This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json) Hash identifier: UWKhtjMULnrb08VN28/F71cJ8sEZUsF0qe+wopWlPI8= Subject key identifier: 14:17:85:F5:EA:2E:4C:56:67:76:B2:9F:5E:45:FA:E1:75:A5:72:40 Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762 Certificate serial: 019B42493AB6F5D626FE06A40813EB398E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 19:00:53 +0000 Manifest this update: Sun 21 Dec 2025 19:00:53 +0000 Manifest next update: Mon 22 Dec 2025 19:00:53 +0000 Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=) 2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=) 3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: 3oCpFc2az+1gGgeZoKAoMRWYK+lb+FsmPr5PF91C/B8=) 4: dCfw3siXArkTGLHoDyVXC2auKAA.roa (hash: SQrCEBJEirqiW+cvXfiwSLmWhEoZRiFeCKfkOofqd38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:3a:b6:f5:d6:26:fe:06:a4:08:13:eb:39:8e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509df728d1b46634054972d2945fda58073b5762 Validity Not Before: Dec 21 19:00:53 2025 GMT Not After : Dec 22 19:00:53 2025 GMT Subject: CN=141785f5ea2e4c566776b29f5e45fae175a57240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:01:87:85:93:37:03:96:cb:fe:a8:61:c1: 79:b9:14:46:5a:ad:3c:5b:b7:11:1e:37:01:8a:45: 82:20:b1:84:18:ff:3f:a7:32:ad:ca:96:06:6d:a0: f6:55:97:56:5e:1c:e4:e0:5a:90:81:7e:2e:e8:a3: 05:10:b1:f9:18:9d:17:32:48:b6:09:30:fb:96:b9: 1a:f8:b0:cb:1a:83:3e:5b:ed:32:55:16:57:7d:b4: a4:5a:7e:8c:5c:c9:b9:cf:74:b7:cf:0a:34:30:b5: 7c:38:95:3b:0c:37:2e:f8:f3:19:ac:cf:67:60:2a: a6:66:e4:e5:77:8b:07:f0:14:ed:e3:68:a8:ea:12: 11:46:2b:9c:be:d7:f3:96:c6:b9:82:b7:c2:5a:95: 94:01:a7:c4:31:02:34:eb:a3:19:e5:1c:6e:4d:62: 1d:1f:5a:6b:0c:01:cb:97:b9:8c:d7:24:3c:bc:e5: 2c:28:92:ff:47:fd:d8:b0:ae:a8:af:89:cb:cc:c9: 7a:7c:8f:09:97:2b:ee:ed:a0:b5:45:14:87:d3:a6: 20:6c:f4:b0:ea:fa:78:30:36:39:36:c4:bf:d3:de: a0:ed:35:9b:5d:7a:60:ed:f2:b1:e3:1b:f0:77:4f: a4:ca:c2:21:70:59:6a:24:74:f3:0f:89:16:05:ea: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:85:F5:EA:2E:4C:56:67:76:B2:9F:5E:45:FA:E1:75:A5:72:40 X509v3 Authority Key Identifier: keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e4:bd:d4:92:39:d5:11:ab:44:4e:63:20:8f:06:e1:e2:f1: 0b:38:e7:1c:bf:31:eb:97:70:69:14:8d:8c:56:61:24:97:f7: ee:e4:a2:e7:06:10:66:f6:47:db:2f:06:16:6e:ca:2e:c8:d8: 81:34:59:cc:24:36:ec:0b:05:57:4f:2e:42:30:b8:fa:cb:bc: 4d:22:a1:8e:0c:0e:fb:bd:48:bf:cb:36:1b:e8:cf:dd:97:21: 75:ef:db:af:95:ed:b2:2c:a1:4e:59:da:e9:00:ac:f3:ab:9b: 27:12:c5:aa:ea:ff:8b:9d:7d:01:dc:ef:34:ce:75:7a:68:fc: ed:ec:e6:b1:0e:7f:9d:e9:5d:d8:34:a6:87:9c:65:25:3c:57: ba:5d:f3:10:66:1a:da:70:d7:d7:1a:9b:8b:25:66:b4:3e:c4: 60:22:f6:9d:1a:ce:f3:be:58:57:04:3c:b0:fe:18:74:89:ed: 4a:94:b1:61:9a:b1:fd:b4:52:27:f3:29:1d:d6:0e:11:7e:f2: e4:d8:7e:44:85:e9:2d:7b:77:b4:64:c2:3e:26:6c:e1:26:75: 7c:e5:dc:47:cf:1e:0a:85:1e:9f:78:d7:64:0e:e7:a9:b6:8c: 38:4c:62:fb:71:d1:ce:bb:40:95:fc:29:14:fb:20:8c:e2:fd: a9:bc:ba:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSTq29dYm/gakCBPrOY4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz YjU3NjIwHhcNMjUxMjIxMTkwMDUzWhcNMjUxMjIyMTkwMDUzWjAzMTEwLwYDVQQD EygxNDE3ODVmNWVhMmU0YzU2Njc3NmIyOWY1ZTQ1ZmFlMTc1YTU3MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA028Bh4WTNwOWy/6oYcF5uRRGWq08 W7cRHjcBikWCILGEGP8/pzKtypYGbaD2VZdWXhzk4FqQgX4u6KMFELH5GJ0XMki2 CTD7lrka+LDLGoM+W+0yVRZXfbSkWn6MXMm5z3S3zwo0MLV8OJU7DDcu+PMZrM9n YCqmZuTld4sH8BTt42io6hIRRiucvtfzlsa5grfCWpWUAafEMQI066MZ5RxuTWId H1prDAHLl7mM1yQ8vOUsKJL/R/3YsK6or4nLzMl6fI8Jlyvu7aC1RRSH06YgbPSw 6vp4MDY5NsS/096g7TWbXXpg7fKx4xvwd0+kysIhcFlqJHTzD4kWBer4ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQXhfXqLkxWZ3ayn15F+uF1pXJAMB8GA1UdIwQY MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0 LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeS91JI5 1RGrRE5jII8G4eLxCzjnHL8x65dwaRSNjFZhJJf37uSi5wYQZvZH2y8GFm7KLsjY gTRZzCQ27AsFV08uQjC4+su8TSKhjgwO+71Iv8s2G+jP3Zchde/br5XtsiyhTlna 6QCs86ubJxLFqur/i519AdzvNM51emj87ezmsQ5/neld2DSmh5xlJTxXul3zEGYa 2nDX1xqbiyVmtD7EYCL2nRrO875YVwQ8sP4YdIntSpSxYZqx/bRSJ/MpHdYOEX7y 5Nh+RIXpLXt3tGTCPiZs4SZ1fOXcR88eCoUen3jXZA7nqbaMOExi+3HRzrtAlfwp FPsgjOL9qby6Yg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:09 2025 by rpki-client