This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft File: UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json) Hash identifier: r1DhptzTrrSkMR4uf4mJ47DFAX0ZxPHYmJ/XfvPPppA= Subject key identifier: 44:B2:DE:6A:E7:C8:59:B5:6D:72:B7:46:A7:E2:6C:B0:58:5F:71:68 Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61 Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61 Certificate serial: 019B45B842280F88177E43686BF07632127B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft Manifest number: 0E73 Signing time: Mon 22 Dec 2025 11:01:01 +0000 Manifest this update: Mon 22 Dec 2025 11:01:01 +0000 Manifest next update: Tue 23 Dec 2025 11:01:01 +0000 Files and hashes: 1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: cNaB1ssNCt14swSAIIDlZ0ZJ6bT+5yaGZ3wYz0Ch8iQ=) 2: XcVo6Gcf-l3iWhZzeOaaEzufuDw.roa (hash: Q8U31mISF8PJJ4X9+WRd+NF2mJCwrseuFFyVkfpjEQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:42:28:0f:88:17:7e:43:68:6b:f0:76:32:12:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61 Validity Not Before: Dec 22 11:01:01 2025 GMT Not After : Dec 23 11:01:01 2025 GMT Subject: CN=44b2de6ae7c859b56d72b746a7e26cb0585f7168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:74:05:b6:31:bf:c9:aa:d5:0e:4d:22:07: e0:28:6a:1e:b5:93:ca:1b:26:ea:83:64:75:76:31: 36:36:c5:71:d8:91:5a:61:1c:5f:e1:32:d8:b9:ec: 18:4e:52:90:38:fe:c8:6c:43:0a:b6:63:fc:35:14: 6e:68:7a:f4:7c:08:48:86:74:72:e7:92:4a:80:5e: 87:65:5f:d7:bf:82:7f:79:f7:74:ff:27:6d:40:3f: 75:b6:ab:9f:49:20:4d:c2:28:75:08:ed:e1:53:c3: 5e:44:27:06:34:36:f1:b5:6f:73:d7:07:2a:25:3a: ff:f4:8d:25:28:9d:28:da:55:06:51:af:f0:cb:ac: 74:48:4e:fd:51:c6:c6:3d:c8:6c:8d:07:77:6f:04: f2:88:27:ad:07:7f:c5:15:3a:52:57:20:72:37:2f: 6e:59:6c:13:6d:c7:bc:44:d8:a5:df:69:39:62:c1: 12:2a:cf:85:9a:9a:c2:51:a1:0c:fc:2b:6a:d6:18: 41:ad:40:93:6d:32:1e:37:8d:70:0c:fe:e4:cc:68: 26:a2:d8:21:fc:a1:1b:2a:09:a1:7c:6b:b2:2d:4c: db:bc:3c:f2:e4:79:5f:2f:34:fe:b5:58:b9:80:e9: 25:4d:06:dd:e4:fe:d0:c7:2f:33:87:da:09:6e:49: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B2:DE:6A:E7:C8:59:B5:6D:72:B7:46:A7:E2:6C:B0:58:5F:71:68 X509v3 Authority Key Identifier: keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2c:2c:35:73:6e:71:d9:16:a1:2f:2a:f7:d9:19:ee:52:0b: 39:77:8c:e7:ab:c1:48:03:e7:1e:5f:69:6c:e9:5e:ca:d5:9e: 34:88:f1:20:9e:af:8a:f2:6e:2c:59:51:b6:b3:42:09:0f:83: 54:19:bd:43:31:2e:3f:8c:51:7e:3f:06:9f:1e:98:b6:29:b0: 44:d8:d9:27:6e:79:40:c8:75:50:1a:a9:10:a0:48:8e:35:6e: 10:f6:2c:52:3d:a4:c1:7f:f0:93:11:84:0e:cf:1a:74:67:43: 92:1f:e1:e1:03:24:5e:b5:b3:a1:f7:40:e3:2d:d2:dc:32:25: 01:84:b2:cf:c1:f0:c4:90:cc:3c:e7:88:e9:0d:c1:df:a4:94: 79:43:32:ac:13:30:3b:83:93:3e:89:25:aa:db:1a:39:8d:94: c8:1a:b3:bb:8d:06:ef:63:42:4c:86:ea:8e:79:a1:a3:e1:d9: c3:5d:af:f4:9b:1a:d1:72:35:9c:02:aa:2f:3d:5a:1c:12:94: ac:76:e4:fb:b8:70:5a:ab:94:f8:d2:d1:09:f4:70:ea:d6:b6: e6:27:95:7e:96:ac:eb:d8:ce:80:53:73:a5:b4:35:9e:f1:e1: 4a:27:6c:53:48:b3:f5:3c:0c:f4:5a:27:b8:33:e8:8f:d6:17: 1d:bc:52:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuEIoD4gXfkNoa/B2MhJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZjk0MTE3MzU2NGEwOWI3Y2Y4ZWZkZDk4NzU2MTQyNjJh N2RkNjEwHhcNMjUxMjIyMTEwMTAxWhcNMjUxMjIzMTEwMTAxWjAzMTEwLwYDVQQD Eyg0NGIyZGU2YWU3Yzg1OWI1NmQ3MmI3NDZhN2UyNmNiMDU4NWY3MTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUB0BbYxv8mq1Q5NIgfgKGoetZPK Gybqg2R1djE2NsVx2JFaYRxf4TLYuewYTlKQOP7IbEMKtmP8NRRuaHr0fAhIhnRy 55JKgF6HZV/Xv4J/efd0/ydtQD91tqufSSBNwih1CO3hU8NeRCcGNDbxtW9z1wcq JTr/9I0lKJ0o2lUGUa/wy6x0SE79UcbGPchsjQd3bwTyiCetB3/FFTpSVyByNy9u WWwTbce8RNil32k5YsESKs+FmprCUaEM/Ctq1hhBrUCTbTIeN41wDP7kzGgmotgh /KEbKgmhfGuyLUzbvDzy5HlfLzT+tVi5gOklTQbd5P7Qxy8zh9oJbkkpowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESy3mrnyFm1bXK3RqfibLBYX3FoMB8GA1UdIwQY MBaAFFL5QRc1ZKCbfPjv3Zh1YUJip91hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEt MDlkOGU0OTNjMWY5LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEtMDlkOGU0OTNjMWY5 LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSwsNXNu cdkWoS8q99kZ7lILOXeM56vBSAPnHl9pbOleytWeNIjxIJ6vivJuLFlRtrNCCQ+D VBm9QzEuP4xRfj8Gnx6YtimwRNjZJ255QMh1UBqpEKBIjjVuEPYsUj2kwX/wkxGE Ds8adGdDkh/h4QMkXrWzofdA4y3S3DIlAYSyz8HwxJDMPOeI6Q3B36SUeUMyrBMw O4OTPoklqtsaOY2UyBqzu40G72NCTIbqjnmho+HZw12v9Jsa0XI1nAKqLz1aHBKU rHbk+7hwWquU+NLRCfRw6ta25ieVfpas69jOgFNzpbQ1nvHhSidsU0iz9TwM9Fon uDPoj9YXHbxS7A== -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:47 2025 by rpki-client