This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft File: uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json) Hash identifier: FpBhmE/1wteDGUXgCYBFgEL00Xfc1nfNcBuIzHNnXs0= Subject key identifier: A2:AF:A3:01:29:C4:6D:7F:A3:58:DD:C5:4C:A0:7D:B2:DE:8B:99:AA Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Certificate serial: 019B3B6B7BF31B16AC936B700615A83213E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 11:00:58 +0000 Manifest this update: Sat 20 Dec 2025 11:00:58 +0000 Manifest next update: Sun 21 Dec 2025 11:00:58 +0000 Files and hashes: 1: 4NKq_KYwCh8_wTbK61NtPt76P8I.roa (hash: mmA3nOgLzhGsU/7y4XASj7EI9JkBDcrnGGIkqWDOAYQ=) 2: 5NknPZb2YFjtunQlHWI_QMzdlKY.roa (hash: MgsBbLyiXdRHwov9hAncLGKeKv45suA9La+rVSC/C8U=) 3: EcXVeLZGF2isDVGR_npcyvVHtis.roa (hash: 74ii2z9H6EyEbd8UKPQgliXQbUTkT7bMVv5HyoTjEoI=) 4: MLMSeUg0Tn5acuTuB6POUwHtMC4.roa (hash: xJIvGvJF+baBBCFPe1lEWA46OVhv1WXXfc/yQpkBx7I=) 5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: zhAjVMo4kE6s8Z6hllSaXlgUhKRXtvoI+LQg48ZW2xM=) 6: vRCQ2oYv0pMSuRkskFBqpNokNQc.roa (hash: nfgafPbA1oV5746o00z5NyxG0STOqD8qAdDbAN/fIQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:7b:f3:1b:16:ac:93:6b:70:06:15:a8:32:13:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Validity Not Before: Dec 20 11:00:58 2025 GMT Not After : Dec 21 11:00:58 2025 GMT Subject: CN=a2afa30129c46d7fa358ddc54ca07db2de8b99aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:02:31:a4:8f:16:76:63:31:9e:0b:3a:20: 03:86:01:71:ee:d7:6a:18:69:3a:c0:79:4d:af:a8: 58:06:63:0a:ec:f9:e9:6c:f8:55:53:d5:21:4f:b6: fb:ad:99:74:0d:2e:1e:c0:5f:5c:c6:66:b0:48:67: 89:15:62:7e:38:22:77:82:ff:41:f6:a0:c5:e7:c0: 7f:4d:bf:be:ef:00:a5:e5:df:12:d9:72:16:90:97: fb:e7:08:c2:9a:12:2b:b5:a0:9e:a2:c3:83:4c:e3: e6:08:07:cf:83:67:43:3d:cd:9f:3a:70:03:93:0b: 77:e6:eb:24:00:c4:6a:30:12:c1:fc:0a:0d:6b:5b: c5:97:c3:9d:16:1c:4b:13:37:70:72:92:69:67:c0: 26:39:40:60:3f:9e:1f:9f:b5:d1:93:4f:3d:19:dc: 06:6b:2c:13:03:65:04:d9:cb:37:92:45:62:df:33: 04:89:2a:1b:6a:ba:a5:6d:c1:41:c7:bc:85:c3:9a: 2a:a3:66:d8:1c:d4:8f:0c:69:c5:70:bb:8a:a4:e5: 32:9e:21:1b:a0:ce:44:af:f0:c4:61:1c:ae:55:28: 1e:fd:5e:82:b3:53:b7:d0:c8:48:97:8a:64:d1:ea: 51:e4:a2:de:cf:5e:f7:48:75:fb:68:72:96:ff:45: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AF:A3:01:29:C4:6D:7F:A3:58:DD:C5:4C:A0:7D:B2:DE:8B:99:AA X509v3 Authority Key Identifier: keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0f:71:a6:7c:e9:73:5f:35:80:e4:50:3d:c6:74:ba:78:bd: 17:92:e8:80:21:81:2d:a9:aa:ae:2e:2b:e9:2f:67:32:cf:f4: 0b:cf:f4:06:4a:6a:f6:f3:0f:e0:9e:8c:bd:62:8e:47:97:95: 04:ce:a9:ff:87:23:b4:bb:04:61:a7:ff:a9:7f:ce:e2:b4:7b: b8:f6:43:25:c3:9e:24:85:c2:f2:9e:dc:c0:1d:d7:c5:d3:cd: 42:25:cd:64:22:b3:2d:3f:5e:c5:f4:9d:ef:17:1e:18:13:e7: 4d:18:23:4b:88:55:a7:33:0c:e8:e9:91:23:77:ab:95:7b:3b: 60:c4:49:d4:04:f4:9a:b2:aa:5e:82:a7:53:ca:15:86:ec:d2: f3:37:7f:8c:0c:d1:26:9d:ef:ef:f9:fa:fc:b1:43:50:d3:80: b6:d7:82:70:a9:9d:24:f0:32:ee:cc:ef:3a:c1:26:78:1d:d0: 4f:6f:19:00:0a:96:90:04:ae:7f:ba:74:29:a8:93:f5:88:62: e6:ca:43:95:e3:31:48:a7:a4:be:23:bf:a9:26:c2:a0:7f:73: 8c:cb:a4:27:04:ad:93:c4:db:53:b7:d2:b4:8d:2a:f5:33:09: 70:5a:3a:27:8d:f7:91:dc:56:af:5c:8a:7c:37:de:6f:56:13: 7b:77:c9:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a3vzGxask2twBhWoMhPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5 MjUxMTcwHhcNMjUxMjIwMTEwMDU4WhcNMjUxMjIxMTEwMDU4WjAzMTEwLwYDVQQD EyhhMmFmYTMwMTI5YzQ2ZDdmYTM1OGRkYzU0Y2EwN2RiMmRlOGI5OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSoCMaSPFnZjMZ4LOiADhgFx7tdq GGk6wHlNr6hYBmMK7PnpbPhVU9UhT7b7rZl0DS4ewF9cxmawSGeJFWJ+OCJ3gv9B 9qDF58B/Tb++7wCl5d8S2XIWkJf75wjCmhIrtaCeosODTOPmCAfPg2dDPc2fOnAD kwt35uskAMRqMBLB/AoNa1vFl8OdFhxLEzdwcpJpZ8AmOUBgP54fn7XRk089GdwG aywTA2UE2cs3kkVi3zMEiSobarqlbcFBx7yFw5oqo2bYHNSPDGnFcLuKpOUyniEb oM5Er/DEYRyuVSge/V6Cs1O30MhIl4pk0epR5KLez173SHX7aHKW/0W1IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKvowEpxG1/o1jdxUygfbLei5mqMB8GA1UdIwQY MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt NDJiM2Q2OGI1Njc2LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2 LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA9xpnzp c181gORQPcZ0uni9F5LogCGBLamqri4r6S9nMs/0C8/0Bkpq9vMP4J6MvWKOR5eV BM6p/4cjtLsEYaf/qX/O4rR7uPZDJcOeJIXC8p7cwB3XxdPNQiXNZCKzLT9exfSd 7xceGBPnTRgjS4hVpzMM6OmRI3erlXs7YMRJ1AT0mrKqXoKnU8oVhuzS8zd/jAzR Jp3v7/n6/LFDUNOAtteCcKmdJPAy7szvOsEmeB3QT28ZAAqWkASuf7p0KaiT9Yhi 5spDleMxSKekviO/qSbCoH9zjMukJwStk8TbU7fStI0q9TMJcFo6J433kdxWr1yK fDfeb1YTe3fJIQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:12:29 2025 by rpki-client