This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json) Hash identifier: cOiOr8x4Et8KnLZgurN1EFkJGpeExfn+ZsRKmCd5IEo= Subject key identifier: DC:A3:83:10:53:2A:C2:62:F0:2E:83:AF:C8:2B:BA:C7:C4:95:2D:0E Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74 Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874 Certificate serial: 019AF2AD86DB850ED4447D650BED5F7F43BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft Manifest number: 122C Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=) 2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: 4rSoDxR54CeFcLebORtPcifq21H6DyopKW1DsE7nk2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:86:db:85:0e:d4:44:7d:65:0b:ed:5f:7f:43:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52386e520478e625be1d6282d216b05912f83874 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=dca38310532ac262f02e83afc82bbac7c4952d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:42:15:10:67:02:6f:3d:79:e2:ab:97:81: 97:0c:4c:df:f4:78:1e:b9:05:21:e0:e1:84:38:d0: d1:89:2a:24:7e:6e:3e:da:21:bb:a2:6b:a3:11:13: ce:0a:05:fb:56:29:e1:a2:71:e0:0e:aa:02:1b:8e: ee:f6:60:a1:20:a5:8d:ea:20:5e:18:82:3e:e1:bd: ce:e0:b6:24:ae:f6:30:3b:8b:71:45:f1:60:5a:30: fd:a1:ce:4d:e7:6e:c7:92:5e:a4:69:75:95:ff:26: 09:01:b7:9e:d6:6a:43:6c:c4:d5:02:6d:08:4e:06: a5:be:1f:11:a6:29:8a:f6:b8:b4:d7:eb:d3:df:71: e2:8b:8f:af:02:c1:ce:ef:f2:22:14:52:8e:07:60: 33:19:a4:2d:75:c5:b8:15:a7:af:1f:59:d8:48:f8: 55:10:9e:8b:22:4e:3d:dd:4d:e7:1f:90:c1:7c:80: ff:2e:63:d5:f2:1e:69:d2:14:2e:9c:99:b1:23:eb: b8:98:a3:7d:f4:02:a4:62:d6:22:83:6d:bc:89:62: 25:89:b9:d6:5b:0f:7a:84:72:36:f4:ff:75:4d:fe: cc:b1:88:76:bb:71:94:96:29:5a:ca:8e:08:4a:b0: 14:8c:a3:14:95:6f:a1:54:b2:12:31:63:b4:73:31: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:83:10:53:2A:C2:62:F0:2E:83:AF:C8:2B:BA:C7:C4:95:2D:0E X509v3 Authority Key Identifier: keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d9:f0:e6:26:40:d7:fa:98:e1:4b:da:d3:87:fa:f4:5d:37: ba:13:63:68:26:81:4d:91:7d:7d:37:05:af:21:64:27:bc:35: 70:c5:6e:af:0c:91:f0:6e:03:0a:06:0d:d3:44:de:5d:7c:f3: c5:60:13:f9:c9:94:d6:6a:df:51:0f:e8:b6:1d:fb:e4:2d:4e: 8d:d7:d5:89:aa:ec:3b:f3:4a:06:50:07:b5:f3:5c:d9:02:c9: 8c:bc:09:02:1a:c8:b0:5f:51:11:39:fa:2d:f5:36:79:58:3d: 0f:37:54:36:c5:ac:16:7d:2c:3d:e7:82:1f:7c:47:79:6d:6d: b7:9b:c9:27:64:b4:10:8d:f4:5d:11:ac:2d:fb:27:d8:14:2c: c3:1f:a4:fe:ee:1f:a4:9a:dc:29:25:5f:20:28:fa:32:aa:ba: 22:88:0f:c9:78:a2:35:4f:a5:c4:8a:7b:0d:d4:0f:e3:4d:29: 0a:d7:39:9d:3c:30:9a:e7:e7:de:e1:0f:90:17:07:99:18:1e: d0:99:0d:3c:1a:7f:32:b3:e0:74:60:bc:a1:86:86:ab:7d:96: 6b:02:de:e3:c1:33:c9:e9:bd:6a:c6:c1:dc:26:41:16:5e:2b: 62:28:68:4b:97:c4:70:c0:4c:6f:87:56:58:f4:5f:18:4b:a9: c2:85:63:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYbbhQ7URH1lC+1ff0O9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzg2ZTUyMDQ3OGU2MjViZTFkNjI4MmQyMTZiMDU5MTJm ODM4NzQwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD EyhkY2EzODMxMDUzMmFjMjYyZjAyZTgzYWZjODJiYmFjN2M0OTUyZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuppCFRBnAm89eeKrl4GXDEzf9Hge uQUh4OGEONDRiSokfm4+2iG7omujERPOCgX7VinhonHgDqoCG47u9mChIKWN6iBe GII+4b3O4LYkrvYwO4txRfFgWjD9oc5N527Hkl6kaXWV/yYJAbee1mpDbMTVAm0I Tgalvh8RpimK9ri01+vT33Hii4+vAsHO7/IiFFKOB2AzGaQtdcW4FaevH1nYSPhV EJ6LIk493U3nH5DBfID/LmPV8h5p0hQunJmxI+u4mKN99AKkYtYig228iWIlibnW Ww96hHI29P91Tf7MsYh2u3GUlilayo4ISrAUjKMUlW+hVLISMWO0czHE+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyjgxBTKsJi8C6Dr8grusfElS0OMB8GA1UdIwQY MBaAFFI4blIEeOYlvh1igtIWsFkS+Dh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDIt YWU1ZGI2ZTE0ODZkLzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDItYWU1ZGI2ZTE0ODZk LzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftnw5iZA 1/qY4Uva04f69F03uhNjaCaBTZF9fTcFryFkJ7w1cMVurwyR8G4DCgYN00TeXXzz xWAT+cmU1mrfUQ/oth375C1OjdfViarsO/NKBlAHtfNc2QLJjLwJAhrIsF9RETn6 LfU2eVg9DzdUNsWsFn0sPeeCH3xHeW1tt5vJJ2S0EI30XRGsLfsn2BQswx+k/u4f pJrcKSVfICj6Mqq6IogPyXiiNU+lxIp7DdQP400pCtc5nTwwmufn3uEPkBcHmRge 0JkNPBp/MrPgdGC8oYaGq32WawLe48Ezyem9asbB3CZBFl4rYihoS5fEcMBMb4dW WPRfGEupwoVjbw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:46 2025 by rpki-client