This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft File: UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft (raw, json) Hash identifier: y+1CNrvBftl2xMlV9C2ucWsuBhblTU+j9HvMHxxxz1A= Subject key identifier: D4:B4:0D:DD:13:06:8E:07:8D:8E:14:16:6C:11:B2:D8:4C:29:5C:C2 Authority key identifier: 52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25 Certificate issuer: /CN=520536fe776691837728a7fe455a732555b91125 Certificate serial: 019B59ACA21843A29CC9E8B25EE13E390FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft Manifest number: E2 Signing time: Fri 26 Dec 2025 08:00:44 +0000 Manifest this update: Fri 26 Dec 2025 08:00:44 +0000 Manifest next update: Sat 27 Dec 2025 08:00:44 +0000 Files and hashes: 1: UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl (hash: O6bsRt3m91PQa3A6uLrAms6LqpmW1pSZzCCs7mD7im0=) 2: _xpIchk0-7OcmLKE5QqAd5gFe40.roa (hash: W5sNIk34R1s/k3ucndWBk0r/EQrbVh4FhIwqizPc4NA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a2:18:43:a2:9c:c9:e8:b2:5e:e1:3e:39:0f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=520536fe776691837728a7fe455a732555b91125 Validity Not Before: Dec 26 08:00:44 2025 GMT Not After : Dec 27 08:00:44 2025 GMT Subject: CN=d4b40ddd13068e078d8e14166c11b2d84c295cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:3d:d9:67:ca:cd:54:ec:11:d3:eb:bf:08: ee:ee:18:51:31:47:94:95:46:0b:48:f7:db:30:b1: dd:7c:de:e2:88:d0:1f:a2:3c:d3:18:56:0a:04:5b: 69:f5:5d:b2:a4:39:23:12:1d:68:2b:7b:76:7c:b9: 97:f0:f1:f1:bf:a9:58:ab:d5:5f:12:cf:99:42:d5: 81:d8:79:93:f6:cf:e6:08:1f:d7:3a:bf:08:06:7d: e0:56:1a:79:ba:47:a5:7f:1a:89:ce:b6:7f:9c:8a: 0b:07:90:a2:76:7a:a7:c1:a1:fe:eb:84:af:a3:ca: 0c:7b:d0:52:ea:d0:01:8a:05:86:e3:ba:ef:6a:1d: 7b:6e:04:e6:64:22:96:a9:3a:6d:5e:58:64:a0:7f: 89:b3:32:8d:fa:86:f4:49:20:5c:40:4d:ef:04:28: 59:54:87:17:37:54:84:3d:ba:f3:c7:b4:01:b3:da: fc:c2:9a:e8:b9:5e:c0:e9:20:94:fe:32:b4:96:5c: ae:db:21:6a:ad:ce:52:3c:63:29:86:a4:89:ee:fb: 66:aa:19:11:33:ee:9c:ad:a6:fd:7e:ef:92:4a:82: 89:0c:1f:df:07:ed:87:74:15:ff:a6:22:b6:2a:16: 85:2c:db:23:98:2a:e1:2a:60:31:26:57:45:df:3c: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:0D:DD:13:06:8E:07:8D:8E:14:16:6C:11:B2:D8:4C:29:5C:C2 X509v3 Authority Key Identifier: keyid:52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f4:39:45:a1:06:8d:28:30:60:88:34:5f:06:4c:cf:c6:8d: ce:be:16:97:8b:52:e5:f6:71:3f:37:8e:02:84:c1:ae:3a:bc: 85:ff:cf:c3:b3:0b:15:88:a6:da:48:3a:56:05:e5:ce:0e:4d: 88:19:f3:88:82:e2:dd:74:99:be:af:50:dc:3c:67:00:3b:75: 4b:66:61:14:7d:18:f5:da:aa:d2:94:7d:92:2d:75:0c:e5:cf: 17:43:49:77:74:f2:01:3d:d9:e9:d7:8b:4b:12:0b:61:db:c2: da:11:8f:2c:73:b1:2d:75:1a:4d:6f:b6:0f:f6:fa:10:2f:6f: 03:f0:82:16:1f:96:a6:f3:e5:b1:e7:cb:8b:47:a9:1b:78:bc: 64:90:40:b6:da:68:f9:b7:8b:b5:49:36:96:28:3a:0b:de:30: f6:ae:67:3e:1f:7e:6b:31:e7:71:36:41:83:33:68:3d:f5:da: 04:b6:45:c2:94:2d:90:3b:fb:0d:9b:c1:b6:07:21:19:24:34: 56:77:ea:f5:6a:78:2b:f4:ba:35:f6:fd:3f:02:a0:13:e5:7a: 37:aa:96:5c:e1:93:c0:37:3d:19:8e:49:2d:54:86:fb:c1:97: 1c:66:c4:b3:f2:47:44:a4:f9:fb:74:4a:6d:69:e7:07:c4:0d: 7c:af:a8:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKIYQ6KcyeiyXuE+OQ/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDUzNmZlNzc2NjkxODM3NzI4YTdmZTQ1NWE3MzI1NTVi OTExMjUwHhcNMjUxMjI2MDgwMDQ0WhcNMjUxMjI3MDgwMDQ0WjAzMTEwLwYDVQQD EyhkNGI0MGRkZDEzMDY4ZTA3OGQ4ZTE0MTY2YzExYjJkODRjMjk1Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2s92WfKzVTsEdPrvwju7hhRMUeU lUYLSPfbMLHdfN7iiNAfojzTGFYKBFtp9V2ypDkjEh1oK3t2fLmX8PHxv6lYq9Vf Es+ZQtWB2HmT9s/mCB/XOr8IBn3gVhp5ukelfxqJzrZ/nIoLB5CidnqnwaH+64Sv o8oMe9BS6tABigWG47rvah17bgTmZCKWqTptXlhkoH+JszKN+ob0SSBcQE3vBChZ VIcXN1SEPbrzx7QBs9r8wprouV7A6SCU/jK0llyu2yFqrc5SPGMphqSJ7vtmqhkR M+6crab9fu+SSoKJDB/fB+2HdBX/piK2KhaFLNsjmCrhKmAxJldF3zwI0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS0Dd0TBo4HjY4UFmwRsthMKVzCMB8GA1UdIwQY MBaAFFIFNv53ZpGDdyin/kVacyVVuRElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMzg1NDgtOGQ3NC00ZmE0LWFkNTkt NTgzOTk2NTg3ODRlLzEvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yMzg1NDgtOGQ3NC00ZmE0LWFkNTktNTgzOTk2NTg3ODRl LzEvVWdVMl9uZG1rWU4zS0tmLVJWcHpKVlc1RVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/Q5RaEG jSgwYIg0XwZMz8aNzr4Wl4tS5fZxPzeOAoTBrjq8hf/Pw7MLFYim2kg6VgXlzg5N iBnziILi3XSZvq9Q3DxnADt1S2ZhFH0Y9dqq0pR9ki11DOXPF0NJd3TyAT3Z6deL SxILYdvC2hGPLHOxLXUaTW+2D/b6EC9vA/CCFh+WpvPlsefLi0epG3i8ZJBAttpo +beLtUk2lig6C94w9q5nPh9+azHncTZBgzNoPfXaBLZFwpQtkDv7DZvBtgchGSQ0 Vnfq9Wp4K/S6Nfb9PwKgE+V6N6qWXOGTwDc9GY5JLVSG+8GXHGbEs/JHRKT5+3RK bWnnB8QNfK+oKQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:09 2025 by rpki-client