This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json) Hash identifier: 5cgEgabXgL2YDgdO1UoPJFQLfBrKdweeuyTJfBRDQCw= Subject key identifier: 23:2D:93:7D:6E:2A:C4:83:55:A7:1F:65:9F:6B:AA:75:02:F4:50:08 Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63 Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863 Certificate serial: 019AF540AD3928E8AEDC552751A045E52D4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 20:00:47 +0000 Manifest this update: Sat 06 Dec 2025 20:00:47 +0000 Manifest next update: Sun 07 Dec 2025 20:00:47 +0000 Files and hashes: 1: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=) 2: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: psCPbbNhrCT4tXJR2jlY/UcsTFBGTv35FBJdegHQEGM=) 3: aAPjM_XPDDQsO68mlmOjlIms0io.roa (hash: xF98ssC/+VTcwkX22EdQGZnLSnHebds/QYmj2MMKLB8=) 4: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ad:39:28:e8:ae:dc:55:27:51:a0:45:e5:2d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863 Validity Not Before: Dec 6 20:00:47 2025 GMT Not After : Dec 7 20:00:47 2025 GMT Subject: CN=232d937d6e2ac48355a71f659f6baa7502f45008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f9:f8:84:7f:44:a0:6e:9f:39:60:c3:01:91: ab:63:c9:61:0a:0d:5d:c3:c8:b1:33:72:65:5c:5b: 6b:e6:55:6b:66:1d:a4:2d:44:22:ae:74:02:4b:4a: e9:b8:db:79:69:98:ad:0e:dd:bc:9c:08:cc:f8:d1: 0c:de:09:db:ee:7f:53:d2:57:67:12:39:17:40:7f: 85:bf:c7:b1:5c:f0:83:8e:b9:85:d2:2e:ee:6c:b3: 4d:17:5d:80:6f:59:43:82:26:fc:b1:df:16:a3:46: 27:b4:ce:95:c1:22:b5:3d:01:5b:f1:9a:e4:ef:da: 1b:d8:cb:b5:05:e0:2c:9e:2e:3e:d4:3b:18:62:85: 35:6d:2d:11:a1:f1:33:26:11:35:5c:08:7c:8c:e4: 1e:39:7a:4e:0a:88:12:33:84:3e:d3:10:8f:53:37: 50:31:4e:0c:22:21:70:b8:06:6b:18:d9:7c:54:3a: c0:59:24:5a:1e:85:74:9b:e4:f3:1e:98:e9:42:d1: 57:f5:20:3d:76:c6:9b:ee:3e:1c:3b:8a:a7:6a:72: 17:8f:49:56:03:43:2a:0a:74:00:25:d7:34:15:59: c2:10:92:44:0f:c4:86:39:3b:9a:16:ed:52:27:3a: b9:2e:93:05:25:b6:46:3e:b1:d2:9d:b3:4a:ef:55: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:93:7D:6E:2A:C4:83:55:A7:1F:65:9F:6B:AA:75:02:F4:50:08 X509v3 Authority Key Identifier: keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4b:1e:b2:33:46:77:15:7b:fe:28:2d:84:d5:64:bc:fa:90: b6:21:cc:47:68:9a:8b:07:71:4c:b3:66:09:c8:a1:9b:ba:c2: 75:d1:44:ad:75:f4:6d:78:29:ed:3b:e8:ce:5c:13:50:43:91: 53:e0:23:6a:6b:7e:74:40:a7:8d:9d:5f:ae:e5:b3:d1:77:46: a5:bd:4e:8e:5d:d8:cb:a2:5e:b8:b5:5d:3a:ae:f3:d9:da:c5: 47:5b:bb:51:8b:00:a7:95:ca:06:e8:74:c5:96:e7:ec:31:26: 90:77:d4:05:f8:57:28:ec:b4:a4:d6:8b:24:21:c2:f0:c2:1e: a3:e9:d5:e7:ec:c4:7e:c9:f3:5f:ee:5e:f1:8d:21:40:c2:c0: d5:67:1d:cc:dc:fe:16:db:53:d4:dd:dd:1a:10:e7:e8:b3:07: f3:9a:44:1f:9d:53:51:76:5b:bb:cd:61:34:5a:96:10:ab:39: c2:77:93:70:df:df:a1:42:f4:15:1e:88:60:d2:0e:32:2e:5a: 5a:73:35:b6:83:7f:00:50:30:74:12:3b:e9:b6:1f:ea:c9:fd: 32:ce:fc:35:07:81:55:55:ea:15:71:0a:e1:22:68:60:c2:a2: 8e:8a:75:f0:c6:ef:63:a8:6d:82:cf:9c:0f:7f:31:2b:61:d9: e3:52:3f:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QK05KOiu3FUnUaBF5S1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNWI3MDVhOTFkYmMzMGVkMTBlYjcyMjJiNzc5N2I4MzRl MDE4NjMwHhcNMjUxMjA2MjAwMDQ3WhcNMjUxMjA3MjAwMDQ3WjAzMTEwLwYDVQQD EygyMzJkOTM3ZDZlMmFjNDgzNTVhNzFmNjU5ZjZiYWE3NTAyZjQ1MDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vn4hH9EoG6fOWDDAZGrY8lhCg1d w8ixM3JlXFtr5lVrZh2kLUQirnQCS0rpuNt5aZitDt28nAjM+NEM3gnb7n9T0ldn EjkXQH+Fv8exXPCDjrmF0i7ubLNNF12Ab1lDgib8sd8Wo0YntM6VwSK1PQFb8Zrk 79ob2Mu1BeAsni4+1DsYYoU1bS0RofEzJhE1XAh8jOQeOXpOCogSM4Q+0xCPUzdQ MU4MIiFwuAZrGNl8VDrAWSRaHoV0m+TzHpjpQtFX9SA9dsab7j4cO4qnanIXj0lW A0MqCnQAJdc0FVnCEJJED8SGOTuaFu1SJzq5LpMFJbZGPrHSnbNK71Wh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMtk31uKsSDVacfZZ9rqnUC9FAIMB8GA1UdIwQY MBaAFFJbcFqR28MO0Q63Iit3l7g04BhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQt ZjQ2ODg3ZGY5ODYzLzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mNDYyZGMtOWU1OS00ZThkLTljNmQtZjQ2ODg3ZGY5ODYz LzEvVWx0d1dwSGJ3dzdSRHJjaUszZVh1RFRnR0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEsesjNG dxV7/igthNVkvPqQtiHMR2iaiwdxTLNmCcihm7rCddFErXX0bXgp7TvozlwTUEOR U+Ajamt+dECnjZ1fruWz0XdGpb1Ojl3Yy6JeuLVdOq7z2drFR1u7UYsAp5XKBuh0 xZbn7DEmkHfUBfhXKOy0pNaLJCHC8MIeo+nV5+zEfsnzX+5e8Y0hQMLA1WcdzNz+ FttT1N3dGhDn6LMH85pEH51TUXZbu81hNFqWEKs5wneTcN/foUL0FR6IYNIOMi5a WnM1toN/AFAwdBI76bYf6sn9Ms78NQeBVVXqFXEK4SJoYMKijop18MbvY6htgs+c D38xK2HZ41I/XQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:52 2025 by rpki-client