This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json) Hash identifier: vmDSJQyW8CLlLvdS2TUl0kbAzp0WJmlqEoUwZGgXyfo= Subject key identifier: 10:04:FF:82:5D:61:5F:82:DC:C6:DD:C0:AA:80:16:6B:5F:48:E4:3B Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29 Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629 Certificate serial: 019B766DD42C5EB29A118D6C13E451EE12A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft Manifest number: 17A9 Signing time: Wed 31 Dec 2025 22:01:07 +0000 Manifest this update: Wed 31 Dec 2025 22:01:07 +0000 Manifest next update: Thu 01 Jan 2026 22:01:07 +0000 Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=) 2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: 0hfFlo+Uzyc2wNj1xBIZmCLhmEXl055oi9XyJD1N1LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:d4:2c:5e:b2:9a:11:8d:6c:13:e4:51:ee:12:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629 Validity Not Before: Dec 31 22:01:07 2025 GMT Not After : Jan 1 22:01:07 2026 GMT Subject: CN=1004ff825d615f82dcc6ddc0aa80166b5f48e43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:9a:42:a0:0e:21:9a:c8:a5:3d:5d:4a:25: f9:ce:b5:2e:d0:90:9a:50:15:67:5a:fd:76:6c:f6: e7:b0:37:60:c6:23:d2:ec:63:61:fc:a3:8a:bb:ca: 3e:f0:d2:d9:19:48:d8:fa:ab:b5:a7:69:38:b1:e1: a1:85:2f:cd:ec:98:80:2d:e3:db:fb:f3:51:ff:52: 56:d3:ef:a2:d9:fd:36:1d:6a:98:9a:55:42:74:89: 7a:9c:09:89:27:4b:31:89:44:30:0e:a0:ac:24:b4: ff:bd:ac:a3:45:10:2e:9f:c4:16:e9:b2:29:78:70: 1c:49:23:fd:39:61:4c:c0:3a:c7:f8:3d:b6:80:e0: b1:1b:4f:38:7f:57:6e:7d:6b:ef:3b:f0:cb:63:c1: 42:31:ab:36:50:3b:ff:39:46:a2:26:74:0f:92:73: ef:96:f7:0b:1d:40:69:dc:f3:94:ce:19:20:a5:a4: 36:83:24:22:e5:0d:f7:7d:77:71:e5:d6:57:53:a4: 3e:30:1f:7a:f0:71:b7:f8:65:5d:99:0d:a8:51:7a: 7e:f0:c1:ee:ff:54:05:9b:fb:10:b4:38:bb:dd:b4: 26:c8:b0:f8:af:5b:74:d7:04:17:86:3c:24:09:25: 59:8e:ee:67:a4:55:dc:7e:8d:98:66:22:f3:36:fa: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:04:FF:82:5D:61:5F:82:DC:C6:DD:C0:AA:80:16:6B:5F:48:E4:3B X509v3 Authority Key Identifier: keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:81:a9:87:b4:72:6e:20:af:9d:fb:74:6a:eb:d4:89:ab:74: c8:83:15:76:c5:38:61:25:25:2b:6f:56:77:54:87:37:54:a0: 99:8e:3e:11:05:ad:17:5a:43:f9:4d:c5:de:c5:12:60:55:da: c7:28:b0:fe:0d:e4:f5:88:9a:9c:c9:8e:69:3a:45:3f:73:d0: 40:18:d7:d2:fd:10:b6:5f:9f:37:39:5b:8e:c8:d5:e5:5f:05: b1:24:2b:a8:c0:9a:3d:b2:45:c4:7f:3c:7a:e9:78:4c:f9:e8: 8e:03:ab:7f:38:9c:78:27:50:f6:20:09:5c:e9:2d:3b:10:07: 28:71:ac:27:96:47:20:10:a1:ab:8e:d6:76:50:cb:34:42:54: cd:1d:9a:6a:ee:2a:8c:f3:57:d4:78:85:75:6a:0f:09:d2:48: a9:cd:99:b2:8b:5a:c4:63:65:19:7e:33:f4:85:c2:1d:c5:fd: 84:3d:ed:9e:22:7a:18:38:43:64:e2:45:18:9e:5c:43:85:a4: ea:7a:b3:0f:c0:24:fb:03:05:21:fa:3c:49:f1:fb:af:9f:1b: 4c:8f:01:37:e9:76:f8:c2:d4:73:b1:ab:21:91:b5:23:12:a9: 36:b9:40:c1:2f:fb:f4:86:96:3e:61:fe:d7:32:50:86:06:93: b2:ef:1a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bdQsXrKaEY1sE+RR7hKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjljYzQyNDE1ZWFjNjVjNGJhYTFhMzkyNjMwMmU4OGI1 ZTE2MjkwHhcNMjUxMjMxMjIwMTA3WhcNMjYwMTAxMjIwMTA3WjAzMTEwLwYDVQQD EygxMDA0ZmY4MjVkNjE1ZjgyZGNjNmRkYzBhYTgwMTY2YjVmNDhlNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtKaQqAOIZrIpT1dSiX5zrUu0JCa UBVnWv12bPbnsDdgxiPS7GNh/KOKu8o+8NLZGUjY+qu1p2k4seGhhS/N7JiALePb +/NR/1JW0++i2f02HWqYmlVCdIl6nAmJJ0sxiUQwDqCsJLT/vayjRRAun8QW6bIp eHAcSSP9OWFMwDrH+D22gOCxG084f1dufWvvO/DLY8FCMas2UDv/OUaiJnQPknPv lvcLHUBp3POUzhkgpaQ2gyQi5Q33fXdx5dZXU6Q+MB968HG3+GVdmQ2oUXp+8MHu /1QFm/sQtDi73bQmyLD4r1t01wQXhjwkCSVZju5npFXcfo2YZiLzNvoE7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAE/4JdYV+C3MbdwKqAFmtfSOQ7MB8GA1UdIwQY MBaAFLhpzEJBXqxlxLqho5JjAuiLXhYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUt YWY2ODQ2N2MzNzI3LzEvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUtYWY2ODQ2N2MzNzI3 LzEvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoGph7Ry biCvnft0auvUiat0yIMVdsU4YSUlK29Wd1SHN1SgmY4+EQWtF1pD+U3F3sUSYFXa xyiw/g3k9YianMmOaTpFP3PQQBjX0v0Qtl+fNzlbjsjV5V8FsSQrqMCaPbJFxH88 eul4TPnojgOrfziceCdQ9iAJXOktOxAHKHGsJ5ZHIBChq47WdlDLNEJUzR2aau4q jPNX1HiFdWoPCdJIqc2ZsotaxGNlGX4z9IXCHcX9hD3tniJ6GDhDZOJFGJ5cQ4Wk 6nqzD8Ak+wMFIfo8SfH7r58bTI8BN+l2+MLUc7GrIZG1IxKpNrlAwS/79IaWPmH+ 1zJQhgaTsu8aXg== -----END CERTIFICATE-----Generated at Thu Jan 1 03:57:31 2026 by rpki-client