This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json) Hash identifier: swR7+uBLClNkyB91fW4howZufavMny0TjHqVs+y+Q78= Subject key identifier: EE:30:A5:88:56:AB:3A:D5:1A:17:8D:2E:A9:1A:F0:A9:D9:62:F8:F9 Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9 Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9 Certificate serial: 019B41A4E207CC4CE7A05C2342AB3DF5D2DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft Manifest number: 16EE Signing time: Sun 21 Dec 2025 16:01:23 +0000 Manifest this update: Sun 21 Dec 2025 16:01:23 +0000 Manifest next update: Mon 22 Dec 2025 16:01:23 +0000 Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: LObQwaiLZ+zoB8BU19Jvv1W0vUZCHfBh429R3WCmcX0=) 2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:e2:07:cc:4c:e7:a0:5c:23:42:ab:3d:f5:d2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9 Validity Not Before: Dec 21 16:01:23 2025 GMT Not After : Dec 22 16:01:23 2025 GMT Subject: CN=ee30a58856ab3ad51a178d2ea91af0a9d962f8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:d0:d1:d9:e7:70:2c:ce:bf:71:b7:03:3e: ff:f1:82:c1:39:33:57:f7:38:07:0e:a5:29:06:16: 68:64:d4:37:24:91:76:83:73:ff:7a:20:af:54:d9: a1:c0:ea:8b:48:56:69:72:2a:3d:46:42:b8:94:4a: 2e:f3:47:c6:6b:1e:c7:68:4d:ff:9d:35:2d:69:08: 32:80:22:c9:04:5a:67:49:a6:8b:1d:be:43:2a:2c: 24:d9:d3:95:8a:fa:25:09:3e:3c:a2:a4:21:d9:62: 9e:ad:6b:de:66:ca:6f:b2:43:6e:3b:a7:68:48:83: a7:76:8c:c3:d9:6d:18:83:d7:62:62:35:1a:8d:7c: 4f:e3:df:c1:ca:f0:ff:66:57:42:b7:6a:29:15:31: 78:97:18:4e:03:4b:e0:f8:d5:dc:2c:74:5b:4b:a5: 58:75:91:19:d6:24:40:b5:a7:78:8d:c6:92:89:09: 76:86:f6:dc:93:ec:f7:5c:97:f5:4e:77:54:a6:f2: 23:3d:67:40:4f:99:73:72:02:8f:b5:2b:5e:f7:04: 59:69:71:2f:c3:4a:16:2a:88:36:cc:6d:6a:03:9a: 2f:46:09:32:78:99:73:c5:06:d8:32:96:d9:a8:81: 32:83:d4:32:33:3a:19:66:20:cd:3b:99:da:18:48: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:30:A5:88:56:AB:3A:D5:1A:17:8D:2E:A9:1A:F0:A9:D9:62:F8:F9 X509v3 Authority Key Identifier: keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b7:82:53:09:81:7c:a7:64:04:18:67:cd:34:1d:fb:27:e0: 1a:d0:c4:90:5d:72:06:66:1a:58:f2:9a:59:64:d4:c5:e2:23: 10:82:40:4b:08:ff:36:66:1b:85:10:69:a5:a7:6e:a0:96:58: a5:02:f3:ff:4d:ec:e3:2a:9e:39:c0:74:ff:80:96:cb:d3:79: 7e:e0:a4:c3:de:f3:d2:fb:a1:47:85:4b:20:2a:8d:96:df:58: 25:2b:d4:bd:ce:08:5b:50:75:4c:04:8a:fd:9b:c0:cf:f6:eb: 0a:a5:0e:f6:bb:e6:26:70:fe:9a:44:51:28:3c:57:6d:ec:fc: 6b:e2:98:08:5b:0e:73:99:e8:54:4d:c8:08:f1:d5:81:23:02: 1f:a3:f3:30:a8:2e:ef:45:d4:a2:b6:5e:d7:76:e1:71:42:fd: 42:ef:da:7b:0a:99:1d:ae:e6:4b:d2:66:2b:79:d8:b0:a5:6d: a8:92:59:a7:72:6a:2a:db:b7:e1:e7:c1:29:0a:aa:15:16:c7: 2b:7d:dd:ff:c7:6b:49:e1:de:48:fe:97:32:84:c2:a8:ce:21: 23:92:04:51:a7:bd:bc:aa:f1:3e:e7:5c:9a:bd:6f:7a:2b:52: da:2c:1e:bb:b3:67:c0:d3:2b:72:ba:b7:69:e6:fb:a4:b6:10: da:42:fa:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpOIHzEznoFwjQqs99dLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNzMzODZmMzY3MjgxODRhYTAwM2IxZDk2MzlmZTM5YzRh MTJhYTkwHhcNMjUxMjIxMTYwMTIzWhcNMjUxMjIyMTYwMTIzWjAzMTEwLwYDVQQD EyhlZTMwYTU4ODU2YWIzYWQ1MWExNzhkMmVhOTFhZjBhOWQ5NjJmOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb7Q0dnncCzOv3G3Az7/8YLBOTNX 9zgHDqUpBhZoZNQ3JJF2g3P/eiCvVNmhwOqLSFZpcio9RkK4lEou80fGax7HaE3/ nTUtaQgygCLJBFpnSaaLHb5DKiwk2dOVivolCT48oqQh2WKerWveZspvskNuO6do SIOndozD2W0Yg9diYjUajXxP49/ByvD/ZldCt2opFTF4lxhOA0vg+NXcLHRbS6VY dZEZ1iRAtad4jcaSiQl2hvbck+z3XJf1TndUpvIjPWdAT5lzcgKPtSte9wRZaXEv w0oWKog2zG1qA5ovRgkyeJlzxQbYMpbZqIEyg9QyMzoZZiDNO5naGEgKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4wpYhWqzrVGheNLqka8KnZYvj5MB8GA1UdIwQY MBaAFFFzOG82coGEqgA7HZY5/jnEoSqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjkt MGNkZGY3OWVlOTBmLzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjktMGNkZGY3OWVlOTBm LzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbeCUwmB fKdkBBhnzTQd+yfgGtDEkF1yBmYaWPKaWWTUxeIjEIJASwj/NmYbhRBppaduoJZY pQLz/03s4yqeOcB0/4CWy9N5fuCkw97z0vuhR4VLICqNlt9YJSvUvc4IW1B1TASK /ZvAz/brCqUO9rvmJnD+mkRRKDxXbez8a+KYCFsOc5noVE3ICPHVgSMCH6PzMKgu 70XUorZe13bhcUL9Qu/aewqZHa7mS9JmK3nYsKVtqJJZp3JqKtu34efBKQqqFRbH K33d/8drSeHeSP6XMoTCqM4hI5IEUae9vKrxPudcmr1veitS2iweu7NnwNMrcrq3 aeb7pLYQ2kL6QQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:57 2025 by rpki-client