This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft File: UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json) Hash identifier: dSY1W1BxHNgmL2vuyQ0PjLOZCuF7zAkfHW9wg+4UF3M= Subject key identifier: E5:09:5D:4F:9D:B6:73:4A:35:44:78:3E:9C:53:7C:17:F5:7B:91:3D Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e Certificate serial: 019B5A520CB88CE7332672EE8D1B430F9615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft Manifest number: 179D Signing time: Fri 26 Dec 2025 11:01:25 +0000 Manifest this update: Fri 26 Dec 2025 11:01:25 +0000 Manifest next update: Sat 27 Dec 2025 11:01:25 +0000 Files and hashes: 1: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: Njf2iP2e3YNL6NTk/b9en4/0oGkZJeZdwGQWLN+niQI=) 2: Xjz46GAzHTdy9Og4DKomwuVi-1g.roa (hash: NqL6rYTZkhuuc0nFfTByZAzgwSO1D7DNJ/FzmVF0OjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:0c:b8:8c:e7:33:26:72:ee:8d:1b:43:0f:96:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e Validity Not Before: Dec 26 11:01:25 2025 GMT Not After : Dec 27 11:01:25 2025 GMT Subject: CN=e5095d4f9db6734a3544783e9c537c17f57b913d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:f1:14:05:cf:1c:8a:fe:bf:bc:5e:7f:ac: c7:ae:3b:ff:ff:4c:f3:06:30:93:bf:9f:9f:26:27: ba:1e:f4:03:4d:ce:32:52:f8:5b:d6:f0:ca:fb:9f: 05:2e:a8:f2:b6:4c:d7:59:ee:d9:fc:24:e7:45:08: d3:c1:55:59:43:bb:f1:d8:9d:0c:c4:87:c0:87:6c: 51:52:43:67:fd:87:ae:f1:05:05:8f:76:6d:23:8a: 55:3f:da:f3:b9:42:0a:41:70:4a:c3:d1:2f:66:bd: b8:3c:e7:02:17:08:b2:0d:43:b5:62:db:fe:e8:f3: a9:08:14:07:b5:cf:51:a8:0b:44:b2:be:7a:6d:f6: 40:8c:5e:cb:81:75:87:0a:3d:6c:24:d6:14:1f:4f: a5:37:00:66:28:88:57:36:e2:d0:5f:43:b8:0a:5e: 08:3d:50:12:e9:68:03:f5:98:3e:cc:97:63:8d:ac: f5:fd:e0:af:8a:db:a7:a8:05:5b:ab:32:e8:5f:32: 3b:ce:30:17:5d:8d:c4:fe:4d:2e:4b:ba:d7:ff:cd: b5:4e:91:07:fe:38:e4:f8:9c:71:74:a5:f7:85:c0: 51:98:6c:cc:a8:56:ea:8e:7e:de:f7:0d:21:6f:58: c6:c1:38:82:1f:3f:3f:5b:b4:f7:ec:f3:e8:09:65: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:5D:4F:9D:B6:73:4A:35:44:78:3E:9C:53:7C:17:F5:7B:91:3D X509v3 Authority Key Identifier: keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:78:9c:d2:06:a0:17:d5:cc:39:6a:97:62:92:a1:d8:d3:c7: c0:e5:c8:a5:04:01:3b:14:11:ba:d2:c7:ba:70:68:d9:76:6a: b7:cc:76:85:9a:cb:ab:db:6e:11:33:69:39:1b:fa:ff:43:c7: e5:f4:5a:8b:cc:3a:e5:5e:65:10:84:9b:4a:8c:44:0c:ac:db: cc:99:e4:01:9c:01:a2:c7:ae:8f:3a:31:42:1b:c8:47:7e:82: f8:86:9e:3b:e4:cb:69:ff:29:57:7b:f5:bc:de:15:ad:e7:a8: 92:b1:10:d3:69:3e:d8:53:78:ec:09:76:1e:d4:4e:10:2c:9b: a6:ca:fe:2f:22:a6:df:93:63:3d:0c:e1:31:be:92:89:c4:28: 33:92:a7:ea:72:ac:b2:35:67:16:00:34:3d:b9:04:61:33:c9: 64:1a:6a:22:e4:13:dd:ab:67:bc:5f:7f:52:d7:f1:41:83:a1: 13:ed:6c:88:b0:8e:51:6b:00:60:97:d2:70:91:f4:8c:e3:15: 05:de:5e:01:ef:3d:fd:a9:73:50:72:15:35:53:d7:53:d6:b9: bd:92:97:92:06:da:cc:a2:92:23:32:32:9b:0f:ad:05:c2:e9: c7:34:93:2d:6e:2f:f3:08:87:16:3c:0c:46:24:73:91:a9:16: c2:b3:1d:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgy4jOczJnLujRtDD5YVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1 NzY5NmUwHhcNMjUxMjI2MTEwMTI1WhcNMjUxMjI3MTEwMTI1WjAzMTEwLwYDVQQD EyhlNTA5NWQ0ZjlkYjY3MzRhMzU0NDc4M2U5YzUzN2MxN2Y1N2I5MTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqITxFAXPHIr+v7xef6zHrjv//0zz BjCTv5+fJie6HvQDTc4yUvhb1vDK+58FLqjytkzXWe7Z/CTnRQjTwVVZQ7vx2J0M xIfAh2xRUkNn/Yeu8QUFj3ZtI4pVP9rzuUIKQXBKw9EvZr24POcCFwiyDUO1Ytv+ 6POpCBQHtc9RqAtEsr56bfZAjF7LgXWHCj1sJNYUH0+lNwBmKIhXNuLQX0O4Cl4I PVAS6WgD9Zg+zJdjjaz1/eCvitunqAVbqzLoXzI7zjAXXY3E/k0uS7rX/821TpEH /jjk+JxxdKX3hcBRmGzMqFbqjn7e9w0hb1jGwTiCHz8/W7T37PPoCWW+CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUJXU+dtnNKNUR4PpxTfBf1e5E9MB8GA1UdIwQY MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXic0gag F9XMOWqXYpKh2NPHwOXIpQQBOxQRutLHunBo2XZqt8x2hZrLq9tuETNpORv6/0PH 5fRai8w65V5lEISbSoxEDKzbzJnkAZwBoseujzoxQhvIR36C+IaeO+TLaf8pV3v1 vN4VreeokrEQ02k+2FN47Al2HtROECybpsr+LyKm35NjPQzhMb6SicQoM5Kn6nKs sjVnFgA0PbkEYTPJZBpqIuQT3atnvF9/UtfxQYOhE+1siLCOUWsAYJfScJH0jOMV Bd5eAe89/alzUHIVNVPXU9a5vZKXkgbazKKSIzIymw+tBcLpxzSTLW4v8wiHFjwM RiRzkakWwrMdTg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:47 2025 by rpki-client