This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json) Hash identifier: DGJNH35O7PA3z3lh84qyLOqro+oVEjicCgF5mRLGztE= Subject key identifier: 50:90:9A:94:8A:08:FB:12:76:97:92:07:01:AC:1F:F1:44:0C:B6:4A Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c Certificate serial: 019B4EF24C23AD844A9AC8B78FFF3E30CEDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 06:01:00 +0000 Manifest this update: Wed 24 Dec 2025 06:01:00 +0000 Manifest next update: Thu 25 Dec 2025 06:01:00 +0000 Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=) 2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: CETtnl+h5wF3JZtZvSBqLf/cgB1a+njjXY7WCopgFlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:4c:23:ad:84:4a:9a:c8:b7:8f:ff:3e:30:ce:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c Validity Not Before: Dec 24 06:01:00 2025 GMT Not After : Dec 25 06:01:00 2025 GMT Subject: CN=50909a948a08fb127697920701ac1ff1440cb64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:74:e1:74:6e:a8:98:b1:a0:61:d6:a7:71: e9:af:f0:f6:ad:0a:51:61:35:cb:dc:4a:2f:a4:c8: d4:65:a5:d5:bd:d4:4e:b4:6a:ac:a1:38:e0:2d:6c: 6c:4c:4a:c0:99:4a:62:19:ea:5d:3b:51:37:f2:60: da:d4:66:00:86:69:08:2b:29:d7:fe:d9:2b:ab:43: 6c:b4:d1:7e:3f:97:4e:b4:db:72:3a:6a:af:c9:54: e6:cb:34:d9:47:ba:3f:4d:7b:ec:26:bd:0c:0c:58: 9d:5c:b2:67:5c:2b:02:a0:2f:26:aa:2a:79:52:77: 0d:47:6c:1c:59:d9:19:5a:97:42:6a:5f:24:60:51: 36:7c:0d:b3:f0:15:46:ba:e5:69:5c:d6:aa:78:86: 2f:f2:84:eb:81:2b:9b:9b:ac:62:1c:0a:3b:d7:63: 7a:6c:ca:4d:69:e0:ff:cc:ed:56:c6:2d:cc:03:85: 3f:dd:b1:cf:52:16:89:a5:df:e2:42:26:4c:07:76: 68:23:bf:25:bd:78:dc:6d:76:68:c8:2b:34:ae:93: 1a:99:cb:d5:ca:6a:79:02:25:84:f9:6b:d1:f8:b2: 02:f3:bf:f2:28:79:bd:16:2d:1f:71:63:cc:38:c0: de:ea:68:d2:d7:9e:24:73:dd:71:07:db:05:df:c7: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:90:9A:94:8A:08:FB:12:76:97:92:07:01:AC:1F:F1:44:0C:B6:4A X509v3 Authority Key Identifier: keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:14:b9:15:5f:42:72:88:42:d8:a1:c5:20:46:1b:98:67:07: 00:a3:e4:b5:49:6e:7b:85:c2:15:20:82:02:6a:ea:76:fd:20: 86:62:92:c8:85:2b:18:33:1d:94:8c:42:63:fe:78:ec:62:e4: d2:25:bd:6d:80:b7:36:97:71:b3:c5:40:28:7e:f8:27:88:f2: c7:0d:1a:c6:d1:9f:8c:22:cf:9a:35:45:87:e0:71:2b:ac:22: 15:a7:e8:27:52:23:4b:19:34:94:bd:23:63:47:2d:67:c8:2e: 62:b4:c8:f4:23:1b:57:6d:55:e1:30:7b:3d:82:49:66:23:41: 03:dc:48:f2:cd:e6:2a:8a:d0:df:9c:4b:57:59:4b:a3:40:62: 36:bd:ab:34:1c:7e:4e:9b:ae:66:11:74:95:e9:e0:2c:f0:a6: bb:a8:bc:8d:c3:bd:25:98:94:e3:7f:0f:cf:61:19:5f:fe:a4: d1:f5:19:a8:bf:d5:9f:53:3e:e3:67:5f:c6:fe:d0:13:3f:e3: b2:51:eb:b9:f2:8d:c3:8a:9f:5a:34:17:90:37:4f:90:e6:11: 07:5f:cb:8f:d1:16:00:c8:87:53:90:ad:c8:dc:bf:b2:fb:be: c3:5f:3e:43:89:7b:fa:d2:1e:84:b6:b7:99:77:43:11:62:77: 0d:21:a5:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8kwjrYRKmsi3j/8+MM7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYWFhMGE2MTg4Yzk3YWE3NDJjYzc4NmUzYjcwYmM5MDlj YWM0NGMwHhcNMjUxMjI0MDYwMTAwWhcNMjUxMjI1MDYwMTAwWjAzMTEwLwYDVQQD Eyg1MDkwOWE5NDhhMDhmYjEyNzY5NzkyMDcwMWFjMWZmMTQ0MGNiNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzd04XRuqJixoGHWp3Hpr/D2rQpR YTXL3EovpMjUZaXVvdROtGqsoTjgLWxsTErAmUpiGepdO1E38mDa1GYAhmkIKynX /tkrq0NstNF+P5dOtNtyOmqvyVTmyzTZR7o/TXvsJr0MDFidXLJnXCsCoC8mqip5 UncNR2wcWdkZWpdCal8kYFE2fA2z8BVGuuVpXNaqeIYv8oTrgSubm6xiHAo712N6 bMpNaeD/zO1Wxi3MA4U/3bHPUhaJpd/iQiZMB3ZoI78lvXjcbXZoyCs0rpMamcvV ymp5AiWE+WvR+LIC87/yKHm9Fi0fcWPMOMDe6mjS154kc91xB9sF38c+xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCQmpSKCPsSdpeSBwGsH/FEDLZKMB8GA1UdIwQY MBaAFFKqoKYYjJeqdCzHhuO3C8kJysRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFxZ3BoaU1sNnAwTE1lRzQ3Y0x5UW5LeEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kOTM3ZTAtNDI3Ny00ZTZhLWI1OTMt NDZhODgwNDI1Nzk5LzEvVXFxZ3BoaU1sNnAwTE1lRzQ3Y0x5UW5LeEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kOTM3ZTAtNDI3Ny00ZTZhLWI1OTMtNDZhODgwNDI1Nzk5 LzEvVXFxZ3BoaU1sNnAwTE1lRzQ3Y0x5UW5LeEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBS5FV9C cohC2KHFIEYbmGcHAKPktUlue4XCFSCCAmrqdv0ghmKSyIUrGDMdlIxCY/547GLk 0iW9bYC3Npdxs8VAKH74J4jyxw0axtGfjCLPmjVFh+BxK6wiFafoJ1IjSxk0lL0j Y0ctZ8guYrTI9CMbV21V4TB7PYJJZiNBA9xI8s3mKorQ35xLV1lLo0BiNr2rNBx+ TpuuZhF0lengLPCmu6i8jcO9JZiU438Pz2EZX/6k0fUZqL/Vn1M+42dfxv7QEz/j slHrufKNw4qfWjQXkDdPkOYRB1/Lj9EWAMiHU5CtyNy/svu+w18+Q4l7+tIehLa3 mXdDEWJ3DSGlFA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:42:59 2025 by rpki-client