This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json) Hash identifier: bxB2dQQ3LR4TkcRQhxmbo2KLl9K8ErkghagcvqpzdXY= Subject key identifier: 98:BE:B4:4C:CA:66:4B:F3:90:AC:B8:E5:10:25:45:CB:4A:37:95:3C Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc Certificate serial: 019B21E250FBF683EA0A0CD57FB77974510B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 12:00:38 +0000 Manifest this update: Mon 15 Dec 2025 12:00:38 +0000 Manifest next update: Tue 16 Dec 2025 12:00:38 +0000 Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=) 2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: y33CUqE1VgnUzVemOVJJu+Kp0vSVlASe5Dpz8lD4W3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:50:fb:f6:83:ea:0a:0c:d5:7f:b7:79:74:51:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc Validity Not Before: Dec 15 12:00:38 2025 GMT Not After : Dec 16 12:00:38 2025 GMT Subject: CN=98beb44cca664bf390acb8e5102545cb4a37953c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:3f:ff:58:06:7c:09:ce:fb:ea:2a:4b:65: 9a:63:8b:61:0f:b7:4f:9f:1f:45:35:ac:ef:36:02: 25:9f:fd:3f:8f:8b:85:15:19:30:d2:cd:06:f4:6b: 40:44:53:82:ac:97:b8:14:97:04:98:93:e4:05:97: cd:5d:9a:5e:d4:74:b3:24:81:d7:07:17:28:a0:b9: e3:c2:ba:2a:ae:30:08:0a:b9:db:ca:f1:81:b4:13: c1:26:a8:df:4a:49:75:74:7b:58:bb:ed:ad:03:a8: 88:2e:9c:bc:77:01:6d:1f:41:5b:d2:fd:fd:5c:c1: c5:1c:0a:f8:47:42:1c:2a:f9:78:1a:73:95:df:a3: 4b:e5:b7:f9:66:f0:0d:0e:db:92:29:5f:0b:43:70: 53:bb:fe:6d:a7:4a:97:1e:ac:28:b6:bf:d3:05:bc: 27:68:3c:ab:8c:95:89:78:f8:26:b5:99:c3:2c:42: 24:81:49:83:cb:7e:31:b8:4d:43:ed:6b:c9:0f:24: aa:77:7a:81:10:d9:d6:e5:80:1b:c3:c0:5d:d7:a1: 2e:88:d9:cc:fa:6b:e9:86:bd:02:bc:37:8c:76:e7: 6f:d7:4b:55:72:8d:c4:8c:ed:96:3d:82:cd:96:a9: 6b:62:ee:e8:7a:cd:85:a6:22:74:bb:8d:7a:36:3a: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BE:B4:4C:CA:66:4B:F3:90:AC:B8:E5:10:25:45:CB:4A:37:95:3C X509v3 Authority Key Identifier: keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:74:29:ea:20:fa:4d:98:e9:07:fe:00:3a:b8:c4:fa:0d:51: e0:b1:7a:19:a8:eb:ae:a5:ac:1b:6a:50:b3:97:6c:72:5c:81: 03:09:85:f5:83:70:46:c1:f7:ec:f3:1a:18:98:a1:43:2c:4f: 3f:d8:ea:ef:a9:84:09:ba:ff:c7:da:3d:6a:d3:34:35:0f:43: f1:0d:9c:cf:b5:3e:61:15:19:05:67:a5:dd:6f:a8:7c:3b:38: d7:14:7e:d7:36:b6:4a:37:4f:95:21:e2:64:30:da:25:0c:e5: 91:c8:57:76:2e:99:8c:b5:83:7a:9c:67:e3:55:9c:d8:61:14: 01:34:a5:d1:cd:b2:ba:7c:5c:2c:8b:89:87:d8:02:6b:c4:3e: 3e:48:b5:58:3b:4a:c4:49:da:e1:41:7a:b0:8a:47:8a:a9:78: d5:7b:28:bd:46:e8:b4:8c:75:a2:38:57:25:cc:8f:7d:5c:40: fe:19:b9:d9:e0:bd:0e:b4:77:df:ff:06:89:ec:4a:9d:0d:69: a0:f8:1e:e5:90:e8:8f:41:ea:89:25:02:a9:a0:49:60:7c:46: 69:e8:5f:27:ba:ba:a2:f5:74:6c:c2:77:f9:41:9d:e2:b4:2a: 46:03:34:91:31:d2:31:13:b3:dc:43:32:5b:e3:1e:a4:d5:c4: 17:4a:b2:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4lD79oPqCgzVf7d5dFELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh YzJiZmMwHhcNMjUxMjE1MTIwMDM4WhcNMjUxMjE2MTIwMDM4WjAzMTEwLwYDVQQD Eyg5OGJlYjQ0Y2NhNjY0YmYzOTBhY2I4ZTUxMDI1NDVjYjRhMzc5NTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1k//1gGfAnO++oqS2WaY4thD7dP nx9FNazvNgIln/0/j4uFFRkw0s0G9GtARFOCrJe4FJcEmJPkBZfNXZpe1HSzJIHX BxcooLnjwroqrjAICrnbyvGBtBPBJqjfSkl1dHtYu+2tA6iILpy8dwFtH0Fb0v39 XMHFHAr4R0IcKvl4GnOV36NL5bf5ZvANDtuSKV8LQ3BTu/5tp0qXHqwotr/TBbwn aDyrjJWJePgmtZnDLEIkgUmDy34xuE1D7WvJDySqd3qBENnW5YAbw8Bd16EuiNnM +mvphr0CvDeMdudv10tVco3EjO2WPYLNlqlrYu7oes2FpiJ0u416NjpTDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi+tEzKZkvzkKy45RAlRctKN5U8MB8GA1UdIwQY MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3Qp6iD6 TZjpB/4AOrjE+g1R4LF6GajrrqWsG2pQs5dsclyBAwmF9YNwRsH37PMaGJihQyxP P9jq76mECbr/x9o9atM0NQ9D8Q2cz7U+YRUZBWel3W+ofDs41xR+1za2SjdPlSHi ZDDaJQzlkchXdi6ZjLWDepxn41Wc2GEUATSl0c2yunxcLIuJh9gCa8Q+Pki1WDtK xEna4UF6sIpHiql41XsovUbotIx1ojhXJcyPfVxA/hm52eC9DrR33/8GiexKnQ1p oPge5ZDoj0HqiSUCqaBJYHxGaehfJ7q6ovV0bMJ3+UGd4rQqRgM0kTHSMROz3EMy W+MepNXEF0qyEw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:59:15 2025 by rpki-client