This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json) Hash identifier: +MgUCgB+ELaoIbvw91Ap2yfyaEQkxRC8nL5rMO8mkPU= Subject key identifier: 11:23:54:41:4D:74:81:ED:81:B9:B1:71:F6:A7:CF:70:E3:22:F5:E2 Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e Certificate serial: 019B5975DBCAC4295E65690089B457920594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft Manifest number: 0BA4 Signing time: Fri 26 Dec 2025 07:00:54 +0000 Manifest this update: Fri 26 Dec 2025 07:00:54 +0000 Manifest next update: Sat 27 Dec 2025 07:00:54 +0000 Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=) 2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: zwFZEwMptd70CFWYv+q46H4X8Tjdycos+OLU86Hmj5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:db:ca:c4:29:5e:65:69:00:89:b4:57:92:05:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e Validity Not Before: Dec 26 07:00:54 2025 GMT Not After : Dec 27 07:00:54 2025 GMT Subject: CN=112354414d7481ed81b9b171f6a7cf70e322f5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:72:17:6f:bc:ff:58:b6:d8:0c:f3:78:25: 0a:0b:cd:34:ac:f2:2d:84:7c:39:b0:32:95:5f:ea: 3d:08:c9:dc:6a:73:07:2a:69:6d:7c:10:fd:c5:9c: 01:3f:98:12:cb:67:03:c9:f6:7b:c2:55:68:2a:e8: fb:16:3e:1b:34:6e:b6:f8:78:3e:b1:8c:da:d2:2c: be:6d:ef:c9:dc:ff:29:29:56:87:65:2e:d5:b3:05: 40:67:62:04:37:2c:ff:8b:56:8e:4e:d0:65:16:30: b8:4c:b7:8b:0f:de:52:25:17:b7:2c:65:9d:6b:39: 17:ad:49:0a:94:d6:b3:d2:97:da:fe:b0:5b:60:f6: e7:d8:33:a7:36:02:0b:91:c6:ef:b3:1d:46:fb:65: 56:fa:42:11:60:22:77:8a:03:4e:c4:47:89:53:ca: 91:96:69:cf:02:00:1f:8b:4d:05:73:4e:85:32:e0: 27:c6:a5:02:64:73:cf:99:97:62:d1:58:e9:3f:9c: 22:b3:de:d8:58:f2:59:c3:a5:ab:5b:01:5a:25:c5: 4e:b7:cd:df:6b:e7:e1:96:e6:16:a8:b9:1c:99:a0: 5d:3e:29:8e:d1:bf:99:8e:7d:61:26:b4:c9:df:1a: 7e:49:1a:e6:2e:fe:fd:97:ea:3d:49:70:f4:f2:57: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:23:54:41:4D:74:81:ED:81:B9:B1:71:F6:A7:CF:70:E3:22:F5:E2 X509v3 Authority Key Identifier: keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1b:a5:d8:e6:06:c8:72:f7:50:75:7e:8c:26:86:80:3d:bf: a3:9d:a5:6f:c4:7b:76:14:4b:9e:a9:ee:f0:40:39:16:7c:d8: dd:0e:dc:06:59:6c:82:50:9b:d5:2d:d0:26:aa:ae:99:c3:b1: 62:64:48:ff:35:1c:28:0f:a2:6d:33:e8:a9:61:60:ee:fd:72: f6:6c:16:b3:0b:c9:3b:7e:f6:a6:0a:65:42:11:a6:e6:0d:00: a9:19:b1:60:6e:5a:4e:6b:39:45:c9:15:55:22:d9:bc:f5:19: 08:82:da:f1:c7:c2:80:0a:0c:5c:d2:e7:26:97:ed:a1:e2:3b: b8:67:ae:e7:e2:79:56:18:73:ca:23:da:74:59:42:ea:8b:b2: 69:05:bd:de:bc:6c:f6:a0:63:04:a3:b6:e3:fc:88:35:31:08: d7:5b:7d:0a:4b:1c:1c:02:d3:92:88:15:0b:85:a1:64:7c:05: bb:1e:39:05:bb:88:5d:38:a3:7b:e7:a3:ea:4c:c6:45:be:c7: ad:3d:34:3e:b0:a1:6b:de:ce:2f:a6:54:29:93:19:4b:bc:be: 69:76:ce:3b:d1:cb:6d:e1:57:a8:93:77:f1:54:7a:7f:b9:06: a2:1e:a8:a2:23:6b:c1:da:a6:36:48:f5:d5:bc:81:5f:25:c3: 3e:b5:12:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZddvKxCleZWkAibRXkgWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTg2YjE0MWM1MWM2NWVlYWJkNmU2MmVhNTIyZWRjNTk4 ODUyNmUwHhcNMjUxMjI2MDcwMDU0WhcNMjUxMjI3MDcwMDU0WjAzMTEwLwYDVQQD EygxMTIzNTQ0MTRkNzQ4MWVkODFiOWIxNzFmNmE3Y2Y3MGUzMjJmNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxctyF2+8/1i22AzzeCUKC800rPIt hHw5sDKVX+o9CMncanMHKmltfBD9xZwBP5gSy2cDyfZ7wlVoKuj7Fj4bNG62+Hg+ sYza0iy+be/J3P8pKVaHZS7VswVAZ2IENyz/i1aOTtBlFjC4TLeLD95SJRe3LGWd azkXrUkKlNaz0pfa/rBbYPbn2DOnNgILkcbvsx1G+2VW+kIRYCJ3igNOxEeJU8qR lmnPAgAfi00Fc06FMuAnxqUCZHPPmZdi0VjpP5wis97YWPJZw6WrWwFaJcVOt83f a+fhluYWqLkcmaBdPimO0b+Zjn1hJrTJ3xp+SRrmLv79l+o9SXD08lcsiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEjVEFNdIHtgbmxcfanz3DjIvXiMB8GA1UdIwQY MBaAFFLoaxQcUcZe6r1uYupSLtxZiFJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQt YzY4N2U3OTJiMjVkLzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQtYzY4N2U3OTJiMjVk LzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORul2OYG yHL3UHV+jCaGgD2/o52lb8R7dhRLnqnu8EA5FnzY3Q7cBllsglCb1S3QJqqumcOx YmRI/zUcKA+ibTPoqWFg7v1y9mwWswvJO372pgplQhGm5g0AqRmxYG5aTms5RckV VSLZvPUZCILa8cfCgAoMXNLnJpftoeI7uGeu5+J5VhhzyiPadFlC6ouyaQW93rxs 9qBjBKO24/yINTEI11t9CkscHALTkogVC4WhZHwFux45BbuIXTije+ej6kzGRb7H rT00PrCha97OL6ZUKZMZS7y+aXbOO9HLbeFXqJN38VR6f7kGoh6ooiNrwdqmNkj1 1byBXyXDPrUSRw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:53 2025 by rpki-client