This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft File: U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json) Hash identifier: 98+tuxWhPhV2Eqq6qhKTYCRcyZZ/Xe8ELoUq3Ls6QmM= Subject key identifier: 14:93:A7:31:78:50:43:22:24:60:86:DC:CC:6A:65:FD:51:7F:93:D5 Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d Certificate serial: 019B3EDAB8847EA1F7CDE15F9C27491C404E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 03:01:20 +0000 Manifest this update: Sun 21 Dec 2025 03:01:20 +0000 Manifest next update: Mon 22 Dec 2025 03:01:20 +0000 Files and hashes: 1: N395374_mmN2AD-ofI4gXJ3cQpU.roa (hash: Zf59hxbYn2Mwx3RShNxnNZI4f8JDWVmUB1iW/NWH/74=) 2: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: ONa7s8hmWi7EO0yxOg60Ab0C/kDZI4eYh+V0Wsbw/Xk=) 3: WX6sNrF92l686KdkTXPFkLfxe3U.roa (hash: Abr+DHAKxIPDGR7zdXI5jJnVVIXCf9i5JeUWk/vC2vA=) 4: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (hash: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=) 5: YsUzeXuKor8g8xJ2qQAIbZwuLdA.roa (hash: b8Dg+ptVU/0cD+fmDjz15R9Y3ThIrc8W4BKhqUm2GSI=) 6: vdc8LHeirosn85jHF2y6k4tZWpE.roa (hash: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:b8:84:7e:a1:f7:cd:e1:5f:9c:27:49:1c:40:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d Validity Not Before: Dec 21 03:01:20 2025 GMT Not After : Dec 22 03:01:20 2025 GMT Subject: CN=1493a73178504322246086dccc6a65fd517f93d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:f9:a2:c0:c5:50:ed:73:0a:4b:d4:44:ed: 41:99:73:63:2a:7f:0b:74:44:77:68:c2:b3:be:e1: 7d:41:2b:17:ea:b0:ec:16:8f:74:7e:d4:ab:00:80: 5a:f9:e9:26:60:fe:db:e9:55:17:9c:70:89:cf:91: ff:2a:dc:45:3e:ad:1c:25:e8:7b:48:3b:7e:b4:9a: bf:f5:1f:54:ba:e8:30:ac:15:18:c4:55:df:4f:1d: 7b:35:d0:be:27:eb:63:02:a0:e9:95:3d:d3:1a:ce: 00:99:35:2f:11:c3:b5:c1:cf:26:19:1c:06:b5:d6: d9:de:2b:30:a1:f7:a5:0b:39:42:2a:d0:54:94:61: 0e:d5:12:52:41:16:59:f8:74:71:39:f3:5e:ce:3a: 4b:18:3c:73:19:d7:99:96:a3:71:c5:59:3e:0c:d9: 21:14:f9:9c:03:e6:5a:4e:e9:97:c5:27:a0:b5:b7: 21:2e:47:94:b9:09:11:51:e7:fd:4c:8b:bb:a6:a7: c6:6f:2e:ca:ce:ca:43:76:e7:88:c0:82:01:08:c7: 9f:db:b7:ce:b4:14:89:da:7d:2b:73:9f:b4:c6:a6: 11:45:ff:a1:25:bf:11:f1:3c:ef:61:69:ad:38:19: 24:17:c6:68:a6:c6:01:0f:d7:41:33:15:3e:43:88: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:93:A7:31:78:50:43:22:24:60:86:DC:CC:6A:65:FD:51:7F:93:D5 X509v3 Authority Key Identifier: keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:8f:24:a2:b1:45:43:5b:d9:09:2b:6f:87:36:ee:70:86:25: 98:dc:82:00:e6:71:45:33:56:49:65:99:98:30:86:7d:da:27: d5:2b:2a:da:e2:dd:2c:a7:f5:41:8b:fc:73:06:37:c8:ae:82: 61:47:a5:fa:05:32:3d:8c:06:1a:c6:2b:96:ad:f4:28:fd:6e: b2:f9:34:5e:3a:7b:f2:7f:f9:c4:9f:72:aa:68:37:39:60:07: 0a:45:48:e9:f6:3d:e7:15:1d:4f:1e:86:70:f9:f2:5f:fe:86: cb:8e:ed:77:1d:ee:07:22:c7:27:9a:29:47:d5:27:6c:d8:23: 7f:8e:d3:f9:7b:99:38:5e:7c:44:de:97:13:ec:10:7d:13:87: d9:6d:52:46:3f:e2:47:91:fb:75:2a:97:6c:0e:61:8b:66:00: e3:e2:93:6a:4a:17:6f:de:e8:b1:4a:e0:81:35:45:bd:8d:1f: f2:80:70:41:f1:34:24:88:b4:e5:97:59:0c:8f:7e:08:17:26: 13:d4:0e:0f:b1:ac:e3:bf:5e:07:58:2d:d4:3c:a7:74:96:49: 64:ef:81:67:32:1d:33:85:fc:e4:61:83:e1:5e:bb:6e:00:65: df:10:c3:1b:3e:83:e7:0d:a3:5d:b9:36:70:82:bb:20:11:a2: 07:6f:52:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2riEfqH3zeFfnCdJHEBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTgyNWNlOGJmNTQ0MTcwMjgyZjcyMGEyNDg0MTQxNTY4 YjBlN2QwHhcNMjUxMjIxMDMwMTIwWhcNMjUxMjIyMDMwMTIwWjAzMTEwLwYDVQQD EygxNDkzYTczMTc4NTA0MzIyMjQ2MDg2ZGNjYzZhNjVmZDUxN2Y5M2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut35osDFUO1zCkvURO1BmXNjKn8L dER3aMKzvuF9QSsX6rDsFo90ftSrAIBa+ekmYP7b6VUXnHCJz5H/KtxFPq0cJeh7 SDt+tJq/9R9UuugwrBUYxFXfTx17NdC+J+tjAqDplT3TGs4AmTUvEcO1wc8mGRwG tdbZ3iswofelCzlCKtBUlGEO1RJSQRZZ+HRxOfNezjpLGDxzGdeZlqNxxVk+DNkh FPmcA+ZaTumXxSegtbchLkeUuQkRUef9TIu7pqfGby7KzspDdueIwIIBCMef27fO tBSJ2n0rc5+0xqYRRf+hJb8R8TzvYWmtOBkkF8ZopsYBD9dBMxU+Q4iFpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSTpzF4UEMiJGCG3MxqZf1Rf5PVMB8GA1UdIwQY MBaAFFNYJc6L9UQXAoL3IKJIQUFWiw59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUt NTE0NmFiN2VhMDE1LzEvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUtNTE0NmFiN2VhMDE1 LzEvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo8korFF Q1vZCStvhzbucIYlmNyCAOZxRTNWSWWZmDCGfdon1Ssq2uLdLKf1QYv8cwY3yK6C YUel+gUyPYwGGsYrlq30KP1usvk0Xjp78n/5xJ9yqmg3OWAHCkVI6fY95xUdTx6G cPnyX/6Gy47tdx3uByLHJ5opR9UnbNgjf47T+XuZOF58RN6XE+wQfROH2W1SRj/i R5H7dSqXbA5hi2YA4+KTakoXb97osUrggTVFvY0f8oBwQfE0JIi05ZdZDI9+CBcm E9QOD7Gs479eB1gt1DyndJZJZO+BZzIdM4X85GGD4V67bgBl3xDDGz6D5w2jXbk2 cIK7IBGiB29SuA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:04 2025 by rpki-client