This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft File: UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json) Hash identifier: YPavissNhA6e1/auSi08oqnnvXg4pH9xmI/skcsA0Uk= Subject key identifier: D6:99:C2:7D:9D:3E:A0:EC:42:33:9E:1C:BE:15:6E:40:70:C6:3D:91 Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42 Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242 Certificate serial: 019B2E54424A596197F9DD75D39B940E7F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 22:00:32 +0000 Manifest this update: Wed 17 Dec 2025 22:00:32 +0000 Manifest next update: Thu 18 Dec 2025 22:00:32 +0000 Files and hashes: 1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=) 2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: 4ktNuhTxZcZ5uj1g+czzGGREGya108U2Eh3SUE/+MYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:42:4a:59:61:97:f9:dd:75:d3:9b:94:0e:7f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51626068942586ce95702103bac899d23fcf7242 Validity Not Before: Dec 17 22:00:32 2025 GMT Not After : Dec 18 22:00:32 2025 GMT Subject: CN=d699c27d9d3ea0ec42339e1cbe156e4070c63d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:70:cd:7d:c9:2f:98:95:ec:7f:a8:9e:1f: e2:9c:9c:0c:85:23:45:f0:96:6a:ee:87:38:01:43: b5:c9:70:6e:58:d2:d0:51:c3:ee:9e:1c:9a:3b:1a: 00:c0:f7:e4:99:fd:bf:68:68:b2:34:5d:05:ba:6b: 24:bb:85:1b:8d:e8:c5:b4:2d:75:24:8c:6b:c9:ec: 46:b0:10:cd:98:73:e6:26:27:88:ae:0f:10:3f:2b: 06:79:db:b1:60:79:4c:79:63:c7:e3:64:cd:6d:56: 8d:3e:77:4a:6f:1d:7f:c7:f9:b6:50:36:d5:b8:d2: 15:d7:3d:f6:98:ff:75:02:4b:03:3d:27:a0:53:11: 89:2d:5d:8f:aa:82:de:f5:ff:62:f0:d5:a5:df:ef: 16:af:41:bf:17:73:76:36:66:30:25:82:6a:76:9e: 5c:ee:9f:53:77:fb:c6:ad:c1:4f:51:6c:e8:35:3a: 66:be:72:e0:cd:63:34:e0:09:d2:ce:c1:90:f4:17: a6:20:99:85:e1:63:78:87:9e:5b:25:02:c5:d3:8d: 9c:11:39:f8:02:9e:a7:c9:c1:71:4b:ea:57:2b:a1: 3b:8d:79:7e:d5:e8:d0:62:6a:20:29:c4:0d:25:f7: bf:be:5e:d5:f2:15:e7:d2:9b:8e:73:51:57:ff:5e: 32:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:99:C2:7D:9D:3E:A0:EC:42:33:9E:1C:BE:15:6E:40:70:C6:3D:91 X509v3 Authority Key Identifier: keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:33:8a:98:ba:e2:ec:5e:fb:1c:bd:d4:f6:b5:c5:0c:0e:12: 25:f2:51:9c:5c:13:ac:e9:45:2f:10:15:9f:f3:13:69:78:55: bf:e7:99:3f:0c:5f:14:0f:49:44:6a:c1:70:da:84:95:56:a8: 6c:1a:2b:0f:33:73:7c:bd:4d:02:40:e9:4c:1a:2a:89:de:a2: d7:3d:29:c2:72:50:ca:88:b1:39:08:51:2a:3d:0a:97:84:5f: fb:52:94:50:2e:55:8b:ce:4c:0a:0f:8b:d5:72:bd:6e:33:b1: 97:ae:0d:16:48:21:cd:fd:1b:f8:c3:4d:eb:12:10:ce:da:0e: bc:be:9a:4b:e8:b1:1e:e2:eb:c8:0b:3b:b9:b1:b5:d2:fa:18: ff:fd:b7:80:bb:4d:a1:73:79:9c:eb:2e:1e:60:0a:79:22:1e: 67:af:4a:7c:e7:19:d9:25:64:1a:04:23:cb:d6:3f:27:f8:73: 9a:34:ff:62:dc:d3:ba:b2:f9:51:bd:df:40:8e:e0:36:85:0c: 82:10:bc:5f:45:b4:23:ab:24:3d:f3:7e:c8:3d:81:48:02:3d: 89:1f:d7:2f:33:e0:a8:e9:81:da:c8:06:31:72:a1:26:d3:a0: a9:1d:4e:8d:f9:8f:b5:09:93:f1:45:cd:81:69:a1:34:c0:06: 49:e4:b5:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVEJKWWGX+d1105uUDn9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNjI2MDY4OTQyNTg2Y2U5NTcwMjEwM2JhYzg5OWQyM2Zj ZjcyNDIwHhcNMjUxMjE3MjIwMDMyWhcNMjUxMjE4MjIwMDMyWjAzMTEwLwYDVQQD EyhkNjk5YzI3ZDlkM2VhMGVjNDIzMzllMWNiZTE1NmU0MDcwYzYzZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry5wzX3JL5iV7H+onh/inJwMhSNF 8JZq7oc4AUO1yXBuWNLQUcPunhyaOxoAwPfkmf2/aGiyNF0Fumsku4UbjejFtC11 JIxryexGsBDNmHPmJieIrg8QPysGeduxYHlMeWPH42TNbVaNPndKbx1/x/m2UDbV uNIV1z32mP91AksDPSegUxGJLV2PqoLe9f9i8NWl3+8Wr0G/F3N2NmYwJYJqdp5c 7p9Td/vGrcFPUWzoNTpmvnLgzWM04AnSzsGQ9BemIJmF4WN4h55bJQLF042cETn4 Ap6nycFxS+pXK6E7jXl+1ejQYmogKcQNJfe/vl7V8hXn0puOc1FX/14ymQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaZwn2dPqDsQjOeHL4VbkBwxj2RMB8GA1UdIwQY MBaAFFFiYGiUJYbOlXAhA7rImdI/z3JCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQt N2JkOWU1ZjQ2N2FkLzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQtN2JkOWU1ZjQ2N2Fk LzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTOKmLri 7F77HL3U9rXFDA4SJfJRnFwTrOlFLxAVn/MTaXhVv+eZPwxfFA9JRGrBcNqElVao bBorDzNzfL1NAkDpTBoqid6i1z0pwnJQyoixOQhRKj0Kl4Rf+1KUUC5Vi85MCg+L 1XK9bjOxl64NFkghzf0b+MNN6xIQztoOvL6aS+ixHuLryAs7ubG10voY//23gLtN oXN5nOsuHmAKeSIeZ69KfOcZ2SVkGgQjy9Y/J/hzmjT/YtzTurL5Ub3fQI7gNoUM ghC8X0W0I6skPfN+yD2BSAI9iR/XLzPgqOmB2sgGMXKhJtOgqR1OjfmPtQmT8UXN gWmhNMAGSeS1mg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:10 2025 by rpki-client