This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft File: UHQRWPPtZb7hveEvNPiVr7DdUNU.mft (raw, json) Hash identifier: YWIlNEG/yjDuPtez5pyQMaX6HMPHj9vxBhCDlIAQFbA= Subject key identifier: 2B:79:65:89:5D:AB:C0:C7:2F:D2:BA:41:BD:EF:6C:D6:B5:7B:B3:C3 Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Certificate serial: 019B34FB75C344C50D2782D80056D75491F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft Manifest number: 17C6 Signing time: Fri 19 Dec 2025 05:00:53 +0000 Manifest this update: Fri 19 Dec 2025 05:00:53 +0000 Manifest next update: Sat 20 Dec 2025 05:00:53 +0000 Files and hashes: 1: 1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa (hash: RYE6k3//z5KNEk7H3IQ1JZYxDGCNXiKaq546ajQsong=) 2: C-2Nv77vdORBtXODMBObwRD87Wk.roa (hash: N6t7RosiMXetfLBziLoQs8MiQEYjeO1vmrwr27Ix98Y=) 3: HEwByDo5NsJkjq0KP_e43JX1Y-I.roa (hash: KBL6f/ipp4MstSEvkMgxey8LBfXIJhOUyz3ctrFmblM=) 4: UHQRWPPtZb7hveEvNPiVr7DdUNU.crl (hash: iO2hbLU1oQ0Fk9L2YRUL3BEukRs6ASYndok3bXoVVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:75:c3:44:c5:0d:27:82:d8:00:56:d7:54:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Validity Not Before: Dec 19 05:00:53 2025 GMT Not After : Dec 20 05:00:53 2025 GMT Subject: CN=2b7965895dabc0c72fd2ba41bdef6cd6b57bb3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:73:51:20:6f:f2:4e:34:15:51:df:f5:2c:3a: ff:f5:08:1d:0a:a7:4a:20:e7:0c:2d:a8:8c:18:b5: 99:da:df:dd:6a:72:a0:35:a8:9a:c8:20:d8:89:a9: d8:c1:1c:1a:51:99:94:e7:92:2a:88:40:74:05:03: 36:53:49:8e:0a:04:79:9f:24:0c:1a:c3:72:76:27: f4:b9:53:a4:e6:45:ed:e2:75:33:d2:f1:46:c0:5b: c1:f4:c5:9c:53:5a:a9:a4:1f:52:ed:3f:e0:fb:b3: 74:f8:33:15:fd:ae:3c:59:9c:23:81:34:82:be:c9: 49:af:f6:8e:db:c0:e1:52:15:83:33:df:c9:78:66: 4f:b6:83:4f:54:dc:38:92:87:b1:45:17:bd:a1:66: b9:41:58:7d:c8:20:54:91:75:9b:42:38:aa:c3:58: d3:69:48:fc:0c:31:d0:57:64:a0:5d:15:bc:eb:db: df:55:93:74:09:da:72:dd:3d:07:c7:15:00:b9:0b: 8e:94:90:0f:43:27:8d:68:cb:d2:b8:13:27:f6:5a: 7f:dd:b1:61:a2:0b:a5:3e:e8:2d:d8:ce:08:ef:a7: cb:2e:74:d4:23:f0:54:f9:d5:92:b5:37:e1:cc:2e: 3f:b4:6b:e7:48:28:ea:0e:18:dd:de:9b:c9:83:a6: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:65:89:5D:AB:C0:C7:2F:D2:BA:41:BD:EF:6C:D6:B5:7B:B3:C3 X509v3 Authority Key Identifier: keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:73:1d:c5:f7:9a:ac:8d:99:f9:a1:ea:c0:86:2b:03:ba:6c: 3a:fe:5a:16:91:64:eb:62:d0:95:3f:2e:d4:16:7c:8a:41:3f: 8a:61:85:16:6f:2b:eb:05:52:2e:5a:41:a5:8a:3e:57:98:68: ec:8e:f0:7d:0f:6c:74:5f:a8:94:cd:f4:40:f5:aa:02:d5:79: 6f:76:af:12:90:72:44:d3:19:02:6e:68:bc:d9:d2:9d:47:fa: 38:6e:c5:f3:34:e7:97:d4:dc:03:12:a6:5e:ab:ac:aa:6c:96: 46:77:9b:f7:93:1e:3e:92:e5:25:ff:0a:45:67:8f:c4:27:47: 45:eb:0b:55:df:25:25:f1:f1:41:75:ad:eb:d1:a0:d1:9b:61: 20:ed:84:57:5c:0f:39:b9:8d:a1:e5:4c:ef:9a:1e:87:26:10: 2f:fa:6c:34:89:1c:1b:10:b0:5c:ff:21:d2:84:47:3b:62:a7: 8f:ea:7c:e0:ea:9e:c7:4e:a8:4a:84:c6:d9:e9:78:76:8d:a1: 50:50:26:4b:fa:74:6e:6d:5d:65:5c:a1:eb:ba:c3:18:73:80: 0b:dc:99:db:d2:db:d5:9a:13:66:00:12:65:7b:1a:f9:21:3d: 24:fb:9a:79:66:35:fd:9c:55:6a:aa:71:7b:b1:89:0c:af:15: d5:81:c6:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+3XDRMUNJ4LYAFbXVJH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzQxMTU4ZjNlZDY1YmVlMWJkZTEyZjM0Zjg5NWFmYjBk ZDUwZDUwHhcNMjUxMjE5MDUwMDUzWhcNMjUxMjIwMDUwMDUzWjAzMTEwLwYDVQQD EygyYjc5NjU4OTVkYWJjMGM3MmZkMmJhNDFiZGVmNmNkNmI1N2JiM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03NRIG/yTjQVUd/1LDr/9QgdCqdK IOcMLaiMGLWZ2t/danKgNaiayCDYianYwRwaUZmU55IqiEB0BQM2U0mOCgR5nyQM GsNydif0uVOk5kXt4nUz0vFGwFvB9MWcU1qppB9S7T/g+7N0+DMV/a48WZwjgTSC vslJr/aO28DhUhWDM9/JeGZPtoNPVNw4koexRRe9oWa5QVh9yCBUkXWbQjiqw1jT aUj8DDHQV2SgXRW869vfVZN0Cdpy3T0HxxUAuQuOlJAPQyeNaMvSuBMn9lp/3bFh ogulPugt2M4I76fLLnTUI/BU+dWStTfhzC4/tGvnSCjqDhjd3pvJg6Z/ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt5ZYldq8DHL9K6Qb3vbNa1e7PDMB8GA1UdIwQY MBaAFFB0EVjz7WW+4b3hLzT4la+w3VDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQt MzU1M2I0ZWQ2Nzk0LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQtMzU1M2I0ZWQ2Nzk0 LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHMdxfea rI2Z+aHqwIYrA7psOv5aFpFk62LQlT8u1BZ8ikE/imGFFm8r6wVSLlpBpYo+V5ho 7I7wfQ9sdF+olM30QPWqAtV5b3avEpByRNMZAm5ovNnSnUf6OG7F8zTnl9TcAxKm XqusqmyWRneb95MePpLlJf8KRWePxCdHResLVd8lJfHxQXWt69Gg0ZthIO2EV1wP ObmNoeVM75oehyYQL/psNIkcGxCwXP8h0oRHO2Knj+p84Oqex06oSoTG2el4do2h UFAmS/p0bm1dZVyh67rDGHOAC9yZ29Lb1ZoTZgASZXsa+SE9JPuaeWY1/ZxVaqpx e7GJDK8V1YHGzQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:44 2025 by rpki-client