This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json) Hash identifier: Jc4QmcNebT8AllyRYBPsKGtqG2jNWjFsrTJcvAEONlc= Subject key identifier: 33:59:7F:48:0D:BF:5E:37:34:50:08:00:E9:79:C4:03:CA:1D:94:94 Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Certificate serial: 019B51BE0AF167BD72E69AE0552675FAA350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft Manifest number: 0584 Signing time: Wed 24 Dec 2025 19:02:47 +0000 Manifest this update: Wed 24 Dec 2025 19:02:47 +0000 Manifest next update: Thu 25 Dec 2025 19:02:47 +0000 Files and hashes: 1: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=) 2: moBOnIbdvq8-QVwwe2b5CEKfZgA.roa (hash: 2B1eVc1QZjAUpKco7izarXEMSn1SUBcrE9RYHExsfCE=) 3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: I6BMb8hD/Tct1QnIDDE2gYaEiFBjqlwsvAR65EeXvEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:0a:f1:67:bd:72:e6:9a:e0:55:26:75:fa:a3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Validity Not Before: Dec 24 19:02:47 2025 GMT Not After : Dec 25 19:02:47 2025 GMT Subject: CN=33597f480dbf5e3734500800e979c403ca1d9494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:bc:63:92:8c:0f:2c:6b:df:c9:73:e9:9e: 0a:94:c4:a8:cf:8f:6d:1c:c4:25:59:e3:d1:e8:aa: 34:51:5a:36:dd:7d:4a:a5:fa:97:52:95:1f:9e:37: 76:a7:f1:83:ed:e5:2f:69:59:99:aa:95:79:b9:a7: c1:b2:0e:94:64:a9:97:ed:64:3d:db:90:c0:98:6b: 61:e2:d9:2f:72:1b:b5:bd:94:40:41:eb:87:6c:69: 45:e3:91:a5:91:c6:7e:71:0e:62:25:bf:56:fb:7f: fe:13:86:4f:2d:0b:bb:6e:2a:79:08:59:22:67:8c: 37:d0:69:d0:b4:58:c9:1d:75:60:ee:2e:c6:9a:74: bb:57:c9:6f:b8:1f:88:0a:04:4f:66:26:ac:d9:a3: 9a:73:7f:57:29:48:ad:20:59:16:8d:0e:41:9d:49: 40:b6:6c:fe:0d:41:65:93:0c:35:58:fc:9e:cc:7a: e1:d8:c9:4e:07:9c:ce:2b:f6:e4:47:dd:0d:ff:25: 66:78:5c:98:33:74:34:b3:79:d2:f5:08:35:0f:58: 14:6f:06:64:bb:d9:2d:ec:dc:f5:cf:6c:d9:62:ac: eb:0f:51:19:d8:5e:2d:12:cf:85:42:62:f0:43:ec: 0b:23:41:0c:95:67:e1:b2:e8:05:5d:86:cc:7b:3f: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:59:7F:48:0D:BF:5E:37:34:50:08:00:E9:79:C4:03:CA:1D:94:94 X509v3 Authority Key Identifier: keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:44:bb:61:a0:02:3d:fb:57:48:c7:67:c0:62:fc:79:3f:ec: 76:48:b1:bc:cf:43:ab:be:c9:31:0b:a8:ee:bc:44:e5:87:dc: b0:d5:6e:66:94:8d:b0:2d:68:40:94:d7:c3:cb:7b:ab:ec:f5: 5f:75:30:c0:37:6d:a5:c8:56:3b:d9:27:4f:1b:06:ef:9c:15: 29:06:a0:45:44:bc:11:e1:00:42:0a:d8:06:79:db:a6:06:50: 69:74:e3:b0:2d:f0:a9:1b:f7:bc:90:dc:37:52:71:fe:0c:2b: 33:91:0c:3b:4e:76:58:ea:e4:34:8b:a6:b5:69:ab:75:57:4d: 4e:a9:32:c0:c9:9a:b8:50:73:69:2f:14:cb:1e:ac:78:fb:4b: 48:d2:92:10:ba:e2:0e:e9:35:ce:de:82:4c:14:5c:71:a6:83: 12:f6:77:a8:54:d2:ac:1b:2d:ed:34:79:9c:15:43:5a:f3:c7: 21:c0:23:1b:d7:c1:7b:30:03:73:fa:aa:56:c7:37:b2:8b:1d: 7a:1b:ec:65:19:b8:74:29:75:9f:28:73:a0:67:30:4a:86:eb: 26:eb:06:49:2d:e6:7a:a7:6f:99:9d:91:78:02:a0:38:46:31: 92:7e:72:8b:05:92:9c:be:ff:1d:43:7a:e8:e5:a4:14:87:6b: 17:ca:47:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvgrxZ71y5prgVSZ1+qNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz NTBiY2IwHhcNMjUxMjI0MTkwMjQ3WhcNMjUxMjI1MTkwMjQ3WjAzMTEwLwYDVQQD EygzMzU5N2Y0ODBkYmY1ZTM3MzQ1MDA4MDBlOTc5YzQwM2NhMWQ5NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJO8Y5KMDyxr38lz6Z4KlMSoz49t HMQlWePR6Ko0UVo23X1KpfqXUpUfnjd2p/GD7eUvaVmZqpV5uafBsg6UZKmX7WQ9 25DAmGth4tkvchu1vZRAQeuHbGlF45GlkcZ+cQ5iJb9W+3/+E4ZPLQu7bip5CFki Z4w30GnQtFjJHXVg7i7GmnS7V8lvuB+ICgRPZias2aOac39XKUitIFkWjQ5BnUlA tmz+DUFlkww1WPyezHrh2MlOB5zOK/bkR90N/yVmeFyYM3Q0s3nS9Qg1D1gUbwZk u9kt7Nz1z2zZYqzrD1EZ2F4tEs+FQmLwQ+wLI0EMlWfhsugFXYbMez+O+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNZf0gNv143NFAIAOl5xAPKHZSUMB8GA1UdIwQY MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt NTI4NzQ2MTFjZDIxLzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0S7YaAC PftXSMdnwGL8eT/sdkixvM9Dq77JMQuo7rxE5YfcsNVuZpSNsC1oQJTXw8t7q+z1 X3UwwDdtpchWO9knTxsG75wVKQagRUS8EeEAQgrYBnnbpgZQaXTjsC3wqRv3vJDc N1Jx/gwrM5EMO052WOrkNIumtWmrdVdNTqkywMmauFBzaS8Uyx6sePtLSNKSELri Duk1zt6CTBRccaaDEvZ3qFTSrBst7TR5nBVDWvPHIcAjG9fBezADc/qqVsc3sosd ehvsZRm4dCl1nyhzoGcwSobrJusGSS3meqdvmZ2ReAKgOEYxkn5yiwWSnL7/HUN6 6OWkFIdrF8pHKw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:38:16 2025 by rpki-client