This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json) Hash identifier: KBn6IFBnScRbMTP+QuFccCyxDvGcFUj45Tg7YhAJZFU= Subject key identifier: 07:52:6C:AC:73:B9:5E:E4:18:B1:22:5F:D6:7E:20:33:5D:19:D4:2D Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Certificate serial: 019B495DBEF4DAC17FA825577B8664D536C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft Manifest number: 14DE Signing time: Tue 23 Dec 2025 04:00:38 +0000 Manifest this update: Tue 23 Dec 2025 04:00:38 +0000 Manifest next update: Wed 24 Dec 2025 04:00:38 +0000 Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: HXvAqNMbHGAy0pwPOilhtR2QfqLmKW57U4qXoWgkTt8=) 2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:be:f4:da:c1:7f:a8:25:57:7b:86:64:d5:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Validity Not Before: Dec 23 04:00:38 2025 GMT Not After : Dec 24 04:00:38 2025 GMT Subject: CN=07526cac73b95ee418b1225fd67e20335d19d42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:0e:97:c7:db:4a:bf:ac:ae:ca:50:4e:97: e2:26:df:85:b0:f9:bc:7c:c8:21:a0:b3:16:8a:a5: e3:2d:73:dd:d2:de:a8:98:ba:a9:49:30:9f:5b:cb: a9:61:e8:e2:3a:60:69:30:a4:13:07:cf:92:0b:81: 55:7f:11:27:8f:0a:f6:89:d2:12:1c:8b:15:5c:6e: b3:17:85:e4:f6:9e:c3:57:78:cd:10:56:7e:c1:5f: e9:8a:4d:2b:11:b1:37:a6:f8:f7:0f:a0:47:b1:b6: 14:c5:f2:52:4c:f1:da:60:ca:61:2a:63:8d:86:db: 68:97:a0:86:1b:1f:82:86:8b:95:fc:35:a1:27:68: 23:9d:39:47:dd:7f:93:d1:fb:f7:12:fa:6a:6d:73: fe:8a:78:2e:61:cb:99:cb:1b:d6:01:f5:3c:14:01: 8d:e8:8f:5b:f6:5d:e4:b3:4c:68:10:55:be:d1:05: da:94:63:4f:13:81:05:75:0c:57:38:46:72:5e:4e: ec:15:d4:09:9b:6c:72:48:33:17:b9:91:33:44:7c: 61:d4:22:26:12:cd:be:23:41:6e:fa:e4:72:72:02: 80:64:b5:6d:0c:27:95:38:91:44:98:b8:20:14:f7: a4:cd:4e:5e:07:2b:6c:f5:6a:5f:39:f1:84:f7:bd: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:52:6C:AC:73:B9:5E:E4:18:B1:22:5F:D6:7E:20:33:5D:19:D4:2D X509v3 Authority Key Identifier: keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9d:d6:4f:c3:e6:05:82:17:cb:40:ba:83:9b:59:e3:9f:9c: 7a:d3:d0:bd:2d:9a:6e:d2:c9:17:9d:70:78:61:3f:64:50:10: b4:88:c3:74:3e:c1:63:22:b2:98:e6:a7:61:86:b6:b0:f0:49: cb:9e:f3:76:3c:09:4e:3b:e0:c3:cf:86:aa:51:94:46:18:be: cb:77:a1:7a:55:84:5a:0d:b6:81:3a:e1:07:a0:75:bf:ee:c9: 94:fa:0d:7f:af:04:02:64:fc:94:26:5f:67:13:8f:ed:02:6f: d8:d8:27:db:1c:99:ab:41:ef:21:ce:ae:c5:85:f2:06:55:b4: 8b:72:c3:ee:e8:f6:75:3d:06:5e:b2:9e:8d:92:56:69:86:20: 29:6c:d7:d6:08:5e:64:76:16:e0:9e:fe:ec:4b:a0:3d:c7:5c: e1:1f:a0:07:0c:33:ae:6e:c8:45:16:95:e5:9a:0f:01:40:82: 1c:73:43:25:ae:4c:a0:fe:35:5e:0d:59:47:88:d4:f5:8a:37: da:e3:10:5d:f3:15:b2:4d:dd:b4:b7:2b:92:48:7a:e5:e7:2c: 76:8c:28:85:8a:82:47:39:15:3d:62:da:7a:bd:3f:7e:66:72: 9f:fe:d0:a4:a7:37:8b:5d:a2:4f:3a:2d:9e:78:1d:bb:e5:60: 11:f1:ab:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXb702sF/qCVXe4Zk1TbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjEwN2VkMDdiNWFjMGQ4MjY5ZDcyMjlkOWZkMmNhMGUz MjY1OGIwHhcNMjUxMjIzMDQwMDM4WhcNMjUxMjI0MDQwMDM4WjAzMTEwLwYDVQQD EygwNzUyNmNhYzczYjk1ZWU0MThiMTIyNWZkNjdlMjAzMzVkMTlkNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X8Ol8fbSr+srspQTpfiJt+FsPm8 fMghoLMWiqXjLXPd0t6omLqpSTCfW8upYejiOmBpMKQTB8+SC4FVfxEnjwr2idIS HIsVXG6zF4Xk9p7DV3jNEFZ+wV/pik0rEbE3pvj3D6BHsbYUxfJSTPHaYMphKmON httol6CGGx+ChouV/DWhJ2gjnTlH3X+T0fv3EvpqbXP+inguYcuZyxvWAfU8FAGN 6I9b9l3ks0xoEFW+0QXalGNPE4EFdQxXOEZyXk7sFdQJm2xySDMXuZEzRHxh1CIm Es2+I0Fu+uRycgKAZLVtDCeVOJFEmLggFPekzU5eByts9WpfOfGE971AOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdSbKxzuV7kGLEiX9Z+IDNdGdQtMB8GA1UdIwQY MBaAFFIhB+0HtawNgmnXIp2f0soOMmWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTIt NTliY2UzMTljMWNiLzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTItNTliY2UzMTljMWNi LzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZ3WT8Pm BYIXy0C6g5tZ45+cetPQvS2abtLJF51weGE/ZFAQtIjDdD7BYyKymOanYYa2sPBJ y57zdjwJTjvgw8+GqlGURhi+y3ehelWEWg22gTrhB6B1v+7JlPoNf68EAmT8lCZf ZxOP7QJv2Ngn2xyZq0HvIc6uxYXyBlW0i3LD7uj2dT0GXrKejZJWaYYgKWzX1ghe ZHYW4J7+7EugPcdc4R+gBwwzrm7IRRaV5ZoPAUCCHHNDJa5MoP41Xg1ZR4jU9Yo3 2uMQXfMVsk3dtLcrkkh65ecsdowohYqCRzkVPWLaer0/fmZyn/7QpKc3i12iTzot nngdu+VgEfGr+Q== -----END CERTIFICATE-----Generated at Tue Dec 23 10:49:34 2025 by rpki-client