This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft File: UHQRWPPtZb7hveEvNPiVr7DdUNU.mft (raw, json) Hash identifier: GmGuy2mm3L812A4cwuQ6lEPzNSMSx6r5ysfoi0702vw= Subject key identifier: 41:F0:62:54:5F:12:3D:6C:86:CF:EE:B5:FD:74:DC:5A:8A:F2:32:BE Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Certificate serial: 019B3CB4FDFB5E8D66172726BF0C176EE84D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft Manifest number: 17CA Signing time: Sat 20 Dec 2025 17:00:52 +0000 Manifest this update: Sat 20 Dec 2025 17:00:52 +0000 Manifest next update: Sun 21 Dec 2025 17:00:52 +0000 Files and hashes: 1: 1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa (hash: RYE6k3//z5KNEk7H3IQ1JZYxDGCNXiKaq546ajQsong=) 2: C-2Nv77vdORBtXODMBObwRD87Wk.roa (hash: N6t7RosiMXetfLBziLoQs8MiQEYjeO1vmrwr27Ix98Y=) 3: HEwByDo5NsJkjq0KP_e43JX1Y-I.roa (hash: KBL6f/ipp4MstSEvkMgxey8LBfXIJhOUyz3ctrFmblM=) 4: UHQRWPPtZb7hveEvNPiVr7DdUNU.crl (hash: K2EZiMz43w1qzZ+orO0I4R+FrOTBvGVANFEJrKF9DIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:fd:fb:5e:8d:66:17:27:26:bf:0c:17:6e:e8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Validity Not Before: Dec 20 17:00:52 2025 GMT Not After : Dec 21 17:00:52 2025 GMT Subject: CN=41f062545f123d6c86cfeeb5fd74dc5a8af232be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:9b:e6:34:c5:e2:e2:3a:b7:0e:a3:f0:30: cd:5d:46:f8:38:bf:33:3d:1d:31:76:ed:49:9f:fd: 81:13:38:11:3a:c6:46:0a:3c:9a:6b:c3:37:e5:f1: 69:45:e4:78:1a:1e:84:ca:c7:b4:9d:a2:3a:89:f7: 25:b4:c6:75:d0:68:4a:ba:84:b1:f0:40:73:d6:c7: fa:f1:94:fe:8d:14:13:e4:45:6e:e5:0d:63:db:c4: df:0e:6e:1a:a8:25:b5:f0:5e:60:50:e8:ed:bf:b7: a7:a7:85:1e:4b:2f:26:a6:ff:4c:c2:08:d2:42:dc: b3:5c:66:07:3f:71:f9:0e:db:8b:47:1a:a0:3b:e2: 2a:77:6b:f4:2e:9a:60:eb:41:c8:9e:44:de:7a:95: ef:1a:ad:ee:13:37:d8:62:64:42:3b:ed:e3:7b:cf: b6:41:d5:bb:a3:ad:ea:22:1a:79:d2:5f:57:bf:f0: 3a:2b:fd:84:27:03:a0:fb:ed:3c:e4:cd:31:27:04: 5b:70:c8:86:0c:18:ad:a0:ec:14:a1:51:6f:fc:8e: fa:5d:90:a8:1f:7a:b5:66:83:4f:1b:76:8e:83:81: 92:71:57:93:73:3b:8d:e2:38:c5:bd:9c:2e:cf:89: e1:6d:63:af:91:dd:91:12:45:2b:b7:3b:90:d0:bc: 85:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:62:54:5F:12:3D:6C:86:CF:EE:B5:FD:74:DC:5A:8A:F2:32:BE X509v3 Authority Key Identifier: keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b5:e6:87:bf:80:0b:f8:37:27:fa:b4:db:27:58:d6:8e:8e: 43:2d:c7:58:91:67:22:8e:79:c6:df:2c:8b:c9:c3:25:80:cd: 5e:1a:20:61:9f:4e:08:78:d2:70:aa:72:cf:9b:ca:06:43:a8: 43:4b:65:9b:c8:b6:fc:4b:39:56:b3:ba:df:0d:16:be:fb:fa: 66:ab:9d:ed:fe:3f:54:22:f2:3f:eb:90:72:e6:a9:01:32:f5: d7:01:2e:6f:d7:2b:05:4d:ec:6b:b3:f4:c8:b4:ee:c6:4c:fe: 8a:9f:cc:41:45:8b:2f:d9:11:e0:b4:89:d7:82:cd:3b:c9:85: 86:2e:b8:3d:e4:32:13:1c:16:b3:31:b1:a0:cc:6f:80:d3:c7: 6a:15:67:03:e1:fe:23:3d:4c:02:12:e5:68:3f:36:b9:5f:ff: c0:6f:62:58:a6:48:56:18:5b:9c:9f:b5:cb:ac:56:24:d0:93: 15:9d:03:2b:0a:52:3c:9c:9e:cb:6e:16:b0:c0:af:b1:b5:da: 0d:fb:fa:89:0f:dd:b4:a8:38:49:85:37:85:13:89:de:9b:f6: 45:9b:23:b2:c3:0d:ff:2f:53:d9:b6:bd:8e:08:65:15:ca:7d: 17:2d:a1:50:47:ff:64:9c:90:79:7b:d8:45:63:45:f7:32:19: 68:4c:25:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tP37Xo1mFycmvwwXbuhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzQxMTU4ZjNlZDY1YmVlMWJkZTEyZjM0Zjg5NWFmYjBk ZDUwZDUwHhcNMjUxMjIwMTcwMDUyWhcNMjUxMjIxMTcwMDUyWjAzMTEwLwYDVQQD Eyg0MWYwNjI1NDVmMTIzZDZjODZjZmVlYjVmZDc0ZGM1YThhZjIzMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/yb5jTF4uI6tw6j8DDNXUb4OL8z PR0xdu1Jn/2BEzgROsZGCjyaa8M35fFpReR4Gh6Eyse0naI6ifcltMZ10GhKuoSx 8EBz1sf68ZT+jRQT5EVu5Q1j28TfDm4aqCW18F5gUOjtv7enp4UeSy8mpv9MwgjS QtyzXGYHP3H5DtuLRxqgO+Iqd2v0Lppg60HInkTeepXvGq3uEzfYYmRCO+3je8+2 QdW7o63qIhp50l9Xv/A6K/2EJwOg++085M0xJwRbcMiGDBitoOwUoVFv/I76XZCo H3q1ZoNPG3aOg4GScVeTczuN4jjFvZwuz4nhbWOvkd2REkUrtzuQ0LyFvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHwYlRfEj1shs/utf103FqK8jK+MB8GA1UdIwQY MBaAFFB0EVjz7WW+4b3hLzT4la+w3VDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQt MzU1M2I0ZWQ2Nzk0LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQtMzU1M2I0ZWQ2Nzk0 LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrXmh7+A C/g3J/q02ydY1o6OQy3HWJFnIo55xt8si8nDJYDNXhogYZ9OCHjScKpyz5vKBkOo Q0tlm8i2/Es5VrO63w0Wvvv6Zqud7f4/VCLyP+uQcuapATL11wEub9crBU3sa7P0 yLTuxkz+ip/MQUWLL9kR4LSJ14LNO8mFhi64PeQyExwWszGxoMxvgNPHahVnA+H+ Iz1MAhLlaD82uV//wG9iWKZIVhhbnJ+1y6xWJNCTFZ0DKwpSPJyey24WsMCvsbXa Dfv6iQ/dtKg4SYU3hROJ3pv2RZsjssMN/y9T2ba9jghlFcp9Fy2hUEf/ZJyQeXvY RWNF9zIZaEwlng== -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:15 2025 by rpki-client