This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json) Hash identifier: Og1vLXXW8E0S+f3DlZzF6ErEXSN9OW2Wxv4MNK+PqfM= Subject key identifier: 8D:EB:72:65:5B:88:79:43:47:64:5D:FA:19:D7:7F:99:84:DA:D8:3A Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Certificate serial: 019B32D6DFEB5A8D981386E0D201011E4786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft Manifest number: 108A Signing time: Thu 18 Dec 2025 19:01:41 +0000 Manifest this update: Thu 18 Dec 2025 19:01:41 +0000 Manifest next update: Fri 19 Dec 2025 19:01:41 +0000 Files and hashes: 1: MjK_xJG6Hwcb67PomltSWuntrmM.roa (hash: aerGyiTEpiF59FAbfobUyJCn9cR81tY8N4zQCxzZAWk=) 2: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=) 3: TBmGO5t5AH5NVXED3d-86yJ2g-g.roa (hash: S/ggAtC3XkCG9e4NTbC903dmEf8ZwLiR5xsOu4Bo+Bc=) 4: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: +sgyXiMgRnrMRoAk21Ks5u6IlqNjS0RiNaDkiiar7NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:df:eb:5a:8d:98:13:86:e0:d2:01:01:1e:47:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Validity Not Before: Dec 18 19:01:41 2025 GMT Not After : Dec 19 19:01:41 2025 GMT Subject: CN=8deb72655b88794347645dfa19d77f9984dad83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:44:7b:c9:88:69:32:c2:e2:84:fe:e4:1c: e3:11:d4:c1:9c:5f:08:07:4b:b8:83:ad:4e:1d:d1: 61:be:b3:39:34:32:4f:96:f8:e1:cd:12:ff:91:f6: ff:77:c3:bd:6e:30:a6:82:60:9f:a0:75:66:45:df: a4:c6:dc:96:56:42:6a:9c:e1:3b:c1:67:41:5e:22: d1:94:a8:b8:4a:59:cf:86:67:de:88:a0:8e:6f:84: f4:e7:4a:ca:f8:bf:1e:74:87:a2:6a:a0:77:40:24: 44:d6:77:d7:d8:58:3b:16:ea:39:56:62:46:98:a4: a0:a2:52:9e:1d:9e:f6:56:fd:c8:26:e8:36:db:56: f5:ef:6f:3a:a6:f2:70:bc:5f:ea:95:23:b8:8a:3f: 6a:29:7a:5b:49:a7:f9:d9:29:a3:b6:b6:4d:d0:bb: b4:85:9c:0b:27:d3:ea:0b:9d:83:7e:d3:04:05:b4: 96:35:21:01:d5:95:27:e1:b4:2d:32:f9:5c:89:21: e4:aa:2a:68:20:11:74:eb:48:de:08:ac:5c:5b:e4: ad:69:ad:71:1e:76:87:f3:5d:de:4d:db:7b:b3:3d: f0:4e:f3:1b:76:ac:ab:84:b2:c3:c4:1f:52:15:50: a4:41:03:69:33:a1:37:3f:9b:91:54:27:70:8c:85: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EB:72:65:5B:88:79:43:47:64:5D:FA:19:D7:7F:99:84:DA:D8:3A X509v3 Authority Key Identifier: keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f3:2f:46:7c:ff:e0:84:68:ef:13:6b:b7:c4:e0:db:5d:60: 20:b2:75:8a:03:5f:2f:a8:8f:8b:1b:93:70:7d:80:6b:37:bb: d9:7d:db:a0:91:8e:b4:49:ad:3c:aa:c0:a2:f5:b5:67:df:79: fb:a8:7f:fe:ee:c5:27:55:94:c2:f8:0d:35:9e:78:94:76:be: 7a:f6:ba:05:db:09:8b:57:88:96:19:90:54:29:17:99:1f:4d: 58:6f:e3:51:65:f4:fb:2c:8d:5d:38:eb:0a:57:33:d3:81:70: 96:c1:fa:19:33:91:79:d1:88:f2:ea:46:76:7e:0d:13:84:54: 3b:9f:f0:cc:f5:91:7d:f4:e0:ac:21:ef:a3:7b:cc:69:7b:90: 93:1c:0c:51:16:c9:e6:26:55:95:fa:4a:fe:fd:6a:2e:92:68: d4:6f:63:8c:c6:56:6d:80:20:1e:ad:46:5b:aa:83:cf:c0:5e: d4:ae:4c:02:2c:80:5a:fb:7b:d9:54:50:34:83:5e:b5:0b:2f: b5:df:2d:83:d4:b7:08:9d:2c:dd:fa:b3:a1:46:97:61:76:2c: 18:cb:47:8c:eb:65:d2:b1:8c:3e:af:f4:5a:93:bc:fa:27:d8: d1:a1:cb:66:05:26:7e:33:d4:37:ba:9d:85:d7:c7:be:1e:30: e1:a1:33:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1t/rWo2YE4bg0gEBHkeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz YjM3NDMwHhcNMjUxMjE4MTkwMTQxWhcNMjUxMjE5MTkwMTQxWjAzMTEwLwYDVQQD Eyg4ZGViNzI2NTViODg3OTQzNDc2NDVkZmExOWQ3N2Y5OTg0ZGFkODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m1Ee8mIaTLC4oT+5BzjEdTBnF8I B0u4g61OHdFhvrM5NDJPlvjhzRL/kfb/d8O9bjCmgmCfoHVmRd+kxtyWVkJqnOE7 wWdBXiLRlKi4SlnPhmfeiKCOb4T050rK+L8edIeiaqB3QCRE1nfX2Fg7Fuo5VmJG mKSgolKeHZ72Vv3IJug221b17286pvJwvF/qlSO4ij9qKXpbSaf52SmjtrZN0Lu0 hZwLJ9PqC52DftMEBbSWNSEB1ZUn4bQtMvlciSHkqipoIBF060jeCKxcW+Staa1x HnaH813eTdt7sz3wTvMbdqyrhLLDxB9SFVCkQQNpM6E3P5uRVCdwjIX3PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3rcmVbiHlDR2Rd+hnXf5mE2tg6MB8GA1UdIwQY MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt MTZlZDNjZDBjNzJhLzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfMvRnz/ 4IRo7xNrt8Tg211gILJ1igNfL6iPixuTcH2Aaze72X3boJGOtEmtPKrAovW1Z995 +6h//u7FJ1WUwvgNNZ54lHa+eva6BdsJi1eIlhmQVCkXmR9NWG/jUWX0+yyNXTjr Clcz04FwlsH6GTORedGI8upGdn4NE4RUO5/wzPWRffTgrCHvo3vMaXuQkxwMURbJ 5iZVlfpK/v1qLpJo1G9jjMZWbYAgHq1GW6qDz8Be1K5MAiyAWvt72VRQNINetQsv td8tg9S3CJ0s3fqzoUaXYXYsGMtHjOtl0rGMPq/0WpO8+ifY0aHLZgUmfjPUN7qd hdfHvh4w4aEzEg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:58 2025 by rpki-client