This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json) Hash identifier: QtIB77gaakkGsH0OrMZo9gLj9zY5m3Tezt6Zd7Q7Wx0= Subject key identifier: 26:D8:78:63:68:32:03:11:DF:50:97:CA:E3:8E:67:48:96:56:A2:75 Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a Certificate serial: 019B43253C10DAFAD3259DCB0850F14846CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 23:01:12 +0000 Manifest this update: Sun 21 Dec 2025 23:01:12 +0000 Manifest next update: Mon 22 Dec 2025 23:01:12 +0000 Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=) 2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=) 3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: PyaytU++BTTpQ7qyg2ppbe/3Vmm56F7vInPx63KSlUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:3c:10:da:fa:d3:25:9d:cb:08:50:f1:48:46:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a Validity Not Before: Dec 21 23:01:12 2025 GMT Not After : Dec 22 23:01:12 2025 GMT Subject: CN=26d8786368320311df5097cae38e67489656a275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:4d:3a:87:a0:ae:84:c3:f7:b8:d9:4a:74: 5f:3c:78:12:dc:73:ee:cc:0d:c9:7d:e2:b5:60:6c: bb:a2:6b:16:ef:b8:eb:18:8a:6e:00:98:2d:3d:b1: 8f:43:6b:01:09:ef:4b:42:46:a9:f8:95:d6:ec:c1: 37:02:2b:60:57:cd:b0:41:20:72:e3:e4:e8:ae:cb: 47:d7:92:72:d1:a2:1e:3b:62:ab:23:74:4e:25:66: bc:c6:1e:4b:0b:0c:34:46:35:f2:9c:37:6c:88:dc: b2:7e:3d:a0:f5:6b:ca:f7:4a:af:d5:f5:87:b7:14: 0b:0c:9a:75:97:d3:71:8f:9d:e2:2f:fd:8e:fc:7d: 36:8c:04:06:2a:ec:5c:7f:7a:b9:71:3d:68:83:25: 04:81:41:08:18:1e:53:6b:c3:6f:d7:4f:59:e3:b0: 1e:06:25:b8:0b:c9:40:24:48:78:17:91:39:e0:5b: 8b:4a:54:98:1a:d9:44:d1:ad:cd:45:cb:59:a6:01: 70:4a:9b:3e:23:0a:3e:3f:b4:b3:ff:b9:cf:a9:44: b6:44:a9:7e:49:a8:53:59:be:af:fe:86:c1:9c:9b: fd:ee:a2:f9:f0:72:0b:c6:e2:f0:8b:ed:37:1b:78: ea:65:ec:7d:8c:8a:b6:39:66:ea:5a:5a:0a:05:64: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D8:78:63:68:32:03:11:DF:50:97:CA:E3:8E:67:48:96:56:A2:75 X509v3 Authority Key Identifier: keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:35:07:30:1b:d4:8f:1b:7b:1c:8b:04:c6:4d:36:80:b7:95: 66:c8:3f:06:dc:4a:17:2d:fc:34:23:3d:bf:8e:9c:41:41:13: 56:de:00:00:00:fc:a1:f7:e6:b1:c9:46:24:8a:5d:c2:9e:1b: 77:4a:82:92:26:3e:b7:02:b1:63:88:83:20:96:f5:d0:f4:02: 39:7f:c9:5a:78:d0:01:c7:08:08:e7:23:6e:92:68:9d:d3:16: 2a:7c:89:dc:17:cd:70:b5:a6:3e:cb:c8:06:3e:03:94:07:cb: 3b:1d:b2:0a:01:68:1b:b0:14:87:2c:f9:2f:46:0e:bb:4b:8c: e5:36:d6:02:8b:3b:f9:4e:a7:10:40:b2:99:a7:fd:e5:93:ed: 6f:c7:8e:73:23:01:25:7a:7d:f7:58:b9:7d:5d:98:e4:e2:9a: c2:50:3e:93:ca:03:e7:92:9c:a2:f4:95:b4:70:ab:cc:5c:39: 5a:2a:f4:08:5c:36:38:2e:20:68:04:9f:03:e2:67:0e:6b:68: 83:4a:17:ea:88:f3:07:3e:f2:e3:b6:ea:4d:0a:b6:25:8d:78: ff:cf:f9:1c:33:98:fc:b0:dd:3e:40:19:4f:ed:41:e5:ae:9f: ed:d0:24:03:06:e2:ad:1f:d2:4d:ab:98:47:b5:01:87:ff:6c: d0:f9:ca:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJTwQ2vrTJZ3LCFDxSEbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl OTJiMGEwHhcNMjUxMjIxMjMwMTEyWhcNMjUxMjIyMjMwMTEyWjAzMTEwLwYDVQQD EygyNmQ4Nzg2MzY4MzIwMzExZGY1MDk3Y2FlMzhlNjc0ODk2NTZhMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8NNOoegroTD97jZSnRfPHgS3HPu zA3JfeK1YGy7omsW77jrGIpuAJgtPbGPQ2sBCe9LQkap+JXW7ME3AitgV82wQSBy 4+TorstH15Jy0aIeO2KrI3ROJWa8xh5LCww0RjXynDdsiNyyfj2g9WvK90qv1fWH txQLDJp1l9Nxj53iL/2O/H02jAQGKuxcf3q5cT1ogyUEgUEIGB5Ta8Nv109Z47Ae BiW4C8lAJEh4F5E54FuLSlSYGtlE0a3NRctZpgFwSps+Iwo+P7Sz/7nPqUS2RKl+ SahTWb6v/obBnJv97qL58HILxuLwi+03G3jqZex9jIq2OWbqWloKBWQs+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbYeGNoMgMR31CXyuOOZ0iWVqJ1MB8GA1UdIwQY MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijUHMBvU jxt7HIsExk02gLeVZsg/BtxKFy38NCM9v46cQUETVt4AAAD8offmsclGJIpdwp4b d0qCkiY+twKxY4iDIJb10PQCOX/JWnjQAccICOcjbpJondMWKnyJ3BfNcLWmPsvI Bj4DlAfLOx2yCgFoG7AUhyz5L0YOu0uM5TbWAos7+U6nEECymaf95ZPtb8eOcyMB JXp991i5fV2Y5OKawlA+k8oD55KcovSVtHCrzFw5Wir0CFw2OC4gaASfA+JnDmto g0oX6ojzBz7y47bqTQq2JY14/8/5HDOY/LDdPkAZT+1B5a6f7dAkAwbirR/STauY R7UBh/9s0PnKkw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:31:00 2025 by rpki-client