This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json) Hash identifier: MdWu5jQXD6zZ/iH8MANBCP2ii7H8V2sGcRMRSyxOQdY= Subject key identifier: 42:2F:00:8F:89:A4:98:E4:11:DC:3A:36:96:75:65:84:AC:F8:AA:CC Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e Certificate serial: 019AF54066FBCFA9C41FDE259A8850A62254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:29 +0000 Manifest this update: Sat 06 Dec 2025 20:00:29 +0000 Manifest next update: Sun 07 Dec 2025 20:00:29 +0000 Files and hashes: 1: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: UtTapDM7t34WCGie/ICrz/CkCHJySMy0tf8TA1FSJXg=) 2: vffye4B_maKGCuAE9ICWvmcHW6I.roa (hash: VaColu6D/X0DZ0KpxU1etnd04XXSodxmzmHPWI2Hjvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:66:fb:cf:a9:c4:1f:de:25:9a:88:50:a6:22:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e Validity Not Before: Dec 6 20:00:29 2025 GMT Not After : Dec 7 20:00:29 2025 GMT Subject: CN=422f008f89a498e411dc3a3696756584acf8aacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:ee:bf:00:4f:f5:d0:e2:b3:41:2a:7f:b0: 2c:57:c0:31:66:d4:24:d3:a3:b7:b8:7a:d2:54:a4: 23:07:92:81:b5:dc:b5:29:91:03:94:a1:2f:b2:0b: e8:0b:09:c7:8a:22:62:91:22:3b:1d:88:c9:54:ac: 3c:49:22:2e:fd:29:6f:83:c1:65:dc:ef:c9:17:73: 1d:f4:04:12:bf:e1:79:bb:52:b0:7b:86:f1:79:7c: 4f:6f:4e:99:4e:65:a0:45:81:f0:d7:be:dc:b1:97: 32:73:d4:2c:7d:0a:85:ca:bc:12:e9:b3:d3:bc:f9: a3:e9:66:3f:73:c9:4d:1b:56:2b:ca:c5:43:c4:07: 43:40:7c:e3:cd:c2:04:5e:22:4b:c0:73:b8:f8:05: 10:59:05:37:c5:49:5e:90:30:4a:39:84:0d:b5:b7: 6b:7b:0d:6b:82:c8:2d:92:39:06:8d:d5:af:ac:75: c0:21:51:02:86:f4:3b:1f:93:d7:da:d9:3c:80:54: 36:7d:3f:36:72:51:17:89:48:bd:c5:c8:0d:52:fa: 76:12:3e:44:97:8f:c7:19:ff:02:63:34:42:89:d8: fc:9e:0b:28:f3:a3:f5:5f:58:15:50:16:5c:73:53: f0:1e:fe:52:e6:bf:91:cc:04:f2:b3:ed:60:68:bd: f1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:00:8F:89:A4:98:E4:11:DC:3A:36:96:75:65:84:AC:F8:AA:CC X509v3 Authority Key Identifier: keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5d:40:2e:a2:19:e0:d1:c6:1e:9d:c6:c9:9e:17:3e:f8:c7: 3c:06:29:f8:51:49:9d:51:a6:8a:91:f1:df:c0:04:15:ae:6e: 51:06:46:e5:cc:ad:ea:b2:e1:e7:46:27:4d:ad:7f:02:da:a8: 1a:2b:b8:f7:60:23:4c:5e:1f:35:fd:43:5d:98:a2:39:84:23: 55:d7:c3:b3:63:11:ec:52:20:80:1e:cf:94:00:41:2e:a6:41: a3:ec:04:fb:87:cf:c3:03:fe:d4:15:dc:3d:59:b9:48:50:de: 60:fe:15:1a:f6:ec:28:fd:4a:64:d7:79:7c:8e:28:10:23:21: f2:76:81:13:e8:f3:5e:d3:fe:e8:fe:64:9d:fa:81:29:9a:96: f0:6f:91:53:37:5d:26:e8:87:42:61:b3:38:8d:44:b8:45:b4: 52:e8:d5:24:89:5e:49:93:52:c2:3a:87:82:e5:37:ae:53:ba: f0:67:9c:c4:d4:b7:83:ad:be:ea:19:9e:2a:a4:54:91:5b:5d: bf:29:16:b3:90:05:4d:39:c3:4c:44:6e:67:6a:4e:82:54:8a: ed:aa:7f:2e:1e:21:b4:f5:ae:dd:0f:ed:be:30:e2:97:8e:46: 6c:ba:1e:33:77:f9:20:6d:39:9c:db:ba:6a:63:6d:a6:ea:54: b6:f5:b3:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QGb7z6nEH94lmohQpiJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTUzMDAzNzM3ZDc4ZjcyMmRiOWEyOGUyMjA0M2UzNWQ4 ZDg3MWUwHhcNMjUxMjA2MjAwMDI5WhcNMjUxMjA3MjAwMDI5WjAzMTEwLwYDVQQD Eyg0MjJmMDA4Zjg5YTQ5OGU0MTFkYzNhMzY5Njc1NjU4NGFjZjhhYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwPuvwBP9dDis0Eqf7AsV8AxZtQk 06O3uHrSVKQjB5KBtdy1KZEDlKEvsgvoCwnHiiJikSI7HYjJVKw8SSIu/Slvg8Fl 3O/JF3Md9AQSv+F5u1Kwe4bxeXxPb06ZTmWgRYHw177csZcyc9QsfQqFyrwS6bPT vPmj6WY/c8lNG1YrysVDxAdDQHzjzcIEXiJLwHO4+AUQWQU3xUlekDBKOYQNtbdr ew1rgsgtkjkGjdWvrHXAIVEChvQ7H5PX2tk8gFQ2fT82clEXiUi9xcgNUvp2Ej5E l4/HGf8CYzRCidj8ngso86P1X1gVUBZcc1PwHv5S5r+RzATys+1gaL3xhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIvAI+JpJjkEdw6NpZ1ZYSs+KrMMB8GA1UdIwQY MBaAFFMVMANzfXj3ItuaKOIgQ+NdjYceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYt NjY1OTk1YzYyODM4LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYtNjY1OTk1YzYyODM4 LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASl1ALqIZ 4NHGHp3GyZ4XPvjHPAYp+FFJnVGmipHx38AEFa5uUQZG5cyt6rLh50YnTa1/Atqo Giu492AjTF4fNf1DXZiiOYQjVdfDs2MR7FIggB7PlABBLqZBo+wE+4fPwwP+1BXc PVm5SFDeYP4VGvbsKP1KZNd5fI4oECMh8naBE+jzXtP+6P5knfqBKZqW8G+RUzdd JuiHQmGzOI1EuEW0UujVJIleSZNSwjqHguU3rlO68GecxNS3g62+6hmeKqRUkVtd vykWs5AFTTnDTERuZ2pOglSK7ap/Lh4htPWu3Q/tvjDil45GbLoeM3f5IG05nNu6 amNtpupUtvWzrw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:00:21 2025 by rpki-client