This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json) Hash identifier: lNY7TN88q49xlcxL+SKmRJR+BqHUcWF8f17mNWlryH8= Subject key identifier: 31:09:D2:95:47:7C:3F:D7:33:F0:21:F9:E3:0E:AB:32:20:E5:AA:F1 Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Certificate serial: 019B4882852DE46969A7B9A4306EFC7FF710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft Manifest number: 178C Signing time: Tue 23 Dec 2025 00:01:11 +0000 Manifest this update: Tue 23 Dec 2025 00:01:11 +0000 Manifest next update: Wed 24 Dec 2025 00:01:11 +0000 Files and hashes: 1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=) 2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: mS6MupoY+a3VIlGpvBY7OsQGTuiS9p7+nju7FnnbJPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:85:2d:e4:69:69:a7:b9:a4:30:6e:fc:7f:f7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Validity Not Before: Dec 23 00:01:11 2025 GMT Not After : Dec 24 00:01:11 2025 GMT Subject: CN=3109d295477c3fd733f021f9e30eab3220e5aaf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:5f:6d:f5:34:02:57:b3:1b:bf:45:78:2d: 45:26:49:a7:b7:3c:0e:ee:16:95:ba:d3:31:6f:75: 5d:85:08:19:fe:96:0f:27:5e:32:20:9b:73:0a:3f: 35:b3:03:7d:95:fb:d7:6e:78:25:b3:77:33:18:b1: ac:fb:a6:1c:ce:8c:91:64:57:51:b7:1b:ae:e7:c5: ba:d9:76:e1:28:24:75:1c:4d:42:a5:eb:74:55:ce: 0e:56:9c:96:bb:6c:1a:41:c4:d6:53:28:c4:79:43: 3a:12:07:6c:a5:09:e0:a5:71:b0:20:82:09:07:5a: 07:19:93:4a:4b:95:a4:6a:45:1d:2d:5d:c7:eb:7c: fb:b3:26:a3:50:e3:90:52:2e:8d:14:5f:02:d4:3f: 4a:26:1d:a9:80:ac:d0:2b:3a:7b:66:82:09:e7:72: 4b:30:43:6a:84:d8:f7:16:da:e3:01:a8:1b:47:ad: f0:db:9a:8f:98:bf:6f:f4:d9:05:6e:0e:5e:97:83: 8e:a5:59:15:30:f7:fe:44:a8:98:5d:97:eb:c4:e1: aa:90:0e:bf:0a:28:07:2e:2c:97:ea:0e:10:61:a9: 41:40:f0:63:fa:db:04:dd:2f:b1:09:80:2b:f8:fc: 35:af:a6:62:0a:20:a1:a5:1d:d4:42:6a:40:a7:40: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:D2:95:47:7C:3F:D7:33:F0:21:F9:E3:0E:AB:32:20:E5:AA:F1 X509v3 Authority Key Identifier: keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:41:23:82:0d:ec:23:01:d1:83:aa:f9:d9:47:05:f0:e5: af:9e:86:84:cc:63:77:64:60:a9:99:83:20:3d:9f:31:ef:ee: 98:37:55:d3:2c:88:0d:ca:e4:83:ac:2c:3c:11:2f:9f:fe:74: 3f:78:46:f2:d8:0c:d7:24:41:68:8f:19:eb:c7:d0:8f:be:63: 0b:f5:de:30:ef:af:af:7d:6b:66:44:cc:81:95:ee:8c:ab:19: ff:1c:c3:e3:00:63:43:2b:58:ce:50:93:54:62:cd:a4:93:46: 9e:06:bb:a8:30:29:9f:d6:41:03:d3:2e:fa:a2:42:ba:88:78: cf:0c:86:a9:b3:74:d8:16:92:75:0a:59:3c:b6:bc:9e:e5:f9: 4e:6f:b1:c5:6e:3c:66:4f:84:05:b5:af:c2:80:41:86:c8:43: 06:e7:09:cb:61:ab:a6:ad:46:7f:a0:8f:6f:ea:69:ee:a0:e9: e6:d9:0f:f0:39:68:61:a7:59:bc:2e:aa:94:2f:3c:b7:91:62: 39:b0:0e:49:30:b0:15:e5:b2:ca:cc:db:e6:6c:d7:ae:72:ed: 44:ee:1d:99:30:9d:c7:95:76:33:ef:99:e9:29:4c:a8:1e:b7: 9b:37:fd:f4:47:1d:78:5e:ec:33:83:00:4b:01:a1:c1:3e:0d: 8e:94:da:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgoUt5Glpp7mkMG78f/cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDJhMzNmNWVjNjY4MDU5MWMwOTdmZGI0YWJhMGUwMjhm NDA4NDUwHhcNMjUxMjIzMDAwMTExWhcNMjUxMjI0MDAwMTExWjAzMTEwLwYDVQQD EygzMTA5ZDI5NTQ3N2MzZmQ3MzNmMDIxZjllMzBlYWIzMjIwZTVhYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcJfbfU0AlezG79FeC1FJkmntzwO 7haVutMxb3VdhQgZ/pYPJ14yIJtzCj81swN9lfvXbngls3czGLGs+6YczoyRZFdR txuu58W62XbhKCR1HE1Cpet0Vc4OVpyWu2waQcTWUyjEeUM6EgdspQngpXGwIIIJ B1oHGZNKS5WkakUdLV3H63z7syajUOOQUi6NFF8C1D9KJh2pgKzQKzp7ZoIJ53JL MENqhNj3FtrjAagbR63w25qPmL9v9NkFbg5el4OOpVkVMPf+RKiYXZfrxOGqkA6/ CigHLiyX6g4QYalBQPBj+tsE3S+xCYAr+Pw1r6ZiCiChpR3UQmpAp0CwswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEJ0pVHfD/XM/Ah+eMOqzIg5arxMB8GA1UdIwQY MBaAFFACoz9exmgFkcCX/bSroOAo9AhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMt ZWRlMWU0YmI2MTFlLzEvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMtZWRlMWU0YmI2MTFl LzEvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfpBI4IN 7CMB0YOq+dlHBfDlr56GhMxjd2RgqZmDID2fMe/umDdV0yyIDcrkg6wsPBEvn/50 P3hG8tgM1yRBaI8Z68fQj75jC/XeMO+vr31rZkTMgZXujKsZ/xzD4wBjQytYzlCT VGLNpJNGnga7qDApn9ZBA9Mu+qJCuoh4zwyGqbN02BaSdQpZPLa8nuX5Tm+xxW48 Zk+EBbWvwoBBhshDBucJy2Grpq1Gf6CPb+pp7qDp5tkP8DloYadZvC6qlC88t5Fi ObAOSTCwFeWyyszb5mzXrnLtRO4dmTCdx5V2M++Z6SlMqB63mzf99EcdeF7sM4MA SwGhwT4NjpTahg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:06:37 2025 by rpki-client