This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft File: uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json) Hash identifier: puvE6m730sXkSF/eoMFgPF5m+zoOi657OFgLf8TcZbQ= Subject key identifier: 54:B9:A7:46:E9:5D:9C:C8:53:2D:4F:48:BC:F0:6E:15:C5:E7:8B:02 Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53 Certificate issuer: /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053 Certificate serial: 019B34C639272F8791B0CC9BB347D35F3E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft Manifest number: 1002 Signing time: Fri 19 Dec 2025 04:02:44 +0000 Manifest this update: Fri 19 Dec 2025 04:02:44 +0000 Manifest next update: Sat 20 Dec 2025 04:02:44 +0000 Files and hashes: 1: N3q6u0fJAm5cfueMeHqWslOkGeg.roa (hash: PA7XmdPesUmpMNoT7zqJAR9d7u3yrzJY6Ip8rCLxobU=) 2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: 1I7nGMjYEGTTkJrlAOxs7irPTXv1ieybx00ZApL5crg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:39:27:2f:87:91:b0:cc:9b:b3:47:d3:5f:3e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053 Validity Not Before: Dec 19 04:02:44 2025 GMT Not After : Dec 20 04:02:44 2025 GMT Subject: CN=54b9a746e95d9cc8532d4f48bcf06e15c5e78b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:65:48:93:45:5d:47:96:e3:bf:9f:69:af: 49:fa:e6:88:e8:49:d9:13:60:81:38:7d:22:d2:4b: 53:fb:e3:e0:aa:fd:97:a5:7a:1c:47:29:4b:e3:71: 4f:fe:26:96:de:7d:fa:d5:d7:89:c8:d3:c1:2f:98: 69:31:03:dc:3e:83:6d:45:e2:e3:2e:c4:e3:19:02: 31:cd:e7:e2:7c:b7:e9:dc:87:56:82:14:76:b6:c2: 40:22:51:6c:a3:97:6e:66:5f:d8:9e:ff:0b:21:49: c0:18:c5:6d:fb:6d:20:3e:3c:72:db:d0:be:cd:f5: 12:b9:37:20:08:93:ee:38:7d:c9:58:37:48:a0:cf: 32:1a:d3:bb:56:45:32:2c:1d:36:17:45:48:ae:c8: 38:83:54:13:a8:98:19:f2:32:59:89:a5:96:97:3a: 07:21:42:63:10:06:d9:5f:72:fa:53:dc:a6:26:02: c8:26:b0:53:23:57:63:36:e3:4a:fd:06:ce:6b:99: 23:23:83:26:87:13:fc:86:63:85:7c:6a:ea:66:6e: 0b:6a:eb:87:1c:11:c7:ba:2c:b4:55:a4:18:55:47: 12:b6:c5:7b:09:aa:ab:7d:eb:1b:0c:4a:5d:5a:2d: ba:ed:40:5f:94:f8:65:36:20:46:d7:7e:dd:f9:ca: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B9:A7:46:E9:5D:9C:C8:53:2D:4F:48:BC:F0:6E:15:C5:E7:8B:02 X509v3 Authority Key Identifier: keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:ed:ff:74:82:c5:11:44:9d:87:c5:e7:d2:b8:64:31:e4: bc:ea:0c:2f:26:30:d0:96:a6:14:d5:11:6c:63:54:f3:48:06: 46:db:55:66:af:35:ca:25:b2:42:8f:4c:80:d0:e2:48:93:d2: 37:83:cd:f0:85:76:90:52:50:f5:e5:51:54:c2:a6:e4:cb:87: dd:63:c2:c4:8c:9a:be:ba:6a:10:3a:6f:bf:ae:74:45:e6:94: 65:0b:37:78:d5:a0:81:cc:5e:cd:cd:63:eb:2f:f7:c4:7c:e9: 03:a8:b0:d3:1f:3d:96:72:cd:b9:ce:1b:61:ed:99:68:a9:65: db:67:72:34:87:83:e2:44:02:04:da:27:bc:bb:be:b3:13:1b: 5d:5d:70:62:cd:f8:38:bc:7d:03:93:2f:b5:ba:83:ba:0a:cc: 93:e3:b5:78:bb:3e:3a:61:64:bf:6e:11:10:e0:44:22:5d:ad: ae:18:cd:87:8c:1f:1d:b5:53:6d:0f:2b:74:41:ab:bb:a0:8e: 4c:0b:08:bb:38:24:52:76:50:8e:3a:70:f8:ca:e1:7f:7e:28: b4:ff:d9:2e:f1:d4:71:fc:d3:a9:9a:2e:c5:09:13:e3:9b:3e: c5:47:4a:92:40:70:93:31:4f:13:b1:e9:c1:e9:d4:86:fa:37: de:fe:d1:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xjknL4eRsMybs0fTXz6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4M2I1Y2RiNjVlY2M1YmQ3NDZkOGI3NDk4MjgzMWE2ZDhk YzEwNTMwHhcNMjUxMjE5MDQwMjQ0WhcNMjUxMjIwMDQwMjQ0WjAzMTEwLwYDVQQD Eyg1NGI5YTc0NmU5NWQ5Y2M4NTMyZDRmNDhiY2YwNmUxNWM1ZTc4YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSRlSJNFXUeW47+faa9J+uaI6EnZ E2CBOH0i0ktT++Pgqv2XpXocRylL43FP/iaW3n361deJyNPBL5hpMQPcPoNtReLj LsTjGQIxzefifLfp3IdWghR2tsJAIlFso5duZl/Ynv8LIUnAGMVt+20gPjxy29C+ zfUSuTcgCJPuOH3JWDdIoM8yGtO7VkUyLB02F0VIrsg4g1QTqJgZ8jJZiaWWlzoH IUJjEAbZX3L6U9ymJgLIJrBTI1djNuNK/QbOa5kjI4MmhxP8hmOFfGrqZm4LauuH HBHHuiy0VaQYVUcStsV7CaqrfesbDEpdWi267UBflPhlNiBG137d+cp/yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS5p0bpXZzIUy1PSLzwbhXF54sCMB8GA1UdIwQY MBaAFLg7XNtl7MW9dG2LdJgoMabY3BBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWIt NTBjNzg5MTZmOGUzLzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWItNTBjNzg5MTZmOGUz LzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXvt/3SC xRFEnYfF59K4ZDHkvOoMLyYw0JamFNURbGNU80gGRttVZq81yiWyQo9MgNDiSJPS N4PN8IV2kFJQ9eVRVMKm5MuH3WPCxIyavrpqEDpvv650ReaUZQs3eNWggcxezc1j 6y/3xHzpA6iw0x89lnLNuc4bYe2ZaKll22dyNIeD4kQCBNonvLu+sxMbXV1wYs34 OLx9A5MvtbqDugrMk+O1eLs+OmFkv24REOBEIl2trhjNh4wfHbVTbQ8rdEGru6CO TAsIuzgkUnZQjjpw+Mrhf34otP/ZLvHUcfzTqZouxQkT45s+xUdKkkBwkzFPE7Hp wenUhvo33v7RWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:48:54 2025 by rpki-client