This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json) Hash identifier: BROs+frKvdYT+kLlnSg5tvmf3cEXRwcHXwsPC0IqwBs= Subject key identifier: 40:4F:33:B0:6A:65:18:D1:CB:A6:43:82:D2:58:03:54:8F:31:59:A0 Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019B3757ECEF1CF73A178F628311E3DB1E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft Manifest number: 0528 Signing time: Fri 19 Dec 2025 16:01:07 +0000 Manifest this update: Fri 19 Dec 2025 16:01:07 +0000 Manifest next update: Sat 20 Dec 2025 16:01:07 +0000 Files and hashes: 1: 4QBOhoFNUxak77byKINjZVmZ2fE.roa (hash: v5Sp6DRTjrIUknZcB2dDqhlDf9TOw4Vufs1sIAdSgTo=) 2: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: k+i2vcCHHFQkuF/4Dr5edh5BXLeRSjmz13nH6TyeVnA=) 3: e0bJRqMtYuh9ohw7_55dd6lUhaI.roa (hash: fUH0stkssrWBdiZb/F3KzscDpiWHvrKAjv681mirVo0=) 4: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=) 5: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=) 6: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:ec:ef:1c:f7:3a:17:8f:62:83:11:e3:db:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Dec 19 16:01:07 2025 GMT Not After : Dec 20 16:01:07 2025 GMT Subject: CN=404f33b06a6518d1cba64382d25803548f3159a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:72:bd:05:0d:bd:bd:52:eb:f0:6b:06:3e: cb:d8:6e:a5:8b:9c:75:3c:84:bd:d0:b9:74:5c:13: ce:d9:89:67:5c:6c:1a:02:94:08:4c:5b:d9:9c:29: d7:a7:af:2a:97:d7:b4:54:5e:13:0e:24:46:a0:5a: 55:52:c6:62:b8:63:a2:74:39:f0:35:62:92:6b:20: 84:a6:a4:6c:f3:2a:e9:86:fe:bd:9d:03:32:80:f1: 51:dc:58:de:f4:2e:08:20:10:1c:f9:0b:86:a0:6c: ad:14:e8:ca:4b:d2:1e:5a:82:d9:b9:ef:d4:9f:27: 60:2f:58:cd:1e:3b:72:62:cc:bd:dd:28:77:15:21: 4a:42:02:29:30:8a:6f:a1:17:37:2e:c1:9f:38:cf: 54:b0:44:71:3d:ca:39:07:2c:f6:c9:0f:94:6f:4c: d9:64:19:62:9b:15:1c:87:74:a1:07:c1:b3:9a:e4: dd:62:f1:49:0c:6b:99:a5:9c:f7:63:dc:66:89:5f: a1:8d:5b:f9:49:e6:37:97:1c:1d:82:6c:d1:c9:11: 50:ea:10:ea:fb:b0:07:47:33:f3:03:1a:e5:70:bf: d1:df:5b:8f:48:f7:ea:d1:be:95:36:6c:eb:fa:d0: 89:32:90:6f:c8:40:d6:5a:75:1e:35:a8:e9:3d:2b: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:33:B0:6A:65:18:D1:CB:A6:43:82:D2:58:03:54:8F:31:59:A0 X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:23:e9:7b:5d:7a:59:7b:de:a0:a3:47:3d:47:02:fe:df:e8: 83:07:2d:db:cb:32:43:3b:f9:e2:ca:2c:30:49:2c:68:aa:60: 09:9e:6f:01:4f:3f:fc:7b:9e:25:d6:2f:a8:c3:4a:09:e5:96: 2d:c9:04:ef:a8:42:ad:17:73:94:4e:47:9e:4e:d4:cf:6c:32: bd:22:f5:29:3b:17:7c:f1:62:ce:51:fb:b5:9a:8e:02:23:27: 12:9a:71:73:1e:99:5a:f1:77:ba:dd:0d:db:45:08:75:32:15: 69:f4:e3:b7:34:42:f0:6b:7f:a6:de:06:a3:15:1c:d1:ca:f6: 1c:ec:e6:b4:6c:66:a4:ea:a3:82:36:01:5e:34:dc:55:56:0f: aa:d2:36:9a:4a:7e:18:14:90:86:cf:f8:b8:d7:87:bb:14:ee: e7:2c:3f:2d:3d:31:0d:71:9d:74:1c:9e:9a:28:4c:42:6c:e8: a9:c1:03:fb:34:4d:53:a2:28:7f:4b:d3:18:2c:0c:24:d1:9c: 01:b1:25:d0:64:83:b8:25:4b:f9:ab:bd:e2:76:8f:2d:7a:54: 5c:e6:a4:2b:73:75:06:7f:7e:e1:8e:14:ec:ec:2d:98:a5:33: dc:42:68:1f:61:86:05:37:aa:5e:0b:09:39:ec:ac:fa:4c:00: bb:ea:b7:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V+zvHPc6F49igxHj2x5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjUxMjE5MTYwMTA3WhcNMjUxMjIwMTYwMTA3WjAzMTEwLwYDVQQD Eyg0MDRmMzNiMDZhNjUxOGQxY2JhNjQzODJkMjU4MDM1NDhmMzE1OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0NyvQUNvb1S6/BrBj7L2G6li5x1 PIS90Ll0XBPO2YlnXGwaApQITFvZnCnXp68ql9e0VF4TDiRGoFpVUsZiuGOidDnw NWKSayCEpqRs8yrphv69nQMygPFR3Fje9C4IIBAc+QuGoGytFOjKS9IeWoLZue/U nydgL1jNHjtyYsy93Sh3FSFKQgIpMIpvoRc3LsGfOM9UsERxPco5Byz2yQ+Ub0zZ ZBlimxUch3ShB8GzmuTdYvFJDGuZpZz3Y9xmiV+hjVv5SeY3lxwdgmzRyRFQ6hDq +7AHRzPzAxrlcL/R31uPSPfq0b6VNmzr+tCJMpBvyEDWWnUeNajpPSv1UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBPM7BqZRjRy6ZDgtJYA1SPMVmgMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCPpe116 WXveoKNHPUcC/t/ogwct28syQzv54sosMEksaKpgCZ5vAU8//HueJdYvqMNKCeWW LckE76hCrRdzlE5Hnk7Uz2wyvSL1KTsXfPFizlH7tZqOAiMnEppxcx6ZWvF3ut0N 20UIdTIVafTjtzRC8Gt/pt4GoxUc0cr2HOzmtGxmpOqjgjYBXjTcVVYPqtI2mkp+ GBSQhs/4uNeHuxTu5yw/LT0xDXGddByemihMQmzoqcED+zRNU6Iof0vTGCwMJNGc AbEl0GSDuCVL+au94naPLXpUXOakK3N1Bn9+4Y4U7OwtmKUz3EJoH2GGBTeqXgsJ Oeys+kwAu+q3TA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:32:56 2025 by rpki-client