This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft File: UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json) Hash identifier: KwZlSWxxljcbymjAjecMajDds7B8PWTfSaVRNIQawwU= Subject key identifier: 5D:B2:38:7D:B8:25:E1:D5:BC:EE:DC:E0:35:6D:08:C7:DC:26:7E:6F Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98 Certificate issuer: /CN=521aa024758d8d104e1179c55039816636afe298 Certificate serial: 019B17CE7631BD4470C1B10767875725DCEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft Manifest number: 1773 Signing time: Sat 13 Dec 2025 13:02:45 +0000 Manifest this update: Sat 13 Dec 2025 13:02:45 +0000 Manifest next update: Sun 14 Dec 2025 13:02:45 +0000 Files and hashes: 1: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: gCce7vsX73aftn7bgddiNFfqAhwpQNGuY2uZWZsO0UA=) 2: wzHTUEDPSJ9fu6Go3MzUkAR9gVE.roa (hash: HH9rFvWwfqcHjpbJnsKsdwBfEEqoBLNu0bOt5Pi9+gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:ce:76:31:bd:44:70:c1:b1:07:67:87:57:25:dc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521aa024758d8d104e1179c55039816636afe298 Validity Not Before: Dec 13 13:02:45 2025 GMT Not After : Dec 14 13:02:45 2025 GMT Subject: CN=5db2387db825e1d5bceedce0356d08c7dc267e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:fb:9d:19:aa:1a:0d:03:65:1a:81:c1:88: 35:92:64:a8:f8:93:88:36:c8:c9:66:58:13:96:1e: c9:83:4e:4d:1c:88:7d:49:15:65:3f:45:c7:61:62: 2d:d1:48:c9:4a:94:cd:df:a6:01:13:8a:96:21:2a: 86:42:57:32:90:57:f1:c5:1a:51:a5:41:35:6c:ad: a4:3b:93:c0:62:a6:dd:a0:57:ce:92:01:9f:57:26: b1:75:95:5a:3a:13:95:6c:aa:00:02:b6:d9:be:d1: 6a:87:38:1d:e6:7c:71:0a:1e:b9:22:35:96:a5:03: dc:ce:4d:b4:63:20:6c:20:6b:0c:3f:61:8b:9a:cc: 3a:94:3d:e2:52:8d:46:7f:5f:c4:51:c2:08:3e:76: 2a:42:0e:ce:67:1a:d4:4d:22:82:ad:4e:f5:5b:63: 54:c3:8f:17:e3:ef:1a:a7:bb:48:a7:96:1a:10:fe: 74:9a:84:5e:ca:6c:43:48:d5:a0:42:0f:ec:10:a3: 80:f6:49:54:10:44:ff:19:a2:e4:a5:01:1e:6e:75: c8:13:38:53:cc:74:8c:c7:71:76:e3:ea:0c:39:df: 33:a4:aa:90:80:31:56:c4:04:da:b2:5f:c6:85:2e: fb:0a:52:08:e7:98:28:18:4c:bf:f9:c4:78:fc:8f: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B2:38:7D:B8:25:E1:D5:BC:EE:DC:E0:35:6D:08:C7:DC:26:7E:6F X509v3 Authority Key Identifier: keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:95:f8:b4:8a:f8:57:c5:74:40:03:71:27:24:b7:64:ef:fd: 2e:5d:bc:4f:2f:a2:47:73:b1:6c:db:12:ec:cc:83:45:f0:74: e3:2b:51:7d:88:2b:21:6c:d3:f5:02:b6:61:62:01:88:7e:36: ab:fc:01:b6:7b:75:b7:51:be:1a:ae:8b:ff:1a:c6:89:17:e1: ff:bc:ce:08:bd:d2:b4:31:60:ef:10:52:df:43:68:ce:0f:25: 80:01:bd:78:b3:ef:35:12:19:67:51:66:b3:6f:85:9b:12:30: 3c:4a:3f:60:36:ae:06:9d:a8:87:97:62:73:5f:49:ae:e1:bd: bc:40:0f:95:14:be:ab:78:b6:f6:17:6f:65:13:c6:a3:09:81: 84:b1:d5:28:0a:d7:33:d1:27:56:8a:6c:fa:59:75:36:ff:ab: d2:49:21:89:f6:83:ea:3e:46:ef:77:5b:f8:64:c1:4c:87:21: 17:ba:5a:d7:c2:ac:44:ff:5f:f9:c4:e0:12:f2:01:c0:df:18: 07:f5:be:42:c0:1d:d6:70:49:2c:04:28:5f:65:f0:ee:b6:5b: 26:f9:92:5f:eb:b9:b2:27:e7:85:2f:ad:c1:e4:d1:aa:fb:16: 57:5c:89:80:9c:97:91:64:72:bd:3e:c9:13:14:e2:bc:62:c0: 15:d3:af:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXznYxvURwwbEHZ4dXJdzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWFhMDI0NzU4ZDhkMTA0ZTExNzljNTUwMzk4MTY2MzZh ZmUyOTgwHhcNMjUxMjEzMTMwMjQ1WhcNMjUxMjE0MTMwMjQ1WjAzMTEwLwYDVQQD Eyg1ZGIyMzg3ZGI4MjVlMWQ1YmNlZWRjZTAzNTZkMDhjN2RjMjY3ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwL7nRmqGg0DZRqBwYg1kmSo+JOI NsjJZlgTlh7Jg05NHIh9SRVlP0XHYWIt0UjJSpTN36YBE4qWISqGQlcykFfxxRpR pUE1bK2kO5PAYqbdoFfOkgGfVyaxdZVaOhOVbKoAArbZvtFqhzgd5nxxCh65IjWW pQPczk20YyBsIGsMP2GLmsw6lD3iUo1Gf1/EUcIIPnYqQg7OZxrUTSKCrU71W2NU w48X4+8ap7tIp5YaEP50moReymxDSNWgQg/sEKOA9klUEET/GaLkpQEebnXIEzhT zHSMx3F24+oMOd8zpKqQgDFWxATasl/GhS77ClII55goGEy/+cR4/I8yzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2yOH24JeHVvO7c4DVtCMfcJn5vMB8GA1UdIwQY MBaAFFIaoCR1jY0QThF5xVA5gWY2r+KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAt YzEzOGU1YzI3YzJiLzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAtYzEzOGU1YzI3YzJi LzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJX4tIr4 V8V0QANxJyS3ZO/9Ll28Ty+iR3OxbNsS7MyDRfB04ytRfYgrIWzT9QK2YWIBiH42 q/wBtnt1t1G+Gq6L/xrGiRfh/7zOCL3StDFg7xBS30Nozg8lgAG9eLPvNRIZZ1Fm s2+FmxIwPEo/YDauBp2oh5dic19JruG9vEAPlRS+q3i29hdvZRPGowmBhLHVKArX M9EnVops+ll1Nv+r0kkhifaD6j5G73db+GTBTIchF7pa18KsRP9f+cTgEvIBwN8Y B/W+QsAd1nBJLAQoX2Xw7rZbJvmSX+u5sifnhS+tweTRqvsWV1yJgJyXkWRyvT7J ExTivGLAFdOvlA== -----END CERTIFICATE-----Generated at Sat Dec 13 15:02:47 2025 by rpki-client