This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: UBk65d4AeB8tjeLFtXeHO0UKDPXbUWlhGcmMdkbshkY= Subject key identifier: 58:ED:72:98:7A:77:6A:15:33:D2:6E:0C:20:5E:57:9A:45:25:AE:90 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B07473966D454859659C88B6EA69FF8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 17A5 Signing time: Wed 10 Dec 2025 08:01:06 +0000 Manifest this update: Wed 10 Dec 2025 08:01:06 +0000 Manifest next update: Thu 11 Dec 2025 08:01:06 +0000 Files and hashes: 1: 7E6Yjtw4S5woPVdagJ7udCJl5RA.roa (hash: 39Gi/rZHLqlNm15z+oavTYHN+xuEGg13WlzRqzoNz+w=) 2: 8zCnIgh-ZctwaWW9UWnhk5D47-Y.roa (hash: MUHP885QC53KyVAwA3OVuIpjRfltCfNEkey65yD1E0A=) 3: AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa (hash: 8hVhVqsbKGADU2c8IHCYOqECSdJOghmC2FEZohLEksw=) 4: JfBP6dS5I5N35c7vJqB7NgG5BpQ.roa (hash: mlxyZUvm8D4amiftjMjNylfXPIWgAcCSgND1WevSbxo=) 5: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: yM8EN5fA65Qzf2qQvo9rPtiQxBbZQ7lzEliZbqvsAsU=) 6: V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa (hash: QCQZA5MTKnem3+fJ+k+YcmhfhWTERBGnKLkTrN+uSlA=) 7: W0tavrjJSSiPuQlULsDp4KDy2W4.roa (hash: t/YLBngwq/zvwgwACF50uiu831rnT/Xxzg6t8YeTWtM=) 8: Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa (hash: bCKy9ray9aVGb5cuUoApuza4mHQIk6NOLCOgkU76NG8=) 9: dNnxl9eshyIT4nX_fYkG9f0tJfU.roa (hash: M4nzGQsVxbsKWipOFOtukrmX3AJDrEypgI6i1id8uus=) 10: dRFON_8KZhLV3A8FKdT60GP8fXU.roa (hash: vZFsSXY8KKaWJVwCaYPPKczwOc+ZUmysk+xkANhTrsk=) 11: fs4X3zJFq3DUP70BE5KHHq5PW6A.roa (hash: bGR4PpXG1RT4m3/7nflg7BgdcGbpPQ/v8739XylkQso=) 12: qrKrZlWqP1xYMoyEfKssy_MBOPc.roa (hash: 7HCvDFegj/Om6sM+U3B+gHYXUnQzqvdjd1JcBWwGFb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:39:66:d4:54:85:96:59:c8:8b:6e:a6:9f:f8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Dec 10 08:01:06 2025 GMT Not After : Dec 11 08:01:06 2025 GMT Subject: CN=58ed72987a776a1533d26e0c205e579a4525ae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:52:c8:d5:29:52:1b:cd:cf:3d:19:ab:6b: ae:e9:b3:e6:2c:f3:a0:12:a5:66:88:48:04:03:9e: 69:f8:62:e5:7a:07:43:03:30:d5:95:ab:ea:e2:a0: e1:10:7e:dd:9a:c2:22:2d:7d:22:7c:00:52:c7:98: 92:34:9d:ad:a0:23:7c:e8:21:2c:62:6b:16:9e:b7: be:e2:48:b8:7e:3d:9e:55:55:8f:44:17:d6:4e:48: b2:2a:2f:b6:e6:cf:38:38:22:8a:e0:d1:c0:48:87: ae:f7:a3:51:aa:93:07:43:a3:99:27:f2:67:fa:b8: 40:3b:57:12:da:b1:6d:a7:33:c4:7d:d2:a2:bd:f4: 3d:eb:82:da:61:4f:54:cd:8f:19:98:dc:94:9a:6f: f9:ff:4e:1b:79:a1:12:bd:6a:96:f9:51:48:e9:69: c3:c9:44:6a:f7:e1:9d:ff:b5:49:84:cf:5d:f2:e8: 69:ea:69:42:f7:7b:6c:dd:0b:c0:6a:69:9a:42:ec: fb:d1:91:c4:a8:cd:57:23:3f:f9:60:69:63:41:d8: 35:6f:9e:d8:dd:f5:5e:7c:97:d3:bb:93:b3:01:ad: 77:b8:bc:8a:c2:65:28:ea:5c:50:84:06:01:63:d5: 68:dd:52:15:81:0a:c7:62:01:1a:e7:d7:bb:c2:58: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:ED:72:98:7A:77:6A:15:33:D2:6E:0C:20:5E:57:9A:45:25:AE:90 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:47:e5:83:32:ba:42:82:8e:7f:cc:6e:58:de:9b:0e:18:cd: 84:c7:16:64:cc:8f:39:c6:8b:8f:2d:a9:54:3d:31:46:18:42: 0f:6d:e2:80:ac:58:19:c9:b1:07:b6:bd:2b:49:e6:5a:40:26: 0a:e5:d8:76:4b:a2:3b:90:f0:f1:3c:76:15:27:4a:5a:cb:84: c3:8c:dd:a7:30:07:96:04:10:cc:8f:69:0d:1f:68:89:2f:c4: dd:7f:5f:ce:4f:40:5c:e9:87:8f:f3:e4:a7:87:a3:57:44:bc: d6:90:0b:04:7f:70:41:2c:7d:82:10:a8:1e:d0:48:f3:49:cd: 20:76:ba:bf:f2:5f:18:48:53:a9:50:1f:82:ae:4d:46:95:41: 91:0e:a2:51:5d:f8:ad:e7:13:ec:01:36:25:69:d3:e8:70:0b: 25:6d:3f:1d:41:23:10:d7:70:14:06:32:ca:51:69:09:a3:ca: 4b:55:b8:6d:47:88:27:98:ab:3b:c4:01:af:d9:d5:97:fb:91: 5e:31:07:f1:83:03:8b:24:bd:e3:31:1e:da:38:5d:8c:ae:2a: 25:bd:8a:07:47:98:09:92:cf:a5:1c:9d:07:61:a6:8f:e7:07: 9e:24:33:7e:09:4d:e7:9a:0d:ca:f9:e9:80:4a:ca:58:3a:c6: 88:1e:b8:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRzlm1FSFllnIi26mn/jhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjUxMjEwMDgwMTA2WhcNMjUxMjExMDgwMTA2WjAzMTEwLwYDVQQD Eyg1OGVkNzI5ODdhNzc2YTE1MzNkMjZlMGMyMDVlNTc5YTQ1MjVhZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o5SyNUpUhvNzz0Zq2uu6bPmLPOg EqVmiEgEA55p+GLlegdDAzDVlavq4qDhEH7dmsIiLX0ifABSx5iSNJ2toCN86CEs YmsWnre+4ki4fj2eVVWPRBfWTkiyKi+25s84OCKK4NHASIeu96NRqpMHQ6OZJ/Jn +rhAO1cS2rFtpzPEfdKivfQ964LaYU9UzY8ZmNyUmm/5/04beaESvWqW+VFI6WnD yURq9+Gd/7VJhM9d8uhp6mlC93ts3QvAammaQuz70ZHEqM1XIz/5YGljQdg1b57Y 3fVefJfTu5OzAa13uLyKwmUo6lxQhAYBY9Vo3VIVgQrHYgEa59e7wlg33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjtcph6d2oVM9JuDCBeV5pFJa6QMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEflgzK6 QoKOf8xuWN6bDhjNhMcWZMyPOcaLjy2pVD0xRhhCD23igKxYGcmxB7a9K0nmWkAm CuXYdkuiO5Dw8Tx2FSdKWsuEw4zdpzAHlgQQzI9pDR9oiS/E3X9fzk9AXOmHj/Pk p4ejV0S81pALBH9wQSx9ghCoHtBI80nNIHa6v/JfGEhTqVAfgq5NRpVBkQ6iUV34 recT7AE2JWnT6HALJW0/HUEjENdwFAYyylFpCaPKS1W4bUeIJ5irO8QBr9nVl/uR XjEH8YMDiyS94zEe2jhdjK4qJb2KB0eYCZLPpRydB2Gmj+cHniQzfglN55oNyvnp gErKWDrGiB64sQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:35:55 2025 by rpki-client