This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft File: uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json) Hash identifier: zbJI2o0sYSllkdb7arhodGjvjWt0QWHeTwNyTKafQqc= Subject key identifier: 0E:98:A9:5F:FE:8F:5D:D7:2B:D6:B6:68:2F:EC:07:50:70:8C:9F:59 Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Certificate serial: 019B45138E88769F0632374BD11E66E981BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 08:01:08 +0000 Manifest this update: Mon 22 Dec 2025 08:01:08 +0000 Manifest next update: Tue 23 Dec 2025 08:01:08 +0000 Files and hashes: 1: 4NKq_KYwCh8_wTbK61NtPt76P8I.roa (hash: mmA3nOgLzhGsU/7y4XASj7EI9JkBDcrnGGIkqWDOAYQ=) 2: 5NknPZb2YFjtunQlHWI_QMzdlKY.roa (hash: MgsBbLyiXdRHwov9hAncLGKeKv45suA9La+rVSC/C8U=) 3: EcXVeLZGF2isDVGR_npcyvVHtis.roa (hash: 74ii2z9H6EyEbd8UKPQgliXQbUTkT7bMVv5HyoTjEoI=) 4: MLMSeUg0Tn5acuTuB6POUwHtMC4.roa (hash: xJIvGvJF+baBBCFPe1lEWA46OVhv1WXXfc/yQpkBx7I=) 5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: IZhOeY6ItfP39RjWd3iLQJnH274/voZ+J/IjgQskYWs=) 6: vRCQ2oYv0pMSuRkskFBqpNokNQc.roa (hash: nfgafPbA1oV5746o00z5NyxG0STOqD8qAdDbAN/fIQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:8e:88:76:9f:06:32:37:4b:d1:1e:66:e9:81:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Validity Not Before: Dec 22 08:01:08 2025 GMT Not After : Dec 23 08:01:08 2025 GMT Subject: CN=0e98a95ffe8f5dd72bd6b6682fec0750708c9f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:a7:61:5c:6b:61:3f:d9:1b:42:1f:92:6d: 3e:62:82:e6:09:a8:4e:52:be:44:c9:ad:87:8e:a6: 17:67:03:5b:b1:fa:45:1b:80:4a:74:a4:04:84:40: 6c:51:5f:c5:a0:f0:5d:e8:84:81:44:93:9d:07:a7: af:b6:50:82:6f:1a:19:b7:69:0b:14:ac:7f:f4:31: 8d:a5:55:3a:7a:43:58:f0:d9:28:9f:7d:27:3a:85: e7:1e:c0:3b:3e:1b:1b:46:1c:76:6d:e0:8a:fa:f8: 90:09:9f:50:fd:07:50:d6:72:33:a3:3e:8d:0f:3d: 53:c1:60:08:3d:21:c9:bb:f7:e9:20:2d:59:35:fd: 43:28:1d:c2:df:52:51:ec:ee:6f:66:ae:b8:7b:80: 15:c5:6a:b3:c3:1a:b8:e7:1d:ea:42:97:5b:2c:26: c1:81:64:ec:22:01:69:1f:e5:11:5c:42:45:74:ed: 32:06:f7:c4:91:4e:41:35:a7:fb:24:eb:6d:cc:1c: 73:ae:4f:6d:b8:40:5e:98:9f:c3:c7:a7:90:6a:86: 97:9f:a1:37:2e:09:01:df:47:b0:dd:e8:94:f1:90: 70:45:7e:6b:90:f0:88:17:14:02:7f:7c:ab:69:ca: c4:8a:f6:7b:e7:a1:30:6c:f2:c0:ab:16:e2:aa:b9: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:98:A9:5F:FE:8F:5D:D7:2B:D6:B6:68:2F:EC:07:50:70:8C:9F:59 X509v3 Authority Key Identifier: keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:9c:70:52:1d:30:68:00:38:c1:47:1a:9f:b8:86:0b:39: 8f:5f:02:6a:79:58:0e:84:2e:7d:93:56:9c:0f:3d:ec:b4:e1: 96:ed:28:53:49:cb:29:85:bb:9c:21:14:40:41:d5:88:d9:6d: 1e:ce:4e:da:b8:d4:bc:57:31:59:bb:6f:83:b0:75:12:1a:df: af:51:9f:91:cf:5b:94:ef:ed:ac:fa:43:ac:c8:40:5c:c0:7a: f6:4b:1c:ff:50:ba:11:22:2e:f2:e8:39:ab:b1:f2:f9:01:03: 9a:a4:ac:7c:da:ce:5b:05:fb:06:0a:c8:24:5f:27:56:25:5e: 85:93:40:81:49:3b:5c:24:3e:88:c0:c3:06:94:22:21:85:63: 3e:a7:e5:e6:3f:da:3d:4f:10:03:ea:ed:57:15:96:34:a3:cf: f2:e3:cd:c8:86:f0:d5:be:64:82:c8:87:38:df:43:0c:82:7e: 0a:44:62:ff:e5:2f:f8:54:91:2f:fc:0c:67:d9:aa:78:14:fd: 53:85:6e:ca:42:b8:26:8a:0d:66:5c:e5:61:15:a7:e3:64:bf: fc:e1:c4:1b:0a:6c:d5:c1:40:c6:c4:a5:ea:33:91:a3:04:9d: a3:5a:18:d9:a5:31:67:22:d0:00:aa:e3:e9:bb:b8:ba:d7:74: f1:26:01:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE46Idp8GMjdL0R5m6YG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5 MjUxMTcwHhcNMjUxMjIyMDgwMTA4WhcNMjUxMjIzMDgwMTA4WjAzMTEwLwYDVQQD EygwZTk4YTk1ZmZlOGY1ZGQ3MmJkNmI2NjgyZmVjMDc1MDcwOGM5ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldanYVxrYT/ZG0Ifkm0+YoLmCahO Ur5Eya2HjqYXZwNbsfpFG4BKdKQEhEBsUV/FoPBd6ISBRJOdB6evtlCCbxoZt2kL FKx/9DGNpVU6ekNY8Nkon30nOoXnHsA7PhsbRhx2beCK+viQCZ9Q/QdQ1nIzoz6N Dz1TwWAIPSHJu/fpIC1ZNf1DKB3C31JR7O5vZq64e4AVxWqzwxq45x3qQpdbLCbB gWTsIgFpH+URXEJFdO0yBvfEkU5BNaf7JOttzBxzrk9tuEBemJ/Dx6eQaoaXn6E3 LgkB30ew3eiU8ZBwRX5rkPCIFxQCf3yracrEivZ756EwbPLAqxbiqrkwDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6YqV/+j13XK9a2aC/sB1BwjJ9ZMB8GA1UdIwQY MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt NDJiM2Q2OGI1Njc2LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2 LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmWccFId MGgAOMFHGp+4hgs5j18CanlYDoQufZNWnA897LThlu0oU0nLKYW7nCEUQEHViNlt Hs5O2rjUvFcxWbtvg7B1Ehrfr1Gfkc9blO/trPpDrMhAXMB69ksc/1C6ESIu8ug5 q7Hy+QEDmqSsfNrOWwX7BgrIJF8nViVehZNAgUk7XCQ+iMDDBpQiIYVjPqfl5j/a PU8QA+rtVxWWNKPP8uPNyIbw1b5kgsiHON9DDIJ+CkRi/+Uv+FSRL/wMZ9mqeBT9 U4VuykK4JooNZlzlYRWn42S//OHEGwps1cFAxsSl6jORowSdo1oY2aUxZyLQAKrj 6bu4utd08SYB7A== -----END CERTIFICATE-----Generated at Mon Dec 22 09:33:10 2025 by rpki-client