This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json) Hash identifier: utmmuvpRwofMuwQ3v3XLLO1ECZs6lr54o9zA2A9rO7w= Subject key identifier: BB:9D:45:EE:E6:C9:F3:CE:05:4D:E8:97:A6:B7:58:F4:78:A9:75:E8 Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7 Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7 Certificate serial: 019B3456802DED2D3CCA5BD1735D176147A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft Manifest number: 0617 Signing time: Fri 19 Dec 2025 02:00:42 +0000 Manifest this update: Fri 19 Dec 2025 02:00:42 +0000 Manifest next update: Sat 20 Dec 2025 02:00:42 +0000 Files and hashes: 1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: 2vztEt9guIe2Q82Iek7tcWrwjAxB/fZkwKBlTrzW7AE=) 2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=) 3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:80:2d:ed:2d:3c:ca:5b:d1:73:5d:17:61:47:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7 Validity Not Before: Dec 19 02:00:42 2025 GMT Not After : Dec 20 02:00:42 2025 GMT Subject: CN=bb9d45eee6c9f3ce054de897a6b758f478a975e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:d9:89:8b:d0:33:89:ce:74:70:11:fd:21: f3:12:34:73:a4:c0:51:fa:9d:9a:54:8e:1d:f7:17: fa:ed:fb:af:1c:27:0b:d7:24:20:d6:f6:04:92:04: d8:5f:b5:d2:f0:11:3c:19:27:a6:d4:44:6c:5b:73: 06:1f:5c:20:07:3b:14:39:a4:15:aa:27:67:73:5f: 1a:d7:79:cb:e3:e1:ed:a2:ee:61:76:de:2c:7a:49: b0:cd:e1:62:2d:ae:35:c1:39:81:16:f4:ad:68:8e: 50:8d:80:f1:71:53:68:9c:6b:af:bb:aa:24:f3:b8: 72:de:b9:51:2d:de:10:ac:d3:b5:d3:15:37:0e:45: b3:40:bc:e2:d0:ff:dd:43:0d:5d:3a:4c:cc:97:36: ea:a1:02:73:04:83:15:c3:13:8f:12:c9:42:7d:96: 15:60:94:28:04:99:eb:88:02:68:ea:f6:02:d1:3c: ee:d2:9d:91:52:14:0a:62:05:b7:71:32:71:1b:5c: 4d:d0:3f:94:32:26:32:4c:68:1e:38:1d:97:14:91: 5f:31:94:2b:f2:ae:de:98:ab:a9:b2:27:00:b5:61: ff:0b:73:ac:1a:a9:05:fd:32:e4:04:a9:bd:29:83: 8f:9a:19:b6:0a:8f:ec:99:ff:5c:d1:a6:db:05:d8: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9D:45:EE:E6:C9:F3:CE:05:4D:E8:97:A6:B7:58:F4:78:A9:75:E8 X509v3 Authority Key Identifier: keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d0:6a:11:76:06:ae:65:a8:7d:2b:17:80:a1:e3:52:22:47: dc:f1:84:b6:af:c7:c2:c9:c2:05:a1:d1:11:93:96:e0:9d:e7: 3a:d7:27:7b:92:0a:e1:fc:c0:3d:2d:b1:32:56:d9:45:81:d5: f2:d5:9d:66:8e:0f:27:e2:80:f2:fc:a3:ff:5c:79:93:ba:ff: a9:7c:8a:16:c4:bb:d8:74:10:26:fd:bd:54:1d:39:27:f6:88: ef:d7:49:5a:d7:20:05:8b:d5:1d:1d:dc:2e:a6:b7:3c:bb:d8: 2a:0f:22:8f:85:f1:0c:03:41:6d:01:fe:cb:91:ab:4c:97:16: 5b:f9:c3:e8:d2:94:1a:80:96:88:de:86:68:76:94:2c:76:24: 6f:a1:34:83:af:5e:c2:d2:9c:78:4a:a8:a1:6f:80:98:3e:21: 5a:4d:d6:90:a2:fe:7e:aa:e7:98:6d:08:0c:97:4f:26:b0:93: 1b:86:2c:9c:57:95:61:67:fe:9a:a8:1c:0a:ed:11:98:ed:a8: 83:0c:a0:45:52:06:1e:27:0a:e5:35:ab:0a:50:c4:fd:5b:c9: d9:f4:da:a2:4b:4e:08:48:1f:f9:6f:3c:1d:99:46:79:8b:d6: 2f:8d:85:ea:7d:8a:76:74:99:1d:2e:93:48:2d:56:bf:6e:2d: 8f:a6:6c:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VoAt7S08ylvRc10XYUenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNTE4MjRjMTJiZDNlMmFmN2E5ODc1MjRhN2EzM2E4ZjE5 ZDgxZTcwHhcNMjUxMjE5MDIwMDQyWhcNMjUxMjIwMDIwMDQyWjAzMTEwLwYDVQQD EyhiYjlkNDVlZWU2YzlmM2NlMDU0ZGU4OTdhNmI3NThmNDc4YTk3NWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbnZiYvQM4nOdHAR/SHzEjRzpMBR +p2aVI4d9xf67fuvHCcL1yQg1vYEkgTYX7XS8BE8GSem1ERsW3MGH1wgBzsUOaQV qidnc18a13nL4+Htou5hdt4sekmwzeFiLa41wTmBFvStaI5QjYDxcVNonGuvu6ok 87hy3rlRLd4QrNO10xU3DkWzQLzi0P/dQw1dOkzMlzbqoQJzBIMVwxOPEslCfZYV YJQoBJnriAJo6vYC0Tzu0p2RUhQKYgW3cTJxG1xN0D+UMiYyTGgeOB2XFJFfMZQr 8q7emKupsicAtWH/C3OsGqkF/TLkBKm9KYOPmhm2Co/smf9c0abbBdjhBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLudRe7myfPOBU3ol6a3WPR4qXXoMB8GA1UdIwQY MBaAFFFRgkwSvT4q96mHUkp6M6jxnYHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYt ZmFhZmU0NzhiZGNlLzEvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYtZmFhZmU0NzhiZGNl LzEvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9BqEXYG rmWofSsXgKHjUiJH3PGEtq/HwsnCBaHREZOW4J3nOtcne5IK4fzAPS2xMlbZRYHV 8tWdZo4PJ+KA8vyj/1x5k7r/qXyKFsS72HQQJv29VB05J/aI79dJWtcgBYvVHR3c Lqa3PLvYKg8ij4XxDANBbQH+y5GrTJcWW/nD6NKUGoCWiN6GaHaULHYkb6E0g69e wtKceEqooW+AmD4hWk3WkKL+fqrnmG0IDJdPJrCTG4YsnFeVYWf+mqgcCu0RmO2o gwygRVIGHicK5TWrClDE/VvJ2fTaoktOCEgf+W88HZlGeYvWL42F6n2KdnSZHS6T SC1Wv24tj6ZsXw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:26:43 2025 by rpki-client