This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json) Hash identifier: HqkEChbLRAMbouH3VbPVsu0WtI8vstopbuI7fvYJPRM= Subject key identifier: D3:99:9D:87:08:18:06:6C:15:83:28:80:03:FE:93:59:8F:7E:E7:9E Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39 Certificate serial: 019B443886C9100ADF8BF482BB075E6E5F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft Manifest number: 0761 Signing time: Mon 22 Dec 2025 04:01:53 +0000 Manifest this update: Mon 22 Dec 2025 04:01:53 +0000 Manifest next update: Tue 23 Dec 2025 04:01:53 +0000 Files and hashes: 1: 0oVk2Y5npWjq5ymtulXUZ2hm3C0.roa (hash: aVpYgqvpTT43IiOkTb/Hlyp6rWMYHx6l92jkV7xammA=) 2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: S8UyuDnzy4E2mZx/R1sH5qI+Bk4wSQ4ONtXyPvyrH5s=) 3: bqp9PP7kmz97WUPiQSPXh32quMA.roa (hash: dz84t52ULIjxXY05zRubavqL0AcIH8CcS2AgnON+qD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:86:c9:10:0a:df:8b:f4:82:bb:07:5e:6e:5f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39 Validity Not Before: Dec 22 04:01:53 2025 GMT Not After : Dec 23 04:01:53 2025 GMT Subject: CN=d3999d870818066c1583288003fe93598f7ee79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:21:0d:8d:93:fe:cb:6c:bb:75:b5:17:57: c0:d7:8a:b7:2b:61:a7:38:ae:1c:81:68:d7:1a:11: 4d:c8:a5:ca:95:7b:e3:f3:a0:06:2b:f8:fb:66:17: 1f:d7:c9:7a:7a:21:4f:f3:a4:47:19:2c:7b:cc:5f: 1f:74:ab:65:bb:9a:66:1a:47:d4:22:96:30:d6:d1: c5:43:7d:52:37:b8:34:3f:67:89:b7:36:6b:84:11: 43:5c:8d:0e:91:a7:b4:2f:96:23:cb:a0:26:21:23: 84:af:f1:55:10:53:75:3d:87:4e:ef:99:09:ea:01: d2:10:7c:1a:82:32:a2:e6:46:1c:b1:e4:d1:91:88: a9:ff:a4:9b:2a:fe:ee:45:68:85:fd:7c:0b:62:ec: f8:d1:2e:76:53:3a:7e:a6:d1:24:4d:fd:a8:38:0c: 52:25:ac:77:97:9f:c0:d4:9a:4f:cb:a5:29:b8:73: 42:f3:19:b9:27:13:9f:fa:76:09:b2:58:44:c0:07: 8d:e9:eb:71:ef:24:9c:21:ad:dd:42:f4:e4:4b:50: 4e:b2:15:4a:41:c5:45:c7:57:87:ad:ce:9f:c1:8a: 2b:d6:26:c1:ce:6f:76:3c:56:fb:25:b0:61:9e:eb: 70:f6:11:cc:7c:17:7e:e2:23:fe:26:85:e0:bb:ff: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:9D:87:08:18:06:6C:15:83:28:80:03:FE:93:59:8F:7E:E7:9E X509v3 Authority Key Identifier: keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5d:03:54:a7:65:58:c9:80:f0:e6:1a:32:f4:c3:c7:30:f9: 58:34:16:0a:5c:34:25:f3:53:c1:4a:58:2c:ac:3f:d5:2b:1b: 66:cf:84:ee:2f:aa:f7:91:f2:e1:89:ff:a8:03:61:62:d2:7b: 65:cb:c5:f5:c3:2a:d9:f7:cf:d5:2a:10:22:37:79:b5:46:28: f1:6e:1c:04:65:11:d4:50:70:08:fd:10:09:40:fa:2c:9d:b6: 62:24:0b:25:f8:ca:f7:0f:4e:9a:30:69:b8:15:8c:90:19:bd: 60:13:ca:7a:ab:a8:03:4c:85:01:cc:db:de:18:56:f3:eb:56: 1b:89:e2:93:95:f2:71:bb:08:8e:a3:df:1a:00:e3:52:df:39: 45:33:29:db:9f:5a:93:05:12:10:a9:03:f2:9a:54:27:d1:50: 80:a9:eb:ad:76:36:dc:0b:67:fc:9e:db:92:6b:74:79:f2:b1: f3:a2:c2:2c:18:03:bc:95:0b:aa:0a:cd:b9:6e:59:ef:8d:2a: 47:f1:ca:1d:0c:de:5d:69:52:e9:64:90:9a:9f:fd:7b:5e:dc: 00:19:17:5d:c9:22:33:ac:f6:76:9e:53:1f:c5:26:f4:e1:a9: b4:19:9f:6c:1e:73:35:93:b0:a3:5c:26:8e:37:b8:21:3b:aa: 4f:7d:27:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOIbJEArfi/SCuwdebl8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx NjBiMzkwHhcNMjUxMjIyMDQwMTUzWhcNMjUxMjIzMDQwMTUzWjAzMTEwLwYDVQQD EyhkMzk5OWQ4NzA4MTgwNjZjMTU4MzI4ODAwM2ZlOTM1OThmN2VlNzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1UhDY2T/stsu3W1F1fA14q3K2Gn OK4cgWjXGhFNyKXKlXvj86AGK/j7Zhcf18l6eiFP86RHGSx7zF8fdKtlu5pmGkfU IpYw1tHFQ31SN7g0P2eJtzZrhBFDXI0Okae0L5Yjy6AmISOEr/FVEFN1PYdO75kJ 6gHSEHwagjKi5kYcseTRkYip/6SbKv7uRWiF/XwLYuz40S52Uzp+ptEkTf2oOAxS Jax3l5/A1JpPy6UpuHNC8xm5JxOf+nYJslhEwAeN6etx7yScIa3dQvTkS1BOshVK QcVFx1eHrc6fwYor1ibBzm92PFb7JbBhnutw9hHMfBd+4iP+JoXgu/81AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOZnYcIGAZsFYMogAP+k1mPfueeMB8GA1UdIwQY MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt N2FlNjM1OWQzMTEwLzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApl0DVKdl WMmA8OYaMvTDxzD5WDQWClw0JfNTwUpYLKw/1SsbZs+E7i+q95Hy4Yn/qANhYtJ7 ZcvF9cMq2ffP1SoQIjd5tUYo8W4cBGUR1FBwCP0QCUD6LJ22YiQLJfjK9w9OmjBp uBWMkBm9YBPKequoA0yFAczb3hhW8+tWG4nik5XycbsIjqPfGgDjUt85RTMp259a kwUSEKkD8ppUJ9FQgKnrrXY23Atn/J7bkmt0efKx86LCLBgDvJULqgrNuW5Z740q R/HKHQzeXWlS6WSQmp/9e17cABkXXckiM6z2dp5TH8Um9OGptBmfbB5zNZOwo1wm jje4ITuqT30nGQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:18:39 2025 by rpki-client