This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft File: UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json) Hash identifier: 8wvZsirw2dLEsXd1rDkCW798tzsEcYsCtEWL8/tQ9b4= Subject key identifier: 33:38:BA:E6:9C:1F:1A:8A:9C:25:54:DA:D1:56:61:40:CC:C2:DC:8E Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e Certificate serial: 019B31C3A8740C3B5024248395C07395E168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 14:01:04 +0000 Manifest this update: Thu 18 Dec 2025 14:01:04 +0000 Manifest next update: Fri 19 Dec 2025 14:01:04 +0000 Files and hashes: 1: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: 5agXbo+3VRWaJQA6O81OY4XRIPqiTiJP1fUFPkAc5Lw=) 2: Xjz46GAzHTdy9Og4DKomwuVi-1g.roa (hash: NqL6rYTZkhuuc0nFfTByZAzgwSO1D7DNJ/FzmVF0OjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:a8:74:0c:3b:50:24:24:83:95:c0:73:95:e1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e Validity Not Before: Dec 18 14:01:04 2025 GMT Not After : Dec 19 14:01:04 2025 GMT Subject: CN=3338bae69c1f1a8a9c2554dad1566140ccc2dc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5b:4b:9a:a8:90:a4:9b:c5:3a:cd:50:70:78: 91:f4:a4:55:2c:10:eb:bb:20:83:d1:d0:5b:95:3c: c1:bc:a0:f7:32:dd:61:43:fc:16:db:68:01:a2:ac: dc:34:12:46:85:f5:99:bf:7d:56:d3:40:b0:01:b1: fc:a7:13:28:1a:cb:4c:d3:9e:d7:d5:3b:56:57:91: b6:3e:88:df:34:01:a1:45:1b:27:c3:0a:a2:8d:3f: b7:08:d4:c6:b2:93:e4:bc:7c:c6:04:2a:a7:3c:d3: 86:80:c0:88:e5:e8:db:a1:95:2d:04:9e:39:64:22: 82:05:62:14:df:75:fc:02:7a:e2:2e:20:b2:09:33: dd:cb:f4:e3:52:a8:37:37:44:8b:8d:6c:c8:54:74: 7a:78:77:43:58:7f:45:a7:95:24:34:38:31:97:ee: 26:b5:26:6e:68:42:cb:6b:3f:ee:d5:f0:64:f3:07: ff:25:31:0f:53:76:9a:04:2b:11:8e:00:db:46:8a: d4:d5:a8:b7:73:0a:c6:c6:a4:cc:d9:05:85:76:85: bf:93:08:2f:38:50:38:47:9c:d2:5f:d6:e6:1f:0f: df:bc:a3:a0:e4:4d:d0:67:61:cd:d5:78:64:a3:64: 1b:93:b0:66:bc:ea:ec:4b:eb:34:a2:a5:20:ca:00: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:38:BA:E6:9C:1F:1A:8A:9C:25:54:DA:D1:56:61:40:CC:C2:DC:8E X509v3 Authority Key Identifier: keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f0:cf:3f:32:05:ca:e9:93:cb:2e:19:bb:3c:71:79:56:8d: 3b:4d:4c:6a:f7:dc:9e:69:08:7f:04:00:8c:2c:27:43:4c:62: fb:21:73:86:59:78:2b:c4:7e:e7:c3:af:a5:2a:47:f7:36:52: 39:2d:29:e1:36:84:69:27:7d:d8:41:fc:27:7a:f2:bd:8b:d7: c5:35:eb:12:8a:4c:f9:b4:cb:91:6d:53:29:19:1a:42:89:eb: 28:2b:bd:09:0b:be:6e:a9:2a:13:03:78:23:70:81:b3:c4:c6: 4b:54:a1:40:c7:a8:63:ea:1a:fe:db:5c:ad:b5:68:64:79:54: 6c:5d:00:0c:c9:02:77:e6:10:76:74:32:ad:95:5c:3f:fb:6e: a8:7f:73:6e:af:de:76:e0:82:0c:8f:d9:e5:a1:f0:7b:31:cc: 19:9c:ca:db:2d:e7:fa:0b:53:97:9e:b7:37:00:fc:d3:67:6c: 71:40:75:99:84:37:03:67:bc:d0:18:af:60:d8:5f:67:ca:68: fb:40:65:81:bc:ad:57:96:89:2c:90:22:2d:ac:e2:0a:9b:e1: 60:4a:2b:5f:ee:b3:8c:09:ea:f3:f2:9d:26:42:c6:09:2a:13: 3b:8e:af:8e:9e:f1:75:cc:eb:dc:4f:8d:2c:0e:07:e9:6a:4b: db:9a:0e:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw6h0DDtQJCSDlcBzleFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1 NzY5NmUwHhcNMjUxMjE4MTQwMTA0WhcNMjUxMjE5MTQwMTA0WjAzMTEwLwYDVQQD EygzMzM4YmFlNjljMWYxYThhOWMyNTU0ZGFkMTU2NjE0MGNjYzJkYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ltLmqiQpJvFOs1QcHiR9KRVLBDr uyCD0dBblTzBvKD3Mt1hQ/wW22gBoqzcNBJGhfWZv31W00CwAbH8pxMoGstM057X 1TtWV5G2PojfNAGhRRsnwwqijT+3CNTGspPkvHzGBCqnPNOGgMCI5ejboZUtBJ45 ZCKCBWIU33X8AnriLiCyCTPdy/TjUqg3N0SLjWzIVHR6eHdDWH9Fp5UkNDgxl+4m tSZuaELLaz/u1fBk8wf/JTEPU3aaBCsRjgDbRorU1ai3cwrGxqTM2QWFdoW/kwgv OFA4R5zSX9bmHw/fvKOg5E3QZ2HN1Xhko2Qbk7BmvOrsS+s0oqUgygCMmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM4uuacHxqKnCVU2tFWYUDMwtyOMB8GA1UdIwQY MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvDPPzIF yumTyy4ZuzxxeVaNO01MavfcnmkIfwQAjCwnQ0xi+yFzhll4K8R+58OvpSpH9zZS OS0p4TaEaSd92EH8J3ryvYvXxTXrEopM+bTLkW1TKRkaQonrKCu9CQu+bqkqEwN4 I3CBs8TGS1ShQMeoY+oa/ttcrbVoZHlUbF0ADMkCd+YQdnQyrZVcP/tuqH9zbq/e duCCDI/Z5aHwezHMGZzK2y3n+gtTl563NwD802dscUB1mYQ3A2e80BivYNhfZ8po +0BlgbytV5aJLJAiLaziCpvhYEorX+6zjAnq8/KdJkLGCSoTO46vjp7xdczr3E+N LA4H6WpL25oO2w== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:55 2025 by rpki-client