Key Identifier: keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cb:0d:5d:02:56:64:70:f6:55:fa:34:58:da:31:3b:53:09: 5c:bb:81:ed:e9:f6:82:89:5b:70:58:bc:55:6b:b9:bc:6d:c2: e7:7a:a9:29:89:a0:45:e8:3b:eb:57:e8:c6:11:4f:67:6e:11: c2:53:56:00:4f:ff:c7:33:5d:78:01:06:97:75:3b:f2:aa:e9: da:44:89:8c:e4:e9:b4:81:b2:a8:d3:ac:79:18:e2:ea:dd:7b: c2:4e:8b:9d:d7:80:76:d3:c1:74:26:ee:1a:3c:b7:e9:71:f3: f6:c7:89:a1:ae:9a:b3:3f:3e:88:a4:44:d8:28:0d:ea:42:96: 40:ce:09:44:ff:80:06:84:f0:25:ec:8c:47:99:42:d3:0b:64: fb:51:8b:3f:e1:cf:8f:eb:52:40:6d:3b:ec:1e:cc:a9:a7:49: 45:92:d8:7d:c4:1e:a3:10:1d:87:02:9c:97:d8:d4:84:72:3d: 1b:e8:4c:3f:ea:84:26:39:80:73:3d:67:99:67:ac:ed:24:80: a1:ed:d2:c4:58:89:a4:d3:63:ce:a2:e4:8f:3b:57:0b:3c:2e: 82:ca:1a:a6:e7:bf:a9:54:88:f7:89:7b:64:d9:1f:e3:fc:67: cc:cb:ad:9e:9d:97:4a:9d:95:52:37:53:95:98:30:2f:d4:b2: 8a:f1:f4:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4nby7mfp3vTFU23lUi+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi MjczYTEwHhcNMjUxMjE1MTIwMDQ4WhcNMjUxMjE2MTIwMDQ4WjAzMTEwLwYDVQQD EygxN2JjNGZmYzA4M2QzODRmZWMwZDNmNDNiYWM2ODUwZGFlY2M0MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTdb0zgMbN0VxABK0Qfw1vkBqu95 mlu/BqGwgHJPZLsez3RMvEzkEWHSbRrG0Bw26UvQEvIWCqOD4OSoDJCz1+eZGPqO nrkYWl2pKYGeMIjfYMzeutrS0mi1GhlCvyVhRefCcBu5CCIUgRntB/Ivaa5VucIU QKJCtvqqEOXENuN+YRBKCtfZRMfS6c8/FQn9JPTkNAzRY2agCNu2H4BnObzqOjY0 M6sR947e6MjWfPLqLN6gZhtwbJJdmhOM7PPDsCMo4F7rCMHvAVXCo4PryIde4Nzs 6LomsCbjb1zYd42YT0WFjI1VjJ687/JWl4YwZ5ISN6qpaOJDpYb76KTlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe8T/wIPThP7A0/Q7rGhQ2uzEGyMB8GA1UdIwQY MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt MTNlZDYzM2Y5MjJhLzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbssNXQJW ZHD2Vfo0WNoxO1MJXLuB7en2golbcFi8VWu5vG3C53qpKYmgReg761foxhFPZ24R wlNWAE//xzNdeAEGl3U78qrp2kSJjOTptIGyqNOseRji6t17wk6LndeAdtPBdCbu Gjy36XHz9seJoa6asz8+iKRE2CgN6kKWQM4JRP+ABoTwJeyMR5lC0wtk+1GLP+HP j+tSQG077B7MqadJRZLYfcQeoxAdhwKcl9jUhHI9G+hMP+qEJjmAcz1nmWes7SSA oe3SxFiJpNNjzqLkjztXCzwugsoapue/qVSI94l7ZNkf4/xnzMutnp2XSp2VUjdT lZgwL9SyivH0Ww== -----END CERTIFICATE-----Generated at Mon Dec 15 20:12:48 2025 by rpki-client