This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: Bx+eyGX0oQP8YrEcjMmxRNpzCsY6i7caMpVB50IP0ik= Subject key identifier: E5:4B:03:2E:0F:02:C1:B9:E0:35:8F:51:06:DE:F0:7F:B2:43:55:70 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019B262DBF93B8335409154DD1E9E4906A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1636 Signing time: Tue 16 Dec 2025 08:01:30 +0000 Manifest this update: Tue 16 Dec 2025 08:01:30 +0000 Manifest next update: Wed 17 Dec 2025 08:01:30 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: P8cvY1KoEOXBQ03DYJYP2FMMa2I.roa (hash: MK5h14W8ZCBQORWeYdGBDra0AA5OtxnFwGtkpjQblMk=) 8: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: Hks6zB4xXKFHSQ3LWGZhNbd+DoU+gdU3Uou2nlKJhe0=) 9: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 10: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:bf:93:b8:33:54:09:15:4d:d1:e9:e4:90:6a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Dec 16 08:01:30 2025 GMT Not After : Dec 17 08:01:30 2025 GMT Subject: CN=e54b032e0f02c1b9e0358f5106def07fb2435570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:81:10:6e:c6:57:81:d7:7d:c3:80:fd:2b: 56:28:c9:15:74:d8:c3:fc:8c:64:97:55:e0:6f:23: 1d:af:44:c6:57:a8:fb:78:f4:28:da:8b:fe:c6:37: 51:e5:c7:3f:0b:fa:02:48:8d:28:86:5d:4d:73:e4: 63:90:57:ac:3d:0a:64:b1:b7:7c:7b:85:ce:f1:da: 7d:19:75:ef:35:88:3f:24:22:28:4c:1c:ed:d3:5f: e1:fc:57:39:55:8e:77:37:d1:6f:60:a2:20:d1:d5: 86:09:3b:3e:b4:f4:e3:0a:11:ee:a9:7e:3d:30:79: bb:d1:91:03:7d:03:6b:4a:a6:7e:9f:d6:36:b7:ff: c4:72:22:dc:37:42:f9:bd:53:52:08:c2:d1:9d:db: f8:b0:4e:2f:45:49:06:2c:19:02:5c:c3:96:1a:d0: b3:ce:d0:a8:ae:ac:2c:09:32:49:1b:c8:10:16:d6: e3:bb:f0:63:67:57:a9:97:fd:e6:f8:11:90:dd:1a: 63:f3:3c:18:03:20:10:ac:b8:38:12:bd:7c:a9:51: ab:4b:0a:ed:4a:96:21:03:01:f1:65:18:ee:2a:31: 81:b1:30:61:84:49:24:86:b1:4c:b1:d1:f2:49:33: 67:f4:a1:8a:c2:5b:0b:73:fa:9f:56:51:4e:04:5e: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4B:03:2E:0F:02:C1:B9:E0:35:8F:51:06:DE:F0:7F:B2:43:55:70 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:15:da:76:4b:05:4c:50:46:a7:8b:75:7f:5a:55:dd:1b:7d: 0d:ec:08:49:e4:0d:c5:57:8d:2a:47:e9:ed:fb:2e:ab:a2:86: 8d:93:73:9a:eb:80:fe:96:a9:89:29:58:f9:16:80:ee:55:8d: 3b:67:9a:50:a8:d3:d8:4e:61:4d:cf:70:6f:cd:88:53:e0:91: a3:b8:f1:09:dd:af:e9:72:52:af:61:fb:59:7b:de:89:fb:7d: 91:6e:0e:6f:4d:fa:6a:bf:77:fd:72:ce:54:9c:13:70:d1:8b: 86:b9:4c:1d:2b:e8:70:ab:01:ee:50:7f:58:e5:1d:5d:46:fc: 49:81:d8:16:a4:af:93:32:a7:44:7d:e9:69:53:ac:2a:78:6b: 5f:3d:84:16:d3:11:c5:78:4d:c6:f7:f8:f3:b7:76:ad:d1:9b: 01:de:8d:4d:d8:5c:a1:cb:8a:b0:2b:ac:7f:43:c1:d4:e5:02: ae:79:5e:0b:5d:c9:e6:1f:d3:23:3d:c7:fd:d9:67:1c:af:ef: fd:63:ed:01:24:80:0d:ed:2a:59:b2:a1:c3:55:06:f3:05:86: 3d:c0:35:3c:be:8a:67:2f:37:bd:d5:db:95:a8:70:a0:67:9d: cd:8c:39:da:97:85:3d:1d:c3:6d:23:ff:14:fe:eb:a9:db:9f: c7:09:09:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLb+TuDNUCRVN0enkkGo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUxMjE2MDgwMTMwWhcNMjUxMjE3MDgwMTMwWjAzMTEwLwYDVQQD EyhlNTRiMDMyZTBmMDJjMWI5ZTAzNThmNTEwNmRlZjA3ZmIyNDM1NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS+BEG7GV4HXfcOA/StWKMkVdNjD /Ixkl1XgbyMdr0TGV6j7ePQo2ov+xjdR5cc/C/oCSI0ohl1Nc+RjkFesPQpksbd8 e4XO8dp9GXXvNYg/JCIoTBzt01/h/Fc5VY53N9FvYKIg0dWGCTs+tPTjChHuqX49 MHm70ZEDfQNrSqZ+n9Y2t//EciLcN0L5vVNSCMLRndv4sE4vRUkGLBkCXMOWGtCz ztCorqwsCTJJG8gQFtbju/BjZ1epl/3m+BGQ3Rpj8zwYAyAQrLg4Er18qVGrSwrt SpYhAwHxZRjuKjGBsTBhhEkkhrFMsdHySTNn9KGKwlsLc/qfVlFOBF4RZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVLAy4PAsG54DWPUQbe8H+yQ1VwMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRXadksF TFBGp4t1f1pV3Rt9DewISeQNxVeNKkfp7fsuq6KGjZNzmuuA/papiSlY+RaA7lWN O2eaUKjT2E5hTc9wb82IU+CRo7jxCd2v6XJSr2H7WXveift9kW4Ob036ar93/XLO VJwTcNGLhrlMHSvocKsB7lB/WOUdXUb8SYHYFqSvkzKnRH3paVOsKnhrXz2EFtMR xXhNxvf487d2rdGbAd6NTdhcocuKsCusf0PB1OUCrnleC13J5h/TIz3H/dlnHK/v /WPtASSADe0qWbKhw1UG8wWGPcA1PL6KZy83vdXblahwoGedzYw52peFPR3DbSP/ FP7rqdufxwkJ1Q== -----END CERTIFICATE-----Generated at Tue Dec 16 10:39:27 2025 by rpki-client