This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json) Hash identifier: ArjEMNObg4qG4QiFKUiisB7rRYnTdmlS8oCCHOuNep8= Subject key identifier: 61:2F:24:68:5C:18:4D:EF:34:73:FE:C0:69:DF:99:00:26:F4:0B:AA Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16 Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316 Certificate serial: 019B5A520FDC26675081E7A7A64DF85397C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft Manifest number: 147B Signing time: Fri 26 Dec 2025 11:01:25 +0000 Manifest this update: Fri 26 Dec 2025 11:01:25 +0000 Manifest next update: Sat 27 Dec 2025 11:01:25 +0000 Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: MsjzVMZsX5safzCeaQ/japDmZx3iFStJdySL6AOOub0=) 2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:0f:dc:26:67:50:81:e7:a7:a6:4d:f8:53:97:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316 Validity Not Before: Dec 26 11:01:25 2025 GMT Not After : Dec 27 11:01:25 2025 GMT Subject: CN=612f24685c184def3473fec069df990026f40baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:1b:13:cf:47:2d:ac:65:0e:74:5f:67:4a: 81:40:7d:0b:af:61:16:54:c8:60:59:fa:af:73:c0: 24:e0:da:35:fb:db:b7:77:5d:08:48:de:5d:14:69: 94:0b:82:91:11:6c:a7:b8:3b:f4:59:1c:bb:c3:bd: 5c:1c:28:93:9d:fe:d6:cd:d9:be:28:3a:72:44:f5: 19:2b:08:f0:1e:d8:3f:ac:ce:33:cc:fb:84:e7:ac: 58:83:08:4b:10:14:f1:0b:94:2f:5f:02:7f:2e:d1: f2:e3:2e:12:3e:ae:a7:b7:d1:83:51:b1:a8:31:a2: b3:3f:e3:1d:e9:1f:19:47:19:40:ec:1f:e6:eb:5c: 21:83:d8:67:49:b5:00:cd:f8:41:43:f8:1b:f0:9b: b2:8e:98:a3:22:e4:f0:03:d9:6a:80:53:e9:cd:f9: fa:f0:7a:2e:bb:18:20:b1:eb:09:1a:49:2e:c2:e1: ab:49:23:5f:41:2c:62:fd:a6:e0:a5:d3:8d:30:5c: 37:c9:83:94:fd:50:66:d2:cd:a9:f8:d2:71:9c:f4: 4e:b5:5f:d7:db:bd:53:f3:9d:ff:e0:a2:48:4c:a8: 0b:5b:05:4c:3b:1f:75:33:83:10:ac:33:5f:fc:b3: a5:26:38:76:14:29:f5:ec:e9:62:70:48:a2:33:f3: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2F:24:68:5C:18:4D:EF:34:73:FE:C0:69:DF:99:00:26:F4:0B:AA X509v3 Authority Key Identifier: keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f5:1a:42:27:be:10:f7:e9:b5:67:cd:e4:8c:ab:9f:60:f6: 4f:58:31:c2:ef:89:86:18:1b:5a:04:c9:75:b3:26:66:8c:0a: f4:10:b0:14:25:f7:6e:55:8f:36:15:2b:61:91:15:97:31:bc: e9:96:ab:8a:54:25:9c:0e:2b:95:0c:a5:66:f5:46:45:80:98: 57:d9:e0:85:f9:e9:e0:60:d9:34:4e:97:78:55:ff:7c:9f:4e: ca:25:43:4c:99:50:e9:42:04:2c:55:70:15:a4:3e:26:9a:bd: 01:d2:c5:94:c0:95:1f:84:40:d8:dc:20:a5:72:31:d4:aa:27: a2:f5:58:9a:44:fe:ad:f6:67:9e:ba:c4:a6:5b:3d:63:b0:02: 9b:bc:55:e8:22:9f:dd:1c:c1:66:b5:b4:a2:ac:4c:21:14:b2: 7f:d7:ed:bb:9a:03:c1:d2:24:c0:93:d4:8f:2d:40:6f:4e:c7: d3:bf:59:61:71:17:72:59:26:57:76:fb:75:1f:b7:e8:7e:c0: d9:19:e1:49:44:fe:11:fc:aa:0c:e9:85:b8:fa:48:01:66:c0: 0d:99:8d:78:57:7a:e8:4b:01:76:59:fd:20:2f:58:b2:be:07: 23:0c:ef:f3:4a:43:d8:13:22:34:37:59:87:0a:c3:9e:2a:27: 91:28:72:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUg/cJmdQgeenpk34U5fDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw MjUzMTYwHhcNMjUxMjI2MTEwMTI1WhcNMjUxMjI3MTEwMTI1WjAzMTEwLwYDVQQD Eyg2MTJmMjQ2ODVjMTg0ZGVmMzQ3M2ZlYzA2OWRmOTkwMDI2ZjQwYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1QbE89HLaxlDnRfZ0qBQH0Lr2EW VMhgWfqvc8Ak4No1+9u3d10ISN5dFGmUC4KREWynuDv0WRy7w71cHCiTnf7Wzdm+ KDpyRPUZKwjwHtg/rM4zzPuE56xYgwhLEBTxC5QvXwJ/LtHy4y4SPq6nt9GDUbGo MaKzP+Md6R8ZRxlA7B/m61whg9hnSbUAzfhBQ/gb8JuyjpijIuTwA9lqgFPpzfn6 8HouuxggsesJGkkuwuGrSSNfQSxi/abgpdONMFw3yYOU/VBm0s2p+NJxnPROtV/X 271T853/4KJITKgLWwVMOx91M4MQrDNf/LOlJjh2FCn17OlicEiiM/No9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEvJGhcGE3vNHP+wGnfmQAm9AuqMB8GA1UdIwQY MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt NmZiYTZhMWUwZWU3LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3 LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPUaQie+ EPfptWfN5Iyrn2D2T1gxwu+JhhgbWgTJdbMmZowK9BCwFCX3blWPNhUrYZEVlzG8 6ZarilQlnA4rlQylZvVGRYCYV9nghfnp4GDZNE6XeFX/fJ9OyiVDTJlQ6UIELFVw FaQ+Jpq9AdLFlMCVH4RA2NwgpXIx1KonovVYmkT+rfZnnrrEpls9Y7ACm7xV6CKf 3RzBZrW0oqxMIRSyf9ftu5oDwdIkwJPUjy1Ab07H079ZYXEXclkmV3b7dR+36H7A 2RnhSUT+EfyqDOmFuPpIAWbADZmNeFd66EsBdln9IC9Ysr4HIwzv80pD2BMiNDdZ hwrDnionkShyDA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:12 2025 by rpki-client