This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: f0K6dMT4fNfneGr6BGPOwUOfur3Tw9JR1ydYMy8ytg4= Subject key identifier: 9E:D1:60:39:82:25:3F:80:90:C5:9D:30:19:FF:52:4B:36:39:AB:AE Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019B0F00EE77D745CF8D05323FE273A8CF5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 162A Signing time: Thu 11 Dec 2025 20:01:17 +0000 Manifest this update: Thu 11 Dec 2025 20:01:17 +0000 Manifest next update: Fri 12 Dec 2025 20:01:17 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: P8cvY1KoEOXBQ03DYJYP2FMMa2I.roa (hash: MK5h14W8ZCBQORWeYdGBDra0AA5OtxnFwGtkpjQblMk=) 8: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: pKALUxcRzOFcy3obEvqfjVt8NzV8Bugd7DtuoMBtG+w=) 9: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 10: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ee:77:d7:45:cf:8d:05:32:3f:e2:73:a8:cf:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Dec 11 20:01:17 2025 GMT Not After : Dec 12 20:01:17 2025 GMT Subject: CN=9ed1603982253f8090c59d3019ff524b3639abae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:e2:3d:4d:1d:52:45:f7:40:a4:60:80:9e: dd:62:a6:f8:d9:13:37:9d:4d:38:94:d0:9d:42:b1: 27:95:68:f6:07:3e:6b:45:17:84:b2:8d:40:b4:0e: 28:47:ed:0e:1e:b4:21:ea:50:96:26:71:2a:b9:61: a0:4d:a1:48:e8:4a:b2:db:e8:c6:a8:e3:37:a4:de: 46:41:f8:d3:41:40:2c:57:f1:61:02:52:59:17:0c: 19:25:05:3c:0d:e8:16:6b:62:75:69:5b:74:c4:fb: e3:d3:35:f9:0e:31:07:a6:e4:92:07:71:ae:f1:39: 65:d9:d1:ba:ce:90:45:cb:0f:c3:cb:9b:6d:e8:19: f6:c7:9a:fb:bf:cf:76:b2:26:58:51:f0:a3:1e:18: 53:e6:15:42:47:29:c9:5a:e7:e1:e1:ce:13:32:8d: 97:7b:ee:6d:41:81:88:63:8c:3e:97:37:f0:99:1d: 53:a9:03:3d:b2:66:9b:89:54:a2:00:a7:2f:82:d7: 43:0a:86:9f:29:d9:0f:8d:2c:51:6e:61:d8:fb:9b: b4:73:65:63:41:22:c9:10:66:9c:83:dc:5b:80:da: 30:c0:2a:de:1f:ee:8d:a2:52:03:88:90:49:68:7e: c7:cf:3a:95:71:30:fd:11:05:37:7a:fb:53:df:db: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:60:39:82:25:3F:80:90:C5:9D:30:19:FF:52:4B:36:39:AB:AE X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c9:62:95:5b:1b:76:26:ae:56:34:e4:3c:9a:6c:4e:41:53: e0:78:8a:c9:3c:e1:c0:f2:d3:c5:22:f8:23:77:20:87:19:fe: a4:72:70:33:ac:3e:8b:28:dd:39:cf:69:be:2a:45:89:1d:88: 78:5b:00:2b:14:1c:16:0a:15:43:79:b8:c9:5c:02:de:7a:09: b4:dc:f2:53:d9:a2:88:2b:a7:2b:4f:fe:b8:64:8c:9e:53:e2: 55:89:8c:43:10:eb:bd:e6:5b:31:a8:17:0e:3d:62:f6:e5:3d: af:c0:08:58:e5:0d:89:5b:be:b6:4a:39:80:90:1a:d7:54:d1: 14:6c:bf:08:07:50:2e:ec:09:6a:00:fd:c7:db:a9:5b:c3:ce: 1f:2a:18:2b:ff:2f:0a:c6:9c:a7:0b:be:86:49:e5:14:0d:2d: d4:7d:00:15:a5:16:fe:fb:60:14:bd:60:ba:a1:fa:e9:19:41: f4:e5:af:c1:87:2c:81:05:11:76:24:6c:5d:a7:64:4e:15:bd: 95:8b:14:f3:4e:b4:e7:8f:ad:e1:16:a6:57:9d:a0:8f:2c:49: 76:c1:ef:84:a5:41:9b:7a:d8:5d:7e:ed:64:fd:6d:a6:87:1b: cf:94:61:ab:73:71:ba:93:e9:cd:82:68:97:e2:d1:01:50:ba: 23:f4:a4:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAO5310XPjQUyP+JzqM9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUxMjExMjAwMTE3WhcNMjUxMjEyMjAwMTE3WjAzMTEwLwYDVQQD Eyg5ZWQxNjAzOTgyMjUzZjgwOTBjNTlkMzAxOWZmNTI0YjM2MzlhYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9jiPU0dUkX3QKRggJ7dYqb42RM3 nU04lNCdQrEnlWj2Bz5rRReEso1AtA4oR+0OHrQh6lCWJnEquWGgTaFI6Eqy2+jG qOM3pN5GQfjTQUAsV/FhAlJZFwwZJQU8DegWa2J1aVt0xPvj0zX5DjEHpuSSB3Gu 8Tll2dG6zpBFyw/Dy5tt6Bn2x5r7v892siZYUfCjHhhT5hVCRynJWufh4c4TMo2X e+5tQYGIY4w+lzfwmR1TqQM9smabiVSiAKcvgtdDCoafKdkPjSxRbmHY+5u0c2Vj QSLJEGacg9xbgNowwCreH+6NolIDiJBJaH7HzzqVcTD9EQU3evtT39vD+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7RYDmCJT+AkMWdMBn/Uks2OauuMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMclilVsb diauVjTkPJpsTkFT4HiKyTzhwPLTxSL4I3cghxn+pHJwM6w+iyjdOc9pvipFiR2I eFsAKxQcFgoVQ3m4yVwC3noJtNzyU9miiCunK0/+uGSMnlPiVYmMQxDrveZbMagX Dj1i9uU9r8AIWOUNiVu+tko5gJAa11TRFGy/CAdQLuwJagD9x9upW8POHyoYK/8v Csacpwu+hknlFA0t1H0AFaUW/vtgFL1guqH66RlB9OWvwYcsgQURdiRsXadkThW9 lYsU806054+t4RamV52gjyxJdsHvhKVBm3rYXX7tZP1tpocbz5Rhq3NxupPpzYJo l+LRAVC6I/Sk6g== -----END CERTIFICATE-----Generated at Thu Dec 11 22:12:18 2025 by rpki-client