This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json) Hash identifier: 4frNQfV4DtrG3P33S9mluX1dR89brugVYLbottbiMtw= Subject key identifier: 86:67:E0:1D:7C:6D:D8:A8:4B:59:F9:AB:66:28:D6:A5:C7:9B:E3:1C Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18 Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818 Certificate serial: 019B41DB72F85A16E0B164718D457D53E16B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft Manifest number: 0F92 Signing time: Sun 21 Dec 2025 17:00:59 +0000 Manifest this update: Sun 21 Dec 2025 17:00:59 +0000 Manifest next update: Mon 22 Dec 2025 17:00:59 +0000 Files and hashes: 1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: hSuNajYkseUIHzg1AunXthsRgjQJGZxtKyVMj0kmSN8=) 2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:72:f8:5a:16:e0:b1:64:71:8d:45:7d:53:e1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818 Validity Not Before: Dec 21 17:00:59 2025 GMT Not After : Dec 22 17:00:59 2025 GMT Subject: CN=8667e01d7c6dd8a84b59f9ab6628d6a5c79be31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:75:ea:5f:6e:2b:57:d8:f5:6a:c5:6b:d4:fd: 6d:55:1e:07:05:e4:ca:dd:0f:bb:17:0a:4f:f5:8f: 35:0b:51:a3:61:47:a2:56:58:43:6f:7a:8d:78:49: 94:43:e7:40:fd:0a:b1:be:fa:6c:b2:24:63:30:03: a6:4c:b1:25:79:51:91:0e:df:d1:b0:db:da:24:38: f3:f6:c0:86:65:14:10:92:cf:f6:bf:a0:48:45:11: f8:a1:e9:e9:78:cc:8b:f2:16:3b:79:bf:50:c1:0b: d3:11:c3:40:1c:1d:3b:16:50:4f:bb:ae:e5:f4:9c: 53:9a:b5:5d:11:2b:0d:a6:46:3b:8c:70:9e:d4:5d: 01:32:35:99:6e:f9:fe:7d:9e:fa:92:8c:46:cd:94: 40:7f:af:5f:11:25:15:8b:70:ee:31:0b:e0:ad:18: fc:f6:bc:2c:4d:2a:bf:30:0c:e7:fc:40:ac:0d:7a: 90:e8:49:1b:54:f3:9b:11:91:f5:e8:53:a2:3b:15: b4:9b:5b:1c:40:4c:4b:0f:75:98:1e:8c:90:bf:64: 0b:5f:5c:e1:12:f2:07:db:f6:b4:7f:ba:5b:78:e8: c3:33:e9:3b:2a:0c:7c:08:f1:7f:50:53:31:64:67: e8:c0:3c:78:84:77:81:11:e4:e1:14:e1:69:af:96: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:67:E0:1D:7C:6D:D8:A8:4B:59:F9:AB:66:28:D6:A5:C7:9B:E3:1C X509v3 Authority Key Identifier: keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:61:52:0b:35:01:a7:ef:85:0a:b3:1a:c7:94:3a:7c:f1:b5: a7:dd:da:95:12:57:37:72:78:6c:64:32:6c:4e:a6:95:01:f9: 8a:fd:21:d1:ab:ad:dc:d5:f3:e0:e8:34:7d:e7:d3:ef:d0:5f: 1d:00:38:b4:fd:f9:47:a1:65:be:2a:84:c0:7a:de:a0:c4:92: 5f:32:8f:f7:d8:c9:20:58:ba:a2:9d:ec:49:99:65:61:2a:6e: a9:d4:a1:4f:16:ee:a5:5c:8b:df:f8:a1:03:50:fb:1c:a5:22: 43:43:27:f5:d0:e7:40:2c:09:8b:0b:0a:ec:12:85:65:47:9e: e7:b0:61:33:a2:c0:a6:84:20:5c:fb:ed:9c:32:9b:89:bf:e9: 9a:dd:b9:cc:b0:5b:ec:ec:02:1f:47:eb:b6:8d:dc:10:2f:a0: 79:f7:16:20:da:c6:7b:c0:f6:26:41:29:76:c3:45:75:2e:8a: 56:e0:3b:8b:f3:a6:fe:53:23:64:97:4d:c1:1b:4b:ef:3f:f5: 42:f2:e1:40:cc:fe:3a:af:6e:36:20:65:da:a0:67:f8:f6:98: 68:f2:82:f9:a0:54:6f:08:4b:ed:19:49:90:e2:69:de:6e:3a: 0c:87:9c:ce:17:74:86:4d:e5:80:d3:da:50:d8:ae:55:a6:ce: 6a:e6:3f:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB23L4WhbgsWRxjUV9U+FrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTQxZjQ4MDZjZTQ4ZmMzOTg4NDIzODFmMmZmYmUwNGIy OTQ4MTgwHhcNMjUxMjIxMTcwMDU5WhcNMjUxMjIyMTcwMDU5WjAzMTEwLwYDVQQD Eyg4NjY3ZTAxZDdjNmRkOGE4NGI1OWY5YWI2NjI4ZDZhNWM3OWJlMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83XqX24rV9j1asVr1P1tVR4HBeTK 3Q+7FwpP9Y81C1GjYUeiVlhDb3qNeEmUQ+dA/QqxvvpssiRjMAOmTLEleVGRDt/R sNvaJDjz9sCGZRQQks/2v6BIRRH4oenpeMyL8hY7eb9QwQvTEcNAHB07FlBPu67l 9JxTmrVdESsNpkY7jHCe1F0BMjWZbvn+fZ76koxGzZRAf69fESUVi3DuMQvgrRj8 9rwsTSq/MAzn/ECsDXqQ6EkbVPObEZH16FOiOxW0m1scQExLD3WYHoyQv2QLX1zh EvIH2/a0f7pbeOjDM+k7Kgx8CPF/UFMxZGfowDx4hHeBEeThFOFpr5YKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZn4B18bdioS1n5q2Yo1qXHm+McMB8GA1UdIwQY MBaAFFLkH0gGzkj8OYhCOB8v++BLKUgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVRZlNBYk9TUHc1aUVJNEh5Xzc0RXNwU0JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wNDA4ZjctNzZhMi00OWM3LWEwMjIt ZGViNDRiODY5ZDE5LzEvVXVRZlNBYk9TUHc1aUVJNEh5Xzc0RXNwU0JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wNDA4ZjctNzZhMi00OWM3LWEwMjItZGViNDRiODY5ZDE5 LzEvVXVRZlNBYk9TUHc1aUVJNEh5Xzc0RXNwU0JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWFSCzUB p++FCrMax5Q6fPG1p93alRJXN3J4bGQybE6mlQH5iv0h0aut3NXz4Og0fefT79Bf HQA4tP35R6FlviqEwHreoMSSXzKP99jJIFi6op3sSZllYSpuqdShTxbupVyL3/ih A1D7HKUiQ0Mn9dDnQCwJiwsK7BKFZUee57BhM6LApoQgXPvtnDKbib/pmt25zLBb 7OwCH0frto3cEC+gefcWINrGe8D2JkEpdsNFdS6KVuA7i/Om/lMjZJdNwRtL7z/1 QvLhQMz+Oq9uNiBl2qBn+PaYaPKC+aBUbwhL7RlJkOJp3m46DIeczhd0hk3lgNPa UNiuVabOauY/YA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:09 2025 by rpki-client