This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft File: UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json) Hash identifier: NIDULqLDq8Z9FAZXI5n0B07lWvwV419NOzlhSEN4tVU= Subject key identifier: 00:F3:04:E3:DB:B3:E6:35:3F:25:18:D3:C2:09:9F:C8:1E:9B:49:FB Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6 Certificate serial: 019B3D22ECD742E98ED8A77F010CFAD86889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft Manifest number: 1114 Signing time: Sat 20 Dec 2025 19:00:57 +0000 Manifest this update: Sat 20 Dec 2025 19:00:57 +0000 Manifest next update: Sun 21 Dec 2025 19:00:57 +0000 Files and hashes: 1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=) 2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=) 3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: +JzY5iCQnw2UtOPLFvtGugXbN841rmk7GDwKOL+COHM=) 4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=) 5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:ec:d7:42:e9:8e:d8:a7:7f:01:0c:fa:d8:68:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6 Validity Not Before: Dec 20 19:00:57 2025 GMT Not After : Dec 21 19:00:57 2025 GMT Subject: CN=00f304e3dbb3e6353f2518d3c2099fc81e9b49fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:70:48:88:25:0c:bc:fa:d7:87:04:5d:97: bc:36:08:c7:9d:ef:80:d5:c5:6f:7e:d3:a6:a2:bc: 95:4c:53:6c:d3:b8:f1:1d:cc:6b:87:9e:84:3a:0e: 55:10:2c:d4:96:93:a4:b0:1e:d1:ad:1f:1c:6e:88: 00:1d:80:31:11:02:05:2e:bc:a6:c9:39:4d:4e:05: 9f:5b:3f:fd:ee:83:01:32:f6:2b:26:e4:e5:b3:75: c4:b5:a3:d2:c6:4a:74:ab:2f:98:69:40:78:50:01: f6:d7:4d:08:02:ce:85:80:04:ed:56:71:d4:8f:e1: ed:2f:be:8a:48:ff:6d:b8:7d:45:39:c3:dd:da:5e: cb:ea:57:57:68:5e:49:48:63:ff:57:a5:6c:2d:a9: 26:87:53:f4:dc:85:64:b1:1f:6e:ba:d9:2b:c3:59: ab:99:0f:c9:5e:80:55:9b:24:83:5f:cc:c7:e6:95: 3f:07:31:ed:0d:dc:b4:fc:60:44:1d:67:15:fb:57: 07:a6:98:cc:2c:84:2b:5f:12:c6:33:fe:d3:7c:d4: 6c:a4:47:d2:96:8b:b2:34:8f:e0:c8:c7:56:60:17: f4:e9:d7:6f:e3:bb:aa:3a:13:e1:50:ca:aa:32:71: cc:ac:86:05:8a:f6:4c:60:72:ab:bc:b9:f5:67:63: 45:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F3:04:E3:DB:B3:E6:35:3F:25:18:D3:C2:09:9F:C8:1E:9B:49:FB X509v3 Authority Key Identifier: keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ec:b6:dc:75:73:dc:c8:05:52:39:f9:7a:12:23:43:f5:69: f2:f6:e6:a3:86:bc:ce:69:cd:2a:98:5f:dd:f1:ce:7c:b3:af: d0:c9:fd:e3:e8:1c:3a:de:ac:dc:79:4d:4e:53:29:60:87:76: 7d:7d:e4:5f:60:05:e5:7d:a0:d4:76:1a:dd:b8:33:39:7f:6b: 96:e2:17:81:f5:dc:5d:02:2d:94:18:fc:ec:d2:cb:15:69:dc: 98:0e:8a:8b:9f:7c:bf:b7:e6:86:15:12:89:89:79:ec:53:0e: 5e:3b:8a:ce:7e:00:f4:fc:b2:a7:3b:dd:61:4c:34:c0:f5:30: d9:4b:46:81:b0:97:9c:7d:2a:1f:6a:7c:55:c4:8d:86:9c:7e: e4:61:91:bc:fa:95:df:69:46:4e:0c:33:81:f3:fd:b1:e2:43: bc:fd:e0:29:8f:53:97:5d:02:3c:67:71:03:b6:4a:36:e2:d0: d9:b7:1f:3d:6d:01:87:8d:01:bd:a9:2e:76:7d:d5:a0:0e:fe: 73:36:0b:b3:95:f5:0d:94:48:21:97:b0:90:25:5e:f3:98:77: b3:89:b4:dc:36:07:5d:fd:7c:74:49:76:09:f4:51:e9:7b:88: 4b:73:36:08:99:b8:53:6a:a8:2c:b2:b9:bb:c4:d1:c5:49:25: b7:60:fe:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IuzXQumO2Kd/AQz62GiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTAyMjI0ZmZiOTcxMTcyZTQ5MzVlZDdkZDk2NWQxMTU1 MDg5YjYwHhcNMjUxMjIwMTkwMDU3WhcNMjUxMjIxMTkwMDU3WjAzMTEwLwYDVQQD EygwMGYzMDRlM2RiYjNlNjM1M2YyNTE4ZDNjMjA5OWZjODFlOWI0OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA9wSIglDLz614cEXZe8NgjHne+A 1cVvftOmoryVTFNs07jxHcxrh56EOg5VECzUlpOksB7RrR8cbogAHYAxEQIFLrym yTlNTgWfWz/97oMBMvYrJuTls3XEtaPSxkp0qy+YaUB4UAH2100IAs6FgATtVnHU j+HtL76KSP9tuH1FOcPd2l7L6ldXaF5JSGP/V6VsLakmh1P03IVksR9uutkrw1mr mQ/JXoBVmySDX8zH5pU/BzHtDdy0/GBEHWcV+1cHppjMLIQrXxLGM/7TfNRspEfS louyNI/gyMdWYBf06ddv47uqOhPhUMqqMnHMrIYFivZMYHKrvLn1Z2NFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADzBOPbs+Y1PyUY08IJn8gem0n7MB8GA1UdIwQY MBaAFFLgIiT/uXEXLkk17X3ZZdEVUIm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUt YjhkYTg5NDA2YmVkLzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUtYjhkYTg5NDA2YmVk LzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+y23HVz 3MgFUjn5ehIjQ/Vp8vbmo4a8zmnNKphf3fHOfLOv0Mn94+gcOt6s3HlNTlMpYId2 fX3kX2AF5X2g1HYa3bgzOX9rluIXgfXcXQItlBj87NLLFWncmA6Ki598v7fmhhUS iYl57FMOXjuKzn4A9PyypzvdYUw0wPUw2UtGgbCXnH0qH2p8VcSNhpx+5GGRvPqV 32lGTgwzgfP9seJDvP3gKY9Tl10CPGdxA7ZKNuLQ2bcfPW0Bh40Bvakudn3VoA7+ czYLs5X1DZRIIZewkCVe85h3s4m03DYHXf18dEl2CfRR6XuIS3M2CJm4U2qoLLK5 u8TRxUklt2D+Ig== -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:52 2025 by rpki-client