This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json) Hash identifier: wJUTHHCzldzTp9cjoIREI7BYb2eknpNUk9LmW793Pyg= Subject key identifier: 9F:5A:FC:27:D7:78:A6:0C:F6:09:D7:D8:5A:EF:8F:95:D0:06:5A:E8 Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6 Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6 Certificate serial: 019B3F111938F7CA180E3F52E960E2E8CA42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft Manifest number: 162A Signing time: Sun 21 Dec 2025 04:00:43 +0000 Manifest this update: Sun 21 Dec 2025 04:00:43 +0000 Manifest next update: Mon 22 Dec 2025 04:00:43 +0000 Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=) 2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: 0rpdAVbIooigzMuBAYZs8FcSz5vqX8Ht6m/KLqazHTE=) 3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:19:38:f7:ca:18:0e:3f:52:e9:60:e2:e8:ca:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6 Validity Not Before: Dec 21 04:00:43 2025 GMT Not After : Dec 22 04:00:43 2025 GMT Subject: CN=9f5afc27d778a60cf609d7d85aef8f95d0065ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:23:9e:15:89:6a:09:ff:49:4c:ce:61:18: 69:05:8b:10:1d:d8:b4:22:1b:b7:97:c1:e1:39:fd: be:98:e8:1a:65:96:0a:80:b3:c7:09:a2:c6:eb:52: a4:13:4d:d0:41:7e:0d:1f:31:65:fa:ff:3e:49:fa: 1b:cc:66:6d:bb:d4:e0:80:c0:9e:98:30:62:5a:71: 6d:a8:b7:95:6e:a9:7a:4f:0a:37:8b:d1:1c:b8:06: 8f:d9:80:a3:70:39:fc:d0:f2:dd:2b:98:4b:69:ab: 29:92:5a:3b:ff:b5:ed:5e:2c:8a:37:e9:6f:3e:df: 89:92:46:bc:e4:10:eb:d6:50:cb:4d:a3:02:cd:07: 2f:e8:31:e6:17:98:56:ee:bd:cc:1f:bb:88:8f:14: fa:77:fa:3a:95:db:4d:d2:a3:fa:71:a9:2d:a1:de: a9:5d:74:f0:21:70:ef:1a:af:32:0a:c7:69:b5:43: af:01:9c:5a:ca:ad:42:ba:12:3c:ff:9d:f6:78:be: 0b:10:4d:7c:0a:ad:8c:ff:2f:82:83:57:47:cd:73: d5:cb:a7:11:5c:b4:49:77:b0:70:a3:b9:41:13:50: 04:98:1a:72:e8:7e:99:d1:35:68:e2:a2:c6:69:4a: 65:a0:d6:9a:5c:4d:91:6f:a2:aa:f0:7d:35:d8:34: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:FC:27:D7:78:A6:0C:F6:09:D7:D8:5A:EF:8F:95:D0:06:5A:E8 X509v3 Authority Key Identifier: keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:c4:0b:29:d7:ce:ef:5a:e2:fd:6a:82:6e:76:5b:57:36: 18:eb:8f:ef:25:8e:a4:71:6f:2c:26:9c:8a:a9:55:80:0e:a8: 65:a2:d9:a6:96:d8:58:7e:fb:83:f9:94:90:76:7e:c8:f7:55: 16:9c:4e:e5:7f:01:75:5d:a4:16:76:3e:c1:bb:e1:8f:f4:60: f0:84:59:30:d7:4c:ee:2f:1a:d2:91:3f:bc:8b:e2:c6:b5:a0: b1:be:12:c1:65:b8:6e:e9:f0:68:5a:9a:84:e6:f1:20:23:bc: ba:cb:5a:65:b7:be:52:0c:2e:72:61:a1:ed:8f:79:7f:6c:07: 22:9d:45:b2:c7:dc:e1:56:75:be:66:0a:40:c8:f6:6d:3d:89: ba:cb:ec:09:b5:d1:33:49:0a:10:85:47:71:36:a7:47:ba:75: 8e:81:10:ba:8c:47:f7:aa:66:ef:6c:d7:fe:24:b4:21:8e:d1: 3b:79:c4:9b:16:96:dc:2c:87:06:64:24:48:b6:ad:c7:cd:70: 8c:3e:9c:9b:36:57:f8:6b:dc:e5:fd:71:2e:cf:51:a4:68:9f: 1e:59:9d:8e:f7:fd:0f:1d:de:09:45:34:e6:ba:e0:24:4d:9d: 7c:14:61:0d:15:20:2a:58:7b:24:11:9f:df:04:81:51:d8:c5: 31:7b:b9:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ERk498oYDj9S6WDi6MpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOGQ1ODE0YzcxNTY0MjBkZWMzYTNmN2U1MjZlZjBmODMz M2VlZjYwHhcNMjUxMjIxMDQwMDQzWhcNMjUxMjIyMDQwMDQzWjAzMTEwLwYDVQQD Eyg5ZjVhZmMyN2Q3NzhhNjBjZjYwOWQ3ZDg1YWVmOGY5NWQwMDY1YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNkjnhWJagn/SUzOYRhpBYsQHdi0 Ihu3l8HhOf2+mOgaZZYKgLPHCaLG61KkE03QQX4NHzFl+v8+SfobzGZtu9TggMCe mDBiWnFtqLeVbql6Two3i9EcuAaP2YCjcDn80PLdK5hLaaspklo7/7XtXiyKN+lv Pt+Jkka85BDr1lDLTaMCzQcv6DHmF5hW7r3MH7uIjxT6d/o6ldtN0qP6caktod6p XXTwIXDvGq8yCsdptUOvAZxayq1CuhI8/532eL4LEE18Cq2M/y+Cg1dHzXPVy6cR XLRJd7Bwo7lBE1AEmBpy6H6Z0TVo4qLGaUploNaaXE2Rb6Kq8H012DT1BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9a/CfXeKYM9gnX2Frvj5XQBlroMB8GA1UdIwQY MBaAFFKNWBTHFWQg3sOj9+Um7w+DM+72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iZWFjMDktYzQ5Zi00YzcwLTk4MTgt NDMxYzM5YmI3YjM4LzEvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iZWFjMDktYzQ5Zi00YzcwLTk4MTgtNDMxYzM5YmI3YjM4 LzEvVW8xWUZNY1ZaQ0RldzZQMzVTYnZENE16N3ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/jECynX zu9a4v1qgm52W1c2GOuP7yWOpHFvLCaciqlVgA6oZaLZppbYWH77g/mUkHZ+yPdV FpxO5X8BdV2kFnY+wbvhj/Rg8IRZMNdM7i8a0pE/vIvixrWgsb4SwWW4bunwaFqa hObxICO8ustaZbe+UgwucmGh7Y95f2wHIp1Fssfc4VZ1vmYKQMj2bT2JusvsCbXR M0kKEIVHcTanR7p1joEQuoxH96pm72zX/iS0IY7RO3nEmxaW3CyHBmQkSLatx81w jD6cmzZX+Gvc5f1xLs9RpGifHlmdjvf9Dx3eCUU05rrgJE2dfBRhDRUgKlh7JBGf 3wSBUdjFMXu5sQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:28:55 2025 by rpki-client