This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft File: UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json) Hash identifier: 18M8mTLKOSChZVdVAODLL66SqdtNeSKgKwWPg8XvgP8= Subject key identifier: B5:36:C4:D5:07:B3:8E:85:46:A6:53:50:C5:78:A5:A9:BE:17:70:2E Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726 Certificate serial: 019B3F4878AA8CA899DAC1EE798F79797853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft Manifest number: 1647 Signing time: Sun 21 Dec 2025 05:01:12 +0000 Manifest this update: Sun 21 Dec 2025 05:01:12 +0000 Manifest next update: Mon 22 Dec 2025 05:01:12 +0000 Files and hashes: 1: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: NJBnZW9dMP3Qg4FFeSXapU7nQIOzxEUiB109EQgfqxo=) 2: g55b--8xGOqoYXLjLnaTyHnX4ok.roa (hash: t4ttlEmgTzHuBKLqIKA24lhz9Va1EpEHdAWptFncJVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:78:aa:8c:a8:99:da:c1:ee:79:8f:79:79:78:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726 Validity Not Before: Dec 21 05:01:12 2025 GMT Not After : Dec 22 05:01:12 2025 GMT Subject: CN=b536c4d507b38e8546a65350c578a5a9be17702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:48:d5:b1:ad:a9:ef:95:03:35:04:4e:a3: e1:d3:dd:6d:0e:3e:49:dc:66:70:45:8a:a4:04:40: 5b:d5:6b:dc:cf:cc:39:c9:08:de:7d:61:fd:cb:4e: 53:f7:64:a0:16:1b:a5:15:9f:38:76:d8:fc:b1:3f: 39:fb:0b:4c:88:43:18:24:cd:5c:c6:2a:4a:6c:26: 8f:22:1f:12:d1:fb:35:78:b2:8c:8d:e4:bc:e3:d7: 5f:e7:d6:0b:37:89:ff:18:dc:fd:3c:cf:9e:a7:16: 5e:b4:90:6e:1d:4f:38:25:68:e2:05:c8:ba:51:1a: 9d:21:5f:82:d7:b9:db:2b:3b:4b:61:69:d8:44:55: 77:da:a2:1d:47:68:34:47:43:b8:5e:a3:05:23:81: 61:45:5a:b7:3d:0c:50:fd:97:5a:9e:ae:74:64:98: 56:b0:01:9d:f3:22:74:e3:4f:27:78:23:34:ff:d4: 80:07:53:00:73:b6:70:23:06:26:fd:a3:5d:bb:b6: f7:71:98:fe:3b:42:bd:78:f9:9d:e3:30:71:7a:68: f7:4c:ca:6b:99:33:38:cb:52:e6:38:bb:d3:f3:ad: 7e:d7:ca:11:3c:3c:dd:4d:5d:5d:0e:dd:ff:1b:17: e3:84:c9:55:f4:e6:80:72:f3:79:29:cd:1e:0e:56: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:36:C4:D5:07:B3:8E:85:46:A6:53:50:C5:78:A5:A9:BE:17:70:2E X509v3 Authority Key Identifier: keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:93:4c:c1:b9:f6:2a:d2:6b:06:09:29:09:07:46:a4:1f:32: 90:0f:10:52:47:42:0a:26:1a:1c:79:1e:c7:5a:ad:2d:41:11: 0d:37:c4:3b:27:de:5a:cd:80:2b:50:f8:4e:a0:21:5c:c1:6f: 74:b3:cc:f2:de:ca:3a:ea:a2:d4:dc:45:c9:48:b4:ad:e2:1d: 4c:e4:87:ad:6f:a2:73:eb:a8:27:24:0e:43:72:c2:95:4f:9e: 83:fc:fb:3f:51:66:1b:2b:da:5a:bb:f2:2d:18:40:fa:55:3d: ee:fb:00:87:77:af:4b:9c:6f:80:33:1e:69:35:37:af:eb:7c: 98:6d:06:08:93:2f:da:c3:e2:78:a4:65:35:6b:66:76:ad:82: 85:9f:4c:c4:ae:82:e4:f6:f1:c7:2e:36:a0:c4:41:38:50:24: ac:ba:d9:ea:2d:14:96:ae:57:af:0c:d5:4c:d7:d9:84:ff:28: 2a:0e:c9:58:2d:d9:0f:71:de:c2:ee:ac:0b:40:8e:b7:35:a9: ce:82:78:0a:60:50:3c:6b:5b:56:5e:e9:2e:9f:b1:e8:52:a5: ab:1d:9f:ce:4a:10:ae:b4:ae:82:cd:3c:dd:b4:a1:1e:fb:46: ce:c6:59:bf:70:68:bf:fb:df:94:f9:71:4a:8b:73:c0:7e:01: 90:d0:fa:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SHiqjKiZ2sHueY95eXhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMmEyMmJjY2QzZGU4MjY1YWZkNTVmOTgzMGZmYzAxYzgz YWY3MjYwHhcNMjUxMjIxMDUwMTEyWhcNMjUxMjIyMDUwMTEyWjAzMTEwLwYDVQQD EyhiNTM2YzRkNTA3YjM4ZTg1NDZhNjUzNTBjNTc4YTVhOWJlMTc3MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZFI1bGtqe+VAzUETqPh091tDj5J 3GZwRYqkBEBb1Wvcz8w5yQjefWH9y05T92SgFhulFZ84dtj8sT85+wtMiEMYJM1c xipKbCaPIh8S0fs1eLKMjeS849df59YLN4n/GNz9PM+epxZetJBuHU84JWjiBci6 URqdIV+C17nbKztLYWnYRFV32qIdR2g0R0O4XqMFI4FhRVq3PQxQ/Zdanq50ZJhW sAGd8yJ0408neCM0/9SAB1MAc7ZwIwYm/aNdu7b3cZj+O0K9ePmd4zBxemj3TMpr mTM4y1LmOLvT861+18oRPDzdTV1dDt3/GxfjhMlV9OaAcvN5Kc0eDlZdQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU2xNUHs46FRqZTUMV4pam+F3AuMB8GA1UdIwQY MBaAFFIqIrzNPegmWv1V+YMP/AHIOvcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUt ZmYzNzIzZTc4YmQzLzEvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUtZmYzNzIzZTc4YmQz LzEvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5NMwbn2 KtJrBgkpCQdGpB8ykA8QUkdCCiYaHHkex1qtLUERDTfEOyfeWs2AK1D4TqAhXMFv dLPM8t7KOuqi1NxFyUi0reIdTOSHrW+ic+uoJyQOQ3LClU+eg/z7P1FmGyvaWrvy LRhA+lU97vsAh3evS5xvgDMeaTU3r+t8mG0GCJMv2sPieKRlNWtmdq2ChZ9MxK6C 5Pbxxy42oMRBOFAkrLrZ6i0Ulq5XrwzVTNfZhP8oKg7JWC3ZD3Hewu6sC0COtzWp zoJ4CmBQPGtbVl7pLp+x6FKlqx2fzkoQrrSugs083bShHvtGzsZZv3Bov/vflPlx SotzwH4BkND6IQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:32 2025 by rpki-client