This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json) Hash identifier: 5cQUK4g0zCr1MJdak7xmsPdezefU7joEGePmvXzHapQ= Subject key identifier: 54:58:65:96:86:BF:C0:58:0D:C3:44:55:25:06:41:AA:2E:DE:CB:50 Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d Certificate serial: 019B36EA30EEEA6C6483732ABE329536FF6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 14:01:16 +0000 Manifest this update: Fri 19 Dec 2025 14:01:16 +0000 Manifest next update: Sat 20 Dec 2025 14:01:16 +0000 Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=) 2: F2LdL7ybzfzPSt5t-b18q089jwo.roa (hash: pV75yd4KSNaebS2IQ3XosafJetvCzED1fB/NU7nhrkc=) 3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: tceiL3s+Pyu6lIIq7cKAL2GOiez+6vWoRYaHbrxvrr8=) 4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:30:ee:ea:6c:64:83:73:2a:be:32:95:36:ff:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d Validity Not Before: Dec 19 14:01:16 2025 GMT Not After : Dec 20 14:01:16 2025 GMT Subject: CN=5458659686bfc0580dc34455250641aa2edecb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:54:73:0a:21:28:98:10:bb:65:26:0b:8f: 95:2b:02:38:0d:97:cf:00:70:50:0b:4a:4c:42:ed: 99:88:b7:86:19:95:89:c2:b5:be:47:85:eb:ce:14: af:ce:4b:f3:ae:58:1a:87:9c:e8:7e:3a:27:33:93: 12:1a:75:17:7e:dd:ac:e7:de:10:76:76:b9:50:3e: bf:5e:77:46:05:4d:db:57:d4:71:76:ec:20:9d:28: 18:96:cc:3b:15:5e:1b:61:50:18:1f:4e:5c:74:0b: 8e:9c:c7:93:c3:7e:10:26:7f:6a:78:b9:33:cc:32: 5f:26:f9:67:e4:47:43:8a:bd:f0:e5:22:97:f6:ac: 3b:4a:78:0b:24:4c:22:25:bf:bc:30:c7:84:21:af: 5a:c0:62:72:36:30:14:42:e7:08:a4:8b:56:79:ba: cc:1f:de:5c:b6:c2:38:72:f7:21:c7:8f:a1:ed:0a: f5:6a:c5:0a:31:98:4f:b6:77:19:96:d8:ac:c3:13: 61:1b:1e:60:70:f7:8c:91:20:f0:08:39:b2:5c:6d: 61:9a:59:03:07:c5:1f:01:55:68:30:51:2b:65:30: e6:dd:33:28:af:cf:96:5f:0c:00:6e:28:1d:cf:a4: 16:a3:a8:42:6a:0d:45:6f:ea:e9:c6:02:9f:ef:7a: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:58:65:96:86:BF:C0:58:0D:C3:44:55:25:06:41:AA:2E:DE:CB:50 X509v3 Authority Key Identifier: keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:29:12:b1:5f:37:b3:3a:65:c9:9b:9e:40:2b:87:85:98:c3: 91:28:31:04:9b:8b:c1:13:10:fb:d0:27:dc:78:ee:06:89:6a: 7d:a5:d0:33:07:46:bd:2a:8c:d7:e5:4e:11:4a:4a:35:29:03: 38:e2:dd:2f:39:1e:43:37:07:a9:d9:4d:48:3d:6a:94:dc:db: 90:56:20:53:43:3b:6b:17:33:fd:ab:5c:cc:ce:ee:06:d4:c1: 8c:eb:00:90:d9:b4:ea:10:7d:3b:2b:8a:f0:3b:ca:6e:e8:1a: 28:55:5f:99:6a:4b:86:8b:8a:c4:13:30:d1:79:7e:03:b8:60: 70:fa:94:b2:f8:0b:9b:fc:c6:6f:1b:3a:2a:f8:ed:3e:d0:1f: 10:3b:73:4e:74:97:9a:95:2a:38:f0:ea:0d:df:b1:ef:1f:90: d4:c1:ff:9e:a7:37:74:3f:0b:2e:fa:b3:9f:b8:80:5e:2c:f4: 6c:6e:04:ad:f7:db:41:13:64:dd:66:fe:73:ac:a2:15:43:24: 38:11:98:a1:80:40:35:2e:60:15:df:a3:62:53:20:05:00:ce: 24:8d:b2:43:b9:7e:23:4b:95:89:fd:81:b3:2b:22:61:59:52: 61:95:6e:44:da:a3:8e:5d:95:83:46:ea:d7:01:54:70:7c:bf: d8:d8:7c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26jDu6mxkg3MqvjKVNv9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm YzUwM2QwHhcNMjUxMjE5MTQwMTE2WhcNMjUxMjIwMTQwMTE2WjAzMTEwLwYDVQQD Eyg1NDU4NjU5Njg2YmZjMDU4MGRjMzQ0NTUyNTA2NDFhYTJlZGVjYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1hUcwohKJgQu2UmC4+VKwI4DZfP AHBQC0pMQu2ZiLeGGZWJwrW+R4XrzhSvzkvzrlgah5zofjonM5MSGnUXft2s594Q dna5UD6/XndGBU3bV9RxduwgnSgYlsw7FV4bYVAYH05cdAuOnMeTw34QJn9qeLkz zDJfJvln5EdDir3w5SKX9qw7SngLJEwiJb+8MMeEIa9awGJyNjAUQucIpItWebrM H95ctsI4cvchx4+h7Qr1asUKMZhPtncZltiswxNhGx5gcPeMkSDwCDmyXG1hmlkD B8UfAVVoMFErZTDm3TMor8+WXwwAbigdz6QWo6hCag1Fb+rpxgKf73pViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRYZZaGv8BYDcNEVSUGQaou3stQMB8GA1UdIwQY MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt YmViNmRhMDM3NTVlLzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUikSsV83 szplyZueQCuHhZjDkSgxBJuLwRMQ+9An3HjuBolqfaXQMwdGvSqM1+VOEUpKNSkD OOLdLzkeQzcHqdlNSD1qlNzbkFYgU0M7axcz/atczM7uBtTBjOsAkNm06hB9OyuK 8DvKbugaKFVfmWpLhouKxBMw0Xl+A7hgcPqUsvgLm/zGbxs6KvjtPtAfEDtzTnSX mpUqOPDqDd+x7x+Q1MH/nqc3dD8LLvqzn7iAXiz0bG4ErffbQRNk3Wb+c6yiFUMk OBGYoYBANS5gFd+jYlMgBQDOJI2yQ7l+I0uVif2BsysiYVlSYZVuRNqjjl2Vg0bq 1wFUcHy/2Nh8Yw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:12:47 2025 by rpki-client