This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json) Hash identifier: mIlOGKDvcVu26gboCjGRo9AkrNV6av/9vx5t9NnvEYQ= Subject key identifier: C0:A6:B3:3C:F7:38:16:83:7F:75:48:B5:63:D3:97:23:4D:BE:37:37 Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39 Certificate serial: 019B53AA8CFDEB725F696483843FFD392A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft Manifest number: 0769 Signing time: Thu 25 Dec 2025 04:00:44 +0000 Manifest this update: Thu 25 Dec 2025 04:00:44 +0000 Manifest next update: Fri 26 Dec 2025 04:00:44 +0000 Files and hashes: 1: 0oVk2Y5npWjq5ymtulXUZ2hm3C0.roa (hash: aVpYgqvpTT43IiOkTb/Hlyp6rWMYHx6l92jkV7xammA=) 2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: mY/+tlnuWxjppeIJw6lFBNac6c3TXeNLpEq60C0WCvg=) 3: bqp9PP7kmz97WUPiQSPXh32quMA.roa (hash: dz84t52ULIjxXY05zRubavqL0AcIH8CcS2AgnON+qD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:8c:fd:eb:72:5f:69:64:83:84:3f:fd:39:2a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39 Validity Not Before: Dec 25 04:00:44 2025 GMT Not After : Dec 26 04:00:44 2025 GMT Subject: CN=c0a6b33cf73816837f7548b563d397234dbe3737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:4f:a9:c7:28:c9:5e:ee:56:a9:84:5e:0f: 5b:69:07:59:ec:c5:29:f1:4b:f5:b4:51:2b:a0:aa: c2:69:ca:ea:1b:70:98:c6:7f:ff:10:63:23:d7:53: 45:ac:13:29:08:ba:27:6c:e5:0c:6d:fe:05:12:21: d1:12:36:15:3e:53:18:d4:c4:ca:ee:32:36:23:ca: c2:68:fa:3d:52:bc:b0:41:53:93:22:03:9b:de:2e: ca:b4:03:06:af:fb:4b:8a:95:58:53:7c:ec:1b:34: 12:7e:78:4c:6c:63:e9:33:4d:2d:08:a2:68:18:da: 24:0c:e9:64:6d:f2:42:af:22:4c:08:7b:19:f4:b1: a1:8a:9c:3d:80:36:57:00:1f:c5:a2:a9:24:a9:66: bd:e9:11:67:82:f3:a4:66:56:aa:d1:0e:f0:08:c3: 71:da:40:2a:72:23:43:bc:49:04:83:92:47:0c:9f: 5f:86:e5:4b:6c:20:51:6b:92:7b:da:8c:f3:1c:a0: 9b:c7:10:ed:f9:56:bb:c2:80:2a:65:d6:d9:5c:20: 6a:40:e9:c4:99:c6:2f:9d:c5:24:21:38:04:0b:a2: f2:bd:27:f6:ca:dd:9f:2f:1d:0f:02:b1:40:c0:3b: 6a:24:e7:f1:91:98:05:35:22:b8:27:fd:a0:db:4e: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A6:B3:3C:F7:38:16:83:7F:75:48:B5:63:D3:97:23:4D:BE:37:37 X509v3 Authority Key Identifier: keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9b:6f:41:e9:78:71:82:ca:9b:1d:01:a1:01:85:04:1a:a9: ea:d1:e9:7b:b3:a7:91:ef:78:ee:d5:20:d7:4b:50:42:b8:e5: 26:cb:80:3a:0f:1c:a9:66:1c:34:a3:9c:de:f8:e3:ab:39:3a: 0e:8e:70:72:8f:37:cd:f1:29:e6:a4:8b:e2:3d:e1:53:fe:f9: 8e:d6:99:0a:f4:3b:54:db:b4:e0:15:cf:44:36:33:95:49:8f: f9:c8:7f:e1:b7:34:ba:d3:07:1a:4d:57:f3:92:ec:45:9f:7b: dd:14:97:26:36:f8:bf:29:29:7a:44:92:8b:2a:a1:a6:5b:d4: 09:d9:56:3b:dd:81:2a:dc:30:0f:49:a2:3c:61:a7:66:2b:47: 5e:00:13:73:da:a9:69:fa:83:c2:eb:1d:70:09:1e:d8:2f:fd: 42:37:3d:7c:9e:60:b9:82:f3:b3:1a:0f:ec:35:d5:b1:67:ec: 87:14:7b:8f:a0:ac:da:08:dd:c9:13:29:d2:1a:a8:67:e7:3c: 6c:ba:af:a2:f9:63:a8:a8:2a:e7:2c:96:e6:a4:10:67:8a:c5: cf:15:21:c3:53:ea:4d:aa:40:34:39:ec:a9:0c:3b:4f:12:8a: fe:18:82:1b:ae:1d:02:97:f3:eb:50:8f:ae:82:aa:05:a6:ab: 99:0a:c6:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqoz963JfaWSDhD/9OSo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx NjBiMzkwHhcNMjUxMjI1MDQwMDQ0WhcNMjUxMjI2MDQwMDQ0WjAzMTEwLwYDVQQD EyhjMGE2YjMzY2Y3MzgxNjgzN2Y3NTQ4YjU2M2QzOTcyMzRkYmUzNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ1PqccoyV7uVqmEXg9baQdZ7MUp 8Uv1tFEroKrCacrqG3CYxn//EGMj11NFrBMpCLonbOUMbf4FEiHREjYVPlMY1MTK 7jI2I8rCaPo9UrywQVOTIgOb3i7KtAMGr/tLipVYU3zsGzQSfnhMbGPpM00tCKJo GNokDOlkbfJCryJMCHsZ9LGhipw9gDZXAB/FoqkkqWa96RFngvOkZlaq0Q7wCMNx 2kAqciNDvEkEg5JHDJ9fhuVLbCBRa5J72ozzHKCbxxDt+Va7woAqZdbZXCBqQOnE mcYvncUkITgEC6LyvSf2yt2fLx0PArFAwDtqJOfxkZgFNSK4J/2g207foQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCmszz3OBaDf3VItWPTlyNNvjc3MB8GA1UdIwQY MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt N2FlNjM1OWQzMTEwLzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjptvQel4 cYLKmx0BoQGFBBqp6tHpe7Onke947tUg10tQQrjlJsuAOg8cqWYcNKOc3vjjqzk6 Do5wco83zfEp5qSL4j3hU/75jtaZCvQ7VNu04BXPRDYzlUmP+ch/4bc0utMHGk1X 85LsRZ973RSXJjb4vykpekSSiyqhplvUCdlWO92BKtwwD0miPGGnZitHXgATc9qp afqDwusdcAke2C/9Qjc9fJ5guYLzsxoP7DXVsWfshxR7j6Cs2gjdyRMp0hqoZ+c8 bLqvovljqKgq5yyW5qQQZ4rFzxUhw1PqTapANDnsqQw7TxKK/hiCG64dApfz61CP roKqBaarmQrGmQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:20:56 2025 by rpki-client