This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json) Hash identifier: tUdmE8xvxEfv1MHBaYFK8FDunbAW5+IFXeRIhbpW12M= Subject key identifier: F6:E6:9E:A1:0A:C1:4E:5C:26:B6:50:D2:25:AC:0D:63:D8:E1:12:E7 Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Certificate serial: 019B54189B04C1CD95905606F3FC733C4802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft Manifest number: 03A3 Signing time: Thu 25 Dec 2025 06:00:57 +0000 Manifest this update: Thu 25 Dec 2025 06:00:57 +0000 Manifest next update: Fri 26 Dec 2025 06:00:57 +0000 Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=) 2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: TpyPsRFeZARVweoDn0Lf/EJVPHQGhkyKYv3xvRkaSfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:9b:04:c1:cd:95:90:56:06:f3:fc:73:3c:48:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Validity Not Before: Dec 25 06:00:57 2025 GMT Not After : Dec 26 06:00:57 2025 GMT Subject: CN=f6e69ea10ac14e5c26b650d225ac0d63d8e112e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:f3:c6:36:0a:61:41:19:29:54:d7:73:47: 76:fd:2f:8d:e2:55:0d:4e:5c:16:86:3d:e1:ee:d6: 84:f1:be:9a:1a:ca:cf:e7:e6:89:c9:78:a1:04:0f: 68:1a:ee:4b:76:fa:58:6c:d5:97:35:c2:d0:b8:17: 16:a3:66:1c:e4:68:83:2d:5b:ad:19:07:c7:a2:f7: 83:83:de:e9:49:d6:f7:61:99:a8:1d:e7:45:cb:a5: ac:37:c1:b5:51:0d:6a:ce:77:0a:de:8a:8f:0f:85: df:5e:bf:e8:1c:df:17:70:8a:12:61:00:ae:c7:6b: 30:da:73:a0:83:5c:4d:23:7b:00:76:fd:ff:c7:9e: 85:71:09:c3:e1:da:3e:f6:2f:bc:7d:23:3d:12:f2: a7:4e:04:31:bb:d9:4c:da:34:a1:c6:a8:8e:0d:00: ce:dc:5c:12:ec:a9:97:e5:72:1f:e6:d0:5f:da:ce: 6f:a7:c8:3b:e7:d0:d1:35:1c:fd:d6:c1:b2:be:9e: 4b:9d:a5:80:d5:73:f4:90:a8:40:fc:84:a2:50:e8: da:7e:0e:c0:f2:59:03:3b:57:0a:7c:80:b0:f7:d3: 6e:c4:da:24:6e:d1:85:f4:34:d9:bb:3a:1d:02:75: c4:a2:7c:f8:7a:87:53:79:b0:0e:25:0d:b0:3e:3b: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E6:9E:A1:0A:C1:4E:5C:26:B6:50:D2:25:AC:0D:63:D8:E1:12:E7 X509v3 Authority Key Identifier: keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:8d:b9:30:b9:b3:fd:8d:52:f7:59:13:a7:a9:f8:d8:0b:ce: fc:10:14:96:f4:ed:fe:6e:de:5b:82:d7:ef:cb:7b:e7:35:a8: b2:e6:2c:63:41:0a:88:af:f9:c0:1b:41:24:b9:23:cc:5d:ec: 87:ea:5a:91:6a:7a:bc:58:f2:2b:31:67:30:c2:f5:0a:f4:a2: d3:c4:50:5b:eb:7b:47:b6:98:6c:ee:6a:1b:7a:72:46:03:a4: e8:e7:b7:e9:15:24:be:6c:c7:6a:93:c7:22:0b:19:7b:35:1f: 4e:27:c4:e4:e4:31:c0:c0:87:b5:d0:f1:29:aa:76:06:48:77: b9:8b:69:67:85:df:75:b8:62:7f:93:65:93:32:58:e6:a6:c1: fa:b4:92:65:68:c2:b0:1f:aa:ad:b4:74:4a:d9:3d:2e:71:0a: c3:32:aa:6a:22:64:1e:ce:7c:9f:a4:c3:da:18:09:d0:24:f2: 3c:41:89:7c:2e:7c:82:36:54:ba:c6:2e:d5:37:2f:63:5e:0a: a3:f5:48:7a:94:97:b1:8a:14:3f:77:f0:61:53:4b:e8:7e:07: cc:e3:e2:ba:a2:44:9c:2e:2a:e6:9d:03:f4:a6:e1:ca:cb:07: 04:b7:e6:c2:63:0a:0a:ab:8a:18:9f:66:3e:3c:2f:bb:79:0e: 36:37:dd:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGJsEwc2VkFYG8/xzPEgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj ZDFmOGYwHhcNMjUxMjI1MDYwMDU3WhcNMjUxMjI2MDYwMDU3WjAzMTEwLwYDVQQD EyhmNmU2OWVhMTBhYzE0ZTVjMjZiNjUwZDIyNWFjMGQ2M2Q4ZTExMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskrzxjYKYUEZKVTXc0d2/S+N4lUN TlwWhj3h7taE8b6aGsrP5+aJyXihBA9oGu5LdvpYbNWXNcLQuBcWo2Yc5GiDLVut GQfHoveDg97pSdb3YZmoHedFy6WsN8G1UQ1qzncK3oqPD4XfXr/oHN8XcIoSYQCu x2sw2nOgg1xNI3sAdv3/x56FcQnD4do+9i+8fSM9EvKnTgQxu9lM2jShxqiODQDO 3FwS7KmX5XIf5tBf2s5vp8g759DRNRz91sGyvp5LnaWA1XP0kKhA/ISiUOjafg7A 8lkDO1cKfICw99NuxNokbtGF9DTZuzodAnXEonz4eodTebAOJQ2wPjvt3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbmnqEKwU5cJrZQ0iWsDWPY4RLnMB8GA1UdIwQY MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt ZWIwMDkyYTk0ZmNhLzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwI25MLmz /Y1S91kTp6n42AvO/BAUlvTt/m7eW4LX78t75zWosuYsY0EKiK/5wBtBJLkjzF3s h+pakWp6vFjyKzFnMML1CvSi08RQW+t7R7aYbO5qG3pyRgOk6Oe36RUkvmzHapPH IgsZezUfTifE5OQxwMCHtdDxKap2Bkh3uYtpZ4Xfdbhif5NlkzJY5qbB+rSSZWjC sB+qrbR0Stk9LnEKwzKqaiJkHs58n6TD2hgJ0CTyPEGJfC58gjZUusYu1TcvY14K o/VIepSXsYoUP3fwYVNL6H4HzOPiuqJEnC4q5p0D9KbhyssHBLfmwmMKCquKGJ9m Pjwvu3kONjfdwg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:31:12 2025 by rpki-client