This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json) Hash identifier: 7A8bUfroPgh9WaiZvB1AP6pVDKxlViECYKHRmGyfduM= Subject key identifier: 95:C8:33:23:5F:7F:0A:26:3B:EE:3D:16:9D:19:9B:5A:71:DE:34:9B Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Certificate serial: 019B269B8BF9BDFBED63968CA5EDFA8549C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft Manifest number: 14CC Signing time: Tue 16 Dec 2025 10:01:26 +0000 Manifest this update: Tue 16 Dec 2025 10:01:26 +0000 Manifest next update: Wed 17 Dec 2025 10:01:26 +0000 Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: 2gQdCCZzteOFrgPz5KqeU2rePPphYjyjAefZpeJOH1Y=) 2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:8b:f9:bd:fb:ed:63:96:8c:a5:ed:fa:85:49:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Validity Not Before: Dec 16 10:01:26 2025 GMT Not After : Dec 17 10:01:26 2025 GMT Subject: CN=95c833235f7f0a263bee3d169d199b5a71de349b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b3:d7:44:e2:c0:22:ba:75:c3:d6:d2:c4:90: 52:b9:ae:9c:4e:89:28:4f:19:86:ce:f1:63:1a:8d: d6:5f:35:ca:e6:fe:7e:86:f2:58:32:f7:62:e0:f1: 16:af:3b:c9:52:29:19:e8:7a:9f:42:c6:32:cf:eb: a0:3c:04:40:c6:8c:c6:29:41:46:d5:0a:49:04:f8: dd:f1:fb:a3:f1:02:16:d3:f3:56:73:31:e7:cd:8c: fb:8e:e8:51:c2:b0:53:f4:36:18:bd:53:88:aa:7f: 0f:bb:a5:03:ea:b5:16:a6:fc:25:31:e0:fc:3f:7d: eb:00:bd:b0:3f:95:d2:08:f9:a2:89:7c:4e:67:66: c3:23:db:1e:14:4f:f0:3f:64:ed:14:8e:99:b0:3c: 32:8d:83:83:56:08:32:2d:58:97:ed:81:a9:05:d7: a0:f9:e0:23:39:06:e3:e8:2f:96:3c:4e:54:82:73: fe:6f:ca:a0:6f:c1:74:7d:f8:dc:19:d9:87:c4:1e: 4f:93:d2:1f:ca:0c:3d:32:74:1f:fd:f8:d0:52:df: 98:e7:08:76:ee:94:0f:4e:6c:29:ec:a0:5d:02:e1: 04:f7:c8:46:ce:d7:99:34:e2:23:94:80:ec:4e:5d: db:81:6b:1e:68:fe:62:1d:9a:21:2f:5b:7e:8f:66: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C8:33:23:5F:7F:0A:26:3B:EE:3D:16:9D:19:9B:5A:71:DE:34:9B X509v3 Authority Key Identifier: keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8d:8c:f2:ad:74:1d:57:3f:5d:de:60:66:14:e4:9b:b7:f1: e7:e8:12:2d:dc:1d:4e:29:27:f7:17:1c:3a:02:24:ae:c6:0e: b3:00:65:98:84:35:bd:60:81:bf:69:75:d9:6f:d7:b5:86:19: 69:ba:45:64:58:55:b1:b7:c1:d0:e0:4e:6a:8c:8c:d8:fc:b9: ac:0b:5d:b0:5b:14:8f:a5:68:8b:f7:e6:20:a1:c8:10:50:27: 5a:53:2b:c1:ab:c4:c2:17:aa:dd:da:62:d5:51:e7:6c:3e:f8: 0b:f0:77:5b:47:c4:34:f1:d0:03:58:bd:c8:4d:15:7b:68:c4: 14:e8:0d:da:e7:c5:c1:d3:d9:e5:f2:2e:7a:57:4c:83:40:df: 13:8c:47:b6:8d:5a:9b:9a:70:da:03:36:3c:b4:99:b7:01:d1: 78:bd:28:5a:69:e6:1c:81:59:7a:d8:fd:bc:b3:4f:d7:d5:3c: ff:0c:51:88:c9:f6:1f:b0:c3:1b:cd:8d:5c:0d:f0:fe:f3:7e: b3:c4:a0:02:ed:3c:24:70:1b:ec:8a:f4:47:a7:e2:50:76:80: 0e:44:b7:a3:9c:e2:49:2c:86:36:4f:63:9a:3b:44:26:d3:c7: 3f:f8:25:51:db:a4:e5:cc:a7:47:a0:f5:0f:d0:78:ec:b9:c4: 5c:16:af:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm4v5vfvtY5aMpe36hUnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjEwN2VkMDdiNWFjMGQ4MjY5ZDcyMjlkOWZkMmNhMGUz MjY1OGIwHhcNMjUxMjE2MTAwMTI2WhcNMjUxMjE3MTAwMTI2WjAzMTEwLwYDVQQD Eyg5NWM4MzMyMzVmN2YwYTI2M2JlZTNkMTY5ZDE5OWI1YTcxZGUzNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bPXROLAIrp1w9bSxJBSua6cToko TxmGzvFjGo3WXzXK5v5+hvJYMvdi4PEWrzvJUikZ6HqfQsYyz+ugPARAxozGKUFG 1QpJBPjd8fuj8QIW0/NWczHnzYz7juhRwrBT9DYYvVOIqn8Pu6UD6rUWpvwlMeD8 P33rAL2wP5XSCPmiiXxOZ2bDI9seFE/wP2TtFI6ZsDwyjYODVggyLViX7YGpBdeg +eAjOQbj6C+WPE5UgnP+b8qgb8F0ffjcGdmHxB5Pk9Ifygw9MnQf/fjQUt+Y5wh2 7pQPTmwp7KBdAuEE98hGzteZNOIjlIDsTl3bgWseaP5iHZohL1t+j2a+PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXIMyNffwomO+49Fp0Zm1px3jSbMB8GA1UdIwQY MBaAFFIhB+0HtawNgmnXIp2f0soOMmWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTIt NTliY2UzMTljMWNiLzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTItNTliY2UzMTljMWNi LzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY2M8q10 HVc/Xd5gZhTkm7fx5+gSLdwdTikn9xccOgIkrsYOswBlmIQ1vWCBv2l12W/XtYYZ abpFZFhVsbfB0OBOaoyM2Py5rAtdsFsUj6Voi/fmIKHIEFAnWlMrwavEwheq3dpi 1VHnbD74C/B3W0fENPHQA1i9yE0Ve2jEFOgN2ufFwdPZ5fIueldMg0DfE4xHto1a m5pw2gM2PLSZtwHReL0oWmnmHIFZetj9vLNP19U8/wxRiMn2H7DDG82NXA3w/vN+ s8SgAu08JHAb7Ir0R6fiUHaADkS3o5ziSSyGNk9jmjtEJtPHP/glUduk5cynR6D1 D9B47LnEXBavEg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:18:40 2025 by rpki-client