This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json) Hash identifier: kmN8AnGsBUHhC8C97TAsdq+rCEmwws4HGf5ZoNOsEWA= Subject key identifier: 93:E9:89:9B:24:31:9E:61:04:D1:C6:28:5D:2D:0F:99:1D:3A:AD:F2 Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a Certificate serial: 019B413711B1325CF4F29D3B5346E96BBCF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 14:01:26 +0000 Manifest this update: Sun 21 Dec 2025 14:01:26 +0000 Manifest next update: Mon 22 Dec 2025 14:01:26 +0000 Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=) 2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=) 3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: qobmJwIcGC4ZPaG8O2HypParh7BCbn2DFJOpbnMoTWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:11:b1:32:5c:f4:f2:9d:3b:53:46:e9:6b:bc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a Validity Not Before: Dec 21 14:01:26 2025 GMT Not After : Dec 22 14:01:26 2025 GMT Subject: CN=93e9899b24319e6104d1c6285d2d0f991d3aadf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:c2:5d:74:43:da:4c:06:8f:31:40:8c:ce: 08:10:c0:01:2a:b0:c3:1e:00:11:4e:6b:96:58:3d: a0:af:54:a2:fd:19:f1:c8:6d:38:ab:80:66:72:68: 56:a0:81:d2:bd:69:4d:b5:a0:8d:dc:99:dd:9d:14: 7d:d4:a9:ff:07:0a:89:61:0d:7d:c8:83:4d:dc:5f: ef:84:f9:7c:6b:7e:c8:84:1b:94:d2:fc:c5:cb:37: 80:c5:91:bc:77:77:4d:89:0b:3b:fe:da:92:46:f1: 70:15:3a:5e:27:74:ca:95:b1:01:ce:52:a7:be:f0: d6:b7:bc:ab:70:f8:35:8c:a9:c2:c1:52:40:97:4a: 95:7b:2d:11:70:1f:c6:82:5c:73:83:74:00:34:2c: 7f:74:90:f8:ed:92:14:84:c9:b0:37:8e:54:17:a0: db:6a:6b:12:ff:c3:c3:b0:9b:f9:fa:65:13:f1:4a: 5f:5e:6d:cf:15:99:c5:0c:e4:e7:05:9e:8c:53:5d: e6:dc:c5:7f:51:48:4d:19:91:da:d4:06:91:7c:b8: f9:6f:be:e3:71:16:06:f2:19:80:80:93:0c:83:d6: 5a:d6:5e:44:9a:73:80:8c:59:f9:3a:43:fe:12:c3: 88:ac:3d:77:0d:f9:0f:c0:8a:89:d8:07:27:a6:ad: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:89:9B:24:31:9E:61:04:D1:C6:28:5D:2D:0F:99:1D:3A:AD:F2 X509v3 Authority Key Identifier: keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:7d:16:ad:e3:a3:56:25:27:a1:70:03:15:f5:f6:b4:eb:5c: 19:6c:f8:44:76:2c:bc:1d:c9:77:5c:2f:9e:e3:53:95:92:45: 91:c5:f7:0e:c9:a4:e2:4c:08:39:1f:f1:66:93:70:df:27:91: d6:fe:94:e5:d3:16:0f:ea:fe:f0:28:d5:97:46:81:65:b0:ee: 99:bd:75:23:4f:9c:a4:d8:77:d6:ba:fb:63:90:02:c5:c8:98: 10:4b:ca:67:b0:dd:90:54:cd:63:05:cc:a5:00:d8:3b:96:ed: 59:1e:93:61:26:7a:87:f9:25:a4:a9:68:12:2a:15:46:9b:82: b9:2e:0b:ad:26:0c:be:3a:ba:4c:d5:58:b7:2c:81:6f:d9:13: 05:e0:b6:01:1d:3b:78:9f:d2:0b:f3:59:e4:64:b3:89:bc:37: 3e:58:7f:3d:eb:c7:2d:d4:10:c5:3d:d7:2f:b6:ae:c7:7b:22: 82:1f:bc:72:6d:c5:36:90:25:63:ae:1e:0e:d4:f9:75:c9:c9: 12:a8:dd:c1:0d:62:ae:69:e6:29:36:fd:8a:03:13:12:ec:66: 6e:10:5e:ce:71:c9:cc:a5:7b:e9:0f:08:f6:c1:65:1d:af:14: 10:21:f8:26:82:ae:5d:0a:89:2c:82:24:19:75:62:59:6c:1b: 0c:93:17:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNxGxMlz08p07U0bpa7z1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl OTJiMGEwHhcNMjUxMjIxMTQwMTI2WhcNMjUxMjIyMTQwMTI2WjAzMTEwLwYDVQQD Eyg5M2U5ODk5YjI0MzE5ZTYxMDRkMWM2Mjg1ZDJkMGY5OTFkM2FhZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yPCXXRD2kwGjzFAjM4IEMABKrDD HgARTmuWWD2gr1Si/RnxyG04q4BmcmhWoIHSvWlNtaCN3JndnRR91Kn/BwqJYQ19 yINN3F/vhPl8a37IhBuU0vzFyzeAxZG8d3dNiQs7/tqSRvFwFTpeJ3TKlbEBzlKn vvDWt7yrcPg1jKnCwVJAl0qVey0RcB/Gglxzg3QANCx/dJD47ZIUhMmwN45UF6Db amsS/8PDsJv5+mUT8UpfXm3PFZnFDOTnBZ6MU13m3MV/UUhNGZHa1AaRfLj5b77j cRYG8hmAgJMMg9Za1l5EmnOAjFn5OkP+EsOIrD13DfkPwIqJ2Acnpq1VtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPpiZskMZ5hBNHGKF0tD5kdOq3yMB8GA1UdIwQY MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH0WreOj ViUnoXADFfX2tOtcGWz4RHYsvB3Jd1wvnuNTlZJFkcX3Dsmk4kwIOR/xZpNw3yeR 1v6U5dMWD+r+8CjVl0aBZbDumb11I0+cpNh31rr7Y5ACxciYEEvKZ7DdkFTNYwXM pQDYO5btWR6TYSZ6h/klpKloEioVRpuCuS4LrSYMvjq6TNVYtyyBb9kTBeC2AR07 eJ/SC/NZ5GSzibw3Plh/PevHLdQQxT3XL7aux3sigh+8cm3FNpAlY64eDtT5dcnJ EqjdwQ1irmnmKTb9igMTEuxmbhBeznHJzKV76Q8I9sFlHa8UECH4JoKuXQqJLIIk GXViWWwbDJMX8g== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:05 2025 by rpki-client