This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json) Hash identifier: e726KC8DoTdWMrlr3uUn16ZcgDz+qMS2YIZtu4JsfMY= Subject key identifier: 6C:B1:56:E8:D1:16:B2:5C:3D:54:BF:7F:AB:BA:4A:6E:FE:3D:9B:19 Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4 Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4 Certificate serial: 019B47026B38392ED05EE1593EC5B3B79761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 17:01:39 +0000 Manifest this update: Mon 22 Dec 2025 17:01:39 +0000 Manifest next update: Tue 23 Dec 2025 17:01:39 +0000 Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=) 2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: 6Twrt5h9mxtZOVRb/M84E9qB167gjDe4kCybLovW/WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:6b:38:39:2e:d0:5e:e1:59:3e:c5:b3:b7:97:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4 Validity Not Before: Dec 22 17:01:39 2025 GMT Not After : Dec 23 17:01:39 2025 GMT Subject: CN=6cb156e8d116b25c3d54bf7fabba4a6efe3d9b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:69:32:7d:37:c3:25:98:f9:73:c1:cf:3e: 3f:14:83:aa:b7:6e:2a:b0:60:ef:42:1e:71:4b:9b: 94:da:d0:ea:57:10:4e:34:fc:82:71:0f:5a:35:c1: 8e:77:c3:33:98:69:2b:0c:6a:e3:6b:5b:5b:05:4a: 84:41:2c:ac:c5:5f:2a:67:70:97:da:ff:72:45:4f: 91:29:fa:0f:ee:cb:a2:ce:63:23:7a:b4:f4:1c:5d: 6a:73:8e:76:e9:f2:46:8c:78:7f:f5:a8:66:eb:81: e5:0d:f4:82:55:06:9c:6e:2a:a6:f2:b9:57:50:11: e7:17:b7:bb:4c:e0:86:e1:b6:e5:bc:49:46:48:97: 11:31:24:a7:b8:07:39:33:90:a6:74:cd:b8:78:eb: e2:8b:01:c8:74:0b:73:65:5a:fc:a1:b6:14:15:a4: 19:9a:90:82:13:bb:6a:af:88:ca:0d:e1:66:d6:a2: 7b:20:c7:55:fa:b7:a4:ab:cb:2d:8e:ef:d3:35:21: 5f:49:d3:38:56:1a:1a:df:1c:13:76:af:a4:a8:00: 01:b8:f6:40:8c:e4:2e:d5:21:1a:c1:a7:ed:5d:b1: f9:45:ce:9a:49:87:80:56:77:c8:73:30:bf:db:db: 50:a2:5c:a0:27:32:37:56:0f:08:81:c0:e2:bb:65: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B1:56:E8:D1:16:B2:5C:3D:54:BF:7F:AB:BA:4A:6E:FE:3D:9B:19 X509v3 Authority Key Identifier: keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:de:c9:c4:11:4c:e2:d0:ff:23:db:93:f2:e8:da:25:95: b0:01:ea:4a:ff:41:54:97:af:e9:65:81:7e:61:f1:e3:5c:ff: 96:53:34:0d:9d:19:5b:62:bd:d3:1e:1a:8b:c8:57:38:3e:37: e5:e5:f6:60:ea:d7:3f:91:d1:89:b4:04:77:4f:e3:81:1c:8b: 0a:fd:1a:9c:92:cd:ae:c2:76:1e:f1:cd:14:08:96:21:bc:19: d1:fe:f8:14:df:bf:44:69:ce:5e:6a:2e:f6:53:66:75:5e:db: 29:0c:4b:bd:98:6b:77:d2:2b:b4:21:78:b8:36:0e:89:cb:76: 79:fd:70:8f:b6:65:6c:31:dd:8c:fc:0f:08:be:e2:12:15:44: 70:92:f3:b9:45:36:0f:22:df:0a:df:40:92:b8:f2:5b:1c:9d: 0c:63:c8:77:9b:08:ef:1c:91:d8:37:37:45:6b:4a:12:38:e0: a8:64:0f:16:b6:fe:75:ce:4c:c1:43:15:f6:91:9b:b5:45:a3: 93:5b:78:1e:d0:6b:7b:4d:af:4b:92:4c:e2:db:12:f7:b8:09: 62:3f:87:48:95:49:7c:69:bf:38:08:6f:e9:71:3b:31:e5:a3: 7a:db:63:f4:66:09:ef:09:85:02:6d:e7:92:b7:eb:41:47:a2: a8:59:ce:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAms4OS7QXuFZPsWzt5dhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Yzg5Y2ZhZGQ1MWY0ZDkyMWJiM2QwYzU1ZjkzMTM2NjNh NzFjYzQwHhcNMjUxMjIyMTcwMTM5WhcNMjUxMjIzMTcwMTM5WjAzMTEwLwYDVQQD Eyg2Y2IxNTZlOGQxMTZiMjVjM2Q1NGJmN2ZhYmJhNGE2ZWZlM2Q5YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2tpMn03wyWY+XPBzz4/FIOqt24q sGDvQh5xS5uU2tDqVxBONPyCcQ9aNcGOd8MzmGkrDGrja1tbBUqEQSysxV8qZ3CX 2v9yRU+RKfoP7suizmMjerT0HF1qc4526fJGjHh/9ahm64HlDfSCVQacbiqm8rlX UBHnF7e7TOCG4bblvElGSJcRMSSnuAc5M5CmdM24eOviiwHIdAtzZVr8obYUFaQZ mpCCE7tqr4jKDeFm1qJ7IMdV+rekq8stju/TNSFfSdM4Vhoa3xwTdq+kqAABuPZA jOQu1SEawaftXbH5Rc6aSYeAVnfIczC/29tQolygJzI3Vg8IgcDiu2UiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyxVujRFrJcPVS/f6u6Sm7+PZsZMB8GA1UdIwQY MBaAFLnInPrdUfTZIbs9DFX5MTZjpxzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQt MzlkOWUwOTYyNDQwLzEvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQtMzlkOWUwOTYyNDQw LzEvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARITeycQR TOLQ/yPbk/Lo2iWVsAHqSv9BVJev6WWBfmHx41z/llM0DZ0ZW2K90x4ai8hXOD43 5eX2YOrXP5HRibQEd0/jgRyLCv0anJLNrsJ2HvHNFAiWIbwZ0f74FN+/RGnOXmou 9lNmdV7bKQxLvZhrd9IrtCF4uDYOict2ef1wj7ZlbDHdjPwPCL7iEhVEcJLzuUU2 DyLfCt9AkrjyWxydDGPId5sI7xyR2Dc3RWtKEjjgqGQPFrb+dc5MwUMV9pGbtUWj k1t4HtBre02vS5JM4tsS97gJYj+HSJVJfGm/OAhv6XE7MeWjettj9GYJ7wmFAm3n krfrQUeiqFnO+Q== -----END CERTIFICATE-----Generated at Mon Dec 22 20:24:42 2025 by rpki-client