This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json) Hash identifier: lgKSwSQ3NjBB+JkX8PYW4hlKPr9gwb5DCPBnHxFIdb0= Subject key identifier: 38:46:B7:97:01:99:77:FF:BA:8C:1C:68:16:84:97:05:26:25:5A:9E Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706 Certificate serial: 019B5260C2829C66DC0B6D920BD2F7A19BBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 22:00:31 +0000 Manifest this update: Wed 24 Dec 2025 22:00:31 +0000 Manifest next update: Thu 25 Dec 2025 22:00:31 +0000 Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: RWB5xc0MBAMIe7pCv38AT2vVNZ2ABKFcemOkhsgZ0Cw=) 2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:c2:82:9c:66:dc:0b:6d:92:0b:d2:f7:a1:9b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706 Validity Not Before: Dec 24 22:00:31 2025 GMT Not After : Dec 25 22:00:31 2025 GMT Subject: CN=3846b797019977ffba8c1c681684970526255a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:1d:8b:dc:c3:57:98:ae:23:89:c4:36:ea: 3d:4f:a6:46:0e:fe:ef:42:07:8b:52:2d:bd:74:c1: ab:a1:4c:5f:b4:6f:98:e2:e5:4f:22:da:42:04:9b: 1b:3a:ef:3e:33:5c:0c:19:9a:51:c2:fc:f0:0d:af: cd:b2:46:32:3d:9a:58:bd:cf:67:2e:3d:c6:b1:59: dd:26:f3:42:33:d2:e4:7f:1b:29:49:09:0f:32:da: 75:80:af:e6:9a:62:dd:db:28:4d:82:b3:f3:bc:ed: 82:36:5d:bd:bc:7f:fa:92:0f:2b:f4:05:df:a9:b4: 7d:7a:b5:bd:78:c4:32:7c:e8:52:99:90:62:92:db: 08:bc:4e:26:88:54:e8:70:cc:f3:58:a8:1b:5f:5b: 1a:61:28:b5:12:bc:cc:b7:62:48:ef:3f:68:d9:8b: 3d:65:6d:00:1c:4e:83:19:97:aa:8b:34:94:e7:d3: da:c9:ff:23:e7:01:83:2e:34:01:3c:9b:51:b3:4d: c0:7f:8e:73:71:99:b0:3f:5a:aa:7b:09:54:ef:6f: a0:5b:e3:e4:8e:ad:87:eb:3b:a2:ed:5a:c2:59:6b: 13:a6:81:ab:0a:19:7f:14:4b:16:87:11:07:2f:61: 88:b6:db:e4:58:a9:f7:7b:05:88:d5:c1:b3:eb:b1: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:46:B7:97:01:99:77:FF:BA:8C:1C:68:16:84:97:05:26:25:5A:9E X509v3 Authority Key Identifier: keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:79:5a:77:49:1c:5e:59:7a:40:e6:ce:45:d3:d1:6e:11:20: cc:b5:8f:52:33:ec:c3:d6:ae:e9:40:80:af:93:ef:fc:e5:78: 41:44:68:f7:57:78:d9:6e:62:13:93:a8:a6:6a:6f:77:7a:35: 3a:70:e3:80:ab:03:b0:75:14:05:c9:0e:f3:e0:42:7f:92:31: f6:7e:2a:85:ab:e9:3a:7d:ba:7e:00:e6:93:b6:b8:4c:fc:4a: 4d:dc:9a:b3:60:56:6e:4d:ba:46:68:7c:69:e6:cb:07:18:29: 39:9b:65:e8:25:34:0f:54:33:a1:3d:50:b2:24:94:7a:b5:c6: e3:15:2d:da:9d:f4:db:3a:09:9d:43:32:30:d8:3c:d4:86:d4: 0b:3d:a7:38:ca:b1:c1:2e:c1:c5:7a:4f:34:c4:cd:1c:16:62: 04:71:71:d3:8c:b5:15:90:a5:3a:38:6a:21:84:ab:00:d8:4b: 6d:9b:6b:a4:cd:a6:a4:2f:b2:c6:67:3d:dc:2f:7d:a1:7f:11: 74:c0:e2:07:8f:a7:3e:bf:c7:71:4e:17:e3:a6:cf:94:a6:90: 3a:35:78:a2:51:96:ee:94:4b:a5:f2:d8:6a:47:82:43:78:dd: 8f:04:85:1d:54:ec:61:06:e7:a9:dc:02:5e:68:75:ee:60:7c: be:50:a3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYMKCnGbcC22SC9L3oZu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWYyNDdkNGJjNzAyMTQ2MDZkMDdkNjU5MzE5ZWMzZjM0 Nzk3MDYwHhcNMjUxMjI0MjIwMDMxWhcNMjUxMjI1MjIwMDMxWjAzMTEwLwYDVQQD EygzODQ2Yjc5NzAxOTk3N2ZmYmE4YzFjNjgxNjg0OTcwNTI2MjU1YTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a0di9zDV5iuI4nENuo9T6ZGDv7v QgeLUi29dMGroUxftG+Y4uVPItpCBJsbOu8+M1wMGZpRwvzwDa/NskYyPZpYvc9n Lj3GsVndJvNCM9LkfxspSQkPMtp1gK/mmmLd2yhNgrPzvO2CNl29vH/6kg8r9AXf qbR9erW9eMQyfOhSmZBiktsIvE4miFTocMzzWKgbX1saYSi1ErzMt2JI7z9o2Ys9 ZW0AHE6DGZeqizSU59Payf8j5wGDLjQBPJtRs03Af45zcZmwP1qqewlU72+gW+Pk jq2H6zui7VrCWWsTpoGrChl/FEsWhxEHL2GIttvkWKn3ewWI1cGz67Em0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhGt5cBmXf/uowcaBaElwUmJVqeMB8GA1UdIwQY MBaAFFMfJH1LxwIUYG0H1lkxnsPzR5cGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMt OGVkODQzM2QzOGM0LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMtOGVkODQzM2QzOGM0 LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3lad0kc Xll6QObORdPRbhEgzLWPUjPsw9au6UCAr5Pv/OV4QURo91d42W5iE5Oopmpvd3o1 OnDjgKsDsHUUBckO8+BCf5Ix9n4qhavpOn26fgDmk7a4TPxKTdyas2BWbk26Rmh8 aebLBxgpOZtl6CU0D1QzoT1QsiSUerXG4xUt2p302zoJnUMyMNg81IbUCz2nOMqx wS7BxXpPNMTNHBZiBHFx04y1FZClOjhqIYSrANhLbZtrpM2mpC+yxmc93C99oX8R dMDiB4+nPr/HcU4X46bPlKaQOjV4olGW7pRLpfLYakeCQ3jdjwSFHVTsYQbnqdwC Xmh17mB8vlCjfw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:58 2025 by rpki-client