This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json) Hash identifier: 3svKJqAbug2fjF+eyz9vIvIibyyT3tfT4+8eXCWCDdM= Subject key identifier: 29:B8:9B:49:88:70:58:F3:B4:49:FB:CF:5F:01:A9:54:DF:4F:78:51 Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7 Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7 Certificate serial: 019B39B44D9C9AD2697BEC35C284F055E8FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft Manifest number: 1563 Signing time: Sat 20 Dec 2025 03:01:16 +0000 Manifest this update: Sat 20 Dec 2025 03:01:16 +0000 Manifest next update: Sun 21 Dec 2025 03:01:16 +0000 Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=) 2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: t2XCLBxixTDNFjP85diQH1Qu4MEw4wYnbxyeAUu7dxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:4d:9c:9a:d2:69:7b:ec:35:c2:84:f0:55:e8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7 Validity Not Before: Dec 20 03:01:16 2025 GMT Not After : Dec 21 03:01:16 2025 GMT Subject: CN=29b89b49887058f3b449fbcf5f01a954df4f7851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:d1:c5:7c:ba:f7:eb:e0:c8:7f:40:c6:cc: eb:d6:e9:67:9e:7a:c2:23:93:b0:3d:86:c9:ee:44: 6d:39:b9:cb:1f:8a:3a:f9:49:e6:eb:fb:44:ef:e4: ef:14:ac:06:b3:cb:58:64:69:5d:5b:3b:b3:30:86: 37:a8:ce:4c:f1:7e:7c:c0:e3:7d:ed:55:96:38:11: 9e:2e:38:98:ec:f8:e9:9e:ea:93:29:bb:58:2b:7c: 27:45:e5:3f:90:a0:0d:b3:e5:5b:8c:73:91:a5:6f: 07:f1:59:45:55:ec:db:d6:b7:5a:9e:be:0d:37:bc: 91:d4:9f:d9:e1:b5:20:3c:58:46:9b:79:01:70:3a: 03:8d:62:81:14:64:63:ec:34:bf:38:fe:b0:e8:64: 33:1f:2f:90:3b:5d:a5:66:03:90:b7:e9:6f:6d:4d: 97:d5:8d:9d:73:d2:9a:da:79:78:9a:de:71:a4:c3: 8c:0c:c8:6b:61:cf:d4:9d:1a:e7:62:a0:b2:e7:5c: 58:a4:19:f3:b6:f8:06:b9:7b:c9:1c:0f:71:4e:60: ae:50:b0:7d:6d:f7:67:59:68:47:43:90:60:5c:fc: ae:af:a3:51:28:4c:ab:e9:8c:b4:9d:d0:3e:57:36: 20:db:a7:44:e0:1a:6c:6b:01:b9:8a:52:07:b8:56: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B8:9B:49:88:70:58:F3:B4:49:FB:CF:5F:01:A9:54:DF:4F:78:51 X509v3 Authority Key Identifier: keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1e:22:bc:9e:27:78:1c:d3:11:a8:8c:20:10:e6:f1:ef:16: c2:67:42:bd:32:e3:97:4b:e5:c6:32:8f:6b:13:d9:27:06:ad: 6f:f8:5e:b5:ea:f9:7b:1d:18:17:fa:01:c0:cb:c7:00:9f:a4: 29:ac:e0:41:29:be:d3:ff:02:f1:c9:d0:e3:ab:d3:d9:ec:f2: dc:bf:bc:99:d5:5c:2a:bf:13:c8:ee:03:70:f1:2e:82:c2:02: e7:0a:67:73:d4:83:ea:ab:49:aa:ea:18:de:5a:c9:89:32:0a: 07:ad:1d:2f:25:c3:97:19:72:cd:dd:e3:6e:5e:7b:2f:67:1f: 41:0f:c4:be:36:56:fe:fe:14:5b:49:24:a9:62:79:bc:b5:15: 8e:3b:55:56:a1:8a:fb:92:32:db:ec:29:3f:c5:1e:76:3a:47: 5f:c9:9e:b6:0e:3d:78:13:eb:63:8a:95:7b:f7:f7:1d:ad:cd: 4c:90:90:3e:21:6d:7b:e2:0c:22:be:b7:8a:ab:d6:94:4b:3d: 1a:4d:0f:e0:ce:32:5a:67:9e:3a:2b:37:37:85:e8:19:e9:1f: be:78:e9:02:99:94:42:74:60:36:7d:57:dd:79:e9:d5:1d:6e: ce:74:97:0f:3b:c2:84:8d:8c:8b:ff:37:f7:84:77:8a:57:55: 92:bb:7d:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tE2cmtJpe+w1woTwVej/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZDY2MWE5NDhmMmJmMzQ5MGU4OWQ4MjUyZjJjY2M4NzQ3 Y2U1YzcwHhcNMjUxMjIwMDMwMTE2WhcNMjUxMjIxMDMwMTE2WjAzMTEwLwYDVQQD EygyOWI4OWI0OTg4NzA1OGYzYjQ0OWZiY2Y1ZjAxYTk1NGRmNGY3ODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZjRxXy69+vgyH9Axszr1ulnnnrC I5OwPYbJ7kRtObnLH4o6+Unm6/tE7+TvFKwGs8tYZGldWzuzMIY3qM5M8X58wON9 7VWWOBGeLjiY7PjpnuqTKbtYK3wnReU/kKANs+VbjHORpW8H8VlFVezb1rdanr4N N7yR1J/Z4bUgPFhGm3kBcDoDjWKBFGRj7DS/OP6w6GQzHy+QO12lZgOQt+lvbU2X 1Y2dc9Ka2nl4mt5xpMOMDMhrYc/UnRrnYqCy51xYpBnztvgGuXvJHA9xTmCuULB9 bfdnWWhHQ5BgXPyur6NRKEyr6Yy0ndA+VzYg26dE4BpsawG5ilIHuFZddwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm4m0mIcFjztEn7z18BqVTfT3hRMB8GA1UdIwQY MBaAFFLWYalI8r80kOidglLyzMh0fOXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODct ZGQ2M2YyMTVjNDM0LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODctZGQ2M2YyMTVjNDM0 LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWh4ivJ4n eBzTEaiMIBDm8e8WwmdCvTLjl0vlxjKPaxPZJwatb/heter5ex0YF/oBwMvHAJ+k KazgQSm+0/8C8cnQ46vT2ezy3L+8mdVcKr8TyO4DcPEugsIC5wpnc9SD6qtJquoY 3lrJiTIKB60dLyXDlxlyzd3jbl57L2cfQQ/EvjZW/v4UW0kkqWJ5vLUVjjtVVqGK +5Iy2+wpP8UedjpHX8metg49eBPrY4qVe/f3Ha3NTJCQPiFte+IMIr63iqvWlEs9 Gk0P4M4yWmeeOis3N4XoGekfvnjpApmUQnRgNn1X3Xnp1R1uznSXDzvChI2Mi/83 94R3ildVkrt9Ew== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:32 2025 by rpki-client