This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft File: Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json) Hash identifier: ltgiCok5MhtIEXM21CLhascd1J+a4VXf6Orp9ztSIzk= Subject key identifier: 07:F5:7A:92:B8:95:9B:E7:00:47:BA:79:70:DD:47:C6:43:E2:8F:7B Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7 Certificate issuer: /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7 Certificate serial: 019B3D5A3D4AEFA86BFB06FBE501580DF924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:01:22 +0000 Manifest this update: Sat 20 Dec 2025 20:01:22 +0000 Manifest next update: Sun 21 Dec 2025 20:01:22 +0000 Files and hashes: 1: AZwj0Iuykway_WQBa3ENsQ_JxtA.roa (hash: Q7rNa7RTxQcsrsOIx/wgjhqBI7OG9HoBnLFXa7zfZYE=) 2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: zxWjST3rPV28XatwiVW49hpRl8Vh3DxZltlnHr4NJUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3d:4a:ef:a8:6b:fb:06:fb:e5:01:58:0d:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7 Validity Not Before: Dec 20 20:01:22 2025 GMT Not After : Dec 21 20:01:22 2025 GMT Subject: CN=07f57a92b8959be70047ba7970dd47c643e28f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:0d:23:3d:c4:ed:1d:e3:18:c7:09:ba:94: 1f:44:d4:7b:36:ae:ee:73:4e:ef:db:c6:3e:a5:a4: 14:f1:39:03:dd:28:f1:0e:93:16:86:1c:c2:04:79: 43:b6:5f:be:29:25:a1:e5:79:8c:c8:d3:75:26:74: 56:2b:96:be:ad:7d:9e:da:44:83:68:56:4b:28:1d: 79:89:13:79:6d:90:14:41:d8:df:34:f3:fc:14:c1: 84:73:13:bd:e4:36:c4:2f:d3:06:0a:d3:f1:02:06: 7d:2a:7f:56:fb:cc:ca:0e:ce:28:f0:88:a2:49:f2: 8c:51:b3:cc:c3:dc:66:aa:be:b3:69:6c:e2:18:86: dd:08:5e:81:61:1d:38:52:39:ca:c9:25:6f:f5:c8: b6:b1:72:8e:81:48:40:8d:ab:48:9e:83:a0:23:8f: 67:c4:c4:ab:01:64:ab:a6:88:6f:a2:a2:fa:86:f8: 3a:21:0f:09:5e:36:dd:e6:d8:7b:ff:2e:f8:f6:fc: d3:c9:95:ab:42:bc:84:dd:44:53:ee:56:ef:3b:88: f6:ab:ef:1c:26:fd:d7:4f:8d:a5:8a:0f:ea:fe:7e: 60:aa:0d:c1:0d:92:fb:99:3d:12:c4:18:9a:dc:fd: 27:03:75:f4:52:b5:0f:e2:cd:be:af:a1:da:93:41: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F5:7A:92:B8:95:9B:E7:00:47:BA:79:70:DD:47:C6:43:E2:8F:7B X509v3 Authority Key Identifier: keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:17:e3:94:cf:d9:ea:c2:71:a2:34:be:b7:a9:fe:55:06:5f: db:d8:ae:6d:43:b6:f5:c6:7e:a0:d9:2b:4d:db:90:7a:0b:ce: d8:c0:6f:82:a7:4d:e3:29:33:ca:91:14:b2:e0:56:93:87:ce: ec:a9:77:5c:0f:2c:f7:84:25:a8:e1:84:88:23:4a:37:3f:85: 37:f9:a4:c3:0b:4f:e4:9a:3d:82:97:b0:b6:be:1c:ed:d5:e7: 25:58:7d:41:8f:d7:b0:aa:fd:1c:e6:04:ea:30:66:21:08:a4: 8f:f9:0d:8e:74:51:ed:c6:58:ef:3d:9b:ab:0f:50:53:fa:55: 47:2a:36:3b:e3:c4:f9:08:3a:a9:d3:a6:39:6e:42:fa:73:ff: 87:84:3a:60:bd:2a:97:3a:0f:84:4f:4f:83:81:fe:f2:eb:17: 65:7e:02:63:c5:f6:ba:47:19:9c:0f:e8:6e:63:d7:46:75:31: dd:97:6e:27:76:cf:14:96:3a:85:35:79:76:3e:a2:9f:36:fe: 43:ed:cc:85:00:ea:52:29:9d:87:d1:99:24:d5:bd:ab:19:62: 7c:cf:a9:22:9f:20:16:3e:24:d0:42:4d:d1:cb:1e:22:11:f1: 41:35:fc:c0:d4:00:b9:58:f6:46:73:76:67:d2:31:44:a9:32: 74:f0:c9:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wj1K76hr+wb75QFYDfkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMGI3NmVmMGFiNTU1YmM4YjA3NjFmNjA2OGE0NGUxMGIy YjMxZjcwHhcNMjUxMjIwMjAwMTIyWhcNMjUxMjIxMjAwMTIyWjAzMTEwLwYDVQQD EygwN2Y1N2E5MmI4OTU5YmU3MDA0N2JhNzk3MGRkNDdjNjQzZTI4ZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx50NIz3E7R3jGMcJupQfRNR7Nq7u c07v28Y+paQU8TkD3SjxDpMWhhzCBHlDtl++KSWh5XmMyNN1JnRWK5a+rX2e2kSD aFZLKB15iRN5bZAUQdjfNPP8FMGEcxO95DbEL9MGCtPxAgZ9Kn9W+8zKDs4o8Iii SfKMUbPMw9xmqr6zaWziGIbdCF6BYR04UjnKySVv9ci2sXKOgUhAjatInoOgI49n xMSrAWSrpohvoqL6hvg6IQ8JXjbd5th7/y749vzTyZWrQryE3URT7lbvO4j2q+8c Jv3XT42lig/q/n5gqg3BDZL7mT0SxBia3P0nA3X0UrUP4s2+r6Hak0GVLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf1epK4lZvnAEe6eXDdR8ZD4o97MB8GA1UdIwQY MBaAFFMLdu8KtVW8iwdh9gaKROELKzH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTct YmZmZmM5MWZkZTNjLzEvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTctYmZmZmM5MWZkZTNj LzEvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxfjlM/Z 6sJxojS+t6n+VQZf29iubUO29cZ+oNkrTduQegvO2MBvgqdN4ykzypEUsuBWk4fO 7Kl3XA8s94QlqOGEiCNKNz+FN/mkwwtP5Jo9gpewtr4c7dXnJVh9QY/XsKr9HOYE 6jBmIQikj/kNjnRR7cZY7z2bqw9QU/pVRyo2O+PE+Qg6qdOmOW5C+nP/h4Q6YL0q lzoPhE9Pg4H+8usXZX4CY8X2ukcZnA/obmPXRnUx3ZduJ3bPFJY6hTV5dj6inzb+ Q+3MhQDqUimdh9GZJNW9qxlifM+pIp8gFj4k0EJN0cseIhHxQTX8wNQAuVj2RnN2 Z9IxRKkydPDJeA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:29 2025 by rpki-client