This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft File: UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json) Hash identifier: gEEh1Zi621HYty9dCEZrgXmrb65Z4K/cjhixz0yAL0Q= Subject key identifier: 1D:9F:A4:02:32:DD:F1:58:9F:AB:06:05:F1:9A:06:D7:4D:32:17:A3 Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e Certificate serial: 019B3B6B5262DD43CAC9D9E24F9A475E1BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 11:00:47 +0000 Manifest this update: Sat 20 Dec 2025 11:00:47 +0000 Manifest next update: Sun 21 Dec 2025 11:00:47 +0000 Files and hashes: 1: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: itO6WnmWWNHUcmEPX71QNmAzmRO2muqO+rK0zT+jT/o=) 2: Xjz46GAzHTdy9Og4DKomwuVi-1g.roa (hash: NqL6rYTZkhuuc0nFfTByZAzgwSO1D7DNJ/FzmVF0OjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:52:62:dd:43:ca:c9:d9:e2:4f:9a:47:5e:1b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e Validity Not Before: Dec 20 11:00:47 2025 GMT Not After : Dec 21 11:00:47 2025 GMT Subject: CN=1d9fa40232ddf1589fab0605f19a06d74d3217a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:e4:37:74:4b:ef:59:42:9a:cd:20:f7:2e: c8:63:eb:0b:ef:86:92:10:13:99:91:85:ca:bd:29: 77:75:c2:90:a7:7d:a9:b0:45:2c:a1:45:57:b5:8f: 6e:e0:ec:f0:40:20:b5:d4:6a:ff:ff:25:79:60:68: ce:bf:56:d0:71:72:f6:3c:77:f5:58:f2:60:7a:ab: 21:0e:f0:1b:9a:bf:18:01:e6:0b:4e:82:b5:d6:0c: 37:0d:21:f8:a6:40:ac:04:a3:08:fc:fa:f5:b8:6b: de:67:22:e6:41:d1:46:b7:01:0a:1e:cd:6b:ee:66: cd:69:90:28:97:a8:6e:69:21:74:32:e9:37:ab:7b: 17:16:92:67:fe:ab:da:40:75:6e:fc:17:05:26:e2: a9:69:49:a9:23:7f:82:89:b2:52:86:32:c3:17:cb: d1:4a:b6:4a:12:77:12:93:84:39:92:7e:64:7c:a2: ba:74:cb:90:98:e0:91:70:87:99:f7:76:14:dd:f5: 3f:f0:c5:96:3d:2b:16:23:8d:e6:f0:39:50:1e:93: c2:ee:0f:16:53:4a:58:bc:0c:98:2b:74:1e:17:e4: c7:91:da:c2:a4:5d:cb:7b:d8:e2:52:d1:74:b4:0e: 64:7f:70:52:99:ac:c1:26:b1:ce:88:5e:a4:eb:a2: 17:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9F:A4:02:32:DD:F1:58:9F:AB:06:05:F1:9A:06:D7:4D:32:17:A3 X509v3 Authority Key Identifier: keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ba:9c:b0:59:1a:dd:b4:31:18:df:0f:43:58:82:b5:66:bc: f2:d2:9c:5f:bc:f7:54:58:f3:66:31:ed:67:2e:86:df:27:56: 05:96:12:47:ed:d2:3d:94:5c:f5:1b:87:f1:0d:5e:5e:e1:1e: 33:23:38:92:ae:2e:af:a7:ab:7e:2e:c8:3c:d5:73:4c:63:c7: 22:0b:64:e2:18:eb:50:75:89:43:60:81:54:0e:89:7a:59:82: 48:37:a8:0a:c6:6c:8c:ee:6d:90:b7:f8:9a:26:fa:5c:ca:83: e9:c5:32:0c:fa:c1:f6:a4:d1:82:30:27:8e:dc:20:0a:60:51: ae:9c:2b:14:25:b7:7a:15:bd:33:a4:11:8f:cf:83:01:01:7c: cd:b0:3d:7d:b9:33:c5:93:44:92:90:82:e2:7f:d2:83:89:80: da:bd:29:bc:8a:de:8b:1e:4a:ad:8f:d6:a6:dd:a5:e5:b9:24: b2:01:76:da:3c:23:d5:db:68:e4:df:83:7b:4f:85:e2:4d:e6: b5:23:0b:9c:84:7f:6e:7f:6a:77:29:41:7e:2b:c5:af:e0:fc: 25:24:2a:97:1f:8a:44:e2:8b:65:38:ca:0d:de:87:f0:0d:8f: cd:60:d5:83:f7:15:7c:82:d6:66:00:69:7b:13:35:6d:b1:a4: 2b:2e:e5:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1Ji3UPKydniT5pHXhvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1 NzY5NmUwHhcNMjUxMjIwMTEwMDQ3WhcNMjUxMjIxMTEwMDQ3WjAzMTEwLwYDVQQD EygxZDlmYTQwMjMyZGRmMTU4OWZhYjA2MDVmMTlhMDZkNzRkMzIxN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqafkN3RL71lCms0g9y7IY+sL74aS EBOZkYXKvSl3dcKQp32psEUsoUVXtY9u4OzwQCC11Gr//yV5YGjOv1bQcXL2PHf1 WPJgeqshDvAbmr8YAeYLToK11gw3DSH4pkCsBKMI/Pr1uGveZyLmQdFGtwEKHs1r 7mbNaZAol6huaSF0Muk3q3sXFpJn/qvaQHVu/BcFJuKpaUmpI3+CibJShjLDF8vR SrZKEncSk4Q5kn5kfKK6dMuQmOCRcIeZ93YU3fU/8MWWPSsWI43m8DlQHpPC7g8W U0pYvAyYK3QeF+THkdrCpF3Le9jiUtF0tA5kf3BSmazBJrHOiF6k66IXlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2fpAIy3fFYn6sGBfGaBtdNMhejMB8GA1UdIwQY MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLqcsFka 3bQxGN8PQ1iCtWa88tKcX7z3VFjzZjHtZy6G3ydWBZYSR+3SPZRc9RuH8Q1eXuEe MyM4kq4ur6erfi7IPNVzTGPHIgtk4hjrUHWJQ2CBVA6JelmCSDeoCsZsjO5tkLf4 mib6XMqD6cUyDPrB9qTRgjAnjtwgCmBRrpwrFCW3ehW9M6QRj8+DAQF8zbA9fbkz xZNEkpCC4n/Sg4mA2r0pvIreix5KrY/Wpt2l5bkksgF22jwj1dto5N+De0+F4k3m tSMLnIR/bn9qdylBfivFr+D8JSQqlx+KROKLZTjKDd6H8A2PzWDVg/cVfILWZgBp exM1bbGkKy7ljA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:28:43 2025 by rpki-client