This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json) Hash identifier: dipYPaWswuHnzOQrD9AAzREHxUpHql6IwXU8t+/JXX8= Subject key identifier: AB:BA:E7:F3:30:DB:17:7D:EB:5E:11:26:FD:82:26:C5:EE:4F:61:6E Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc Certificate serial: 019B5606B6F4878A4A30ABCE7CAF358E6545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 15:00:39 +0000 Manifest this update: Thu 25 Dec 2025 15:00:39 +0000 Manifest next update: Fri 26 Dec 2025 15:00:39 +0000 Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=) 2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: uAro1AI2fUwL9fnGrN/1Tzqw8hjmEvUcH6bpQ5wMnYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:b6:f4:87:8a:4a:30:ab:ce:7c:af:35:8e:65:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc Validity Not Before: Dec 25 15:00:39 2025 GMT Not After : Dec 26 15:00:39 2025 GMT Subject: CN=abbae7f330db177deb5e1126fd8226c5ee4f616e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:b5:11:0d:e6:36:4f:12:7c:07:a1:d2:26: 80:17:01:b1:40:3a:2b:87:7b:5f:98:e7:1a:1d:58: d4:5c:23:43:90:8f:5c:4b:86:7f:ac:93:36:92:27: d5:f5:bd:5b:1d:ff:8b:cf:dd:1e:8d:2b:b5:b2:b3: 5b:30:72:1f:00:26:5b:25:47:76:36:b3:3c:46:fc: 86:31:5c:c8:e9:d8:a3:14:3c:bb:c5:72:e1:3e:34: 6e:33:8d:70:1e:fa:98:82:01:91:8a:f5:4a:9e:37: b0:68:5d:f8:5a:d9:65:b3:ab:2c:61:c2:c7:02:d9: 97:d7:eb:7c:24:c3:1f:bb:bc:27:35:0a:5a:24:5e: 75:14:0e:2d:d7:fd:75:fd:83:18:99:82:32:e2:5b: 07:bd:b8:c1:f7:3b:af:fa:89:76:70:1c:da:f7:0d: c4:1b:cb:20:ec:b5:b1:27:3d:40:4c:da:53:32:05: c5:49:a9:55:3a:5e:f7:00:8e:c2:b9:17:ed:a4:00: 65:51:7c:4c:5c:a7:26:9e:8a:5e:b5:a6:fb:6b:a5: 3e:ae:f2:9b:ca:0a:f3:0a:64:03:5f:c1:54:97:eb: e7:1b:c8:e6:9f:bb:79:f0:80:a3:34:ac:ba:32:30: 8a:65:a4:d7:75:76:90:f7:e6:44:b2:8c:6e:26:ea: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BA:E7:F3:30:DB:17:7D:EB:5E:11:26:FD:82:26:C5:EE:4F:61:6E X509v3 Authority Key Identifier: keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:90:cb:44:46:49:a9:d2:68:1b:7a:dd:57:01:b7:8c:c4:e4: 36:1b:ec:b9:6c:19:80:38:b5:aa:56:cd:68:85:d1:9b:60:c3: 05:72:30:fa:71:e6:bd:05:c5:58:d3:69:9d:a0:fe:43:fc:0f: 05:81:69:00:6a:3b:de:e3:2d:b5:b3:c4:81:d7:46:08:3a:42: 6d:68:a5:ea:0d:ec:5d:93:9f:29:d0:ca:8f:67:68:32:48:28: 1f:aa:e7:c3:88:3b:04:07:12:b6:7b:aa:9a:9c:e0:5d:bd:10: 04:26:74:80:8e:e7:f2:87:af:d9:87:d4:18:55:64:a8:dc:89: 1a:e3:1d:d9:47:5d:26:92:20:05:38:d4:82:e3:e5:6b:60:ed: d0:10:d8:c2:ab:bc:55:3a:81:5f:bb:ae:48:ea:8e:c1:65:1e: 56:99:58:26:b5:08:5c:d4:4f:4d:6d:ff:04:70:f7:2f:df:02: 3a:60:28:be:ef:ac:ea:7f:33:b6:08:e9:1f:e8:49:cb:18:82: 34:59:d3:7d:4c:d4:2e:c0:87:10:2a:04:2d:fa:bb:6d:33:45: f3:85:da:e5:47:7e:2d:6f:c0:f1:80:79:fd:69:7d:57:94:8b: ee:e7:4f:bf:0d:a4:dc:47:a3:16:0b:e2:7f:a5:5b:44:6c:78: 4d:eb:9e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBrb0h4pKMKvOfK81jmVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh YzJiZmMwHhcNMjUxMjI1MTUwMDM5WhcNMjUxMjI2MTUwMDM5WjAzMTEwLwYDVQQD EyhhYmJhZTdmMzMwZGIxNzdkZWI1ZTExMjZmZDgyMjZjNWVlNGY2MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns+1EQ3mNk8SfAeh0iaAFwGxQDor h3tfmOcaHVjUXCNDkI9cS4Z/rJM2kifV9b1bHf+Lz90ejSu1srNbMHIfACZbJUd2 NrM8RvyGMVzI6dijFDy7xXLhPjRuM41wHvqYggGRivVKnjewaF34Wtlls6ssYcLH AtmX1+t8JMMfu7wnNQpaJF51FA4t1/11/YMYmYIy4lsHvbjB9zuv+ol2cBza9w3E G8sg7LWxJz1ATNpTMgXFSalVOl73AI7CuRftpABlUXxMXKcmnopetab7a6U+rvKb ygrzCmQDX8FUl+vnG8jmn7t58ICjNKy6MjCKZaTXdXaQ9+ZEsoxuJuonmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKu65/Mw2xd9614RJv2CJsXuT2FuMB8GA1UdIwQY MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpDLREZJ qdJoG3rdVwG3jMTkNhvsuWwZgDi1qlbNaIXRm2DDBXIw+nHmvQXFWNNpnaD+Q/wP BYFpAGo73uMttbPEgddGCDpCbWil6g3sXZOfKdDKj2doMkgoH6rnw4g7BAcStnuq mpzgXb0QBCZ0gI7n8oev2YfUGFVkqNyJGuMd2UddJpIgBTjUguPla2Dt0BDYwqu8 VTqBX7uuSOqOwWUeVplYJrUIXNRPTW3/BHD3L98COmAovu+s6n8ztgjpH+hJyxiC NFnTfUzULsCHECoELfq7bTNF84Xa5Ud+LW/A8YB5/Wl9V5SL7udPvw2k3EejFgvi f6VbRGx4TeueWQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:05:35 2025 by rpki-client