This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json) Hash identifier: CFqiPd10SsYFO4EsJ6cdRTKlhmCWf1lmWLGcJSAXUuI= Subject key identifier: 8D:4A:B1:2B:29:57:55:FD:A7:E8:BC:60:D6:45:78:DC:57:5E:72:D7 Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Certificate serial: 019B4D043E88095A0F30E88D1BE854A940C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft Manifest number: 0E97 Signing time: Tue 23 Dec 2025 21:01:22 +0000 Manifest this update: Tue 23 Dec 2025 21:01:22 +0000 Manifest next update: Wed 24 Dec 2025 21:01:22 +0000 Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=) 2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: MmBxRHwJBYx6nftB3BDIVsFCTgA+Z7vyD3DnJW4XKWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:3e:88:09:5a:0f:30:e8:8d:1b:e8:54:a9:40:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Validity Not Before: Dec 23 21:01:22 2025 GMT Not After : Dec 24 21:01:22 2025 GMT Subject: CN=8d4ab12b295755fda7e8bc60d64578dc575e72d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:89:b9:79:c2:13:e6:43:06:f8:57:52:77: 4f:bd:d6:45:30:53:70:8e:1e:30:75:4d:a0:97:aa: 19:0b:ff:fc:cf:82:c5:c7:ab:e3:64:83:2c:5b:48: 8d:5b:c9:13:40:3d:c1:c3:a0:58:25:23:07:f2:1b: ed:a1:44:9a:08:fd:2f:cb:2a:d2:f5:f1:07:ed:22: 7e:dd:f0:cc:06:2e:66:3d:b3:a3:80:05:9b:ef:a6: b3:18:68:5b:f5:ae:67:2b:bb:2e:fd:a8:d7:23:9a: de:7c:90:c8:03:a6:39:46:95:4c:fb:b0:fa:29:44: 92:5c:a9:9a:5c:6b:d1:5c:b7:e3:c7:c9:04:a6:33: 86:2d:b9:1a:74:b5:ed:8d:f2:25:44:97:c3:9d:d6: a7:78:50:61:41:86:c0:4b:e5:73:a3:bd:2a:51:9d: fb:f4:5a:62:a2:26:3c:4c:e3:fc:2e:8b:04:80:d2: 6b:b5:20:42:38:ed:d2:d4:9a:a3:25:82:5b:a8:d2: 69:a9:c2:27:bb:5a:95:27:68:cc:bd:d6:aa:b6:8f: 90:27:a3:86:e0:ee:12:5c:88:73:78:3b:72:20:6c: bc:ca:c9:d2:c8:94:33:25:a7:2a:86:10:e3:3a:38: bf:20:85:2f:a7:fa:48:30:5b:5f:5b:b8:4a:4e:e9: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4A:B1:2B:29:57:55:FD:A7:E8:BC:60:D6:45:78:DC:57:5E:72:D7 X509v3 Authority Key Identifier: keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ac:55:f4:cc:0b:88:16:26:c6:67:05:38:98:31:94:e4:da: af:99:75:76:fe:21:e5:e6:26:85:e8:cf:a8:8a:62:c3:98:f4: 77:dc:41:93:74:ec:cd:a8:6c:1f:9d:44:0f:1e:a3:21:c4:3f: c5:8e:50:f8:5c:24:15:25:99:e9:65:f0:95:14:f0:8b:31:9f: 28:1d:68:c0:72:ca:05:d6:0c:ae:f6:a8:d2:15:00:d4:8b:80: 10:30:23:0a:9f:78:f8:a9:aa:81:ae:a4:9b:5f:c2:f9:45:59: ba:fb:78:43:23:75:d8:a2:63:65:c9:da:c7:79:58:d1:b6:d4: 70:72:b1:ec:4e:4e:b2:d2:73:39:fc:e6:36:6a:c8:fd:61:63: 8e:34:59:9d:70:2e:93:70:6b:8d:a0:2d:d9:c8:3d:4c:0a:5e: 19:59:19:b6:ef:e5:58:cc:1f:cb:50:32:2c:29:19:3b:2a:d5: 5b:fd:be:27:2e:4c:e2:71:ca:0c:94:de:3d:7a:2b:16:fd:51: 26:2c:78:8e:94:71:9b:c9:28:41:0b:1e:87:3d:87:8f:95:97: 4a:24:4a:61:15:44:08:53:c3:b6:6f:ca:49:46:24:8a:bf:56: 2e:1c:4f:40:81:76:aa:0a:b7:45:ab:b4:7a:c6:1f:bc:4d:65: 87:fa:f7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBD6ICVoPMOiNG+hUqUDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm YmYyNTQwHhcNMjUxMjIzMjEwMTIyWhcNMjUxMjI0MjEwMTIyWjAzMTEwLwYDVQQD Eyg4ZDRhYjEyYjI5NTc1NWZkYTdlOGJjNjBkNjQ1NzhkYzU3NWU3MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1giJuXnCE+ZDBvhXUndPvdZFMFNw jh4wdU2gl6oZC//8z4LFx6vjZIMsW0iNW8kTQD3Bw6BYJSMH8hvtoUSaCP0vyyrS 9fEH7SJ+3fDMBi5mPbOjgAWb76azGGhb9a5nK7su/ajXI5refJDIA6Y5RpVM+7D6 KUSSXKmaXGvRXLfjx8kEpjOGLbkadLXtjfIlRJfDndaneFBhQYbAS+Vzo70qUZ37 9FpioiY8TOP8LosEgNJrtSBCOO3S1JqjJYJbqNJpqcInu1qVJ2jMvdaqto+QJ6OG 4O4SXIhzeDtyIGy8ysnSyJQzJacqhhDjOji/IIUvp/pIMFtfW7hKTunpIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1KsSspV1X9p+i8YNZFeNxXXnLXMB8GA1UdIwQY MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt MWNmNmZkOWY4MGZhLzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqxV9MwL iBYmxmcFOJgxlOTar5l1dv4h5eYmhejPqIpiw5j0d9xBk3TszahsH51EDx6jIcQ/ xY5Q+FwkFSWZ6WXwlRTwizGfKB1owHLKBdYMrvao0hUA1IuAEDAjCp94+Kmqga6k m1/C+UVZuvt4QyN12KJjZcnax3lY0bbUcHKx7E5OstJzOfzmNmrI/WFjjjRZnXAu k3BrjaAt2cg9TApeGVkZtu/lWMwfy1AyLCkZOyrVW/2+Jy5M4nHKDJTePXorFv1R Jix4jpRxm8koQQsehz2Hj5WXSiRKYRVECFPDtm/KSUYkir9WLhxPQIF2qgq3Rau0 esYfvE1lh/r3wQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:20:30 2025 by rpki-client