This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json) Hash identifier: +cVo45xT/j9jcKhYUbTPsHr0MCC4jyfRMMhb4oV3ulI= Subject key identifier: ED:27:D4:A1:73:59:0D:14:CA:D4:43:F4:9E:6E:02:C7:02:12:AA:29 Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c Certificate serial: 019B4392B2CCE08CDBE93C25BBA14687067C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft Manifest number: 10A0 Signing time: Mon 22 Dec 2025 01:00:45 +0000 Manifest this update: Mon 22 Dec 2025 01:00:45 +0000 Manifest next update: Tue 23 Dec 2025 01:00:45 +0000 Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=) 2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: Wn66XvU/zu2tL76Q0GBhf+AN75o9YXEqTVIbsKGdIjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:b2:cc:e0:8c:db:e9:3c:25:bb:a1:46:87:06:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c Validity Not Before: Dec 22 01:00:45 2025 GMT Not After : Dec 23 01:00:45 2025 GMT Subject: CN=ed27d4a173590d14cad443f49e6e02c70212aa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:1e:65:f8:26:1e:e3:dc:a8:28:3b:57:09: b4:14:29:95:6c:b3:51:3d:ce:7a:32:ba:d8:82:28: f7:26:e2:3f:9f:8f:cc:48:9e:92:7d:37:34:8b:29: a5:81:13:cf:c3:9b:a8:b7:a1:04:76:8a:cd:d6:cb: ea:7e:61:00:87:0f:74:7c:c9:72:27:d9:60:61:a4: ae:25:86:b4:7b:f4:50:8b:81:0c:f2:c2:89:cf:8a: ea:35:48:cc:2f:13:d6:13:7e:a5:d5:85:8c:b6:02: e7:c7:6e:34:40:78:d6:9e:7d:bd:02:f1:80:63:db: 1f:fc:95:f3:e9:df:65:c0:a2:b7:f0:35:54:44:47: 7e:a5:a3:31:fc:ab:5b:f4:8c:d6:9c:29:56:13:47: ea:06:e3:f5:8a:ec:44:55:fb:71:f2:c6:fe:de:a9: 3f:8f:2e:7a:7a:e8:6c:ce:aa:cf:e6:7d:f1:25:7c: cd:07:12:2c:cf:c8:1d:36:f1:3c:07:3d:89:de:78: da:9a:1b:c1:42:f8:64:5c:af:18:90:a7:04:39:14: 36:63:0b:73:cd:0e:b3:a5:00:b2:9f:4f:60:7f:63: 32:47:69:81:5d:0b:e4:91:69:00:90:e4:76:73:72: 9f:18:2c:db:7f:3a:2e:99:a3:d6:f9:2b:69:b3:49: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:27:D4:A1:73:59:0D:14:CA:D4:43:F4:9E:6E:02:C7:02:12:AA:29 X509v3 Authority Key Identifier: keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:34:8e:86:8d:1b:d9:84:01:b4:19:56:63:a5:04:93:ae:57: 40:86:94:1c:c8:1e:eb:79:6c:57:e8:29:4d:74:42:41:b4:8a: 00:f4:3c:61:74:d1:ae:75:15:8a:14:01:fb:dd:d0:39:c2:89: f0:67:65:55:b5:0a:82:94:fb:90:90:7a:33:f9:38:3e:73:c3: e4:b0:d9:2b:21:eb:6f:d3:3a:cb:f7:83:00:f3:97:74:38:cb: 77:37:22:ef:a7:31:a1:1f:41:0d:dd:52:6a:90:f4:d9:ee:19: 37:1c:2d:c0:f6:24:48:bf:c6:5e:c4:68:b1:6a:c3:9d:04:21: f3:76:b7:a4:e5:e7:b0:fb:b2:e4:1b:77:fa:53:10:76:e9:5f: d9:22:33:5e:51:5e:5a:19:65:56:36:98:f2:cb:c7:ef:1e:a1: 6d:f4:7e:ce:3b:75:d3:3d:87:f4:c8:73:85:30:09:bd:ff:dc: 8a:85:50:55:0d:5c:57:0b:7a:ef:23:61:f1:c8:0e:df:dc:4f: db:c3:65:94:8a:c4:03:5c:44:12:ec:32:d4:63:07:4e:4b:cf: a1:da:94:8b:18:4d:52:27:88:1d:20:20:ec:36:51:1f:80:59: de:fc:f8:98:e6:3d:81:a0:59:04:77:d1:ae:2c:2a:e1:88:7f: 8a:76:d2:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkrLM4Izb6Twlu6FGhwZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTIyZTAzYTg0MWI4ODc4OTYzYWZmZmY2OTVjYTRmOWZk MDY4MmMwHhcNMjUxMjIyMDEwMDQ1WhcNMjUxMjIzMDEwMDQ1WjAzMTEwLwYDVQQD EyhlZDI3ZDRhMTczNTkwZDE0Y2FkNDQzZjQ5ZTZlMDJjNzAyMTJhYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMQeZfgmHuPcqCg7Vwm0FCmVbLNR Pc56MrrYgij3JuI/n4/MSJ6SfTc0iymlgRPPw5uot6EEdorN1svqfmEAhw90fMly J9lgYaSuJYa0e/RQi4EM8sKJz4rqNUjMLxPWE36l1YWMtgLnx240QHjWnn29AvGA Y9sf/JXz6d9lwKK38DVUREd+paMx/Ktb9IzWnClWE0fqBuP1iuxEVftx8sb+3qk/ jy56euhszqrP5n3xJXzNBxIsz8gdNvE8Bz2J3njamhvBQvhkXK8YkKcEORQ2Ywtz zQ6zpQCyn09gf2MyR2mBXQvkkWkAkOR2c3KfGCzbfzoumaPW+Stps0kESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0n1KFzWQ0UytRD9J5uAscCEqopMB8GA1UdIwQY MBaAFFMSLgOoQbiHiWOv//aVyk+f0GgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUt Y2U4ZDJkZDQzMDY2LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUtY2U4ZDJkZDQzMDY2 LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjSOho0b 2YQBtBlWY6UEk65XQIaUHMge63lsV+gpTXRCQbSKAPQ8YXTRrnUVihQB+93QOcKJ 8GdlVbUKgpT7kJB6M/k4PnPD5LDZKyHrb9M6y/eDAPOXdDjLdzci76cxoR9BDd1S apD02e4ZNxwtwPYkSL/GXsRosWrDnQQh83a3pOXnsPuy5Bt3+lMQdulf2SIzXlFe WhllVjaY8svH7x6hbfR+zjt10z2H9MhzhTAJvf/cioVQVQ1cVwt67yNh8cgO39xP 28NllIrEA1xEEuwy1GMHTkvPodqUixhNUieIHSAg7DZRH4BZ3vz4mOY9gaBZBHfR riwq4Yh/inbSyw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:57 2025 by rpki-client