This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json) Hash identifier: 2QmbBN4xckZdTbIKhWKhB69/MQkq6rIvTXUCfsPJh+8= Subject key identifier: 6B:5A:F2:04:2B:D0:E4:85:4A:35:55:32:77:77:24:0D:23:7B:23:68 Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb Certificate serial: 019B1916BCE4C684D299277CDDC8FE7C205B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 19:01:19 +0000 Manifest this update: Sat 13 Dec 2025 19:01:19 +0000 Manifest next update: Sun 14 Dec 2025 19:01:19 +0000 Files and hashes: 1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=) 2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: 1SA9b+gwVdiZxFmMZ7DC5uuEhejCFew8k19s+ph0jJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:bc:e4:c6:84:d2:99:27:7c:dd:c8:fe:7c:20:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb Validity Not Before: Dec 13 19:01:19 2025 GMT Not After : Dec 14 19:01:19 2025 GMT Subject: CN=6b5af2042bd0e4854a3555327777240d237b2368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:f8:05:a2:38:56:bc:65:aa:eb:0d:1c:af: 51:a9:c8:a9:a3:fb:3e:91:fe:bd:32:eb:48:70:f9: d9:47:6c:4d:c9:bb:2f:0f:1f:61:de:fd:d2:c3:d6: 0e:6d:5b:35:fa:f7:77:2b:f6:4b:28:b8:85:4b:ad: 65:92:46:0c:84:b0:6c:f0:3c:e4:e9:27:42:7c:66: 17:22:31:e2:32:8c:ef:2f:14:32:04:90:8b:5d:1e: 3b:20:be:2b:8e:16:47:b9:5e:59:16:64:0c:93:db: e1:b8:06:66:1d:a9:25:84:9b:f1:dd:18:33:b7:38: 6b:45:16:35:c7:a6:74:82:e3:1f:64:40:42:97:7e: 90:a7:55:94:a0:a0:26:70:52:62:21:af:91:51:c6: 9c:42:8d:b5:13:bd:1d:92:2b:7a:57:4d:49:46:98: c1:5d:27:16:a0:43:26:06:6c:d6:37:19:d1:08:29: 72:14:f8:e9:71:f3:f6:a8:b4:cd:02:e3:fa:1b:82: 3f:6c:d8:fc:e3:a4:0e:81:3b:1c:80:1b:e7:b8:bf: 1a:0d:3a:86:52:52:73:79:9e:65:a1:01:21:c0:1e: 80:7d:23:f7:c1:ba:5d:1b:2b:67:ec:43:85:93:08: a3:f3:87:9d:11:0e:12:46:42:2f:c2:29:af:25:52: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5A:F2:04:2B:D0:E4:85:4A:35:55:32:77:77:24:0D:23:7B:23:68 X509v3 Authority Key Identifier: keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b5:7b:dc:34:0c:e1:8e:9d:55:a2:65:63:7e:5a:e0:a9:3d: b7:11:7c:7b:61:e7:73:eb:36:9b:7b:39:e7:52:4b:b2:0d:92: 00:78:31:5d:f7:8d:aa:63:5a:df:c9:77:ce:47:5e:59:8e:63: 6a:a5:8b:e2:05:53:1e:eb:ae:31:3d:46:b6:00:6c:48:c0:45: 20:02:47:9e:c7:f7:25:90:c1:1d:84:36:20:43:ab:89:d8:6b: 5f:52:cc:be:ea:4b:09:50:17:cb:89:b1:c2:1c:63:d4:ec:a8: 40:78:f7:28:64:01:b9:e3:91:68:66:81:32:4a:76:d6:9b:fc: 2e:a9:db:00:ff:b8:8f:05:e4:c4:35:ea:36:bd:0b:ae:f9:11: 0e:66:7a:85:08:22:77:ba:77:0b:c3:8d:eb:e0:cb:2f:93:1a: fa:6e:8b:45:00:f6:12:bb:fa:bd:9e:dd:02:90:4b:25:6f:0f: 54:77:33:63:02:d9:bb:a3:f4:62:8b:8d:91:23:b7:3c:64:5e: f8:6b:d4:34:c7:21:8e:ad:ea:60:34:ab:3d:0b:26:95:72:b2: 55:5b:73:36:1c:a8:4b:c4:41:a2:b4:5e:69:01:0b:fe:40:0e: 88:3c:c2:8a:3e:e2:69:5d:17:e6:42:a1:57:ce:b4:26:0a:2f: 07:6d:eb:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFrzkxoTSmSd83cj+fCBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZjYyOWYzNGNkMDgzYmM2ODA1NDA2OWIxY2M1ZWU3OTcx ZjhiYmIwHhcNMjUxMjEzMTkwMTE5WhcNMjUxMjE0MTkwMTE5WjAzMTEwLwYDVQQD Eyg2YjVhZjIwNDJiZDBlNDg1NGEzNTU1MzI3Nzc3MjQwZDIzN2IyMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx74BaI4VrxlqusNHK9Rqcipo/s+ kf69MutIcPnZR2xNybsvDx9h3v3Sw9YObVs1+vd3K/ZLKLiFS61lkkYMhLBs8Dzk 6SdCfGYXIjHiMozvLxQyBJCLXR47IL4rjhZHuV5ZFmQMk9vhuAZmHaklhJvx3Rgz tzhrRRY1x6Z0guMfZEBCl36Qp1WUoKAmcFJiIa+RUcacQo21E70dkit6V01JRpjB XScWoEMmBmzWNxnRCClyFPjpcfP2qLTNAuP6G4I/bNj846QOgTscgBvnuL8aDTqG UlJzeZ5loQEhwB6AfSP3wbpdGytn7EOFkwij84edEQ4SRkIvwimvJVKexwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGta8gQr0OSFSjVVMnd3JA0jeyNoMB8GA1UdIwQY MBaAFFL2KfNM0IO8aAVAabHMXueXH4u7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEt OTdhNDI4M2I2MjkyLzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEtOTdhNDI4M2I2Mjky LzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLV73DQM 4Y6dVaJlY35a4Kk9txF8e2Hnc+s2m3s551JLsg2SAHgxXfeNqmNa38l3zkdeWY5j aqWL4gVTHuuuMT1GtgBsSMBFIAJHnsf3JZDBHYQ2IEOridhrX1LMvupLCVAXy4mx whxj1OyoQHj3KGQBueORaGaBMkp21pv8LqnbAP+4jwXkxDXqNr0LrvkRDmZ6hQgi d7p3C8ON6+DLL5Ma+m6LRQD2Erv6vZ7dApBLJW8PVHczYwLZu6P0YouNkSO3PGRe +GvUNMchjq3qYDSrPQsmlXKyVVtzNhyoS8RBorReaQEL/kAOiDzCij7iaV0X5kKh V860JgovB23rdw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:44 2025 by rpki-client