This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json) Hash identifier: P0xbGndx10waXHqmWekVWqTwYGdERts7xIBR6kvwop8= Subject key identifier: D5:5B:6E:3E:8F:FD:DA:F1:2E:10:BE:DF:7C:1B:A2:2C:F4:0A:A8:FD Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437 Certificate serial: 019B631E8B9ACD71EECA2EF314D53229A7F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 04:01:44 +0000 Manifest this update: Sun 28 Dec 2025 04:01:44 +0000 Manifest next update: Mon 29 Dec 2025 04:01:44 +0000 Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=) 2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: kDc+pnc41SS50nNEdXQ0tUQT7rWbnv7zUq8ssc5DQrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:8b:9a:cd:71:ee:ca:2e:f3:14:d5:32:29:a7:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437 Validity Not Before: Dec 28 04:01:44 2025 GMT Not After : Dec 29 04:01:44 2025 GMT Subject: CN=d55b6e3e8ffddaf12e10bedf7c1ba22cf40aa8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:32:b7:65:f1:99:63:0b:97:08:1e:6f:e3: 72:42:42:a3:bf:cb:0c:07:a7:82:9c:89:a4:97:ad: e7:24:4b:73:1a:bf:c3:81:f3:74:6f:63:aa:25:52: 11:8e:ed:eb:fa:c6:13:cd:00:87:2a:cf:df:e3:e9: c3:10:87:da:3f:63:1a:49:b4:79:2a:d8:b4:d1:52: cd:08:a1:a3:3e:12:23:d0:e1:83:2f:f8:3e:cb:b4: bd:16:d0:a5:34:d9:93:d2:6f:88:8b:0d:2e:8f:9f: 45:46:70:66:76:40:db:70:2b:2e:77:48:67:47:e4: df:12:0d:b1:49:ef:a1:ab:9f:94:1e:a1:ea:52:c1: 99:b0:e9:42:f9:0e:dc:4a:bb:1f:50:75:65:c0:94: cf:f2:54:9b:23:02:6a:cb:53:13:cf:e2:2a:f2:4e: 07:1c:4e:8e:3b:5f:73:3d:ef:6d:b8:74:de:6c:d4: 35:c4:9d:92:36:bb:dd:62:f9:3d:d3:1e:9a:29:8f: 1d:51:b3:7e:32:47:0a:5e:4a:8c:ed:5c:34:99:ca: af:44:20:47:f8:67:0e:b2:3d:47:a2:26:32:07:ec: c1:d9:7b:c9:23:9a:2d:f1:44:cd:71:7a:15:a1:23: 45:54:b0:b5:e9:dd:5f:a7:19:56:a5:a9:95:6b:4d: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5B:6E:3E:8F:FD:DA:F1:2E:10:BE:DF:7C:1B:A2:2C:F4:0A:A8:FD X509v3 Authority Key Identifier: keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:8c:25:02:f7:43:8c:af:f8:fb:c2:04:09:9d:53:81:4f: a6:2f:09:b9:bd:5f:dc:09:9f:ef:29:6b:06:2b:3e:ad:1d:5c: a1:c1:26:26:2a:6d:ed:8f:02:3d:ef:ba:9b:e2:c0:86:1d:e9: d9:38:6f:fa:8b:c7:cf:bd:65:7d:db:99:dc:44:26:42:09:49: 47:5e:75:46:f2:4e:de:bb:fb:3c:de:4d:15:4c:fb:65:77:9a: 07:23:94:b5:91:d6:5b:b4:ab:90:a8:af:48:49:23:4b:d1:f6: fc:d1:4d:bd:b5:e9:bf:f0:57:54:09:23:ff:d6:45:e1:de:7e: 9f:47:2c:68:17:58:a6:2a:02:b9:dd:b4:fd:6a:6b:8c:4c:25: 3c:9a:11:b1:aa:22:72:c7:aa:cb:bf:7d:20:45:a3:1b:30:85: 14:13:85:9a:02:9d:3b:b8:de:a2:65:eb:ae:7b:23:84:fe:85: 5d:c9:76:47:a2:be:2f:0f:3d:10:96:59:39:50:39:4d:31:b1: c2:6c:ae:16:ba:bd:7d:45:e8:0a:28:bc:c1:cb:f0:a1:b3:78: 43:fe:2c:27:7e:18:3f:75:48:d2:0b:35:ef:17:d7:3d:a9:3d: 1c:22:4d:28:1b:95:ac:9a:ff:8b:04:cd:a4:73:d8:dc:62:cc: 53:7f:50:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHouazXHuyi7zFNUyKaf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4 OTI0MzcwHhcNMjUxMjI4MDQwMTQ0WhcNMjUxMjI5MDQwMTQ0WjAzMTEwLwYDVQQD EyhkNTViNmUzZThmZmRkYWYxMmUxMGJlZGY3YzFiYTIyY2Y0MGFhOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDEyt2XxmWMLlwgeb+NyQkKjv8sM B6eCnImkl63nJEtzGr/DgfN0b2OqJVIRju3r+sYTzQCHKs/f4+nDEIfaP2MaSbR5 Kti00VLNCKGjPhIj0OGDL/g+y7S9FtClNNmT0m+Iiw0uj59FRnBmdkDbcCsud0hn R+TfEg2xSe+hq5+UHqHqUsGZsOlC+Q7cSrsfUHVlwJTP8lSbIwJqy1MTz+Iq8k4H HE6OO19zPe9tuHTebNQ1xJ2SNrvdYvk90x6aKY8dUbN+MkcKXkqM7Vw0mcqvRCBH +GcOsj1HoiYyB+zB2XvJI5ot8UTNcXoVoSNFVLC16d1fpxlWpamVa03l5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVbbj6P/drxLhC+33wboiz0Cqj9MB8GA1UdIwQY MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt NjM3OTljMDI2YTU3LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3 LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq2MJQL3 Q4yv+PvCBAmdU4FPpi8Jub1f3Amf7ylrBis+rR1cocEmJipt7Y8CPe+6m+LAhh3p 2Thv+ovHz71lfduZ3EQmQglJR151RvJO3rv7PN5NFUz7ZXeaByOUtZHWW7SrkKiv SEkjS9H2/NFNvbXpv/BXVAkj/9ZF4d5+n0csaBdYpioCud20/WprjEwlPJoRsaoi cseqy799IEWjGzCFFBOFmgKdO7jeomXrrnsjhP6FXcl2R6K+Lw89EJZZOVA5TTGx wmyuFrq9fUXoCii8wcvwobN4Q/4sJ34YP3VI0gs17xfXPak9HCJNKBuVrJr/iwTN pHPY3GLMU39QYA== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:54 2025 by rpki-client