This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json) Hash identifier: WxTJWFZXgeM1oKZ20so9+DbV4tco4dZ8mJUxO2YQeUs= Subject key identifier: 1A:3F:89:71:1F:E7:D5:41:E9:25:8A:4E:29:74:FE:9E:11:72:5A:E0 Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4 Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4 Certificate serial: 019B39EAE568998F6CB546A4D851782FA5EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft Manifest number: 1637 Signing time: Sat 20 Dec 2025 04:00:54 +0000 Manifest this update: Sat 20 Dec 2025 04:00:54 +0000 Manifest next update: Sun 21 Dec 2025 04:00:54 +0000 Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=) 2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=) 3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: Zrhbp0CKizqJupKK2afFXLDHfAd9vFz7Fy6RzySkn40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:e5:68:99:8f:6c:b5:46:a4:d8:51:78:2f:a5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4 Validity Not Before: Dec 20 04:00:54 2025 GMT Not After : Dec 21 04:00:54 2025 GMT Subject: CN=1a3f89711fe7d541e9258a4e2974fe9e11725ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:35:4f:74:a0:10:f4:8b:e7:e2:61:26:a8: ea:7c:ef:e0:94:05:df:08:a9:88:05:86:02:59:b2: 99:e5:d9:1a:04:9b:a6:67:cf:f0:bd:bf:08:1d:ab: 74:71:6f:b5:39:39:7f:dd:d7:14:00:5b:77:17:43: b7:7e:46:8e:55:f2:6e:4b:aa:60:73:9a:ba:56:e1: 24:a6:32:d8:e6:0c:fe:c9:16:d7:37:c0:cb:a0:1b: b4:f3:f1:f4:95:a3:ae:c9:1e:0c:00:47:61:34:63: a2:f9:1d:5f:d7:2c:30:8c:ef:8e:bb:09:7c:13:f3: 20:d6:62:5c:f7:8f:2d:f7:43:37:a6:f0:e2:0c:6c: 9c:11:e7:ba:ea:93:1c:31:26:8f:4c:0a:60:34:a2: f9:9f:b0:4e:0b:5e:99:8e:a6:72:02:f4:80:4d:01: 57:33:99:17:cc:4c:4c:6c:ae:a6:09:28:0b:7f:b1: a3:01:6e:63:32:33:9d:e4:c1:bf:bd:79:69:78:65: 30:68:ff:31:83:34:bf:4f:a7:ab:78:db:0f:de:f2: d6:43:2a:ea:c0:2d:d8:37:b3:20:fc:fb:a0:ff:25: 3d:30:07:b3:9e:2e:a3:2d:01:27:90:8f:86:68:d6: 04:e8:bf:12:a6:74:07:4a:74:83:be:bd:e9:51:21: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:89:71:1F:E7:D5:41:E9:25:8A:4E:29:74:FE:9E:11:72:5A:E0 X509v3 Authority Key Identifier: keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:11:23:9f:29:ff:2e:77:32:83:29:af:05:3f:64:2a:57:30: d7:70:16:55:b0:ac:98:0f:78:5c:d6:12:84:a4:0c:04:01:1a: e2:2b:06:68:25:20:36:6d:8c:77:9d:e5:f0:a8:d7:0b:aa:f3: 7d:51:97:6a:85:4e:01:2e:48:ab:62:60:1a:dd:0e:e5:d8:f0: a2:64:3a:93:c9:d6:4d:b6:42:d2:7f:dd:fe:20:dd:b1:05:14: 07:32:25:da:9f:14:f1:1a:2a:0a:d5:03:01:09:14:83:32:6c: 4a:31:cc:94:bd:27:2a:b5:19:e5:ee:f8:89:e9:61:3c:e0:ca: 8f:12:69:ec:57:55:c8:5b:d8:de:7b:91:1e:2c:17:df:cc:de: bb:e1:89:83:bb:a8:65:ef:41:5e:5f:31:5b:3b:1f:85:17:3e: 6b:10:5e:9d:c8:d5:fa:60:22:08:3d:77:cc:f3:e5:90:ac:2a: 86:2d:f2:7e:40:67:77:e9:9c:fa:9a:61:44:62:4b:ad:2f:53: e3:a7:3b:05:2c:11:be:26:bf:4d:b2:aa:10:98:e8:32:e8:2b: 30:ac:e9:01:1b:4e:0b:66:9b:33:8f:46:09:2f:90:9d:2a:46: fa:37:a4:cc:5d:02:a6:3d:d0:9d:cf:a1:d1:d4:d9:94:a9:e6: 9f:41:ee:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56uVomY9stUak2FF4L6XsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy MGI0YzQwHhcNMjUxMjIwMDQwMDU0WhcNMjUxMjIxMDQwMDU0WjAzMTEwLwYDVQQD EygxYTNmODk3MTFmZTdkNTQxZTkyNThhNGUyOTc0ZmU5ZTExNzI1YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmo1T3SgEPSL5+JhJqjqfO/glAXf CKmIBYYCWbKZ5dkaBJumZ8/wvb8IHat0cW+1OTl/3dcUAFt3F0O3fkaOVfJuS6pg c5q6VuEkpjLY5gz+yRbXN8DLoBu08/H0laOuyR4MAEdhNGOi+R1f1ywwjO+Ouwl8 E/Mg1mJc948t90M3pvDiDGycEee66pMcMSaPTApgNKL5n7BOC16ZjqZyAvSATQFX M5kXzExMbK6mCSgLf7GjAW5jMjOd5MG/vXlpeGUwaP8xgzS/T6ereNsP3vLWQyrq wC3YN7Mg/Pug/yU9MAezni6jLQEnkI+GaNYE6L8SpnQHSnSDvr3pUSG9tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo/iXEf59VB6SWKTil0/p4RclrgMB8GA1UdIwQY MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt ZTNlNWZhMzZiYjJmLzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxEjnyn/ LncygymvBT9kKlcw13AWVbCsmA94XNYShKQMBAEa4isGaCUgNm2Md53l8KjXC6rz fVGXaoVOAS5Iq2JgGt0O5djwomQ6k8nWTbZC0n/d/iDdsQUUBzIl2p8U8RoqCtUD AQkUgzJsSjHMlL0nKrUZ5e74ielhPODKjxJp7FdVyFvY3nuRHiwX38zeu+GJg7uo Ze9BXl8xWzsfhRc+axBencjV+mAiCD13zPPlkKwqhi3yfkBnd+mc+pphRGJLrS9T 46c7BSwRvia/TbKqEJjoMugrMKzpARtOC2abM49GCS+QnSpG+jekzF0Cpj3Qnc+h 0dTZlKnmn0Hulw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:17:50 2025 by rpki-client