This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json) Hash identifier: MNc0UeRF3+cvpy9XnQNE5rHN4MKNHho8RtmXLejQBZ8= Subject key identifier: 9B:41:86:7F:A2:4B:83:DD:4F:1F:A3:EA:71:11:A4:3E:B2:E1:66:63 Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33 Certificate serial: 019B4ADF4B652E6085950740ADD2C2EC3F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 11:01:46 +0000 Manifest this update: Tue 23 Dec 2025 11:01:46 +0000 Manifest next update: Wed 24 Dec 2025 11:01:46 +0000 Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=) 2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: 4e9BeQSyEvhTBZMPK52th3VsPqfuyz1gUIcyMGQIwtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:4b:65:2e:60:85:95:07:40:ad:d2:c2:ec:3f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33 Validity Not Before: Dec 23 11:01:46 2025 GMT Not After : Dec 24 11:01:46 2025 GMT Subject: CN=9b41867fa24b83dd4f1fa3ea7111a43eb2e16663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:17:d1:85:9b:92:ef:bb:6a:1c:c7:3b:c5: 5f:76:eb:f4:96:af:42:6b:20:6b:c8:1b:1c:5d:e3: 42:f4:2d:0b:fb:98:e0:79:c1:d1:72:53:94:11:58: cb:fa:cf:e5:4c:f8:a8:5f:11:6d:f7:f7:de:23:56: 53:ec:1b:0a:02:19:5a:68:9d:bc:53:d6:7f:39:dd: 5a:3f:e8:b1:0c:ca:01:12:42:13:9b:62:6b:bc:61: f2:f4:94:72:b1:66:95:13:36:88:70:1b:48:bd:7b: 99:60:6b:2d:98:1f:6a:95:63:9b:83:13:a1:df:3d: fe:7a:4e:cf:f7:82:cd:de:65:09:67:b0:8d:d2:82: 9e:aa:76:ae:74:14:20:35:ca:9a:35:25:5f:8e:20: b6:9d:3c:36:7a:39:ba:0c:cc:9c:54:fb:76:a3:8a: 12:ee:82:03:45:7e:1e:2f:86:fc:a1:c6:f0:7b:eb: 58:98:07:b2:73:36:14:31:3b:22:c3:4f:8c:4c:8e: d2:00:f0:9f:ca:3e:1c:a3:42:ce:3e:d0:34:dd:86: 2c:e0:dc:e2:b4:03:24:02:45:20:28:5e:88:cb:bb: dc:0e:4a:c7:fa:58:08:9d:3d:c8:5e:22:b7:e7:68: 35:cd:9e:ec:ab:03:93:1c:9b:08:e8:3e:b8:2f:8f: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:86:7F:A2:4B:83:DD:4F:1F:A3:EA:71:11:A4:3E:B2:E1:66:63 X509v3 Authority Key Identifier: keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f9:0f:7c:5d:aa:7d:07:43:35:25:9a:1e:b1:f6:97:87:b4: 29:4e:8a:bb:87:42:3e:4a:cd:77:58:b4:81:18:9f:fa:5c:e5: 77:e3:54:4c:c8:6d:ce:81:f6:34:45:ed:78:6a:ac:bf:75:d2: 1b:08:a5:f2:ec:02:48:70:2c:46:db:62:7c:3a:19:25:c2:52: b5:06:6b:c8:dd:5a:97:0f:04:7e:a1:8e:3d:11:42:25:ac:ff: b9:a2:29:52:0b:c8:0f:6b:51:ff:1e:c8:62:64:55:13:1a:20: b3:e7:89:08:fa:e6:63:75:95:f9:28:10:11:01:5f:62:1d:75: a0:66:07:07:7e:d4:1b:2d:fe:5a:1c:59:28:35:19:0f:08:8b: e5:8e:ce:d4:aa:64:f4:28:55:81:66:72:12:8e:8b:a3:d1:e0: 0d:b7:bc:6c:58:18:59:f2:ac:81:63:8c:1d:4c:ab:79:81:39: c2:59:4d:e0:60:8c:78:99:fb:6a:ab:59:36:d8:4f:8a:d6:5e: 97:56:5c:5b:b5:c9:f5:b0:b5:b2:b0:f0:6a:8d:6f:4e:38:15: c8:e6:35:70:1c:a8:4d:aa:e0:68:4c:86:7f:66:85:36:07:63: e5:2a:64:b1:f7:6c:1a:97:32:81:f0:76:98:3c:83:86:5e:96: 27:3f:f9:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK30tlLmCFlQdArdLC7D9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTRhMjZhYmE3MTAwNzYyMWZkNTk5ZDUzN2JiN2FlYWFk ZThiMzMwHhcNMjUxMjIzMTEwMTQ2WhcNMjUxMjI0MTEwMTQ2WjAzMTEwLwYDVQQD Eyg5YjQxODY3ZmEyNGI4M2RkNGYxZmEzZWE3MTExYTQzZWIyZTE2NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sYX0YWbku+7ahzHO8Vfduv0lq9C ayBryBscXeNC9C0L+5jgecHRclOUEVjL+s/lTPioXxFt9/feI1ZT7BsKAhlaaJ28 U9Z/Od1aP+ixDMoBEkITm2JrvGHy9JRysWaVEzaIcBtIvXuZYGstmB9qlWObgxOh 3z3+ek7P94LN3mUJZ7CN0oKeqnaudBQgNcqaNSVfjiC2nTw2ejm6DMycVPt2o4oS 7oIDRX4eL4b8ocbwe+tYmAeyczYUMTsiw0+MTI7SAPCfyj4co0LOPtA03YYs4Nzi tAMkAkUgKF6Iy7vcDkrH+lgInT3IXiK352g1zZ7sqwOTHJsI6D64L49AVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtBhn+iS4PdTx+j6nERpD6y4WZjMB8GA1UdIwQY MBaAFFCUomq6cQB2If1ZnVN7t66q3oszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTkt YjQ1MWU0NzdiOWMyLzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTktYjQ1MWU0NzdiOWMy LzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPkPfF2q fQdDNSWaHrH2l4e0KU6Ku4dCPkrNd1i0gRif+lzld+NUTMhtzoH2NEXteGqsv3XS Gwil8uwCSHAsRttifDoZJcJStQZryN1alw8EfqGOPRFCJaz/uaIpUgvID2tR/x7I YmRVExogs+eJCPrmY3WV+SgQEQFfYh11oGYHB37UGy3+WhxZKDUZDwiL5Y7O1Kpk 9ChVgWZyEo6Lo9HgDbe8bFgYWfKsgWOMHUyreYE5wllN4GCMeJn7aqtZNthPitZe l1ZcW7XJ9bC1srDwao1vTjgVyOY1cByoTargaEyGf2aFNgdj5SpksfdsGpcygfB2 mDyDhl6WJz/5GQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:57 2025 by rpki-client