This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json) Hash identifier: USg1siFIEmSAboxeeZ5fzqTwUrNLIOXkSReU/FDo590= Subject key identifier: C9:BF:FF:4A:9F:F1:70:D0:9A:43:52:D9:F6:8F:20:50:D5:C4:16:7D Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9 Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9 Certificate serial: 019B4B4D0060DBDE476118D1BB7A3EF3CC46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft Manifest number: 16F3 Signing time: Tue 23 Dec 2025 13:01:35 +0000 Manifest this update: Tue 23 Dec 2025 13:01:35 +0000 Manifest next update: Wed 24 Dec 2025 13:01:35 +0000 Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: c7pXO15opMmdC2W7sKoWkujwUMmeqdsePFjueB+4iHo=) 2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4d:00:60:db:de:47:61:18:d1:bb:7a:3e:f3:cc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9 Validity Not Before: Dec 23 13:01:35 2025 GMT Not After : Dec 24 13:01:35 2025 GMT Subject: CN=c9bfff4a9ff170d09a4352d9f68f2050d5c4167d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:d0:07:95:06:25:21:51:63:5d:1c:e5:a4: ad:13:f5:42:90:7e:77:9a:5d:c7:c5:90:5f:e6:62: f3:58:7e:75:d6:1f:8e:60:cd:a3:6d:9c:42:02:28: 00:e1:44:26:ff:3a:82:43:b2:e2:e6:b7:88:7f:a0: c0:34:f6:bd:8f:79:8b:4a:db:12:ca:ea:6e:69:19: 21:9a:79:b9:1e:f2:1d:d8:97:88:81:cb:58:a9:93: ac:41:a0:a0:ab:6a:20:c9:77:3f:ef:9e:e4:68:50: 39:e7:25:e0:20:c7:11:7c:13:ca:fc:40:65:a9:03: 62:69:cb:74:9d:c3:24:11:b3:c6:26:ab:25:19:79: cc:e0:6d:b4:3a:f8:c8:d7:bb:22:8e:a4:dc:3b:01: b0:77:3a:ea:c0:f2:06:ce:53:83:39:28:37:e2:26: 3e:36:c6:2e:b1:ba:dc:64:71:44:e6:33:00:7f:3f: 95:16:66:fe:5c:45:67:2f:b6:b7:b7:cd:d1:6a:6f: ae:dd:f9:0c:20:40:87:7f:4d:19:54:4d:fb:84:5b: e6:ca:18:90:b5:3b:de:5e:27:d0:a4:ba:60:34:51: 00:b7:45:93:74:1c:79:fd:07:18:5d:d7:e5:c1:2b: 33:d3:e7:65:f7:b8:86:9f:58:78:60:53:f2:9c:1a: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BF:FF:4A:9F:F1:70:D0:9A:43:52:D9:F6:8F:20:50:D5:C4:16:7D X509v3 Authority Key Identifier: keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bf:58:eb:d2:1f:14:3d:d4:9b:9f:e6:f3:e3:c0:d4:01:a3: b4:4b:f0:bd:d5:0c:a9:d6:53:46:b4:54:a8:69:fa:24:02:5f: 91:fb:28:70:c6:99:bb:bd:59:fe:76:fa:42:2c:33:1c:63:a6: 7e:c3:bc:e3:ab:f8:db:d5:c0:08:2b:52:cd:dd:fd:0e:5e:e8: d2:0b:c9:2a:b5:2b:4f:22:33:2e:16:be:5a:85:cb:52:02:c5: b4:d1:1f:12:48:9a:27:e6:7f:6e:8a:48:f6:c8:e8:ec:0a:cf: 2c:f5:be:d2:aa:fb:75:49:16:c7:d4:65:08:9f:a1:55:8b:6b: 6a:ed:7b:37:70:72:eb:48:04:25:f7:24:79:26:f0:4e:ef:b5: 2d:3b:94:21:02:fc:f1:30:0a:e7:25:d3:ca:48:42:c9:e4:b8: 29:4d:68:9e:4f:ed:42:6a:09:cb:bc:04:a7:30:fa:9f:e0:c4: df:3f:18:8a:7d:4c:c8:47:2b:e0:3f:89:4a:a1:2a:53:22:3c: 0e:29:11:73:8c:b7:a4:d8:d7:52:35:20:ac:dd:e0:12:27:a3: f6:70:af:81:28:47:e6:fa:38:ce:bf:de:e5:10:f9:67:12:af: 25:1d:e4:77:68:ce:3e:6b:27:ef:3b:97:0f:0a:77:97:f2:bb: 76:45:95:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTQBg295HYRjRu3o+88xGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNzMzODZmMzY3MjgxODRhYTAwM2IxZDk2MzlmZTM5YzRh MTJhYTkwHhcNMjUxMjIzMTMwMTM1WhcNMjUxMjI0MTMwMTM1WjAzMTEwLwYDVQQD EyhjOWJmZmY0YTlmZjE3MGQwOWE0MzUyZDlmNjhmMjA1MGQ1YzQxNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3fQB5UGJSFRY10c5aStE/VCkH53 ml3HxZBf5mLzWH511h+OYM2jbZxCAigA4UQm/zqCQ7Li5reIf6DANPa9j3mLStsS yupuaRkhmnm5HvId2JeIgctYqZOsQaCgq2ogyXc/757kaFA55yXgIMcRfBPK/EBl qQNiact0ncMkEbPGJqslGXnM4G20OvjI17sijqTcOwGwdzrqwPIGzlODOSg34iY+ NsYusbrcZHFE5jMAfz+VFmb+XEVnL7a3t83Ram+u3fkMIECHf00ZVE37hFvmyhiQ tTveXifQpLpgNFEAt0WTdBx5/QcYXdflwSsz0+dl97iGn1h4YFPynBoOYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMm//0qf8XDQmkNS2faPIFDVxBZ9MB8GA1UdIwQY MBaAFFFzOG82coGEqgA7HZY5/jnEoSqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjkt MGNkZGY3OWVlOTBmLzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjktMGNkZGY3OWVlOTBm LzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB79Y69If FD3Um5/m8+PA1AGjtEvwvdUMqdZTRrRUqGn6JAJfkfsocMaZu71Z/nb6QiwzHGOm fsO846v429XACCtSzd39Dl7o0gvJKrUrTyIzLha+WoXLUgLFtNEfEkiaJ+Z/bopI 9sjo7ArPLPW+0qr7dUkWx9RlCJ+hVYtrau17N3By60gEJfckeSbwTu+1LTuUIQL8 8TAK5yXTykhCyeS4KU1onk/tQmoJy7wEpzD6n+DE3z8Yin1MyEcr4D+JSqEqUyI8 DikRc4y3pNjXUjUgrN3gEiej9nCvgShH5vo4zr/e5RD5ZxKvJR3kd2jOPmsn7zuX Dwp3l/K7dkWVjg== -----END CERTIFICATE-----Generated at Tue Dec 23 15:21:15 2025 by rpki-client