This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json) Hash identifier: Hkd777JjOAbfI4+Bg5/esAFYP86VssRSImTmFKhi6Qg= Subject key identifier: 92:B7:89:08:78:30:6B:62:01:4F:26:73:E0:64:35:E8:E1:6D:E9:4B Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Certificate serial: 019B12383A54FFB8E5863D7529C2AF2C717E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 11:00:33 +0000 Manifest this update: Fri 12 Dec 2025 11:00:33 +0000 Manifest next update: Sat 13 Dec 2025 11:00:33 +0000 Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: OSz8FB7Pag+r+WX74QbZtuI+R9rs2Sqwe+FCnGHraeo=) 2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:3a:54:ff:b8:e5:86:3d:75:29:c2:af:2c:71:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Validity Not Before: Dec 12 11:00:33 2025 GMT Not After : Dec 13 11:00:33 2025 GMT Subject: CN=92b7890878306b62014f2673e06435e8e16de94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:71:fc:24:55:ec:05:a0:0a:fa:2e:d3:4c: e4:3f:61:a9:f8:f9:8f:fb:ca:96:0f:07:82:4b:69: ad:28:be:d3:d0:f1:9c:e3:34:2e:49:5d:45:f0:2d: 14:e8:e7:b0:34:19:cf:42:0d:69:f7:51:05:b4:ed: e4:c4:ea:64:0b:b1:8f:58:ca:81:af:66:94:99:56: 1b:ab:fc:ce:44:56:c8:a3:f6:24:b9:a8:d0:ea:99: b7:4f:92:b9:04:2e:ba:3d:b7:1f:1a:6f:be:21:99: 54:70:92:8f:f8:f9:a1:67:e9:c4:26:4e:c0:19:86: da:66:e6:5d:cf:0c:48:2f:0b:a9:45:32:5c:0f:ef: c7:ec:a3:51:dd:bc:97:e8:14:91:cf:60:36:35:36: b2:f1:78:aa:b8:10:60:fc:57:ce:4a:6b:27:50:41: 26:60:59:60:6b:6b:b1:8c:1b:9d:29:43:06:f3:b2: bf:e1:40:0d:30:60:8c:e8:c3:69:c3:58:c5:ef:8b: f0:86:2d:76:0d:27:91:35:7c:cc:94:29:15:67:2b: 8d:fb:4b:b5:3e:63:19:99:d4:03:08:5b:af:0e:27: 5f:93:72:9f:f7:5f:3b:12:30:c8:96:61:29:c3:c9: f1:3c:d3:90:5d:ed:81:30:65:5c:31:1e:04:e0:cb: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B7:89:08:78:30:6B:62:01:4F:26:73:E0:64:35:E8:E1:6D:E9:4B X509v3 Authority Key Identifier: keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ea:1f:af:25:0f:0a:ce:49:4d:c6:86:5c:29:68:31:12:2f: cc:bc:b5:19:53:05:86:98:10:4f:d5:44:5a:0f:23:79:d4:3f: 85:bc:e6:70:3d:21:47:a7:9b:45:d0:9a:39:38:1e:57:78:90: ef:b7:02:3a:de:34:c4:5c:e8:a0:10:31:1c:96:b4:d7:0b:8f: 81:6e:c9:29:d1:6c:49:6b:b4:b4:46:46:91:72:9b:94:f6:99: 1d:59:9b:ee:55:de:c3:0d:79:ee:51:c3:6b:d9:ab:bf:ac:7d: d3:1b:ec:52:00:9f:00:bb:01:c8:f6:f5:7e:25:3f:a2:43:c8: 41:77:dc:1a:a3:e8:19:cd:34:c2:5e:0a:bb:59:97:ce:ae:ef: ca:33:db:ff:67:9e:5a:1e:fc:83:ab:26:4f:0f:f9:1c:86:2e: 31:a8:68:3a:ce:76:76:58:c5:ec:21:d6:9b:10:dc:52:e9:a0: 6b:f8:9b:24:f9:e9:f6:19:e0:c4:03:9c:d6:53:23:34:78:1b: 8a:97:05:98:59:c0:d1:e1:18:cb:69:f9:8d:a6:33:b2:1a:47: 9e:38:36:b9:75:32:b9:33:7a:de:0f:05:08:de:e1:6c:88:3f: a6:ac:f1:92:fa:e3:9d:79:4b:a3:11:ab:ae:eb:42:6b:7d:19: d4:c4:f1:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSODpU/7jlhj11KcKvLHF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOGFhNDk5Mzc0MGRmOGFkMzhkOTJjYzBjMTA3MjM0ZTZk ZmEwNWMwHhcNMjUxMjEyMTEwMDMzWhcNMjUxMjEzMTEwMDMzWjAzMTEwLwYDVQQD Eyg5MmI3ODkwODc4MzA2YjYyMDE0ZjI2NzNlMDY0MzVlOGUxNmRlOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbVx/CRV7AWgCvou00zkP2Gp+PmP +8qWDweCS2mtKL7T0PGc4zQuSV1F8C0U6OewNBnPQg1p91EFtO3kxOpkC7GPWMqB r2aUmVYbq/zORFbIo/YkuajQ6pm3T5K5BC66PbcfGm++IZlUcJKP+PmhZ+nEJk7A GYbaZuZdzwxILwupRTJcD+/H7KNR3byX6BSRz2A2NTay8XiquBBg/FfOSmsnUEEm YFlga2uxjBudKUMG87K/4UANMGCM6MNpw1jF74vwhi12DSeRNXzMlCkVZyuN+0u1 PmMZmdQDCFuvDidfk3Kf9187EjDIlmEpw8nxPNOQXe2BMGVcMR4E4MvrUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK3iQh4MGtiAU8mc+BkNejhbelLMB8GA1UdIwQY MBaAFFGKpJk3QN+K042SzAwQcjTm36BcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYt NDZjNzk3NGJkMThhLzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYtNDZjNzk3NGJkMThh LzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOofryUP Cs5JTcaGXCloMRIvzLy1GVMFhpgQT9VEWg8jedQ/hbzmcD0hR6ebRdCaOTgeV3iQ 77cCOt40xFzooBAxHJa01wuPgW7JKdFsSWu0tEZGkXKblPaZHVmb7lXeww157lHD a9mrv6x90xvsUgCfALsByPb1fiU/okPIQXfcGqPoGc00wl4Ku1mXzq7vyjPb/2ee Wh78g6smTw/5HIYuMahoOs52dljF7CHWmxDcUumga/ibJPnp9hngxAOc1lMjNHgb ipcFmFnA0eEYy2n5jaYzshpHnjg2uXUyuTN63g8FCN7hbIg/pqzxkvrjnXlLoxGr rutCa30Z1MTxvQ== -----END CERTIFICATE-----Generated at Fri Dec 12 12:59:22 2025 by rpki-client