This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json) Hash identifier: gPZvDl28E2Zu6GoIbi2huIg8ivaeL0GAFBuX+fB/DSI= Subject key identifier: 5F:26:AC:7A:76:1F:CA:4A:51:F2:F7:A7:7A:37:8C:FB:C3:77:E0:13 Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019B0EC98644032DBF861FAD6DB439CF1C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft Manifest number: 0513 Signing time: Thu 11 Dec 2025 19:00:46 +0000 Manifest this update: Thu 11 Dec 2025 19:00:46 +0000 Manifest next update: Fri 12 Dec 2025 19:00:46 +0000 Files and hashes: 1: 4QBOhoFNUxak77byKINjZVmZ2fE.roa (hash: v5Sp6DRTjrIUknZcB2dDqhlDf9TOw4Vufs1sIAdSgTo=) 2: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 0rxeFNG21mAPJAQCIpELB65QqiwCEKsmgaxc4IG+GCM=) 3: e0bJRqMtYuh9ohw7_55dd6lUhaI.roa (hash: fUH0stkssrWBdiZb/F3KzscDpiWHvrKAjv681mirVo0=) 4: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=) 5: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=) 6: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:86:44:03:2d:bf:86:1f:ad:6d:b4:39:cf:1c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Dec 11 19:00:46 2025 GMT Not After : Dec 12 19:00:46 2025 GMT Subject: CN=5f26ac7a761fca4a51f2f7a77a378cfbc377e013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:cc:28:b3:2c:74:9d:92:fd:53:79:6c:42: 40:52:77:86:a1:f3:f1:d7:67:60:5e:72:3d:d2:b5: 9d:dc:04:4c:0f:bf:be:25:fa:8b:c4:16:a1:36:42: 90:36:82:f5:8c:5c:2d:4d:e9:db:d5:5c:e2:d0:c7: 18:ba:12:73:40:28:d2:88:49:c1:3e:ea:aa:4e:d6: 0f:57:a7:01:f9:89:7e:2d:57:0b:42:99:e4:6b:65: 87:55:79:2e:85:41:23:91:07:c6:82:cd:74:15:db: 0f:40:95:c6:02:85:19:7f:8c:c3:62:28:db:83:99: 3d:c5:3a:d9:13:25:e5:f5:d2:fe:4e:39:7a:1b:bc: d2:b0:bf:dc:66:17:1b:df:7b:d0:3f:a4:49:20:8d: 10:83:74:8f:37:e7:cb:5c:e6:14:82:01:41:fa:4f: 51:13:a8:39:2a:45:c2:8e:70:95:4f:e3:98:c3:11: 9b:9c:f1:9a:ec:82:41:ce:b4:bd:e1:d2:de:f8:ac: eb:21:39:fe:10:2d:91:9e:5b:db:30:b3:61:32:ef: 33:c0:fd:68:8c:2c:21:57:e3:62:0e:71:27:03:be: 86:be:d7:00:cd:62:49:28:87:97:a4:b8:5a:35:2f: 1d:44:8e:b3:d4:4d:dc:e8:e3:68:81:57:21:69:55: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:26:AC:7A:76:1F:CA:4A:51:F2:F7:A7:7A:37:8C:FB:C3:77:E0:13 X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a2:49:60:e4:38:b3:05:39:73:1f:ae:9d:a8:22:2f:2d:fb: d9:ab:6e:73:83:5e:29:99:bb:58:33:aa:64:cf:43:53:0d:44: 8e:e3:27:21:2a:64:14:ba:18:83:78:34:62:b6:ae:b0:be:0a: 53:f7:0a:be:55:23:a6:06:a5:1a:bc:21:84:38:ca:bb:ee:65: dc:10:43:8a:74:12:2e:70:f4:bf:9f:eb:3c:75:85:f5:d0:4d: ba:61:3f:1e:9e:47:b8:67:ac:2d:0a:0e:19:40:33:f6:75:43: 4e:35:ae:3b:2b:b3:10:c5:bd:e5:03:e4:58:d1:82:a6:6b:09: 49:fd:c1:eb:01:d9:99:f9:62:6c:a6:d8:38:f7:8f:31:1a:3e: 8e:76:9b:ce:da:64:aa:92:0d:c3:83:0e:de:38:4d:83:f3:4b: b0:4d:d3:c0:89:f8:a0:ee:b0:bd:8d:42:9e:eb:12:27:6b:cb: 12:ec:9e:66:55:e2:a9:73:0d:f6:de:f4:95:2d:0d:ad:f9:20: 15:07:ef:79:d2:fb:76:ed:5b:39:33:00:65:25:19:ce:4b:76: f7:65:18:bf:1a:51:e9:ed:5e:9f:9a:ff:34:be:3d:fe:fa:da: c6:c3:b9:80:39:2d:5e:ec:a5:67:6f:1d:fb:8e:91:c8:6b:f3: aa:52:0b:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyYZEAy2/hh+tbbQ5zxwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjUxMjExMTkwMDQ2WhcNMjUxMjEyMTkwMDQ2WjAzMTEwLwYDVQQD Eyg1ZjI2YWM3YTc2MWZjYTRhNTFmMmY3YTc3YTM3OGNmYmMzNzdlMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxfMKLMsdJ2S/VN5bEJAUneGofPx 12dgXnI90rWd3ARMD7++JfqLxBahNkKQNoL1jFwtTenb1Vzi0McYuhJzQCjSiEnB PuqqTtYPV6cB+Yl+LVcLQpnka2WHVXkuhUEjkQfGgs10FdsPQJXGAoUZf4zDYijb g5k9xTrZEyXl9dL+Tjl6G7zSsL/cZhcb33vQP6RJII0Qg3SPN+fLXOYUggFB+k9R E6g5KkXCjnCVT+OYwxGbnPGa7IJBzrS94dLe+KzrITn+EC2RnlvbMLNhMu8zwP1o jCwhV+NiDnEnA76GvtcAzWJJKIeXpLhaNS8dRI6z1E3c6ONogVchaVXWcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8mrHp2H8pKUfL3p3o3jPvDd+ATMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6JJYOQ4 swU5cx+unagiLy372atuc4NeKZm7WDOqZM9DUw1EjuMnISpkFLoYg3g0YrausL4K U/cKvlUjpgalGrwhhDjKu+5l3BBDinQSLnD0v5/rPHWF9dBNumE/Hp5HuGesLQoO GUAz9nVDTjWuOyuzEMW95QPkWNGCpmsJSf3B6wHZmflibKbYOPePMRo+jnabztpk qpINw4MO3jhNg/NLsE3TwIn4oO6wvY1CnusSJ2vLEuyeZlXiqXMN9t70lS0Nrfkg FQfvedL7du1bOTMAZSUZzkt292UYvxpR6e1en5r/NL49/vraxsO5gDktXuylZ28d +46RyGvzqlIL7Q== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:45 2025 by rpki-client