This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json) Hash identifier: 9ckXlWJOH1m+A13W+CLXHvG2RQpPxxkhWRigxPeORfM= Subject key identifier: EB:A1:6D:76:EA:94:E2:AC:CF:92:52:AD:93:AE:B2:26:3A:1E:84:52 Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Certificate serial: 019B4091E70E74F349735B6342DC6C9D233F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 11:01:02 +0000 Manifest this update: Sun 21 Dec 2025 11:01:02 +0000 Manifest next update: Mon 22 Dec 2025 11:01:02 +0000 Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: 29lRzv0E7r11Ggq/T7vTaXrIrNRbG9l+gkjhylHe8sI=) 2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:e7:0e:74:f3:49:73:5b:63:42:dc:6c:9d:23:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Validity Not Before: Dec 21 11:01:02 2025 GMT Not After : Dec 22 11:01:02 2025 GMT Subject: CN=eba16d76ea94e2accf9252ad93aeb2263a1e8452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:22:50:d7:9a:da:3b:e6:dc:71:ac:7c:0a: a3:74:76:78:22:db:ff:71:50:16:49:ab:4c:83:da: 31:05:f7:82:e4:7b:c9:17:b4:f1:19:28:b8:81:0e: f8:64:29:97:af:8b:79:6e:ca:0f:cb:f9:76:a4:49: b2:bd:e3:2e:d7:37:b3:de:2d:33:dc:9f:bf:66:4d: 8a:e2:6c:22:b7:b4:82:aa:db:68:6a:d7:18:d2:0b: e3:e9:e4:4a:bf:20:46:ab:d4:70:83:2c:7e:25:be: d4:51:65:c8:71:f5:a2:f7:bc:8e:b6:29:e7:d1:ab: b8:04:03:d3:70:57:e4:aa:43:64:d4:ba:45:02:42: 69:8c:e2:79:9f:18:50:67:c7:0f:f1:87:6c:7d:a4: 2d:2d:1d:fd:c3:2c:78:0b:92:cd:b6:af:78:a1:5b: c7:e0:17:fb:b7:99:8c:e3:cb:51:fc:d1:40:21:b0: 21:7d:aa:6d:6f:2e:e2:ed:09:45:bf:64:d1:0c:05: 40:39:7e:b1:3f:70:cd:48:af:10:57:e7:58:04:d0: 2a:da:26:a5:3a:6a:de:04:63:45:86:c0:4d:65:fa: 16:10:00:fe:cd:f2:9e:82:50:7d:bb:c3:44:f2:21: ea:c2:a7:b9:28:ff:a0:80:38:5d:20:9a:a3:24:36: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A1:6D:76:EA:94:E2:AC:CF:92:52:AD:93:AE:B2:26:3A:1E:84:52 X509v3 Authority Key Identifier: keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7e:da:3e:da:2c:6c:28:d2:0c:4f:b6:46:5e:70:6e:c7:3a: f3:c6:a5:5c:2a:1d:5c:7f:29:b7:5e:50:e2:7a:c1:6d:96:d3: ba:8f:89:77:81:c5:c0:75:fe:cf:12:ad:55:7c:43:be:9d:34: 51:9b:bf:cf:96:51:db:1d:d0:be:37:5a:cf:15:40:d0:cd:fa: 8d:ca:d4:7c:d5:47:5f:04:43:2c:97:b6:08:71:08:09:fb:59: 8f:cf:24:c4:97:98:b0:2f:a6:c3:7f:34:60:e3:6e:25:79:8d: 99:c5:ca:6d:bb:01:17:aa:40:e1:24:71:d7:0b:81:5c:86:60: 4f:50:1f:9e:bd:b8:fe:35:81:f2:44:b5:0e:46:f3:3e:01:3f: d3:1c:27:62:f7:9a:cc:e9:f9:89:02:92:cd:28:44:11:2e:37: 10:b4:62:d9:9d:38:01:86:bd:dc:a9:ef:05:be:d8:ef:11:e3: 63:ad:25:14:d2:ac:ec:2e:f5:64:32:18:ad:f7:1b:58:6b:0b: de:9d:4e:50:09:57:45:ac:6d:9c:57:6a:d6:6a:c6:37:06:c7: 8f:f3:97:ce:2f:40:1e:44:83:88:98:06:87:9d:ff:c0:d0:32: 44:75:e6:a1:29:cd:b8:3b:50:cc:9e:f6:4f:4f:31:71:17:40: 94:7b:8b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkecOdPNJc1tjQtxsnSM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOGFhNDk5Mzc0MGRmOGFkMzhkOTJjYzBjMTA3MjM0ZTZk ZmEwNWMwHhcNMjUxMjIxMTEwMTAyWhcNMjUxMjIyMTEwMTAyWjAzMTEwLwYDVQQD EyhlYmExNmQ3NmVhOTRlMmFjY2Y5MjUyYWQ5M2FlYjIyNjNhMWU4NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t8iUNea2jvm3HGsfAqjdHZ4Itv/ cVAWSatMg9oxBfeC5HvJF7TxGSi4gQ74ZCmXr4t5bsoPy/l2pEmyveMu1zez3i0z 3J+/Zk2K4mwit7SCqttoatcY0gvj6eRKvyBGq9Rwgyx+Jb7UUWXIcfWi97yOtinn 0au4BAPTcFfkqkNk1LpFAkJpjOJ5nxhQZ8cP8YdsfaQtLR39wyx4C5LNtq94oVvH 4Bf7t5mM48tR/NFAIbAhfaptby7i7QlFv2TRDAVAOX6xP3DNSK8QV+dYBNAq2ial OmreBGNFhsBNZfoWEAD+zfKeglB9u8NE8iHqwqe5KP+ggDhdIJqjJDYzFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuhbXbqlOKsz5JSrZOusiY6HoRSMB8GA1UdIwQY MBaAFFGKpJk3QN+K042SzAwQcjTm36BcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYt NDZjNzk3NGJkMThhLzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYtNDZjNzk3NGJkMThh LzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdX7aPtos bCjSDE+2Rl5wbsc688alXCodXH8pt15Q4nrBbZbTuo+Jd4HFwHX+zxKtVXxDvp00 UZu/z5ZR2x3QvjdazxVA0M36jcrUfNVHXwRDLJe2CHEICftZj88kxJeYsC+mw380 YONuJXmNmcXKbbsBF6pA4SRx1wuBXIZgT1Afnr24/jWB8kS1DkbzPgE/0xwnYvea zOn5iQKSzShEES43ELRi2Z04AYa93KnvBb7Y7xHjY60lFNKs7C71ZDIYrfcbWGsL 3p1OUAlXRaxtnFdq1mrGNwbHj/OXzi9AHkSDiJgGh53/wNAyRHXmoSnNuDtQzJ72 T08xcRdAlHuL9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 13:23:19 2025 by rpki-client