This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json) Hash identifier: KKHY/3SHb1QUpaPwYLLgl/jswcu3sO6d20G1PgMP5z4= Subject key identifier: A2:70:2D:CE:CE:08:B5:22:B6:5C:D2:48:4C:C1:C6:6B:87:EB:92:66 Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f Certificate serial: 019B48F0B6E9CB63B36DF977C61B1FA04202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft Manifest number: 143F Signing time: Tue 23 Dec 2025 02:01:33 +0000 Manifest this update: Tue 23 Dec 2025 02:01:33 +0000 Manifest next update: Wed 24 Dec 2025 02:01:33 +0000 Files and hashes: 1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=) 2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: igiWbty1NBIq80QSblY0LZxbu73MZLkPrVbhedgqWVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:b6:e9:cb:63:b3:6d:f9:77:c6:1b:1f:a0:42:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f Validity Not Before: Dec 23 02:01:33 2025 GMT Not After : Dec 24 02:01:33 2025 GMT Subject: CN=a2702dcece08b522b65cd2484cc1c66b87eb9266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:54:26:26:5b:bd:1b:81:99:5c:8f:11:e8: 8d:32:07:a7:f5:e8:ce:3c:b3:d2:3c:12:c5:9f:d2: df:95:e1:b1:ab:2d:cf:dd:db:ab:7b:2d:4d:8b:98: 81:59:ba:49:26:30:f0:f8:00:a0:27:12:26:1f:2b: 2f:48:6d:05:7d:f2:b5:12:86:f0:6f:7c:9d:91:8d: ae:a3:54:d2:11:2e:1c:68:05:9c:da:08:dc:66:bd: ce:ce:c2:9a:47:3f:60:9e:3d:06:ee:b6:43:6b:8f: d1:8c:c1:07:f7:b4:62:b4:0f:52:9a:97:4d:58:97: 98:35:18:c1:0f:b9:b9:5a:65:b5:7b:eb:53:23:59: 61:3f:18:74:eb:cb:d3:44:18:d4:fb:a8:5c:21:db: 03:56:6b:a7:c4:1c:e9:1b:1b:b0:3a:8d:44:6b:d5: 00:dc:d8:3e:08:5d:21:14:6c:7d:e3:e2:43:da:9c: 29:35:9d:ac:0c:1e:7f:86:e6:a3:27:e7:1b:47:95: a2:3b:55:ea:9c:8b:78:af:e7:69:10:51:3e:35:a3: 8b:e8:2b:88:e4:9f:fa:e3:cf:2a:d9:74:51:88:95: 3b:9b:29:5b:32:3e:e5:64:ff:54:1d:7d:00:10:92: ef:4f:2a:29:72:6a:f5:ff:ab:60:8f:6a:51:d6:86: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:70:2D:CE:CE:08:B5:22:B6:5C:D2:48:4C:C1:C6:6B:87:EB:92:66 X509v3 Authority Key Identifier: keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:e3:8e:b0:07:28:34:4a:d7:36:f3:44:9e:10:fb:f9:b7: 2b:ac:c4:8e:50:c1:6b:c0:74:bc:e3:3c:e3:67:2a:d4:6f:83: d1:ec:74:b1:b0:9a:30:a4:20:b4:31:8c:99:a7:d6:e9:49:6b: 64:3e:bb:e3:cb:7b:97:21:90:8a:ea:1f:76:8d:78:74:63:6e: 96:46:39:fd:79:fd:b8:24:71:57:22:24:60:b1:08:eb:2a:7e: 11:59:41:01:95:eb:dc:7e:54:98:18:84:a7:4d:85:43:ee:6d: c9:47:61:22:00:ec:7f:2d:60:51:30:37:ab:e1:9f:b5:e7:4d: bf:3a:15:58:f3:35:eb:46:f7:b8:3c:8b:e5:6b:72:8e:2b:a6: 8c:38:5a:b7:cb:b7:35:51:fe:ed:94:dc:61:d8:ed:01:e6:12: 9b:21:d8:d6:99:45:fe:7f:d9:6a:1d:4a:24:f6:7f:92:2d:fd: bd:11:e8:b1:f9:6c:0a:b2:9a:2c:0a:0e:11:f3:ce:f7:fa:96: 16:c0:f5:de:e4:c1:00:37:4f:9d:c8:63:3a:1a:ff:df:2f:f5: e7:5c:82:ca:6d:81:02:2d:03:37:d2:c7:ef:e7:83:91:8c:dd: ef:0d:de:32:5d:0c:61:79:36:fb:9c:e1:2b:00:92:ec:aa:5a: c4:9d:e9:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8Lbpy2Ozbfl3xhsfoEICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzhmMjNkMGM0OGM2MmUxOGUyOGY1NjBjYzkxNTk4OTNk NGU0MmYwHhcNMjUxMjIzMDIwMTMzWhcNMjUxMjI0MDIwMTMzWjAzMTEwLwYDVQQD EyhhMjcwMmRjZWNlMDhiNTIyYjY1Y2QyNDg0Y2MxYzY2Yjg3ZWI5MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtptUJiZbvRuBmVyPEeiNMgen9ejO PLPSPBLFn9LfleGxqy3P3durey1Ni5iBWbpJJjDw+ACgJxImHysvSG0FffK1Eobw b3ydkY2uo1TSES4caAWc2gjcZr3OzsKaRz9gnj0G7rZDa4/RjMEH97RitA9SmpdN WJeYNRjBD7m5WmW1e+tTI1lhPxh068vTRBjU+6hcIdsDVmunxBzpGxuwOo1Ea9UA 3Ng+CF0hFGx94+JD2pwpNZ2sDB5/huajJ+cbR5WiO1XqnIt4r+dpEFE+NaOL6CuI 5J/6488q2XRRiJU7mylbMj7lZP9UHX0AEJLvTyopcmr1/6tgj2pR1oaXXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJwLc7OCLUitlzSSEzBxmuH65JmMB8GA1UdIwQY MBaAFLjI8j0MSMYuGOKPVgzJFZiT1OQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEt NDI0ODFhNjIxMjNjLzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEtNDI0ODFhNjIxMjNj LzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkbjjrAH KDRK1zbzRJ4Q+/m3K6zEjlDBa8B0vOM842cq1G+D0ex0sbCaMKQgtDGMmafW6Ulr ZD6748t7lyGQiuofdo14dGNulkY5/Xn9uCRxVyIkYLEI6yp+EVlBAZXr3H5UmBiE p02FQ+5tyUdhIgDsfy1gUTA3q+GftedNvzoVWPM160b3uDyL5WtyjiumjDhat8u3 NVH+7ZTcYdjtAeYSmyHY1plF/n/Zah1KJPZ/ki39vRHosflsCrKaLAoOEfPO9/qW FsD13uTBADdPnchjOhr/3y/151yCym2BAi0DN9LH7+eDkYzd7w3eMl0MYXk2+5zh KwCS7KpaxJ3pEA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:58:05 2025 by rpki-client