This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json) Hash identifier: x+UYUnYIizqzN+j916WFAevuf+DPLWl9EUHEFORwLC0= Subject key identifier: BA:FA:2C:C5:B6:DB:16:54:DA:FE:A0:61:99:42:64:D0:0A:0B:92:2E Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Certificate serial: 019B405C16DC1CD747589DFA15160AB107CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft Manifest number: 1091 Signing time: Sun 21 Dec 2025 10:02:15 +0000 Manifest this update: Sun 21 Dec 2025 10:02:15 +0000 Manifest next update: Mon 22 Dec 2025 10:02:15 +0000 Files and hashes: 1: MjK_xJG6Hwcb67PomltSWuntrmM.roa (hash: aerGyiTEpiF59FAbfobUyJCn9cR81tY8N4zQCxzZAWk=) 2: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=) 3: TBmGO5t5AH5NVXED3d-86yJ2g-g.roa (hash: S/ggAtC3XkCG9e4NTbC903dmEf8ZwLiR5xsOu4Bo+Bc=) 4: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: p2YNxta0Spm2erBsbKScb9guF/F5Nv1PrnPZtVF3/LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:16:dc:1c:d7:47:58:9d:fa:15:16:0a:b1:07:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Validity Not Before: Dec 21 10:02:15 2025 GMT Not After : Dec 22 10:02:15 2025 GMT Subject: CN=bafa2cc5b6db1654dafea061994264d00a0b922e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:72:99:25:a1:35:1e:a6:52:1b:70:b2:9d: df:8e:7a:c9:3f:2b:0b:26:c0:98:46:ef:55:dd:92: 8d:9d:ea:5a:4a:d1:2a:c3:e1:4e:ca:43:3c:18:6d: c4:d7:23:8e:df:c9:87:71:fc:3c:3d:4c:9d:f6:46: ac:14:f4:28:65:06:8d:e8:67:ad:23:12:bc:05:0e: fd:ea:3b:49:d2:06:99:6f:d1:aa:0e:fe:50:68:2b: 53:4e:5e:d2:f7:c2:58:fe:c1:df:8d:b1:4d:97:14: b0:7d:84:5f:55:0c:f0:00:15:b0:17:fd:da:d7:1d: a4:3e:e4:93:be:c6:9a:53:4c:d7:32:ab:4f:77:36: bf:e4:97:a0:ad:da:f9:1e:49:3b:f7:b6:af:bc:e5: 5b:2b:f6:be:9e:ea:36:c0:85:02:2e:e5:99:8e:fc: c4:9c:20:07:97:6e:8c:a6:65:11:d2:8e:12:93:4c: aa:03:44:ef:7a:63:d8:68:85:41:1b:6a:1c:c7:c1: 6a:80:b6:9a:4d:75:7b:9c:7c:b3:a9:d3:56:51:83: 39:cd:84:05:97:b7:72:85:ba:e1:14:24:18:6b:a2: 87:8d:2b:73:76:2d:bc:b9:7e:74:8d:3a:19:e4:4c: 7d:0b:75:bd:f7:aa:d1:32:4f:f1:3e:0b:1d:29:1b: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FA:2C:C5:B6:DB:16:54:DA:FE:A0:61:99:42:64:D0:0A:0B:92:2E X509v3 Authority Key Identifier: keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6a:28:98:67:58:e9:57:7f:fb:c0:dc:a9:c0:e8:ec:18:7c: 53:57:ac:78:af:03:23:6e:74:f1:fc:d2:f4:7f:e4:a3:e4:79: 14:88:3b:46:c0:d1:bd:d3:44:63:11:19:64:ac:98:52:4a:1a: 58:c6:3a:91:8b:ec:87:6e:22:f1:ff:f9:a0:68:5e:7d:28:b4: d2:b4:30:12:fc:15:ad:70:c2:97:9b:99:a9:e5:a6:a1:8b:47: bf:5c:7f:82:8b:0d:4d:98:e7:6d:cb:f3:1b:08:54:e9:0d:ad: c3:d9:11:cf:6b:39:a1:bd:cc:b0:a9:b3:3a:8c:92:27:b2:5b: 25:ae:24:b9:0d:d3:66:ae:de:23:11:43:9e:82:ee:95:12:f5: 8d:1f:e1:d3:90:4b:0c:52:ed:d0:f9:a2:bf:9c:86:25:21:dd: eb:ea:c7:d4:7e:3e:84:3b:17:8a:b8:1f:ba:5c:9b:15:45:a4: 77:eb:82:12:98:d7:e1:37:ee:02:ec:04:cb:70:76:ec:71:9f: db:d7:f5:21:f8:bf:46:f2:7c:22:97:10:91:9f:32:24:25:27: f5:1a:07:43:f0:d2:c1:00:40:9b:62:48:9c:db:dd:41:20:2d: 13:c5:b0:cb:6a:9b:8a:7f:9b:d1:89:97:4b:8c:83:9c:16:af: ed:34:b5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBbcHNdHWJ36FRYKsQfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz YjM3NDMwHhcNMjUxMjIxMTAwMjE1WhcNMjUxMjIyMTAwMjE1WjAzMTEwLwYDVQQD EyhiYWZhMmNjNWI2ZGIxNjU0ZGFmZWEwNjE5OTQyNjRkMDBhMGI5MjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnFymSWhNR6mUhtwsp3fjnrJPysL JsCYRu9V3ZKNnepaStEqw+FOykM8GG3E1yOO38mHcfw8PUyd9kasFPQoZQaN6Get IxK8BQ796jtJ0gaZb9GqDv5QaCtTTl7S98JY/sHfjbFNlxSwfYRfVQzwABWwF/3a 1x2kPuSTvsaaU0zXMqtPdza/5Jegrdr5Hkk797avvOVbK/a+nuo2wIUCLuWZjvzE nCAHl26MpmUR0o4Sk0yqA0TvemPYaIVBG2ocx8FqgLaaTXV7nHyzqdNWUYM5zYQF l7dyhbrhFCQYa6KHjStzdi28uX50jToZ5Ex9C3W996rRMk/xPgsdKRs01QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr6LMW22xZU2v6gYZlCZNAKC5IuMB8GA1UdIwQY MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt MTZlZDNjZDBjNzJhLzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2oomGdY 6Vd/+8DcqcDo7Bh8U1eseK8DI2508fzS9H/ko+R5FIg7RsDRvdNEYxEZZKyYUkoa WMY6kYvsh24i8f/5oGhefSi00rQwEvwVrXDCl5uZqeWmoYtHv1x/gosNTZjnbcvz GwhU6Q2tw9kRz2s5ob3MsKmzOoySJ7JbJa4kuQ3TZq7eIxFDnoLulRL1jR/h05BL DFLt0Pmiv5yGJSHd6+rH1H4+hDsXirgfulybFUWkd+uCEpjX4TfuAuwEy3B27HGf 29f1Ifi/RvJ8IpcQkZ8yJCUn9RoHQ/DSwQBAm2JInNvdQSAtE8Wwy2qbin+b0YmX S4yDnBav7TS1sg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:39:01 2025 by rpki-client