This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json) Hash identifier: iFkqiHmbULjoXczlVLIPW3SkcqKjXA5DVAgOU1ftkz4= Subject key identifier: 17:72:CC:49:57:B5:EC:3D:0A:0E:DB:2C:A7:71:25:67:23:D7:DE:DA Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c Certificate serial: 019B360EA35E51FCA680660D7DFE27A8C813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft Manifest number: 1099 Signing time: Fri 19 Dec 2025 10:01:27 +0000 Manifest this update: Fri 19 Dec 2025 10:01:27 +0000 Manifest next update: Sat 20 Dec 2025 10:01:27 +0000 Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=) 2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: cPaloHYyFZ52xC5s94jiNq2oxjBuglbrMLEuJ7IuWh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:a3:5e:51:fc:a6:80:66:0d:7d:fe:27:a8:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c Validity Not Before: Dec 19 10:01:27 2025 GMT Not After : Dec 20 10:01:27 2025 GMT Subject: CN=1772cc4957b5ec3d0a0edb2ca771256723d7deda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:7c:2f:23:d0:5b:f6:92:90:72:21:ff:99: 88:cf:ad:ae:2b:66:1f:b8:be:7e:53:2d:7d:e8:94: 5c:55:5a:5b:09:97:a9:6c:63:b0:e2:a3:e8:d8:fa: d2:e8:5c:49:e1:bb:64:81:ac:1c:53:76:4f:a1:59: cc:e8:53:99:36:cb:f8:12:93:8b:75:56:a5:f7:14: 36:80:8c:d7:42:9f:46:9f:11:5d:d5:63:1b:c0:db: 10:9c:5d:88:7e:d2:3f:57:27:a5:94:c7:57:11:97: 54:d4:cc:97:9d:1e:50:c0:6d:33:f2:26:45:ce:92: 42:cb:8b:86:3f:d2:b2:dc:c9:a0:2f:7d:14:42:4e: 31:03:7e:c0:0f:d5:75:cc:8f:4d:9d:0f:ac:17:02: a2:81:ce:f3:92:59:d0:ca:99:04:44:6b:ca:db:37: 28:25:ed:2b:0f:79:25:02:a5:92:ab:61:6e:fd:40: a3:0e:c5:fd:43:ae:60:7c:bf:7d:12:4c:b4:f1:8a: 1e:85:3a:5d:b5:9f:ae:10:a6:95:7b:67:e1:f5:52: 3c:cb:a6:9c:d5:4f:dc:8e:37:f3:ae:89:ab:ab:75: 91:ab:cc:2b:71:14:f8:57:97:f4:7e:37:eb:af:2b: 33:d5:bd:3f:04:47:92:9a:83:97:c4:b8:79:d2:89: ec:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:CC:49:57:B5:EC:3D:0A:0E:DB:2C:A7:71:25:67:23:D7:DE:DA X509v3 Authority Key Identifier: keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e5:36:28:b4:3e:a8:cf:de:45:59:29:83:1a:ae:f6:4d:83: 78:f8:11:ad:19:4d:fd:75:97:2d:70:b1:10:42:d9:e9:1a:d2: 71:ac:ca:7d:76:3c:d0:6f:ca:22:aa:97:de:8c:01:f8:ea:d5: 74:23:da:5f:9e:a9:6c:a8:f5:fd:b1:41:59:0e:80:48:9b:9c: 62:03:27:f8:c9:fd:a5:5b:8e:eb:d9:cf:a5:01:06:3d:db:fe: a0:74:24:a9:34:97:46:53:22:87:05:c0:09:5e:9a:06:ab:a4: 1f:dc:a2:9b:ba:ec:88:24:f4:1e:0c:5c:14:b2:6f:9b:d0:19: 55:48:ff:6e:5f:23:37:c0:0f:f6:12:6c:79:ba:2c:6a:9b:4b: 65:e3:1a:93:5f:73:63:91:98:4c:9f:e8:2c:d2:72:db:1e:b2: 0d:82:b6:cb:52:2f:cf:06:0e:6a:27:27:df:b6:a9:48:94:6e: c4:03:7c:9a:df:f3:e5:05:72:b3:1d:16:ee:cf:3e:d0:f8:ab: 4c:d1:27:66:e0:ae:8b:66:22:ba:f0:64:0c:20:e7:28:bb:46: 4e:a4:48:22:23:20:6c:58:9f:ee:f4:24:2e:b6:38:d6:85:6a: d0:64:9a:8d:3d:a8:cb:bd:87:38:86:bc:09:dc:a1:ff:d0:4a: 20:cf:5d:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DqNeUfymgGYNff4nqMgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTIyZTAzYTg0MWI4ODc4OTYzYWZmZmY2OTVjYTRmOWZk MDY4MmMwHhcNMjUxMjE5MTAwMTI3WhcNMjUxMjIwMTAwMTI3WjAzMTEwLwYDVQQD EygxNzcyY2M0OTU3YjVlYzNkMGEwZWRiMmNhNzcxMjU2NzIzZDdkZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNd8LyPQW/aSkHIh/5mIz62uK2Yf uL5+Uy196JRcVVpbCZepbGOw4qPo2PrS6FxJ4btkgawcU3ZPoVnM6FOZNsv4EpOL dVal9xQ2gIzXQp9GnxFd1WMbwNsQnF2IftI/VyellMdXEZdU1MyXnR5QwG0z8iZF zpJCy4uGP9Ky3MmgL30UQk4xA37AD9V1zI9NnQ+sFwKigc7zklnQypkERGvK2zco Je0rD3klAqWSq2Fu/UCjDsX9Q65gfL99Eky08YoehTpdtZ+uEKaVe2fh9VI8y6ac 1U/cjjfzromrq3WRq8wrcRT4V5f0fjfrrysz1b0/BEeSmoOXxLh50onsJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdyzElXtew9Cg7bLKdxJWcj197aMB8GA1UdIwQY MBaAFFMSLgOoQbiHiWOv//aVyk+f0GgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUt Y2U4ZDJkZDQzMDY2LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUtY2U4ZDJkZDQzMDY2 LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOU2KLQ+ qM/eRVkpgxqu9k2DePgRrRlN/XWXLXCxEELZ6RrScazKfXY80G/KIqqX3owB+OrV dCPaX56pbKj1/bFBWQ6ASJucYgMn+Mn9pVuO69nPpQEGPdv+oHQkqTSXRlMihwXA CV6aBqukH9yim7rsiCT0HgxcFLJvm9AZVUj/bl8jN8AP9hJsebosaptLZeMak19z Y5GYTJ/oLNJy2x6yDYK2y1IvzwYOaicn37apSJRuxAN8mt/z5QVysx0W7s8+0Pir TNEnZuCui2YiuvBkDCDnKLtGTqRIIiMgbFif7vQkLrY41oVq0GSajT2oy72HOIa8 Cdyh/9BKIM9dmA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:30:28 2025 by rpki-client