This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json) Hash identifier: B/kK+mBB86+L8Z3cY5zKroGX2uaFCc3cih2YGuR+Yfg= Subject key identifier: E0:C0:10:C7:2E:86:04:47:25:56:E3:4C:6E:C5:C5:BB:B6:40:4B:CC Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9 Certificate serial: 019B5A1A8FADB92D5E41987EEF25CC48BF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft Manifest number: 1510 Signing time: Fri 26 Dec 2025 10:00:48 +0000 Manifest this update: Fri 26 Dec 2025 10:00:48 +0000 Manifest next update: Sat 27 Dec 2025 10:00:48 +0000 Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=) 2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: UW3ShmpvegLuLDEDumv6IltbeGKoC1iLdNEC53Wzq5U=) 3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:8f:ad:b9:2d:5e:41:98:7e:ef:25:cc:48:bf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9 Validity Not Before: Dec 26 10:00:48 2025 GMT Not After : Dec 27 10:00:48 2025 GMT Subject: CN=e0c010c72e8604472556e34c6ec5c5bbb6404bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:b5:11:28:4d:d9:63:89:45:ae:15:45:9a: bd:23:f5:cb:74:be:53:31:3f:b3:5d:57:03:83:9b: 1c:ad:41:70:22:11:a3:6c:1c:a7:22:54:46:96:a8: 59:ca:3d:0e:3e:9a:c5:2b:c0:3a:c8:b9:41:ef:c2: 88:27:c8:e2:e0:80:f7:5c:a5:20:5d:b4:21:58:39: 8f:c9:3f:fe:92:2e:57:fa:7d:30:54:0c:95:2b:ce: fe:7a:49:d8:5b:69:54:a0:48:2e:69:5e:f6:d7:59: fb:55:6f:ac:06:9c:72:b7:95:1f:43:27:45:ce:38: 96:83:39:a3:61:5e:b9:05:21:37:59:bf:ad:70:62: 12:61:07:36:4d:b6:da:97:47:06:81:43:08:f2:ab: 2d:0d:61:28:47:a3:72:69:5e:a8:9f:96:32:86:bf: 41:67:c6:2a:cc:de:bf:12:7a:ca:60:1a:1b:2c:17: e3:89:0e:4d:1b:d8:79:48:b2:02:46:21:0c:ee:44: 05:77:56:cf:fe:d7:b2:35:86:41:63:cd:53:92:56: 19:1a:f6:86:ac:87:e5:c7:0e:fa:ce:13:ad:44:9a: 7d:91:9e:b2:be:97:88:80:aa:4f:9a:04:a9:33:c9: 99:5f:01:49:d6:1e:7b:b1:36:60:9a:12:fc:b3:c4: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C0:10:C7:2E:86:04:47:25:56:E3:4C:6E:C5:C5:BB:B6:40:4B:CC X509v3 Authority Key Identifier: keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9f:c3:22:29:6f:35:91:30:2e:d1:68:2c:b5:f3:c1:9a:ac: ee:83:c3:b8:2d:6a:92:eb:2a:55:b5:6a:c6:63:53:5b:12:70: 2d:11:4d:0c:d6:1a:a6:7f:c9:2f:be:cc:a5:38:67:af:b9:c9: f2:08:db:ad:cb:ab:f8:95:92:a1:bb:b6:93:11:dc:78:4d:75: 77:95:d4:48:9e:95:2e:65:8d:ac:8d:3c:ce:16:ac:94:56:17: 04:5d:17:6a:29:b1:22:49:02:f5:4e:fe:3c:7a:0f:f9:f6:27: 43:e9:d2:e7:7b:e8:5f:ff:df:bb:fe:98:71:52:46:d2:9a:0e: 7a:bb:8a:4b:28:d1:cf:4c:bf:ca:ca:85:48:a2:51:5b:f0:8d: 68:6d:19:12:a5:7f:1b:ca:77:04:b5:b4:76:ad:38:8d:80:65: 87:93:dd:ac:3f:c3:94:f5:37:27:91:ca:2b:7f:b1:1e:46:ab: dd:34:76:ba:e1:28:ae:94:7f:68:31:13:9d:32:52:ff:06:1f: 90:15:3f:8c:c6:ac:53:56:b0:47:6b:f0:65:ea:7a:85:37:38: f9:87:b8:3f:4a:3e:0a:4b:36:5c:e4:f5:32:ae:fd:d2:7b:21: fd:a5:be:5c:0b:77:b8:2b:4a:a9:9d:ad:ce:92:f5:f7:c9:d1: 54:c1:f8:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGo+tuS1eQZh+7yXMSL8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQ3Nzk1NzVjYjliZjA1ODI0MzI4N2U5ODIzNGRlY2E5 MTFmYzkwHhcNMjUxMjI2MTAwMDQ4WhcNMjUxMjI3MTAwMDQ4WjAzMTEwLwYDVQQD EyhlMGMwMTBjNzJlODYwNDQ3MjU1NmUzNGM2ZWM1YzViYmI2NDA0YmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZW1EShN2WOJRa4VRZq9I/XLdL5T MT+zXVcDg5scrUFwIhGjbBynIlRGlqhZyj0OPprFK8A6yLlB78KIJ8ji4ID3XKUg XbQhWDmPyT/+ki5X+n0wVAyVK87+eknYW2lUoEguaV7211n7VW+sBpxyt5UfQydF zjiWgzmjYV65BSE3Wb+tcGISYQc2Tbbal0cGgUMI8qstDWEoR6NyaV6on5Yyhr9B Z8YqzN6/EnrKYBobLBfjiQ5NG9h5SLICRiEM7kQFd1bP/teyNYZBY81TklYZGvaG rIflxw76zhOtRJp9kZ6yvpeIgKpPmgSpM8mZXwFJ1h57sTZgmhL8s8QBQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODAEMcuhgRHJVbjTG7Fxbu2QEvMMB8GA1UdIwQY MBaAFLn0d5V1y5vwWCQyh+mCNN7KkR/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAt Y2Q5ZmYwNTUyZjkyLzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAtY2Q5ZmYwNTUyZjky LzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ/DIilv NZEwLtFoLLXzwZqs7oPDuC1qkusqVbVqxmNTWxJwLRFNDNYapn/JL77MpThnr7nJ 8gjbrcur+JWSobu2kxHceE11d5XUSJ6VLmWNrI08zhaslFYXBF0XaimxIkkC9U7+ PHoP+fYnQ+nS53voX//fu/6YcVJG0poOeruKSyjRz0y/ysqFSKJRW/CNaG0ZEqV/ G8p3BLW0dq04jYBlh5PdrD/DlPU3J5HKK3+xHkar3TR2uuEorpR/aDETnTJS/wYf kBU/jMasU1awR2vwZep6hTc4+Ye4P0o+Cks2XOT1Mq790nsh/aW+XAt3uCtKqZ2t zpL198nRVMH4uA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:53 2025 by rpki-client