This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json) Hash identifier: 92PqkAvctIt59QnZGYa2E/0ReK2195RQKwvUCiKjbDU= Subject key identifier: 4A:00:A9:43:00:5B:55:BD:47:67:4B:15:9D:86:EF:A0:9A:CF:FF:6B Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5 Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5 Certificate serial: 019B4AA8073376B42E9C36FD6E34D8AF62B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft Manifest number: 1711 Signing time: Tue 23 Dec 2025 10:01:24 +0000 Manifest this update: Tue 23 Dec 2025 10:01:24 +0000 Manifest next update: Wed 24 Dec 2025 10:01:24 +0000 Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=) 2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: 26wmoyNFOpg4+k9lQOn7T3OWFG7TVJF2fRBrv8UyE3I=) 3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:07:33:76:b4:2e:9c:36:fd:6e:34:d8:af:62:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5 Validity Not Before: Dec 23 10:01:24 2025 GMT Not After : Dec 24 10:01:24 2025 GMT Subject: CN=4a00a943005b55bd47674b159d86efa09acfff6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e4:f9:98:63:af:ec:28:43:3d:53:c2:bf:ce: 84:f3:32:d8:53:d4:5f:e1:93:75:8e:66:4c:05:b1: 01:bc:50:05:4a:2d:af:ad:b0:47:b2:89:83:ab:d5: b6:00:a7:d8:a4:62:14:4c:e0:ef:9b:50:39:33:0c: 2e:9c:cc:9e:69:0f:c8:22:54:f2:46:0c:a7:fc:70: 3a:0f:a8:27:5b:11:62:ba:80:99:99:b9:74:55:89: 20:ed:92:40:9a:e9:a9:5f:83:0b:04:c0:f6:15:98: aa:fd:f7:66:0f:0e:48:1b:21:a1:de:6b:44:8f:0e: d2:33:2e:70:e1:d3:fb:9c:a1:d5:ae:64:bf:79:31: 8f:b1:f3:ee:29:26:db:f6:62:95:69:ee:ea:cb:87: 0c:27:3b:59:73:72:55:9f:7d:ac:8e:e7:00:92:6f: 00:c8:ce:e8:4d:2b:7c:4f:0c:44:58:e0:8e:ab:78: 1a:cd:16:99:b1:d8:55:5c:cc:61:f4:73:9d:47:6d: d2:11:ce:26:e2:e4:24:fc:5a:ae:8f:9a:08:03:a3: 8d:eb:f9:00:80:74:a1:83:9b:1a:e7:e1:b8:0d:0a: 45:03:11:63:73:ae:15:b9:dd:fe:24:b6:67:9e:9d: 2b:9b:47:78:8c:f3:2d:48:b5:88:17:73:42:f0:51: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:00:A9:43:00:5B:55:BD:47:67:4B:15:9D:86:EF:A0:9A:CF:FF:6B X509v3 Authority Key Identifier: keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4b:56:34:ac:6b:61:07:8f:ef:68:54:9b:10:bc:9f:52:16: 55:4e:ae:2f:67:be:b6:54:48:5c:dd:98:94:f2:0f:81:c0:32: 2e:12:7f:2e:e4:dd:7b:ac:89:71:13:9b:f6:49:2b:48:6e:9c: bf:7d:81:0d:06:b3:f7:49:11:9e:3c:7a:a8:d1:b4:09:6e:49: ac:79:55:df:94:72:52:de:fe:73:61:5f:67:25:25:13:3a:65: 6a:27:06:45:24:d5:7d:50:c2:f9:60:b8:a5:1c:6f:bf:fb:08: 8f:0c:fa:98:c2:ca:14:9b:89:1e:c8:6f:23:49:92:06:93:e6: b6:4c:11:19:34:78:2e:21:78:37:ed:c3:52:ad:8c:d3:7b:96: ef:68:b9:79:60:d1:1f:23:ab:7e:d7:6c:ef:88:fe:1f:4f:d5: 34:44:2f:dc:28:83:f1:df:af:4e:25:ce:4b:be:e6:d8:cd:2a: 74:a4:e6:df:fd:5f:68:09:c0:70:77:5e:77:83:d6:14:77:02: 81:7f:f2:8e:eb:ab:b0:e2:58:3b:27:8b:d2:3e:69:ba:35:31: 18:08:60:77:77:98:d7:0b:70:c4:d7:05:95:34:7b:81:e4:ad: 99:2d:8e:95:3e:21:dd:5a:a2:36:8e:a5:5e:3a:1b:e2:f6:d8: 2d:28:c0:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqAczdrQunDb9bjTYr2K0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWIwM2QyMTE5OTZlOTlhNDllM2MzZjljZTRiM2YyYTE1 NzIzYzUwHhcNMjUxMjIzMTAwMTI0WhcNMjUxMjI0MTAwMTI0WjAzMTEwLwYDVQQD Eyg0YTAwYTk0MzAwNWI1NWJkNDc2NzRiMTU5ZDg2ZWZhMDlhY2ZmZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+T5mGOv7ChDPVPCv86E8zLYU9Rf 4ZN1jmZMBbEBvFAFSi2vrbBHsomDq9W2AKfYpGIUTODvm1A5MwwunMyeaQ/IIlTy Rgyn/HA6D6gnWxFiuoCZmbl0VYkg7ZJAmumpX4MLBMD2FZiq/fdmDw5IGyGh3mtE jw7SMy5w4dP7nKHVrmS/eTGPsfPuKSbb9mKVae7qy4cMJztZc3JVn32sjucAkm8A yM7oTSt8TwxEWOCOq3gazRaZsdhVXMxh9HOdR23SEc4m4uQk/Fquj5oIA6ON6/kA gHShg5sa5+G4DQpFAxFjc64Vud3+JLZnnp0rm0d4jPMtSLWIF3NC8FGlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoAqUMAW1W9R2dLFZ2G76Caz/9rMB8GA1UdIwQY MBaAFFLrA9IRmW6ZpJ48P5zks/KhVyPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2Mzgt OTZjZDQyZjBmOTViLzEvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2MzgtOTZjZDQyZjBmOTVi LzEvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0tWNKxr YQeP72hUmxC8n1IWVU6uL2e+tlRIXN2YlPIPgcAyLhJ/LuTde6yJcROb9kkrSG6c v32BDQaz90kRnjx6qNG0CW5JrHlV35RyUt7+c2FfZyUlEzplaicGRSTVfVDC+WC4 pRxvv/sIjwz6mMLKFJuJHshvI0mSBpPmtkwRGTR4LiF4N+3DUq2M03uW72i5eWDR HyOrftds74j+H0/VNEQv3CiD8d+vTiXOS77m2M0qdKTm3/1faAnAcHded4PWFHcC gX/yjuursOJYOyeL0j5pujUxGAhgd3eY1wtwxNcFlTR7geStmS2OlT4h3VqiNo6l Xjob4vbYLSjAaA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:10 2025 by rpki-client