This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft File: UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json) Hash identifier: 6I0ijjVi8dUdAnusVw/1RkCK/V27eFRVewDdzFXdL0M= Subject key identifier: 48:C4:F0:53:C8:3B:47:85:65:38:FD:97:57:E1:60:60:F6:59:8A:B0 Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67 Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67 Certificate serial: 019B42B714F6281C391545E7B75048EA9214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft Manifest number: 0919 Signing time: Sun 21 Dec 2025 21:00:53 +0000 Manifest this update: Sun 21 Dec 2025 21:00:53 +0000 Manifest next update: Mon 22 Dec 2025 21:00:53 +0000 Files and hashes: 1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=) 2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: h+r0EYhzqF4SxX4lW1bUXiTTxqzIVnyuX9Bg8keW2Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:14:f6:28:1c:39:15:45:e7:b7:50:48:ea:92:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67 Validity Not Before: Dec 21 21:00:53 2025 GMT Not After : Dec 22 21:00:53 2025 GMT Subject: CN=48c4f053c83b47856538fd9757e16060f6598ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:fd:f9:b4:aa:2e:01:45:71:46:28:17:40: ef:2b:a1:ec:92:32:9b:26:68:e0:55:2c:a1:95:13: 33:c4:05:f9:36:a4:95:21:1a:92:5b:8c:44:16:ca: 8d:a5:27:96:ab:2e:e1:f4:fd:bb:11:1b:10:4a:82: 65:07:71:4f:ff:d0:20:69:d5:70:c6:4c:d3:40:0d: 19:ee:03:2b:3f:4e:0c:3b:3b:e7:b9:56:2b:d0:97: 2e:fc:c0:ba:57:66:7d:65:25:d5:14:fd:9e:49:69: 8f:dd:dc:88:e6:39:bf:28:15:86:a4:c1:5b:7b:43: cc:41:8f:f9:6b:3f:2d:01:a2:d6:75:8e:3b:8d:05: 75:60:05:ff:db:a5:a7:f8:4c:dc:15:0d:e2:8d:e6: f4:e4:b3:f2:53:6a:b9:ee:26:09:24:5b:53:90:a7: 77:65:cb:2a:a2:97:04:b3:65:82:b8:6e:c1:0b:d3: 6c:d1:8b:1c:ce:fb:70:4f:47:a3:ca:c6:6a:de:f3: 22:84:59:dc:f5:53:1c:b6:cd:aa:8d:01:3d:60:39: 3f:03:1e:35:f9:ea:6c:7f:43:e3:4f:09:15:a0:fb: 04:1d:6f:9d:1d:3e:24:4c:4c:b8:8e:1e:91:5d:a0: 53:34:04:a1:1f:85:c4:d6:1a:2b:c2:fb:3c:1a:56: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C4:F0:53:C8:3B:47:85:65:38:FD:97:57:E1:60:60:F6:59:8A:B0 X509v3 Authority Key Identifier: keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:56:c3:5a:ab:78:ce:3f:04:e2:47:c7:0e:b6:61:04:d9:61: 9b:23:69:80:cd:d5:95:77:4e:47:40:35:cd:f2:81:64:a4:b1: a8:f2:70:78:45:a4:b0:a1:71:02:f9:0d:45:11:65:82:91:4e: 24:14:67:7e:11:ed:fe:0f:39:4e:23:d8:25:b3:2c:77:1c:ed: 91:d5:f8:76:b4:34:21:da:1c:fc:57:ae:49:46:d6:4f:6f:c4: 5d:41:e2:00:3b:b7:40:3a:2b:5d:56:a1:81:12:92:1e:73:5b: f6:e4:9c:12:7f:f4:63:fc:20:75:ca:44:26:80:c6:d5:5a:39: 4c:20:98:5a:e0:3a:16:ff:5c:bd:bd:ca:80:65:c2:19:71:ce: ad:68:fe:8c:7f:f3:d1:d6:e4:87:1d:a0:2f:82:98:45:ec:7f: 9b:6e:a0:0a:c2:67:99:04:4a:50:d7:2c:70:23:6d:72:41:29: 0a:b1:a6:b2:98:9f:0e:80:a3:57:89:e4:57:bf:6e:50:0f:69: 66:fa:4a:59:10:92:3b:64:a1:d0:a8:b7:2d:70:69:58:9b:af: c0:d8:6b:0a:aa:8b:9f:a7:da:df:f6:f0:b0:2f:7b:87:77:34: 45:4e:b3:b5:fb:83:85:76:73:f5:39:ba:69:ed:43:33:0b:fa: 03:00:ab:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtxT2KBw5FUXnt1BI6pIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxODhjOTRiOGJlZGVlY2M2YTU5YmRjNDRjNmZkNTE1N2Fi ZTRiNjcwHhcNMjUxMjIxMjEwMDUzWhcNMjUxMjIyMjEwMDUzWjAzMTEwLwYDVQQD Eyg0OGM0ZjA1M2M4M2I0Nzg1NjUzOGZkOTc1N2UxNjA2MGY2NTk4YWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAn9+bSqLgFFcUYoF0DvK6HskjKb JmjgVSyhlRMzxAX5NqSVIRqSW4xEFsqNpSeWqy7h9P27ERsQSoJlB3FP/9AgadVw xkzTQA0Z7gMrP04MOzvnuVYr0Jcu/MC6V2Z9ZSXVFP2eSWmP3dyI5jm/KBWGpMFb e0PMQY/5az8tAaLWdY47jQV1YAX/26Wn+EzcFQ3ijeb05LPyU2q57iYJJFtTkKd3 ZcsqopcEs2WCuG7BC9Ns0YsczvtwT0ejysZq3vMihFnc9VMcts2qjQE9YDk/Ax41 +epsf0PjTwkVoPsEHW+dHT4kTEy4jh6RXaBTNAShH4XE1horwvs8GlYSQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjE8FPIO0eFZTj9l1fhYGD2WYqwMB8GA1UdIwQY MBaAFFGIyUuL7e7Malm9xExv1RV6vktnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmQxNDEtMTY0NS00MmRlLTlhN2It MGZlNTVjYTEwZjhmLzEvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mYmQxNDEtMTY0NS00MmRlLTlhN2ItMGZlNTVjYTEwZjhm LzEvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFbDWqt4 zj8E4kfHDrZhBNlhmyNpgM3VlXdOR0A1zfKBZKSxqPJweEWksKFxAvkNRRFlgpFO JBRnfhHt/g85TiPYJbMsdxztkdX4drQ0Idoc/FeuSUbWT2/EXUHiADu3QDorXVah gRKSHnNb9uScEn/0Y/wgdcpEJoDG1Vo5TCCYWuA6Fv9cvb3KgGXCGXHOrWj+jH/z 0dbkhx2gL4KYRex/m26gCsJnmQRKUNcscCNtckEpCrGmspifDoCjV4nkV79uUA9p ZvpKWRCSO2Sh0Ki3LXBpWJuvwNhrCqqLn6fa3/bwsC97h3c0RU6ztfuDhXZz9Tm6 ae1DMwv6AwCr3A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:07:31 2025 by rpki-client