This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json) Hash identifier: hYfDvoUh2lbFM+1NFitDzhGSeO7rV7EvRMGoB3HDnKY= Subject key identifier: 2E:71:71:D8:08:B6:A6:03:56:33:2B:A1:63:DF:4E:71:5C:EE:E4:5F Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Certificate serial: 019B3C7F6FFA415F1C3CBFC7232C2AC0469C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft Manifest number: 0579 Signing time: Sat 20 Dec 2025 16:02:23 +0000 Manifest this update: Sat 20 Dec 2025 16:02:23 +0000 Manifest next update: Sun 21 Dec 2025 16:02:23 +0000 Files and hashes: 1: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=) 2: moBOnIbdvq8-QVwwe2b5CEKfZgA.roa (hash: 2B1eVc1QZjAUpKco7izarXEMSn1SUBcrE9RYHExsfCE=) 3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: coQVpAxstZWs2bHckIQ9rdNBkMfAQDF3R1IM7Glw7gY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6f:fa:41:5f:1c:3c:bf:c7:23:2c:2a:c0:46:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Validity Not Before: Dec 20 16:02:23 2025 GMT Not After : Dec 21 16:02:23 2025 GMT Subject: CN=2e7171d808b6a60356332ba163df4e715ceee45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:c5:09:08:19:78:de:93:ac:46:27:e8:d3: d1:9c:e9:ed:fd:9c:46:12:75:41:56:87:a2:40:d6: 6f:c9:0c:5f:98:4b:65:67:bb:31:eb:63:97:be:99: 11:d7:ac:17:b8:5c:eb:c1:25:25:81:c1:e9:0f:3f: 30:32:46:d8:09:0e:0b:a9:c0:cf:b0:8f:cb:c5:8a: a5:64:03:a4:de:c6:53:9e:1d:c2:f8:ba:48:b7:4b: 7a:26:ac:9f:ae:3c:66:a5:e1:27:e4:d0:2c:a5:94: 4d:a7:e8:6c:74:ba:2c:a8:eb:d1:52:ac:ad:ab:9a: c8:57:43:9b:12:1f:5d:ea:fb:dc:70:91:b3:3a:35: 05:37:21:b4:ed:b7:26:45:0c:85:1a:e4:33:14:2f: 77:18:39:f4:20:29:13:34:3f:52:0d:0d:f8:60:f6: c4:55:8a:c6:25:91:73:27:f8:b5:43:32:e6:82:b4: 11:14:8c:f4:41:7a:7d:a5:d7:ff:63:64:dc:94:c8: 65:12:c6:ef:90:9d:cc:32:2e:c7:fc:8f:37:c0:a0: 7a:5b:57:b4:3c:f6:08:d8:cc:b7:80:07:11:5c:0b: bc:b4:01:6a:0b:0f:a0:cf:dd:1a:8b:f7:08:8b:8f: a3:9b:0f:25:23:17:f3:03:e5:06:da:da:43:ef:47: 37:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:71:71:D8:08:B6:A6:03:56:33:2B:A1:63:DF:4E:71:5C:EE:E4:5F X509v3 Authority Key Identifier: keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:40:7c:c7:21:7d:e9:cc:f6:8f:48:ed:1a:72:98:be:fa:59: e3:c7:34:f6:e2:d9:85:92:a5:07:6c:7c:42:c7:0c:4a:ce:73: af:d9:bd:62:a2:8d:39:47:cb:a1:ce:3d:bb:e1:57:39:52:59: 9d:6e:0f:eb:e8:e1:c6:b2:dc:07:1c:8e:ac:48:9e:e7:f1:a4: 5c:32:10:f6:0e:52:c6:07:33:71:fa:f8:7d:2d:85:4c:42:83: dc:6f:6d:bf:e2:c2:49:d5:1e:6f:d0:f4:0a:93:51:50:05:12: 2c:36:a9:f0:ff:84:cd:12:ec:f1:1a:03:e9:e3:6b:30:2e:98: 26:0a:4e:9f:e2:a6:e0:81:58:88:85:a1:57:d0:c0:1b:ad:ea: 00:a9:05:96:9d:81:6a:5c:a6:40:9e:c5:91:82:28:bb:2a:08: f8:98:8b:17:9d:d8:37:72:7b:27:ae:20:c7:f9:6e:c1:3d:b6: aa:f2:07:3b:15:c0:10:60:6c:67:b9:10:ea:be:97:17:f3:ed: ad:02:0b:d2:84:6e:50:25:96:7a:1f:df:4e:b1:fc:be:3a:81: c4:2c:44:97:bd:ed:ce:d9:82:9e:3a:59:df:82:95:f2:12:9d: 04:68:5c:5e:7a:34:ed:8c:e9:16:4e:a8:ca:4b:e9:89:34:7f: d5:39:31:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2/6QV8cPL/HIywqwEacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz NTBiY2IwHhcNMjUxMjIwMTYwMjIzWhcNMjUxMjIxMTYwMjIzWjAzMTEwLwYDVQQD EygyZTcxNzFkODA4YjZhNjAzNTYzMzJiYTE2M2RmNGU3MTVjZWVlNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK/FCQgZeN6TrEYn6NPRnOnt/ZxG EnVBVoeiQNZvyQxfmEtlZ7sx62OXvpkR16wXuFzrwSUlgcHpDz8wMkbYCQ4LqcDP sI/LxYqlZAOk3sZTnh3C+LpIt0t6JqyfrjxmpeEn5NAspZRNp+hsdLosqOvRUqyt q5rIV0ObEh9d6vvccJGzOjUFNyG07bcmRQyFGuQzFC93GDn0ICkTND9SDQ34YPbE VYrGJZFzJ/i1QzLmgrQRFIz0QXp9pdf/Y2TclMhlEsbvkJ3MMi7H/I83wKB6W1e0 PPYI2My3gAcRXAu8tAFqCw+gz90ai/cIi4+jmw8lIxfzA+UG2tpD70c3nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5xcdgItqYDVjMroWPfTnFc7uRfMB8GA1UdIwQY MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt NTI4NzQ2MTFjZDIxLzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0B8xyF9 6cz2j0jtGnKYvvpZ48c09uLZhZKlB2x8QscMSs5zr9m9YqKNOUfLoc49u+FXOVJZ nW4P6+jhxrLcBxyOrEie5/GkXDIQ9g5Sxgczcfr4fS2FTEKD3G9tv+LCSdUeb9D0 CpNRUAUSLDap8P+EzRLs8RoD6eNrMC6YJgpOn+Km4IFYiIWhV9DAG63qAKkFlp2B alymQJ7FkYIouyoI+JiLF53YN3J7J64gx/luwT22qvIHOxXAEGBsZ7kQ6r6XF/Pt rQIL0oRuUCWWeh/fTrH8vjqBxCxEl73tztmCnjpZ34KV8hKdBGhcXno07YzpFk6o ykvpiTR/1TkxdQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:18 2025 by rpki-client