This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json) Hash identifier: uecVmJPfluwI4sA16/41elh2uoB4JtAuDB1M3wD/cAM= Subject key identifier: F7:D6:9F:BB:75:A0:FC:8E:E2:7D:34:B0:F7:C2:F4:FF:A7:1C:08:8E Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437 Certificate serial: 019B5D52EB99A010ADFD7784C9D583658119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 01:01:13 +0000 Manifest this update: Sat 27 Dec 2025 01:01:13 +0000 Manifest next update: Sun 28 Dec 2025 01:01:13 +0000 Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=) 2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: 4bacfzm6aYjEGjFAyjxovlMc19H9q2jilIgu6Hg+gc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:eb:99:a0:10:ad:fd:77:84:c9:d5:83:65:81:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437 Validity Not Before: Dec 27 01:01:13 2025 GMT Not After : Dec 28 01:01:13 2025 GMT Subject: CN=f7d69fbb75a0fc8ee27d34b0f7c2f4ffa71c088e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:39:5a:b3:ac:d5:13:da:61:e5:ae:b6:c3: 57:89:97:5f:c7:3c:a1:a7:ad:66:58:78:5a:99:84: 29:4c:60:c0:dc:8d:d1:ca:5c:fe:fd:36:53:ac:dd: a0:ed:bc:36:89:4b:99:72:f7:9a:44:e6:9e:c4:f2: 98:00:d9:91:a6:61:83:99:e8:db:42:c3:a8:48:0b: e9:29:d2:ef:9c:cd:16:1c:32:8b:79:28:4f:75:f7: 4c:ba:c1:e5:26:27:8e:c3:88:c2:ab:8c:98:c1:e0: 46:dc:ea:a7:8c:58:50:26:b7:62:fc:7d:d4:96:2b: b3:a1:4e:9b:e1:6d:99:83:ec:bd:b7:10:13:50:ba: d9:fe:16:c8:52:61:4b:0f:0d:40:e1:17:0e:8b:d7: 59:b2:f0:cd:96:2e:c2:15:de:0f:03:2c:b7:83:4f: 75:30:72:69:22:d9:f5:01:4a:bd:fd:3a:7f:53:57: 4b:2f:53:03:a7:fd:2f:d4:44:bf:59:82:e0:9f:57: 0b:ac:67:72:4c:93:ad:94:b2:08:44:47:46:44:f7: 5b:76:17:84:6a:30:bb:b9:9c:ff:e4:53:1c:55:65: ec:c4:d1:a6:a1:c5:5b:cc:b8:77:cc:db:45:7d:4b: 3b:ab:97:de:93:a4:f5:9c:4b:6f:5b:1d:a5:0d:5f: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D6:9F:BB:75:A0:FC:8E:E2:7D:34:B0:F7:C2:F4:FF:A7:1C:08:8E X509v3 Authority Key Identifier: keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6c:8c:92:95:a8:c7:38:69:6e:ae:a2:28:d5:3a:63:27:c1: 95:a3:89:05:d0:89:22:61:31:09:69:99:10:5a:11:cd:e4:99: bc:9d:e9:d1:24:5d:f6:17:9c:5f:b7:e9:3a:27:3f:00:a0:4c: ea:8b:10:b8:34:94:0a:94:1d:62:80:11:14:a2:a5:ce:34:58: 02:d6:6c:d1:ab:f4:06:c2:91:46:01:28:4c:bb:e8:95:1e:3e: d2:bd:e8:e4:3e:19:9b:96:bb:e8:c3:dc:5a:ab:ae:3e:20:fb: a2:b3:d0:5b:55:4b:ba:8e:4d:ee:6f:57:0e:ff:76:bc:0c:80: 55:fa:6c:4e:00:a4:6f:62:3a:45:fc:36:5f:f8:a0:c8:5d:c2: 4e:c3:74:92:97:52:a5:ad:82:7d:2f:8e:8f:52:80:aa:0c:1f: e8:b7:45:eb:6a:76:c7:47:f4:ad:7d:d7:77:71:b0:79:6a:20: 00:cb:bb:e2:ce:2d:03:30:7d:f0:78:2e:0a:6a:81:03:8e:78: 28:bd:aa:37:70:76:d8:23:1a:fe:ef:54:f9:82:57:a6:87:ba: 3e:fe:53:7e:0e:17:6c:62:3c:04:85:c9:03:f9:6f:52:5c:3f: b6:f1:f5:4c:8b:0d:bc:6e:e8:fb:ea:88:35:bd:d5:5a:0d:79: ae:5c:21:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUuuZoBCt/XeEydWDZYEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4 OTI0MzcwHhcNMjUxMjI3MDEwMTEzWhcNMjUxMjI4MDEwMTEzWjAzMTEwLwYDVQQD EyhmN2Q2OWZiYjc1YTBmYzhlZTI3ZDM0YjBmN2MyZjRmZmE3MWMwODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOE5WrOs1RPaYeWutsNXiZdfxzyh p61mWHhamYQpTGDA3I3Rylz+/TZTrN2g7bw2iUuZcveaROaexPKYANmRpmGDmejb QsOoSAvpKdLvnM0WHDKLeShPdfdMusHlJieOw4jCq4yYweBG3OqnjFhQJrdi/H3U liuzoU6b4W2Zg+y9txATULrZ/hbIUmFLDw1A4RcOi9dZsvDNli7CFd4PAyy3g091 MHJpItn1AUq9/Tp/U1dLL1MDp/0v1ES/WYLgn1cLrGdyTJOtlLIIREdGRPdbdheE ajC7uZz/5FMcVWXsxNGmocVbzLh3zNtFfUs7q5fek6T1nEtvWx2lDV8fgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfWn7t1oPyO4n00sPfC9P+nHAiOMB8GA1UdIwQY MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt NjM3OTljMDI2YTU3LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3 LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWyMkpWo xzhpbq6iKNU6YyfBlaOJBdCJImExCWmZEFoRzeSZvJ3p0SRd9hecX7fpOic/AKBM 6osQuDSUCpQdYoARFKKlzjRYAtZs0av0BsKRRgEoTLvolR4+0r3o5D4Zm5a76MPc WquuPiD7orPQW1VLuo5N7m9XDv92vAyAVfpsTgCkb2I6Rfw2X/igyF3CTsN0kpdS pa2CfS+Oj1KAqgwf6LdF62p2x0f0rX3Xd3GweWogAMu74s4tAzB98HguCmqBA454 KL2qN3B22CMa/u9U+YJXpoe6Pv5Tfg4XbGI8BIXJA/lvUlw/tvH1TIsNvG7o++qI Nb3VWg15rlwhag== -----END CERTIFICATE-----Generated at Sat Dec 27 02:34:31 2025 by rpki-client