This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json) Hash identifier: 7u0t3BNfCL6Fh+Luic/mIRdFoQqHyB4zBOISO1BL23c= Subject key identifier: 42:92:B8:FE:7B:7E:53:1B:2A:C7:7B:D1:83:52:D7:44:74:EB:1F:45 Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c Certificate serial: 019B3AFDFA92A1171E4D5D9C36D6A5CDE751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft Manifest number: 15CD Signing time: Sat 20 Dec 2025 09:01:21 +0000 Manifest this update: Sat 20 Dec 2025 09:01:21 +0000 Manifest next update: Sun 21 Dec 2025 09:01:21 +0000 Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: j8BsVflqbGtR/J5rEf1mFPWofhTcQEohEsAinWad2SI=) 2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:fa:92:a1:17:1e:4d:5d:9c:36:d6:a5:cd:e7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c Validity Not Before: Dec 20 09:01:21 2025 GMT Not After : Dec 21 09:01:21 2025 GMT Subject: CN=4292b8fe7b7e531b2ac77bd18352d74474eb1f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:97:55:e1:23:02:98:83:cb:c2:f2:ce:bb: cd:d2:81:bc:66:3f:fe:5a:8f:ff:35:a3:fc:a7:d4: 0a:fd:8e:0d:06:60:6c:43:8f:27:a3:18:f3:fa:7e: ed:c0:76:68:c8:34:1a:0d:18:3b:fa:71:fc:59:c2: 88:6f:cb:82:e7:78:22:96:14:26:dd:f6:61:0d:64: b5:60:af:4e:48:c2:72:21:05:29:62:0a:e7:6e:c7: 43:85:3a:f1:a3:2e:3b:3a:24:b6:ea:79:31:ff:31: 2e:fe:33:cf:cf:77:9c:94:67:54:14:59:ab:cf:3a: e5:c0:6d:42:6d:39:c6:ba:f6:6a:06:41:83:68:68: f7:2f:07:57:8c:53:9e:40:5c:a2:7f:a8:09:5e:98: e3:92:e4:04:c6:14:a1:1a:a4:30:92:41:5e:47:ae: 43:70:0c:fb:c7:1b:24:4e:c0:3d:9b:a3:54:89:8a: 8e:4a:92:09:46:c8:02:64:d6:17:5c:cd:95:d0:4e: 03:04:30:02:83:0d:29:d2:04:6d:58:76:08:de:45: 90:d4:59:33:39:e2:f2:8e:c2:64:ae:82:37:b2:4d: a6:12:6c:5b:35:ab:f5:e5:cb:19:43:5a:4d:e3:42: a9:8a:99:1b:6b:64:ce:0a:7e:89:22:7d:bc:e9:54: 71:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:B8:FE:7B:7E:53:1B:2A:C7:7B:D1:83:52:D7:44:74:EB:1F:45 X509v3 Authority Key Identifier: keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b1:e3:85:ba:0c:03:4d:b1:e5:ec:22:91:00:f9:88:19:49: dd:fa:11:e0:93:ad:e9:fa:a7:79:50:ad:cc:ac:41:86:83:34: f1:cb:f4:a2:50:c2:85:19:6b:14:c9:73:da:80:27:a5:74:30: c9:78:91:0a:7a:52:76:42:fb:f6:9c:45:4d:27:c1:a6:91:c9: f2:49:ea:fd:63:26:13:4d:0b:ea:15:f0:de:a5:54:98:1c:e3: a8:71:e2:20:36:81:9b:ee:8a:2e:40:16:01:3d:63:97:ff:00: 29:a2:b8:42:3d:04:fb:10:c0:68:69:9a:83:79:83:e4:1d:e8: 84:13:7b:37:44:5c:ed:15:3b:5d:d7:13:25:1b:cf:f0:12:01: 99:53:47:0d:46:ec:c2:91:5f:5c:cc:19:4a:9e:4c:6d:1e:41: 2d:53:7e:4b:aa:29:f3:48:33:2a:29:a6:86:63:0c:a3:6a:82: 00:05:37:49:1f:e4:c9:15:55:3a:96:42:d9:5a:a3:1f:f3:f6: a3:bc:10:34:db:89:a2:59:02:6f:ec:4c:5c:78:6c:ce:27:68: 8a:a2:cd:18:68:4c:f9:0d:ba:b1:d9:7e:37:fa:ec:f9:fa:e4: d7:e5:7c:96:c8:9b:e5:65:01:f1:98:22:4d:38:7f:7c:48:fe: 82:e5:c1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/fqSoRceTV2cNtalzedRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy ZjFiOGMwHhcNMjUxMjIwMDkwMTIxWhcNMjUxMjIxMDkwMTIxWjAzMTEwLwYDVQQD Eyg0MjkyYjhmZTdiN2U1MzFiMmFjNzdiZDE4MzUyZDc0NDc0ZWIxZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttGXVeEjApiDy8LyzrvN0oG8Zj/+ Wo//NaP8p9QK/Y4NBmBsQ48noxjz+n7twHZoyDQaDRg7+nH8WcKIb8uC53gilhQm 3fZhDWS1YK9OSMJyIQUpYgrnbsdDhTrxoy47OiS26nkx/zEu/jPPz3eclGdUFFmr zzrlwG1CbTnGuvZqBkGDaGj3LwdXjFOeQFyif6gJXpjjkuQExhShGqQwkkFeR65D cAz7xxskTsA9m6NUiYqOSpIJRsgCZNYXXM2V0E4DBDACgw0p0gRtWHYI3kWQ1Fkz OeLyjsJkroI3sk2mEmxbNav15csZQ1pN40Kpipkba2TOCn6JIn286VRxTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKSuP57flMbKsd70YNS10R06x9FMB8GA1UdIwQY MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5 LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLHjhboM A02x5ewikQD5iBlJ3foR4JOt6fqneVCtzKxBhoM08cv0olDChRlrFMlz2oAnpXQw yXiRCnpSdkL79pxFTSfBppHJ8knq/WMmE00L6hXw3qVUmBzjqHHiIDaBm+6KLkAW AT1jl/8AKaK4Qj0E+xDAaGmag3mD5B3ohBN7N0Rc7RU7XdcTJRvP8BIBmVNHDUbs wpFfXMwZSp5MbR5BLVN+S6op80gzKimmhmMMo2qCAAU3SR/kyRVVOpZC2VqjH/P2 o7wQNNuJolkCb+xMXHhszidoiqLNGGhM+Q26sdl+N/rs+frk1+V8lsib5WUB8Zgi TTh/fEj+guXByg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:34 2025 by rpki-client