This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json) Hash identifier: RKQmElYrs+Ho51M+/gSBT+Z7NmvPz9cwiRQ5KeWVNf0= Subject key identifier: 8A:AC:E7:8A:04:A7:B1:8A:79:20:17:AE:AE:D4:79:29:74:B5:7F:F4 Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Certificate serial: 019B40FFFFAA4738DAEB01088B6F0DA25330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 13:01:17 +0000 Manifest this update: Sun 21 Dec 2025 13:01:17 +0000 Manifest next update: Mon 22 Dec 2025 13:01:17 +0000 Files and hashes: 1: TFo1gtP034QimxoONKR9cO3Rea0.roa (hash: ZbKyuz+8pa9I1RSPWJwZNU5a7S31Y7QOYHmJtNh9TXA=) 2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: gWF6sPIZHDuShYVSEtVCxhk4qJOZCLruU0FMP5TKq10=) 3: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:ff:aa:47:38:da:eb:01:08:8b:6f:0d:a2:53:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Validity Not Before: Dec 21 13:01:17 2025 GMT Not After : Dec 22 13:01:17 2025 GMT Subject: CN=8aace78a04a7b18a792017aeaed4792974b57ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:03:b2:1c:19:ad:aa:cf:0f:9e:51:11:e2: 9a:7e:70:9a:8d:05:31:a0:39:30:41:89:65:73:12: 79:1f:f9:de:5e:76:96:4d:dd:3c:12:f5:c9:54:c2: 3a:8a:89:98:09:00:63:56:65:f4:7b:32:0a:ad:e7: 14:b9:33:c0:96:98:81:bd:09:b8:8f:2c:d2:4a:f9: 8c:a3:68:57:b0:d1:16:6f:12:81:68:91:03:e4:bb: f3:db:ad:1a:a5:46:ab:f6:d4:89:d4:08:48:b6:f9: 55:2b:dd:58:d4:c0:92:50:c2:04:28:a5:b9:c6:21: df:a7:b9:93:2c:ac:41:2b:8f:3e:8f:89:1a:47:3d: fa:cc:8b:7c:57:3b:f7:a7:c2:c9:22:49:17:5d:38: 63:54:59:64:09:05:ac:ab:57:b4:d3:6a:b3:9a:cf: 63:f3:9c:b8:cc:27:4c:4b:f1:bf:3a:f6:74:bd:14: cb:03:cd:49:86:bb:02:1c:9b:e8:23:f3:7e:b0:f1: 20:b4:a5:f9:2d:7d:5d:74:59:13:e1:47:56:80:87: dc:3e:b6:90:df:ff:0b:bf:18:c1:ce:9a:7a:e8:6e: 45:f3:91:0a:07:9e:0f:1f:71:48:2a:22:2e:fc:90: b5:ba:49:6b:e3:b2:c2:74:d9:eb:e5:e2:41:35:93: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:E7:8A:04:A7:B1:8A:79:20:17:AE:AE:D4:79:29:74:B5:7F:F4 X509v3 Authority Key Identifier: keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a6:eb:a9:7f:c3:ef:0c:0b:ac:26:17:e7:8c:b8:e4:df:5a: f8:8d:79:f9:47:09:7d:5e:0f:1d:fa:88:45:8e:a8:29:be:0f: 38:38:96:3e:35:56:63:ed:44:7c:71:e6:c4:d6:f3:64:ae:03: 2c:79:53:31:c8:bf:78:ba:d4:a6:77:8e:b8:cf:7b:00:9c:71: af:12:cc:8f:65:9b:d1:33:fe:02:52:90:68:1f:bf:a6:e8:c3: 11:4d:c6:3e:dc:96:82:65:c1:a7:5a:6d:01:2f:1a:d7:ce:76: aa:be:fc:28:64:c0:be:70:d4:e2:d6:70:f7:97:ff:00:ff:f7: ad:5e:8e:ea:0c:41:1d:78:22:9a:01:84:f0:b5:03:8a:f1:a3: f3:f8:7b:ae:c7:7b:ac:ec:75:4f:1a:cb:d4:0e:ec:66:8f:94: be:65:cc:bd:51:ad:db:49:2c:6a:8d:0a:3a:c9:75:ca:4f:ca: aa:de:02:77:ee:09:b8:49:7e:7b:4c:6d:54:10:9d:13:77:73: 96:d0:d4:2d:f3:c9:8a:a6:ca:c5:31:f3:36:14:55:36:5d:14: 85:8a:dc:30:6c:15:92:23:85:3e:e2:e0:9c:78:01:76:c0:10: d0:e7:1c:0a:06:25:5f:b8:e6:d5:70:90:94:74:f4:b3:fc:00: 42:2c:47:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//+qRzja6wEIi28NolMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1 NDYzOWUwHhcNMjUxMjIxMTMwMTE3WhcNMjUxMjIyMTMwMTE3WjAzMTEwLwYDVQQD Eyg4YWFjZTc4YTA0YTdiMThhNzkyMDE3YWVhZWQ0NzkyOTc0YjU3ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaQDshwZrarPD55REeKafnCajQUx oDkwQYllcxJ5H/neXnaWTd08EvXJVMI6iomYCQBjVmX0ezIKrecUuTPAlpiBvQm4 jyzSSvmMo2hXsNEWbxKBaJED5Lvz260apUar9tSJ1AhItvlVK91Y1MCSUMIEKKW5 xiHfp7mTLKxBK48+j4kaRz36zIt8Vzv3p8LJIkkXXThjVFlkCQWsq1e002qzms9j 85y4zCdMS/G/OvZ0vRTLA81JhrsCHJvoI/N+sPEgtKX5LX1ddFkT4UdWgIfcPraQ 3/8LvxjBzpp66G5F85EKB54PH3FIKiIu/JC1uklr47LCdNnr5eJBNZMcGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqs54oEp7GKeSAXrq7UeSl0tX/0MB8GA1UdIwQY MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqbrqX/D 7wwLrCYX54y45N9a+I15+UcJfV4PHfqIRY6oKb4PODiWPjVWY+1EfHHmxNbzZK4D LHlTMci/eLrUpneOuM97AJxxrxLMj2Wb0TP+AlKQaB+/pujDEU3GPtyWgmXBp1pt AS8a1852qr78KGTAvnDU4tZw95f/AP/3rV6O6gxBHXgimgGE8LUDivGj8/h7rsd7 rOx1TxrL1A7sZo+UvmXMvVGt20ksao0KOsl1yk/Kqt4Cd+4JuEl+e0xtVBCdE3dz ltDULfPJiqbKxTHzNhRVNl0UhYrcMGwVkiOFPuLgnHgBdsAQ0OccCgYlX7jm1XCQ lHT0s/wAQixHIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:25:00 2025 by rpki-client