This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json) Hash identifier: eyHmduJ/JZhptHMAAI1AYx+xZkqgSju4II8B+34WfgM= Subject key identifier: 69:35:68:7B:D0:65:AE:FA:C2:F4:62:4A:B6:5E:85:28:AE:56:CF:21 Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971 Certificate serial: 019B0E26264EBA661570750427B45F99F333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft Manifest number: 0312 Signing time: Thu 11 Dec 2025 16:02:19 +0000 Manifest this update: Thu 11 Dec 2025 16:02:19 +0000 Manifest next update: Fri 12 Dec 2025 16:02:19 +0000 Files and hashes: 1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=) 2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=) 3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=) 4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: qzMrY5BrMxL99hdPuYSnkO8laxQnObELGiQRq6fAmzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:26:4e:ba:66:15:70:75:04:27:b4:5f:99:f3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533802e62965d4584e598d59b76a928be5afd971 Validity Not Before: Dec 11 16:02:19 2025 GMT Not After : Dec 12 16:02:19 2025 GMT Subject: CN=6935687bd065aefac2f4624ab65e8528ae56cf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:29:06:5b:59:be:ba:61:68:4b:0a:54:dd: 89:ea:dc:49:16:21:ba:ac:61:09:4c:8c:b0:a8:34: 1c:f6:5d:40:73:f7:d7:a5:5b:7d:56:6b:f3:60:c7: a2:54:ef:d3:80:fe:85:34:71:9d:aa:05:a2:7c:9b: 39:94:33:3d:79:2d:80:eb:74:8d:a1:a7:4b:cd:8f: 42:39:0e:71:c1:96:74:b1:68:5f:2f:4a:67:95:51: 2c:8c:f4:09:d8:17:b0:ec:71:45:e8:59:c1:78:b0: f9:e8:48:5b:5f:f7:63:f0:2f:8d:17:90:36:bc:e6: ec:eb:8c:32:6e:86:aa:be:2e:8c:52:75:aa:69:6b: a0:3e:a6:ca:86:d5:5c:db:2d:87:e4:4b:5a:54:2b: 27:ef:8e:61:57:50:3a:a1:d8:41:16:8c:11:b7:36: 7b:48:7f:39:9e:ee:4e:ee:55:6c:95:21:8f:a3:e4: e2:33:43:dc:af:89:f6:07:41:35:06:7f:da:92:97: 2a:e5:ba:91:d3:4d:b7:38:ca:38:06:67:b7:c2:d2: a8:bb:72:a7:15:32:ef:5b:ed:5e:b9:3b:37:96:05: 5a:a9:f0:a0:88:98:8d:01:07:77:6c:54:d8:32:b3: 98:44:af:73:2d:2b:60:71:8f:e8:8c:ed:c3:61:5f: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:35:68:7B:D0:65:AE:FA:C2:F4:62:4A:B6:5E:85:28:AE:56:CF:21 X509v3 Authority Key Identifier: keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b0:c5:99:56:ac:74:6a:20:24:5a:b1:15:61:6b:12:26:3b: b7:31:72:dc:7a:45:e9:4e:b9:63:ac:eb:99:94:6e:8a:8d:18: 23:b2:eb:90:05:2f:92:2d:f0:be:91:42:10:66:47:bc:4a:bd: 33:d8:46:dc:54:8c:96:a4:a3:61:8a:1d:78:c4:84:db:3b:fd: b6:b5:e4:5b:f2:75:18:e6:63:83:9f:65:c1:29:55:a4:d7:da: 28:82:31:15:c4:8a:50:49:ce:8f:a2:b6:1a:c0:4c:8c:90:6e: 5b:1c:6f:3c:2f:f5:6e:2c:4d:00:2d:f6:b4:de:03:8d:97:fd: 14:4c:7b:8e:5f:3d:ba:89:10:45:23:78:77:40:65:63:ee:eb: ec:e4:cc:85:1d:b7:d1:91:71:73:f2:66:90:d2:cf:6c:21:c8: 5e:86:85:b2:bc:81:c6:3e:50:1d:8f:97:af:ef:3a:27:00:67: a4:ee:e8:f0:2f:ff:81:e9:3b:09:18:e1:5c:41:91:0e:41:d4: 28:eb:d7:13:a8:2a:a3:ac:03:b5:8a:d2:f6:b1:d0:e3:69:26: 0f:f0:68:89:5b:e0:a6:b0:c2:0a:d5:00:0b:2e:1a:65:d7:9f: e6:d2:46:9e:f3:5b:a8:d8:c9:c5:3f:af:07:d1:b5:98:bf:eb: 46:1e:54:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJiZOumYVcHUEJ7RfmfMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzgwMmU2Mjk2NWQ0NTg0ZTU5OGQ1OWI3NmE5MjhiZTVh ZmQ5NzEwHhcNMjUxMjExMTYwMjE5WhcNMjUxMjEyMTYwMjE5WjAzMTEwLwYDVQQD Eyg2OTM1Njg3YmQwNjVhZWZhYzJmNDYyNGFiNjVlODUyOGFlNTZjZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFQpBltZvrphaEsKVN2J6txJFiG6 rGEJTIywqDQc9l1Ac/fXpVt9VmvzYMeiVO/TgP6FNHGdqgWifJs5lDM9eS2A63SN oadLzY9COQ5xwZZ0sWhfL0pnlVEsjPQJ2Bew7HFF6FnBeLD56EhbX/dj8C+NF5A2 vObs64wyboaqvi6MUnWqaWugPqbKhtVc2y2H5EtaVCsn745hV1A6odhBFowRtzZ7 SH85nu5O7lVslSGPo+TiM0Pcr4n2B0E1Bn/akpcq5bqR0023OMo4Bme3wtKou3Kn FTLvW+1euTs3lgVaqfCgiJiNAQd3bFTYMrOYRK9zLStgcY/ojO3DYV+aoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk1aHvQZa76wvRiSrZehSiuVs8hMB8GA1UdIwQY MBaAFFM4AuYpZdRYTlmNWbdqkovlr9lxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQt YTIzYzEzMWMwZDM4LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQtYTIzYzEzMWMwZDM4 LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbDFmVas dGogJFqxFWFrEiY7tzFy3HpF6U65Y6zrmZRuio0YI7LrkAUvki3wvpFCEGZHvEq9 M9hG3FSMlqSjYYodeMSE2zv9trXkW/J1GOZjg59lwSlVpNfaKIIxFcSKUEnOj6K2 GsBMjJBuWxxvPC/1bixNAC32tN4DjZf9FEx7jl89uokQRSN4d0BlY+7r7OTMhR23 0ZFxc/JmkNLPbCHIXoaFsryBxj5QHY+Xr+86JwBnpO7o8C//gek7CRjhXEGRDkHU KOvXE6gqo6wDtYrS9rHQ42kmD/BoiVvgprDCCtUACy4aZdef5tJGnvNbqNjJxT+v B9G1mL/rRh5UQA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:56 2025 by rpki-client