This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json) Hash identifier: HfsSuktnz0UqFQh3Ll9r+fv1kKV4GUrdtrLiITM0RWk= Subject key identifier: 6E:2B:25:BA:6B:22:31:6A:FF:92:EC:74:FB:01:F6:3F:42:DB:A2:0A Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Certificate serial: 019B46CB10E5487E43B24C86F83AFB39AEAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 16:01:11 +0000 Manifest this update: Mon 22 Dec 2025 16:01:11 +0000 Manifest next update: Tue 23 Dec 2025 16:01:11 +0000 Files and hashes: 1: TFo1gtP034QimxoONKR9cO3Rea0.roa (hash: ZbKyuz+8pa9I1RSPWJwZNU5a7S31Y7QOYHmJtNh9TXA=) 2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: bx6jQCj8JlkdEcoVMiOCBSp/eduZr3dCcdq0zIpbqIk=) 3: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:10:e5:48:7e:43:b2:4c:86:f8:3a:fb:39:ae:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Validity Not Before: Dec 22 16:01:11 2025 GMT Not After : Dec 23 16:01:11 2025 GMT Subject: CN=6e2b25ba6b22316aff92ec74fb01f63f42dba20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:23:b2:cc:37:30:c0:e7:84:e9:71:6e:08: 81:cf:2d:20:a3:4e:88:c5:b9:72:ff:cf:b9:a9:e7: 2b:33:1a:85:d1:3c:eb:4e:f9:98:1f:4d:48:90:c7: 7b:23:75:79:e1:46:db:8c:f6:58:7f:58:a1:74:ea: c6:c4:26:6e:3e:17:54:d3:9b:28:8d:e3:82:ac:ad: 51:88:ac:ea:83:eb:5f:6b:49:63:62:26:9c:b7:b1: 2f:0f:bf:34:5a:cd:b1:f5:27:95:8d:7b:ed:42:96: 60:e9:37:77:c0:f1:36:cb:ec:bd:95:9a:75:e9:7f: 81:ec:fc:9b:9e:71:c6:3d:0e:4d:3b:60:87:12:70: 56:f9:b6:c4:8b:84:e4:12:d2:8f:8d:09:c3:6a:1c: b3:6e:66:d7:ac:06:07:9e:0f:54:c6:4f:14:12:2b: cb:43:41:eb:19:a0:7a:50:44:e3:ca:13:4b:7b:29: ec:32:1e:49:51:70:e5:87:ea:a2:73:34:16:d4:d8: af:11:ad:4b:8f:4e:25:a7:f8:ac:12:d3:30:cf:5f: ef:1e:59:98:1c:ed:44:ce:0c:c3:74:bb:aa:11:cb: d6:b0:5f:d4:a8:aa:06:a8:d1:16:53:d2:f1:4b:22: aa:0a:1a:46:2e:36:68:a1:85:8c:c5:08:5c:40:00: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:25:BA:6B:22:31:6A:FF:92:EC:74:FB:01:F6:3F:42:DB:A2:0A X509v3 Authority Key Identifier: keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:56:60:c8:4b:e4:5f:5c:62:d7:01:5b:d8:5c:34:65:b0:90: b4:85:c5:cf:01:cf:31:02:18:88:bd:1f:2e:b7:03:7a:00:a3: fe:60:2c:6d:97:7b:4d:fc:23:37:55:78:4a:92:1b:59:71:5a: e4:92:71:0c:d3:fb:65:73:46:ba:b7:82:d5:9a:24:cb:db:d1: ab:2d:de:c1:bb:ed:1e:4f:5f:93:78:c1:6c:68:05:c8:57:c7: e2:58:dd:ac:fe:26:7d:98:3f:43:ef:cd:99:0d:22:53:fb:fe: 18:74:72:c7:3f:95:69:eb:80:3a:ed:f5:d1:9f:e5:ea:ff:e3: af:69:5f:1c:42:a6:bd:6b:ce:86:0d:11:b9:28:67:b7:79:5d: b6:f7:e2:ea:5a:21:bf:4d:e2:9d:b7:13:22:d3:23:67:85:45: 33:2d:eb:1b:3f:f7:3d:15:62:d9:67:43:c2:09:d5:ee:ee:2d: 9f:af:37:f9:e4:a1:7e:b7:b6:9a:1d:6f:da:b3:25:de:c3:dd: c6:3b:bb:ac:1c:67:3c:61:27:4a:c0:de:8a:3c:50:a4:a9:05: 8f:d9:6f:32:4e:21:fd:0c:7a:23:64:d6:f0:3d:b3:5f:17:a1: 51:55:19:e7:34:bc:e4:cf:32:41:d5:fb:39:b9:0e:61:21:02: f1:13:a8:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyxDlSH5DskyG+Dr7Oa6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1 NDYzOWUwHhcNMjUxMjIyMTYwMTExWhcNMjUxMjIzMTYwMTExWjAzMTEwLwYDVQQD Eyg2ZTJiMjViYTZiMjIzMTZhZmY5MmVjNzRmYjAxZjYzZjQyZGJhMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgsjssw3MMDnhOlxbgiBzy0go06I xbly/8+5qecrMxqF0TzrTvmYH01IkMd7I3V54UbbjPZYf1ihdOrGxCZuPhdU05so jeOCrK1RiKzqg+tfa0ljYiact7EvD780Ws2x9SeVjXvtQpZg6Td3wPE2y+y9lZp1 6X+B7PybnnHGPQ5NO2CHEnBW+bbEi4TkEtKPjQnDahyzbmbXrAYHng9Uxk8UEivL Q0HrGaB6UETjyhNLeynsMh5JUXDlh+qiczQW1NivEa1Lj04lp/isEtMwz1/vHlmY HO1EzgzDdLuqEcvWsF/UqKoGqNEWU9LxSyKqChpGLjZooYWMxQhcQAAmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4rJbprIjFq/5LsdPsB9j9C26IKMB8GA1UdIwQY MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFZgyEvk X1xi1wFb2Fw0ZbCQtIXFzwHPMQIYiL0fLrcDegCj/mAsbZd7TfwjN1V4SpIbWXFa 5JJxDNP7ZXNGureC1Zoky9vRqy3ewbvtHk9fk3jBbGgFyFfH4ljdrP4mfZg/Q+/N mQ0iU/v+GHRyxz+VaeuAOu310Z/l6v/jr2lfHEKmvWvOhg0RuShnt3ldtvfi6loh v03inbcTItMjZ4VFMy3rGz/3PRVi2WdDwgnV7u4tn683+eShfre2mh1v2rMl3sPd xju7rBxnPGEnSsDeijxQpKkFj9lvMk4h/Qx6I2TW8D2zXxehUVUZ5zS85M8yQdX7 ObkOYSEC8ROozw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:27:44 2025 by rpki-client