This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json) Hash identifier: 7zMpwn1m8UaaSb2wI8MLH/xkKW0MGGiD7XvKaCMUCxE= Subject key identifier: 68:A3:5C:CD:09:7C:FD:E4:FB:E6:CE:A6:F4:F7:A6:A8:57:E3:4F:D0 Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Certificate serial: 019B416DBD9358E328B681373E071623EB68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft Manifest number: 0E1A Signing time: Sun 21 Dec 2025 15:01:09 +0000 Manifest this update: Sun 21 Dec 2025 15:01:09 +0000 Manifest next update: Mon 22 Dec 2025 15:01:09 +0000 Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=) 2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: XFGp8oO/aU3oJlrnV06UFOE4e6bnAAQzkEWYQc02BEs=) 3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:bd:93:58:e3:28:b6:81:37:3e:07:16:23:eb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Validity Not Before: Dec 21 15:01:09 2025 GMT Not After : Dec 22 15:01:09 2025 GMT Subject: CN=68a35ccd097cfde4fbe6cea6f4f7a6a857e34fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:cc:60:01:3c:f5:b0:8f:4c:94:e3:d9:ae: f5:41:5a:f9:85:00:d8:a2:7d:20:b9:8d:40:62:99: 95:70:14:42:d8:5f:75:98:8a:cb:de:ee:e4:5d:d0: dc:02:83:bb:f8:29:2e:b8:c3:20:9b:3d:b6:a3:ce: 25:1b:6c:cd:46:70:0a:44:e6:de:e4:e0:1a:60:e5: c6:29:7c:b2:72:25:bb:99:19:1b:da:94:75:66:5b: 1a:d3:e2:7d:f2:73:ca:85:80:56:76:63:28:2a:36: 33:91:95:7d:ff:e4:8c:b8:22:20:7b:70:01:4d:22: 4e:b5:b4:49:fc:f9:b3:ae:c8:59:b7:01:e7:78:a1: 52:fa:6d:a8:08:2d:5e:47:11:3e:b6:f1:59:05:b1: c8:04:d1:d8:b8:60:11:7e:1c:2f:00:ee:c3:83:2a: 8a:f2:57:65:0c:31:7b:85:5c:99:c2:5a:66:ef:e1: 1a:d1:b6:05:37:30:32:7f:17:fc:ae:a9:95:39:97: ca:07:f8:bd:85:51:a1:1e:28:a5:95:f5:fa:d4:c7: 05:99:17:28:b4:f9:38:4b:20:98:73:a6:42:7e:fa: 2d:38:87:a0:df:e6:d5:b8:4d:40:ad:e4:5f:bf:1f: fd:50:f3:cc:df:f0:e1:b6:4f:8d:be:e2:95:c5:5d: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:5C:CD:09:7C:FD:E4:FB:E6:CE:A6:F4:F7:A6:A8:57:E3:4F:D0 X509v3 Authority Key Identifier: keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:52:5f:80:30:91:c6:7d:fb:b2:2b:b5:cb:43:0d:77:db:24: 0a:a1:ee:62:06:9e:3e:45:00:55:f1:17:17:b9:5c:f6:21:63: 33:3e:3b:c2:4a:e8:6c:51:88:e3:23:07:e4:b0:01:59:25:0c: 2a:8e:e0:ba:d7:4f:ea:f4:66:74:80:a1:59:de:d5:59:33:be: 73:a0:1b:2d:79:7f:13:79:32:f0:f9:64:37:69:bd:c2:c5:6d: b4:70:a2:41:d2:be:86:2d:72:30:e6:71:bd:79:ac:7b:2a:82: af:d6:fc:d8:4b:95:2c:b6:f6:dd:05:03:09:3f:7a:bc:46:a0: ed:ed:bc:d6:ae:39:4c:e1:25:60:b4:68:15:19:29:41:24:81: ac:14:8a:fb:12:2c:b4:a7:2b:20:cb:95:ab:e3:50:43:2a:2f: d8:6d:aa:76:46:38:e4:c0:03:77:6b:de:4f:a1:d0:b1:59:a4: 0f:a8:2b:b4:1b:d5:23:9b:a5:c9:a2:24:87:f5:9a:4b:cb:64: dc:bb:91:c2:35:e2:26:b2:2a:aa:64:c8:27:63:d5:5c:c3:bb: d2:9b:6f:cf:ee:f2:a5:fc:36:30:55:a9:97:f2:d3:a2:88:ac: b6:9d:cb:0c:ef:4f:a0:12:5a:ec:cd:25:fc:da:dd:0e:9d:8d: 1e:09:af:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbb2TWOMotoE3PgcWI+toMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWUyZjJkNWU3MDkzZmY4ZDQwMDNhMDJiN2QzZTEzMWNl NzBhMTIwHhcNMjUxMjIxMTUwMTA5WhcNMjUxMjIyMTUwMTA5WjAzMTEwLwYDVQQD Eyg2OGEzNWNjZDA5N2NmZGU0ZmJlNmNlYTZmNGY3YTZhODU3ZTM0ZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQHMYAE89bCPTJTj2a71QVr5hQDY on0guY1AYpmVcBRC2F91mIrL3u7kXdDcAoO7+CkuuMMgmz22o84lG2zNRnAKRObe 5OAaYOXGKXyyciW7mRkb2pR1Zlsa0+J98nPKhYBWdmMoKjYzkZV9/+SMuCIge3AB TSJOtbRJ/PmzrshZtwHneKFS+m2oCC1eRxE+tvFZBbHIBNHYuGARfhwvAO7DgyqK 8ldlDDF7hVyZwlpm7+Ea0bYFNzAyfxf8rqmVOZfKB/i9hVGhHiillfX61McFmRco tPk4SyCYc6ZCfvotOIeg3+bVuE1AreRfvx/9UPPM3/Dhtk+NvuKVxV0pVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGijXM0JfP3k++bOpvT3pqhX40/QMB8GA1UdIwQY MBaAFFBeLy1ecJP/jUADoCt9PhMc5woSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQt OThlOWUyNTEwYmI2LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQtOThlOWUyNTEwYmI2 LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFJfgDCR xn37siu1y0MNd9skCqHuYgaePkUAVfEXF7lc9iFjMz47wkrobFGI4yMH5LABWSUM Ko7gutdP6vRmdIChWd7VWTO+c6AbLXl/E3ky8PlkN2m9wsVttHCiQdK+hi1yMOZx vXmseyqCr9b82EuVLLb23QUDCT96vEag7e281q45TOElYLRoFRkpQSSBrBSK+xIs tKcrIMuVq+NQQyov2G2qdkY45MADd2veT6HQsVmkD6grtBvVI5ulyaIkh/WaS8tk 3LuRwjXiJrIqqmTIJ2PVXMO70ptvz+7ypfw2MFWpl/LTooistp3LDO9PoBJa7M0l /NrdDp2NHgmvZg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:37:52 2025 by rpki-client