This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json) Hash identifier: k2R2SgU+DCAdsG56Gxt+wf3e14JB1gKKb7M2sGlLcSk= Subject key identifier: 73:54:4E:10:35:40:6E:67:8A:7C:E9:B7:4C:50:71:74:6F:B4:4A:FC Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e Certificate serial: 019B5599A251C2146DD7E2D3C847B03E982E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft Manifest number: 0BA2 Signing time: Thu 25 Dec 2025 13:01:30 +0000 Manifest this update: Thu 25 Dec 2025 13:01:30 +0000 Manifest next update: Fri 26 Dec 2025 13:01:30 +0000 Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=) 2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: LZ+cF1GR0J95xaGwGSCs5CfZ8rZBtVn2InFVhTEEnFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:a2:51:c2:14:6d:d7:e2:d3:c8:47:b0:3e:98:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e Validity Not Before: Dec 25 13:01:30 2025 GMT Not After : Dec 26 13:01:30 2025 GMT Subject: CN=73544e1035406e678a7ce9b74c5071746fb44afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:e6:67:54:b6:7e:aa:36:7f:b7:95:77:93: 73:78:d9:dc:46:e8:7d:e2:14:a3:30:65:08:cd:6c: 96:11:f2:60:f9:5c:c2:21:20:6f:cf:19:74:bc:e8: ce:ec:c0:b2:f3:29:be:95:3b:c9:31:e7:b3:76:98: d8:dd:ee:50:79:2b:24:73:b6:79:60:96:b3:3b:c3: f4:75:42:8d:27:ee:f9:5c:3f:21:18:9a:1c:c0:90: f2:13:8c:34:9e:eb:23:9f:6d:2a:ec:b2:cd:f0:9d: 8b:28:c2:e9:ea:13:13:d4:7b:83:a5:9c:3f:db:f3: 74:84:d0:f6:52:5c:18:99:90:ac:13:f6:5d:1c:ce: e8:0b:12:0c:09:ba:6e:19:78:65:22:e8:64:06:bd: 3d:46:73:ed:cd:da:23:7a:24:28:7e:56:82:6d:a5: 34:99:a2:03:d3:32:46:92:08:46:7a:19:d2:3f:d5: 57:b3:7c:f4:49:05:92:01:b6:50:d0:55:b7:c3:e9: 18:5c:e2:c0:aa:a9:45:eb:2b:47:18:9a:84:a1:fc: 98:e8:20:1d:4f:5d:69:ac:e4:de:f8:6e:e8:ae:2b: 80:b4:c7:49:97:f7:fc:d1:2b:1b:f5:a7:fd:8f:33: 95:ec:02:9e:9c:0d:e6:56:32:79:42:48:01:70:38: a3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:4E:10:35:40:6E:67:8A:7C:E9:B7:4C:50:71:74:6F:B4:4A:FC X509v3 Authority Key Identifier: keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:74:3c:f5:39:ea:63:ba:28:6b:fa:12:af:6e:da:af:fb:18: b7:0b:a2:d7:ec:af:59:ac:68:2d:91:f0:41:1b:e2:ef:c2:30: fb:76:ef:98:7d:42:29:1d:d4:3b:91:8f:48:f2:45:a8:3f:3d: 1b:41:07:d4:a5:00:6c:07:b9:f0:58:69:6c:b0:c2:d7:39:96: cb:6b:60:d8:90:d1:37:01:39:e9:f3:e0:0c:db:86:24:d3:7e: dc:75:c3:64:58:34:44:b1:eb:3b:04:f5:dc:86:7c:8a:24:5b: a8:08:ec:07:04:99:67:97:fb:1f:d5:ba:ff:50:d4:7e:af:94: b2:d0:78:9c:97:e0:5a:d7:f0:e1:24:b0:98:2a:6a:a6:cd:ae: ae:8d:8a:64:52:61:fd:e7:94:e2:bf:7c:2d:14:43:9f:98:be: f1:49:c0:d7:c4:82:e7:52:d3:5c:51:30:dd:a4:3c:a2:d9:2d: 78:51:96:72:48:8d:55:6f:c4:63:32:80:92:06:dc:16:32:07: 28:8e:11:f1:39:14:5b:18:6d:15:71:8b:91:25:6e:90:de:e9: b8:87:02:e4:85:52:d2:ea:8a:98:51:6c:fc:61:82:b0:87:ec: 8f:bc:fb:1a:bd:46:17:ff:78:bf:81:f0:d0:e8:f7:9b:c1:99: ce:dc:4a:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmaJRwhRt1+LTyEewPpguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTg2YjE0MWM1MWM2NWVlYWJkNmU2MmVhNTIyZWRjNTk4 ODUyNmUwHhcNMjUxMjI1MTMwMTMwWhcNMjUxMjI2MTMwMTMwWjAzMTEwLwYDVQQD Eyg3MzU0NGUxMDM1NDA2ZTY3OGE3Y2U5Yjc0YzUwNzE3NDZmYjQ0YWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvPmZ1S2fqo2f7eVd5NzeNncRuh9 4hSjMGUIzWyWEfJg+VzCISBvzxl0vOjO7MCy8ym+lTvJMeezdpjY3e5QeSskc7Z5 YJazO8P0dUKNJ+75XD8hGJocwJDyE4w0nusjn20q7LLN8J2LKMLp6hMT1HuDpZw/ 2/N0hND2UlwYmZCsE/ZdHM7oCxIMCbpuGXhlIuhkBr09RnPtzdojeiQoflaCbaU0 maID0zJGkghGehnSP9VXs3z0SQWSAbZQ0FW3w+kYXOLAqqlF6ytHGJqEofyY6CAd T11prOTe+G7oriuAtMdJl/f80Ssb9af9jzOV7AKenA3mVjJ5QkgBcDijxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNUThA1QG5ninzpt0xQcXRvtEr8MB8GA1UdIwQY MBaAFFLoaxQcUcZe6r1uYupSLtxZiFJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQt YzY4N2U3OTJiMjVkLzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQtYzY4N2U3OTJiMjVk LzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenQ89Tnq Y7ooa/oSr27ar/sYtwui1+yvWaxoLZHwQRvi78Iw+3bvmH1CKR3UO5GPSPJFqD89 G0EH1KUAbAe58FhpbLDC1zmWy2tg2JDRNwE56fPgDNuGJNN+3HXDZFg0RLHrOwT1 3IZ8iiRbqAjsBwSZZ5f7H9W6/1DUfq+UstB4nJfgWtfw4SSwmCpqps2uro2KZFJh /eeU4r98LRRDn5i+8UnA18SC51LTXFEw3aQ8otkteFGWckiNVW/EYzKAkgbcFjIH KI4R8TkUWxhtFXGLkSVukN7puIcC5IVS0uqKmFFs/GGCsIfsj7z7Gr1GF/94v4Hw 0Oj3m8GZztxKIQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:34:41 2025 by rpki-client