This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json) Hash identifier: uxTkEGFd28EK3PmOj9SlnfflNgxjHlOsRMXJMgj+Aqg= Subject key identifier: AB:4B:F2:F5:94:47:EE:99:05:A9:E2:C3:CA:87:EA:48:CD:C5:8A:9B Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48 Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48 Certificate serial: 019B4CCD6A75C4F1915FD01C3944D202025F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 20:01:28 +0000 Manifest this update: Tue 23 Dec 2025 20:01:28 +0000 Manifest next update: Wed 24 Dec 2025 20:01:28 +0000 Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=) 2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: xUgyO8AoX7osNMAP1LsOaPZiEXOemCy4g0Nh58p18aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:6a:75:c4:f1:91:5f:d0:1c:39:44:d2:02:02:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48 Validity Not Before: Dec 23 20:01:28 2025 GMT Not After : Dec 24 20:01:28 2025 GMT Subject: CN=ab4bf2f59447ee9905a9e2c3ca87ea48cdc58a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:81:d8:f2:15:1f:e9:47:1e:a3:f3:75:b7: b3:80:f1:2e:8d:40:4c:34:95:e5:fe:b5:16:43:0e: ab:1e:b4:b0:35:a3:50:ad:7d:88:25:0a:fd:61:86: 24:25:30:23:39:cb:76:64:84:bc:0a:0e:00:77:58: 28:54:30:4e:eb:49:22:ef:2a:4f:7a:24:f9:48:e0: 04:54:c7:1f:45:d0:19:02:68:21:25:39:4b:a9:26: e1:29:96:bc:62:24:70:2c:bd:ce:04:2a:f9:9c:90: a6:66:0a:93:b1:54:7a:2b:7e:61:4d:f4:38:e4:f2: b9:7f:3c:6a:e9:2f:26:15:a7:0c:6f:c7:c8:7a:34: cb:2d:27:02:d9:bf:55:9b:57:ed:c6:c7:c2:bf:41: 97:90:cb:75:17:86:aa:db:97:7c:48:52:de:9a:3d: fc:9f:8e:71:f3:20:c6:e3:7d:d8:e5:69:1a:51:be: 06:9b:d7:22:9e:ee:16:d8:f6:6e:0e:43:b6:6a:11: 83:93:8b:1b:81:78:5e:6d:2c:48:0e:06:28:a1:f8: 2e:7a:62:5b:8c:1a:4c:54:b9:4c:04:a7:a6:a1:e5: 20:2e:9a:f4:39:42:26:d8:0f:d6:5f:4f:ba:8a:9a: 22:ed:fd:ad:bf:24:cc:67:72:e4:bb:64:b6:1a:a1: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:F2:F5:94:47:EE:99:05:A9:E2:C3:CA:87:EA:48:CD:C5:8A:9B X509v3 Authority Key Identifier: keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fc:b9:ae:5b:23:4f:2e:17:1c:2a:71:70:ca:d3:85:42:85: fc:84:44:c0:ae:60:1e:59:10:fb:ac:f0:a1:93:0c:ae:7a:e5: 75:61:3f:82:b4:55:c3:69:1e:a2:77:74:d1:7e:fa:f0:da:77: 78:c4:33:d1:ec:9e:7f:82:b4:15:10:a7:f9:d1:7f:54:e1:44: 99:ed:c3:8c:db:c1:af:0f:e7:de:fa:0d:28:8e:47:f6:ec:ba: ea:35:d3:38:db:07:50:dc:2b:05:ac:05:46:27:9e:b3:e6:93: 05:bd:82:ac:56:cd:12:7b:65:f5:87:4e:72:39:18:f5:65:fe: 8a:a7:3f:f0:c3:42:ce:1d:a8:46:3e:b2:41:70:60:b3:c5:55: a7:fb:8a:f7:33:b6:85:25:c9:64:da:0d:d9:ad:f3:06:1a:5a: ff:c8:b1:47:60:0a:a0:b5:9a:7b:2f:69:be:46:48:4b:5c:13: a5:0c:cf:a2:4e:d5:d1:e4:b8:ad:2a:06:24:ae:be:fd:d0:fd: ae:c0:cf:71:ab:1c:f8:a4:02:be:b4:a5:bb:f3:d1:81:ef:48: 86:b7:25:3c:ea:47:cf:23:cc:55:e9:4e:5e:02:b8:a7:a4:8e: 63:be:74:c8:99:19:7f:99:c6:99:a1:a5:a3:68:96:4b:fa:52: 00:5c:72:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzWp1xPGRX9AcOUTSAgJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWJhMmE1NmEwYzMwZmRhZjU5MzRhZjg3NjVjMWZmZDEz NTdhNDgwHhcNMjUxMjIzMjAwMTI4WhcNMjUxMjI0MjAwMTI4WjAzMTEwLwYDVQQD EyhhYjRiZjJmNTk0NDdlZTk5MDVhOWUyYzNjYTg3ZWE0OGNkYzU4YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI+B2PIVH+lHHqPzdbezgPEujUBM NJXl/rUWQw6rHrSwNaNQrX2IJQr9YYYkJTAjOct2ZIS8Cg4Ad1goVDBO60ki7ypP eiT5SOAEVMcfRdAZAmghJTlLqSbhKZa8YiRwLL3OBCr5nJCmZgqTsVR6K35hTfQ4 5PK5fzxq6S8mFacMb8fIejTLLScC2b9Vm1ftxsfCv0GXkMt1F4aq25d8SFLemj38 n45x8yDG433Y5WkaUb4Gm9cinu4W2PZuDkO2ahGDk4sbgXhebSxIDgYoofguemJb jBpMVLlMBKemoeUgLpr0OUIm2A/WX0+6ipoi7f2tvyTMZ3Lku2S2GqE0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtL8vWUR+6ZBaniw8qH6kjNxYqbMB8GA1UdIwQY MBaAFLqroqVqDDD9r1k0r4dlwf/RNXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDkt MDI0ODY4ZmZkMzE1LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDktMDI0ODY4ZmZkMzE1 LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPy5rlsj Ty4XHCpxcMrThUKF/IREwK5gHlkQ+6zwoZMMrnrldWE/grRVw2keond00X768Np3 eMQz0eyef4K0FRCn+dF/VOFEme3DjNvBrw/n3voNKI5H9uy66jXTONsHUNwrBawF Riees+aTBb2CrFbNEntl9YdOcjkY9WX+iqc/8MNCzh2oRj6yQXBgs8VVp/uK9zO2 hSXJZNoN2a3zBhpa/8ixR2AKoLWaey9pvkZIS1wTpQzPok7V0eS4rSoGJK6+/dD9 rsDPcasc+KQCvrSlu/PRge9IhrclPOpHzyPMVelOXgK4p6SOY750yJkZf5nGmaGl o2iWS/pSAFxy1w== -----END CERTIFICATE-----Generated at Wed Dec 24 04:45:19 2025 by rpki-client