This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft File: UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json) Hash identifier: hh5JKlVKlMg/htuLsd+N0FnGAUizIH9QJRLSpHBQ8GM= Subject key identifier: 20:39:E0:CC:99:5C:E7:07:42:13:6F:2D:37:4A:9B:9B:41:DE:2D:02 Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08 Certificate issuer: /CN=530841e82aa46d9959fc7811b25795c56cd50608 Certificate serial: 019B5B9B44C9890019110D01B930AA49D29A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft Manifest number: 177B Signing time: Fri 26 Dec 2025 17:01:00 +0000 Manifest this update: Fri 26 Dec 2025 17:01:00 +0000 Manifest next update: Sat 27 Dec 2025 17:01:00 +0000 Files and hashes: 1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: vdbxUeDmz18DDmVkdX1ysgMa6bGBvGXvKX/952T2Inw=) 2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:44:c9:89:00:19:11:0d:01:b9:30:aa:49:d2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608 Validity Not Before: Dec 26 17:01:00 2025 GMT Not After : Dec 27 17:01:00 2025 GMT Subject: CN=2039e0cc995ce70742136f2d374a9b9b41de2d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:c2:c2:d8:11:5e:76:29:3c:fc:47:a0:80: 1a:05:ab:f8:39:70:72:99:60:b0:cf:57:ca:46:26: ba:c8:6d:99:9c:4c:c7:9f:33:08:83:5b:3a:d3:c8: 0d:3b:06:c6:6d:1b:dc:b5:a4:ab:d5:5f:e7:41:be: 43:d2:46:7d:66:3b:61:68:cf:5c:0a:89:41:7a:61: 74:24:b5:50:5f:7a:c8:32:8b:c2:f0:6c:e8:27:c6: df:19:87:09:21:d2:f7:ec:56:38:08:79:41:4e:e1: ad:29:4d:1d:7a:4b:02:2e:67:88:2f:ef:3c:c1:4d: b4:80:9d:14:d3:15:d0:07:45:7a:9f:65:b8:86:5b: ec:e7:ee:83:40:6c:19:db:63:f2:3f:f0:11:6b:a4: b1:45:97:e2:33:2d:a5:48:d6:3f:cf:24:af:a6:ee: 35:8c:33:de:8a:6e:f0:fe:3e:b3:95:9d:f5:2e:2c: 7d:f2:27:97:2b:97:b0:de:8f:06:df:99:4c:25:5b: c6:fd:1b:db:33:72:a6:d4:cb:ed:d8:e5:8c:22:a3: 89:45:22:dd:03:91:06:26:0e:f9:90:6d:2b:a9:8c: 0a:2b:82:58:f5:44:d6:a9:7e:02:bd:71:6e:b2:65: 4c:38:9e:ac:b8:68:56:57:92:b8:55:b1:cd:3f:a2: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:E0:CC:99:5C:E7:07:42:13:6F:2D:37:4A:9B:9B:41:DE:2D:02 X509v3 Authority Key Identifier: keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:25:30:51:46:1a:49:03:a0:56:e7:28:c6:2d:c5:dc:65:94: 04:bc:76:4e:cb:ec:9b:a8:c3:8b:7a:33:d4:32:d4:42:72:f8: 29:99:c6:09:5a:5a:40:2c:31:47:27:a4:ee:12:e0:a2:22:53: 21:dc:3a:27:75:76:b8:a9:62:c2:02:85:5f:2a:60:18:65:ad: a5:fb:4a:e8:cc:69:58:a2:cd:8f:43:2d:22:6d:12:44:71:08: fa:7f:60:5a:35:fc:81:cd:bd:4c:33:23:37:5c:85:ed:fe:20: f3:d4:56:a0:31:22:b9:90:09:2c:da:8a:1a:ea:8e:f7:1f:7c: 8f:03:1f:84:24:22:c1:0d:9d:43:db:e7:49:e5:42:6d:4f:db: 09:9a:ab:f0:71:d8:af:d6:ff:ac:d9:b5:9a:58:74:fc:83:a8: e8:e2:d9:88:fb:a4:33:8b:47:a7:09:b8:ac:0f:b3:54:bc:7b: fa:69:bf:4f:2f:e8:64:0f:32:0a:ad:f6:c5:fd:76:ad:09:11: eb:13:e0:cd:8b:f8:d1:06:95:8f:0a:91:14:f5:79:de:6f:54: bf:95:89:dd:8f:cc:b8:bb:0d:57:e6:ca:1e:20:b6:be:07:5c: 7c:5c:92:10:39:5a:1e:4a:b0:50:68:e6:d4:d1:d8:30:d7:25: 0e:3b:04:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbm0TJiQAZEQ0BuTCqSdKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMDg0MWU4MmFhNDZkOTk1OWZjNzgxMWIyNTc5NWM1NmNk NTA2MDgwHhcNMjUxMjI2MTcwMTAwWhcNMjUxMjI3MTcwMTAwWjAzMTEwLwYDVQQD EygyMDM5ZTBjYzk5NWNlNzA3NDIxMzZmMmQzNzRhOWI5YjQxZGUyZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQPCwtgRXnYpPPxHoIAaBav4OXBy mWCwz1fKRia6yG2ZnEzHnzMIg1s608gNOwbGbRvctaSr1V/nQb5D0kZ9ZjthaM9c ColBemF0JLVQX3rIMovC8GzoJ8bfGYcJIdL37FY4CHlBTuGtKU0deksCLmeIL+88 wU20gJ0U0xXQB0V6n2W4hlvs5+6DQGwZ22PyP/ARa6SxRZfiMy2lSNY/zySvpu41 jDPeim7w/j6zlZ31Lix98ieXK5ew3o8G35lMJVvG/RvbM3Km1Mvt2OWMIqOJRSLd A5EGJg75kG0rqYwKK4JY9UTWqX4CvXFusmVMOJ6suGhWV5K4VbHNP6JVtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA54MyZXOcHQhNvLTdKm5tB3i0CMB8GA1UdIwQY MBaAFFMIQegqpG2ZWfx4EbJXlcVs1QYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTkt NGE4MmNkZDRiMWEwLzEvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTktNGE4MmNkZDRiMWEw LzEvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESUwUUYa SQOgVucoxi3F3GWUBLx2Tsvsm6jDi3oz1DLUQnL4KZnGCVpaQCwxRyek7hLgoiJT Idw6J3V2uKliwgKFXypgGGWtpftK6MxpWKLNj0MtIm0SRHEI+n9gWjX8gc29TDMj N1yF7f4g89RWoDEiuZAJLNqKGuqO9x98jwMfhCQiwQ2dQ9vnSeVCbU/bCZqr8HHY r9b/rNm1mlh0/IOo6OLZiPukM4tHpwm4rA+zVLx7+mm/Ty/oZA8yCq32xf12rQkR 6xPgzYv40QaVjwqRFPV53m9Uv5WJ3Y/MuLsNV+bKHiC2vgdcfFySEDlaHkqwUGjm 1NHYMNclDjsEFQ== -----END CERTIFICATE-----Generated at Fri Dec 26 22:44:54 2025 by rpki-client