This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json) Hash identifier: pYNwjGugct/vlUXFo9a9WR65zFw0mJ3HrwBOZLU/Juo= Subject key identifier: 0C:A0:32:A1:F6:AC:15:D9:2C:5D:22:E4:CB:CA:68:CD:85:CE:3A:2A Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 019B3BD9D0255E86C26539B6BDD5CC94265B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft Manifest number: 12A8 Signing time: Sat 20 Dec 2025 13:01:28 +0000 Manifest this update: Sat 20 Dec 2025 13:01:28 +0000 Manifest next update: Sun 21 Dec 2025 13:01:28 +0000 Files and hashes: 1: C9FeLXHlmSb6adQSBmHRmx1p1GQ.roa (hash: wsQwdaHpob1xHgKH8CTJtFsTYcrf5LAWX2Z18JuGPe4=) 2: EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa (hash: uAsvwaMtcMOr9i0+t37QKzdz9ftJWtmHdf0VDRcsGJI=) 3: EflVpiVqUjXSXoz-wEEEARW_Q-M.roa (hash: rzQa0HxuFunt0xvTKT2H9/TepJ8izaWUQiSzjphZuj8=) 4: OCS5ZsgkfgGFHyjvRDGX3il90s0.roa (hash: ztfgD2E4GSIn7F6Xbp0anZ7W4HiY4Pvdc6GtCskveFs=) 5: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: y/vN8s2wm1UH3i0gMGpT48wOFOwv0UNwYY/AeG9LtXA=) 6: hdMkPl7s2YB89idhIxYcGPzaiZo.roa (hash: q6te0h/+0cNOVTmrYYD/w25qYeg8iK/SgNvQqCUtOGQ=) 7: oMYlwSnWK6uPik-ogylklgWprko.roa (hash: bn3z21YSv1E9rQu+WAdfxy0yPZJ+K8++ghPX8u1VPlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:d0:25:5e:86:c2:65:39:b6:bd:d5:cc:94:26:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Dec 20 13:01:28 2025 GMT Not After : Dec 21 13:01:28 2025 GMT Subject: CN=0ca032a1f6ac15d92c5d22e4cbca68cd85ce3a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ae:d6:27:40:2e:56:ee:23:25:53:21:61:3f: df:f3:c7:a7:50:99:24:93:f9:fb:c6:8f:db:d7:60: 61:52:2d:bb:43:43:1c:01:b5:15:50:44:10:36:fa: f3:df:21:e8:ba:ee:c3:47:db:2e:c8:fc:db:8c:46: 62:ca:94:5f:b0:63:69:9e:94:4a:b1:a4:bc:48:04: 6f:78:82:bb:9a:90:ad:d6:bd:b7:fd:0d:3e:1f:f6: 6f:11:b3:b5:5a:43:5f:8a:c7:67:1e:74:5a:0c:e1: 97:06:cf:fb:af:3c:f9:c9:5b:28:00:7d:05:14:e7: ce:dc:f3:46:2f:0b:31:f7:bc:b0:f6:28:0f:76:31: 03:40:97:6c:bc:07:e4:45:e4:a8:da:e3:0e:44:19: a3:8c:97:ab:89:e9:a5:f0:8c:e6:04:7c:63:97:9e: 21:11:5b:d0:55:a8:43:96:5d:31:29:72:cf:54:b1: 96:a0:04:de:00:75:37:29:20:ac:9a:90:1e:e9:d8: 7c:11:fc:ca:b2:e6:0f:dc:d2:45:bc:22:1b:e4:26: 8a:0c:ca:3b:d1:33:20:5c:8d:ae:43:48:f6:3e:88: b1:f4:a1:df:a2:f9:3c:4a:4c:6b:a9:19:af:09:48: fb:c1:f6:66:3f:dd:98:a5:ba:35:2d:04:f9:70:73: 9c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A0:32:A1:F6:AC:15:D9:2C:5D:22:E4:CB:CA:68:CD:85:CE:3A:2A X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a9:b2:f9:fc:48:3f:a2:7d:60:ba:ac:6e:12:a2:e2:2d:da: fe:08:75:76:ee:b3:5d:90:04:de:e2:27:d5:b2:28:86:df:2a: 2a:7c:00:4d:55:44:c1:42:c1:ee:33:3e:f1:d4:93:8c:cb:e0: e1:d5:89:13:b0:5c:09:f1:f9:24:28:54:dd:00:18:07:22:3e: a7:ca:dc:27:31:cd:ef:d5:bf:11:69:97:a5:24:f8:aa:42:0e: 17:97:56:d7:3b:9e:b9:d5:af:ca:d8:d4:b5:c1:d2:29:10:1f: bc:3c:fc:9e:7c:db:20:01:ef:20:c7:2e:98:cf:4e:06:3b:f6: 1e:94:35:57:0e:6b:68:bd:21:96:70:cb:80:0b:3b:9f:c9:3f: be:d3:a6:30:13:cd:05:41:60:f1:4e:25:0e:95:0e:bd:01:2e: b2:61:03:f7:16:f0:07:27:70:97:3a:63:13:b4:f4:e9:45:9a: 87:dd:21:24:5a:0e:01:8f:2c:52:7e:35:c9:bb:68:92:e1:ac: c2:40:cd:34:79:1e:5c:5a:4b:4c:f7:bd:24:72:45:ea:d3:5f: bf:17:e4:47:4a:5a:10:46:b8:cb:92:83:c3:64:32:26:2b:45: e6:85:46:bf:a3:90:90:0e:d1:d0:be:f2:22:43:ff:4a:1f:da: 03:5f:f3:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72dAlXobCZTm2vdXMlCZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjUxMjIwMTMwMTI4WhcNMjUxMjIxMTMwMTI4WjAzMTEwLwYDVQQD EygwY2EwMzJhMWY2YWMxNWQ5MmM1ZDIyZTRjYmNhNjhjZDg1Y2UzYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA767WJ0AuVu4jJVMhYT/f88enUJkk k/n7xo/b12BhUi27Q0McAbUVUEQQNvrz3yHouu7DR9suyPzbjEZiypRfsGNpnpRK saS8SARveIK7mpCt1r23/Q0+H/ZvEbO1WkNfisdnHnRaDOGXBs/7rzz5yVsoAH0F FOfO3PNGLwsx97yw9igPdjEDQJdsvAfkReSo2uMORBmjjJerieml8IzmBHxjl54h EVvQVahDll0xKXLPVLGWoATeAHU3KSCsmpAe6dh8EfzKsuYP3NJFvCIb5CaKDMo7 0TMgXI2uQ0j2Poix9KHfovk8SkxrqRmvCUj7wfZmP92Ypbo1LQT5cHOcQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAygMqH2rBXZLF0i5MvKaM2FzjoqMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKmy+fxI P6J9YLqsbhKi4i3a/gh1du6zXZAE3uIn1bIoht8qKnwATVVEwULB7jM+8dSTjMvg 4dWJE7BcCfH5JChU3QAYByI+p8rcJzHN79W/EWmXpST4qkIOF5dW1zueudWvytjU tcHSKRAfvDz8nnzbIAHvIMcumM9OBjv2HpQ1Vw5raL0hlnDLgAs7n8k/vtOmMBPN BUFg8U4lDpUOvQEusmED9xbwBydwlzpjE7T06UWah90hJFoOAY8sUn41ybtokuGs wkDNNHkeXFpLTPe9JHJF6tNfvxfkR0paEEa4y5KDw2QyJitF5oVGv6OQkA7R0L7y IkP/Sh/aA1/zgA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:32 2025 by rpki-client