This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft File: UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json) Hash identifier: sOnbF/p8COeY6VAgq3cZoNBgViV6cW+e+nARgLIynsc= Subject key identifier: CF:20:25:55:85:40:A4:10:2C:7F:0C:21:4B:07:39:AA:CE:28:96:E0 Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc Certificate serial: 019B3EA3164836CA219B5EDEC21F56A46FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:00:34 +0000 Manifest this update: Sun 21 Dec 2025 02:00:34 +0000 Manifest next update: Mon 22 Dec 2025 02:00:34 +0000 Files and hashes: 1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: V241MqIjoA5e58AP2gzolMSfV4bTltaDszUCR5Bxui8=) 2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:16:48:36:ca:21:9b:5e:de:c2:1f:56:a4:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc Validity Not Before: Dec 21 02:00:34 2025 GMT Not After : Dec 22 02:00:34 2025 GMT Subject: CN=cf2025558540a4102c7f0c214b0739aace2896e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:03:34:e3:0c:a3:f7:fd:d0:58:e9:4d:03: 77:4d:bc:69:d7:9f:0b:ca:9b:fb:55:5d:1b:0b:89: 12:d3:25:d2:34:b3:85:91:35:11:73:88:67:2e:98: 8c:3d:01:e0:83:e0:8d:1f:fb:05:72:78:4b:7c:8a: a6:3a:17:8e:f2:af:b2:31:72:ff:52:be:6b:69:3d: 79:84:ea:f5:28:e5:5c:93:f7:5a:6d:d5:cd:bd:5b: f5:19:ed:0d:9f:3d:cb:3e:12:5f:34:e3:56:6c:d3: 6f:57:f7:10:b1:a5:13:d0:dc:1f:a8:2c:2b:6a:ee: b8:8e:8a:21:80:65:40:d6:dc:2f:91:79:8b:3a:b8: 76:78:f7:af:98:56:87:09:56:f5:d1:3b:95:0b:3d: f8:32:34:50:1d:e2:a5:70:bb:1c:be:80:f5:16:a4: 36:53:bc:f4:8f:5a:a1:df:d5:aa:9d:19:38:56:16: 66:0e:f9:ad:8f:68:40:c4:fb:2a:e9:3c:b0:87:5a: c5:89:75:73:1e:05:aa:d9:0d:2c:d6:5f:4e:91:dc: 94:4a:66:8e:f8:bf:f0:53:56:be:8d:9e:77:b0:30: 43:b4:88:9f:37:c2:ae:18:49:09:4f:5d:3e:49:05: cb:82:a9:62:48:f5:8d:fa:8c:98:15:c6:3d:9b:8b: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:25:55:85:40:A4:10:2C:7F:0C:21:4B:07:39:AA:CE:28:96:E0 X509v3 Authority Key Identifier: keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a8:be:92:d8:18:fd:4b:f1:2d:c6:08:78:b8:69:3f:a8:a3: 1d:fd:4f:a8:ef:72:bb:88:cf:ee:e8:f3:73:70:4c:79:6c:c2: 81:19:12:b8:56:45:d1:d7:a0:dc:8e:12:5b:c4:74:24:7e:ad: 75:2e:e1:d6:ef:e0:3a:44:7d:03:ab:d7:23:cb:c0:b4:c9:1e: 9d:00:ba:7c:0b:51:69:ae:5f:c3:68:57:91:fe:f9:18:e8:5a: d0:27:83:e5:69:d1:c3:81:2b:2d:9a:a8:fd:f7:55:d9:12:f1: 5e:55:7b:28:26:54:b2:29:b6:40:eb:76:d5:59:af:b8:6b:1b: 6b:28:a4:c4:89:a6:fd:d3:37:e9:4a:6a:3e:3c:2c:6f:b6:f2: 2e:de:37:fb:db:72:c6:93:b4:c4:95:85:bd:47:18:44:e2:d3: f8:96:54:25:bf:d7:f3:7a:3a:0e:41:7a:3f:7f:a1:f4:76:da: b1:74:13:3d:ef:fb:7f:97:ad:31:e1:0e:42:33:d0:13:f1:7e: fe:20:e2:35:10:95:41:04:1d:ed:3f:f5:fd:42:8a:c9:0e:dd: 8f:97:40:19:62:48:33:03:03:3c:a4:c3:58:07:f8:b2:3a:34: e6:ba:9f:9b:09:e8:96:39:4f:23:61:c7:de:5c:15:7a:f4:86: 8d:df:2d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxZINsohm17ewh9WpG+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNGM1NTJiYjk0NDRjMDBmOTRmMmYwNTk0Y2JhMzUyZmMy Y2JiYmMwHhcNMjUxMjIxMDIwMDM0WhcNMjUxMjIyMDIwMDM0WjAzMTEwLwYDVQQD EyhjZjIwMjU1NTg1NDBhNDEwMmM3ZjBjMjE0YjA3MzlhYWNlMjg5NmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKwDNOMMo/f90FjpTQN3Tbxp158L ypv7VV0bC4kS0yXSNLOFkTURc4hnLpiMPQHgg+CNH/sFcnhLfIqmOheO8q+yMXL/ Ur5raT15hOr1KOVck/dabdXNvVv1Ge0Nnz3LPhJfNONWbNNvV/cQsaUT0NwfqCwr au64joohgGVA1twvkXmLOrh2ePevmFaHCVb10TuVCz34MjRQHeKlcLscvoD1FqQ2 U7z0j1qh39WqnRk4VhZmDvmtj2hAxPsq6Tywh1rFiXVzHgWq2Q0s1l9OkdyUSmaO +L/wU1a+jZ53sDBDtIifN8KuGEkJT10+SQXLgqliSPWN+oyYFcY9m4t83wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8gJVWFQKQQLH8MIUsHOarOKJbgMB8GA1UdIwQY MBaAFFFMVSu5REwA+U8vBZTLo1L8LLu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAt OWVhNzUxZDU5YWI3LzEvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAtOWVhNzUxZDU5YWI3 LzEvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6i+ktgY /UvxLcYIeLhpP6ijHf1PqO9yu4jP7ujzc3BMeWzCgRkSuFZF0deg3I4SW8R0JH6t dS7h1u/gOkR9A6vXI8vAtMkenQC6fAtRaa5fw2hXkf75GOha0CeD5WnRw4ErLZqo /fdV2RLxXlV7KCZUsim2QOt21VmvuGsbayikxImm/dM36UpqPjwsb7byLt43+9ty xpO0xJWFvUcYROLT+JZUJb/X83o6DkF6P3+h9HbasXQTPe/7f5etMeEOQjPQE/F+ /iDiNRCVQQQd7T/1/UKKyQ7dj5dAGWJIMwMDPKTDWAf4sjo05rqfmwnoljlPI2HH 3lwVevSGjd8tEA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:59 2025 by rpki-client