This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json) Hash identifier: 9Yc9j1L/3+X5yHWZJqqj2ybZaw2rQUXtEEDmrLwbrlw= Subject key identifier: A2:D7:91:21:E9:35:92:CF:8D:B2:43:1C:55:65:81:59:6E:A0:EC:70 Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7 Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7 Certificate serial: 019B228769C71383D99900E57C01AD9E72F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft Manifest number: 1557 Signing time: Mon 15 Dec 2025 15:00:58 +0000 Manifest this update: Mon 15 Dec 2025 15:00:58 +0000 Manifest next update: Tue 16 Dec 2025 15:00:58 +0000 Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=) 2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: 2ItZBEXZgegdkoyBSzh4dQvI1D0i8mo9va44ie9nyj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:69:c7:13:83:d9:99:00:e5:7c:01:ad:9e:72:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7 Validity Not Before: Dec 15 15:00:58 2025 GMT Not After : Dec 16 15:00:58 2025 GMT Subject: CN=a2d79121e93592cf8db2431c556581596ea0ec70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:be:fc:7d:f8:33:20:10:8d:62:2d:a2:a0:04: 0f:b7:4c:2c:5c:82:df:e4:58:30:f4:ae:5f:a4:f3: 58:2e:68:3f:53:18:32:3c:c2:65:11:3f:14:f7:10: f4:37:bb:8e:0e:ec:06:d2:b6:56:71:bb:e0:51:57: 52:1a:1a:71:ae:e9:df:37:8a:be:a9:7c:0a:d8:1b: 5e:79:b4:d5:f1:f7:d3:8e:24:d2:9f:74:8e:d8:d6: 79:9d:27:84:26:47:39:ec:73:bb:ba:0f:ac:4a:b3: 97:62:fa:87:a5:cb:5a:0c:52:59:79:1a:f5:f6:06: bb:f8:8f:70:d6:d6:37:c7:00:ad:66:71:c3:9d:ad: b0:8b:7f:5f:03:24:db:63:3c:56:e4:cb:9c:e4:09: 39:a1:55:60:bb:70:6f:7d:40:ef:6e:5e:a4:b3:7f: 1c:34:26:05:43:e2:67:fc:c0:c2:a5:9c:a0:46:78: 73:cc:b6:8d:7b:91:62:f0:15:48:ec:61:51:53:02: 9e:86:8b:c5:15:22:c5:a0:91:e7:de:fc:7b:60:fd: 19:d7:32:be:63:dc:50:01:86:0d:c4:f1:91:74:9b: 85:e3:71:94:df:e7:12:bc:2d:af:8f:9b:3b:2f:c1: 92:46:31:a1:eb:23:cc:6e:f9:30:6f:09:25:4f:cb: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D7:91:21:E9:35:92:CF:8D:B2:43:1C:55:65:81:59:6E:A0:EC:70 X509v3 Authority Key Identifier: keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:71:bc:99:e3:25:cc:41:e3:65:fd:5f:ce:fb:c3:c0:7a:ac: a5:89:71:44:72:f2:e8:8a:3f:b6:4b:e2:4e:b9:d4:57:8e:76: 69:12:16:1c:19:cd:81:20:0f:61:93:b1:00:02:44:5c:f8:e3: 0f:a4:39:7d:70:30:ef:bb:4f:d4:3f:39:04:11:2b:16:40:2c: 76:59:1c:5f:cb:7a:69:64:15:a5:22:80:52:a1:19:3e:54:46: 51:cd:4c:47:b3:d5:cc:85:c2:f4:89:e8:a6:8a:54:6a:75:a4: 02:66:67:06:3f:71:bb:15:0b:e3:8f:27:1f:56:4b:b2:bf:31: 15:54:bb:35:e6:fd:df:d6:a8:a7:45:1d:1c:ab:49:de:9a:1f: e1:bd:4d:06:4a:e4:0b:6f:0e:3e:09:20:1c:c3:f9:78:97:c1: 80:02:ba:3c:41:21:60:2f:86:8c:c1:fe:64:b6:1d:f0:13:39: ec:7c:bf:61:87:69:bb:a9:83:cf:2a:c6:db:d9:12:88:ae:cc: 3f:d8:23:68:10:63:4a:a4:88:50:de:63:b9:fc:ec:f0:df:88: f4:20:11:6b:6e:8c:79:96:7c:92:15:dd:28:90:98:3d:b5:60: 12:aa:06:2e:3d:fb:b1:83:3c:39:88:e9:58:13:59:d5:4a:54: dc:ed:d8:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih2nHE4PZmQDlfAGtnnL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZDY2MWE5NDhmMmJmMzQ5MGU4OWQ4MjUyZjJjY2M4NzQ3 Y2U1YzcwHhcNMjUxMjE1MTUwMDU4WhcNMjUxMjE2MTUwMDU4WjAzMTEwLwYDVQQD EyhhMmQ3OTEyMWU5MzU5MmNmOGRiMjQzMWM1NTY1ODE1OTZlYTBlYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b78ffgzIBCNYi2ioAQPt0wsXILf 5Fgw9K5fpPNYLmg/UxgyPMJlET8U9xD0N7uODuwG0rZWcbvgUVdSGhpxrunfN4q+ qXwK2BteebTV8ffTjiTSn3SO2NZ5nSeEJkc57HO7ug+sSrOXYvqHpctaDFJZeRr1 9ga7+I9w1tY3xwCtZnHDna2wi39fAyTbYzxW5Muc5Ak5oVVgu3BvfUDvbl6ks38c NCYFQ+Jn/MDCpZygRnhzzLaNe5Fi8BVI7GFRUwKehovFFSLFoJHn3vx7YP0Z1zK+ Y9xQAYYNxPGRdJuF43GU3+cSvC2vj5s7L8GSRjGh6yPMbvkwbwklT8ubfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLXkSHpNZLPjbJDHFVlgVluoOxwMB8GA1UdIwQY MBaAFFLWYalI8r80kOidglLyzMh0fOXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODct ZGQ2M2YyMTVjNDM0LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODctZGQ2M2YyMTVjNDM0 LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3G8meMl zEHjZf1fzvvDwHqspYlxRHLy6Io/tkviTrnUV452aRIWHBnNgSAPYZOxAAJEXPjj D6Q5fXAw77tP1D85BBErFkAsdlkcX8t6aWQVpSKAUqEZPlRGUc1MR7PVzIXC9Ino popUanWkAmZnBj9xuxUL448nH1ZLsr8xFVS7Neb939aop0UdHKtJ3pof4b1NBkrk C28OPgkgHMP5eJfBgAK6PEEhYC+GjMH+ZLYd8BM57Hy/YYdpu6mDzyrG29kSiK7M P9gjaBBjSqSIUN5jufzs8N+I9CARa26MeZZ8khXdKJCYPbVgEqoGLj37sYM8OYjp WBNZ1UpU3O3Y9Q== -----END CERTIFICATE-----Generated at Mon Dec 15 20:23:11 2025 by rpki-client