This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft File: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json) Hash identifier: ALpO7kQumlWS3djwM4P3uiy3bIihy2TFV5Kz/rY7/Rg= Subject key identifier: 10:78:AE:69:51:C3:B5:BB:B6:9A:7E:AA:C9:A1:E7:21:85:4B:A9:59 Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44 Certificate serial: 019B4C27F7F7A9BE31F371A8C81D0E0F4951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 17:00:46 +0000 Manifest this update: Tue 23 Dec 2025 17:00:46 +0000 Manifest next update: Wed 24 Dec 2025 17:00:46 +0000 Files and hashes: 1: 1-PxoxI0pjeoIhSSKerY6tOEWuoI.roa (hash: lBboLe7L0MERYDzzwiB1Vs/DVbFyBwYxqUhr24nvp7g=) 2: Q6c7o6uPHQhvoxwmQLzyhtDVMdE.roa (hash: zg0a7LCWPIx/36rTK801mypOCjtsncvR5b3j9h5SrdE=) 3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: f3CWsuE8T7Jx4p+UPWYZy/tcgpvR3WI+3cs7tD82Ao0=) 4: VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa (hash: AKl6rPAajDxxJI7lqm70ylWzJOjVOPio/I4CI3XKjZk=) 5: najBQqT2olWE08kevELmXwGT57k.roa (hash: jNHLSsFQzYHW7iCGieIcoIMgADSGMSuS0qYYEJ2UrZ0=) 6: qaBXI4wwGXreuW0Ec50OaM6eig8.roa (hash: QyvTL1zDVNiNDlo1UO2uwprzV09ftV1cWpvfl0kl1WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:f7:f7:a9:be:31:f3:71:a8:c8:1d:0e:0f:49:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44 Validity Not Before: Dec 23 17:00:46 2025 GMT Not After : Dec 24 17:00:46 2025 GMT Subject: CN=1078ae6951c3b5bbb69a7eaac9a1e721854ba959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:1d:3f:42:82:8d:08:ff:33:a0:20:f5:07: 95:e4:be:a7:74:6e:d6:79:1a:52:3b:ce:82:0b:c7: 90:c6:9c:ca:c2:a4:eb:b7:b1:06:71:5c:41:e6:4f: be:ca:d7:ae:fa:fc:05:8d:42:d8:54:15:33:db:9e: 51:ce:bc:27:e7:8d:bf:1c:fc:a4:6d:fb:af:95:61: 12:ab:33:1e:5b:90:d8:d0:56:bb:86:7c:36:9f:e4: 05:9c:76:ff:51:9b:73:14:4f:fe:70:f1:fb:61:09: 9e:5e:b5:90:0a:0b:79:16:5c:4b:ac:1f:45:fb:ed: c8:79:75:11:a9:de:26:b2:57:ee:5e:01:e8:0a:04: 3a:91:51:2b:4f:d2:71:36:b4:5b:e2:f1:cf:85:d5: be:ca:e4:b7:fb:84:d4:03:31:d1:5b:ed:4c:88:a2: 40:97:63:50:f0:c1:63:79:7f:5b:f3:7d:9d:84:95: 5f:42:88:41:d4:01:52:86:57:46:51:34:ee:0b:d4: 00:21:a3:09:ae:0b:b2:b5:48:b1:10:ef:b0:d0:c4: 08:39:a7:64:1c:c4:7d:ef:75:dd:85:ad:36:f0:63: 8a:38:78:0b:66:10:be:9c:a3:6e:18:81:21:0a:e8: 73:2e:ca:4c:9e:33:e1:fb:53:21:65:ec:e1:29:92: e2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:78:AE:69:51:C3:B5:BB:B6:9A:7E:AA:C9:A1:E7:21:85:4B:A9:59 X509v3 Authority Key Identifier: keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:6f:24:b5:6f:3e:81:dc:9d:8c:8a:eb:e4:7b:ed:b0:7f:04: 38:cb:0d:4c:11:f4:30:a4:f6:5f:25:49:56:b9:d9:9f:20:44: 6e:24:7b:88:b6:a1:54:e5:5c:e4:5e:02:4d:ad:d6:a2:23:d0: 3b:7a:b1:bc:db:71:52:f1:4d:96:83:c4:a8:b5:c7:37:60:78: d0:52:92:c8:fc:c1:ea:19:94:e8:1f:d6:2f:f4:84:8c:c6:ec: cd:b0:6c:91:31:5c:87:a9:cb:f5:68:83:a6:d7:c3:c4:2c:10: 0b:fe:e9:1f:35:e7:33:2f:d2:b2:12:0b:0f:e9:5c:6a:23:d0: 42:f9:4e:58:a3:49:72:da:53:9f:a1:e7:fe:23:9c:ca:6f:11: 0a:f7:03:01:58:c7:c1:10:3e:7e:e8:5f:7a:fb:2f:d8:4b:52: c3:c8:fd:15:86:9f:5a:76:53:ec:54:12:5c:fb:d3:58:63:88: 8e:67:a0:3b:d0:9f:cc:eb:28:e4:43:c7:35:a8:84:35:e3:fd: 84:36:a7:b6:74:3a:45:d4:cc:d5:af:3c:d5:a0:d1:f3:cc:c9: e3:3c:3d:7c:5c:dd:68:3f:57:64:06:99:ef:7f:00:36:d3:39: db:09:fe:a5:c5:cd:0d:8b:17:17:7f:e1:84:41:01:3e:44:80: 0c:19:e6:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ/f3qb4x83GoyB0OD0lRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk ZjhmNDQwHhcNMjUxMjIzMTcwMDQ2WhcNMjUxMjI0MTcwMDQ2WjAzMTEwLwYDVQQD EygxMDc4YWU2OTUxYzNiNWJiYjY5YTdlYWFjOWExZTcyMTg1NGJhOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH4dP0KCjQj/M6Ag9QeV5L6ndG7W eRpSO86CC8eQxpzKwqTrt7EGcVxB5k++yteu+vwFjULYVBUz255Rzrwn542/HPyk bfuvlWESqzMeW5DY0Fa7hnw2n+QFnHb/UZtzFE/+cPH7YQmeXrWQCgt5FlxLrB9F ++3IeXURqd4mslfuXgHoCgQ6kVErT9JxNrRb4vHPhdW+yuS3+4TUAzHRW+1MiKJA l2NQ8MFjeX9b832dhJVfQohB1AFShldGUTTuC9QAIaMJrguytUixEO+w0MQIOadk HMR973Xdha028GOKOHgLZhC+nKNuGIEhCuhzLspMnjPh+1MhZezhKZLiOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB4rmlRw7W7tpp+qsmh5yGFS6lZMB8GA1UdIwQY MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt NWY0ODM2MDgzYTMwLzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEtNWY0ODM2MDgzYTMw LzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3G8ktW8+ gdydjIrr5HvtsH8EOMsNTBH0MKT2XyVJVrnZnyBEbiR7iLahVOVc5F4CTa3WoiPQ O3qxvNtxUvFNloPEqLXHN2B40FKSyPzB6hmU6B/WL/SEjMbszbBskTFch6nL9WiD ptfDxCwQC/7pHzXnMy/SshILD+lcaiPQQvlOWKNJctpTn6Hn/iOcym8RCvcDAVjH wRA+fuhfevsv2EtSw8j9FYafWnZT7FQSXPvTWGOIjmegO9CfzOso5EPHNaiENeP9 hDantnQ6RdTM1a881aDR88zJ4zw9fFzdaD9XZAaZ738ANtM52wn+pcXNDYsXF3/h hEEBPkSADBnm7g== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:53 2025 by rpki-client