This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json) Hash identifier: SKlAWMepkeYUVgKH/1ShhWWbFcI3WhrG3NK0ECLeFPk= Subject key identifier: 0A:1F:97:0D:DC:92:CA:A0:2C:74:A6:CD:A0:EC:21:95:73:52:79:37 Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4 Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4 Certificate serial: 019B37FD0CFCA46CBD703DFDF58B1188DCF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft Manifest number: 1636 Signing time: Fri 19 Dec 2025 19:01:29 +0000 Manifest this update: Fri 19 Dec 2025 19:01:29 +0000 Manifest next update: Sat 20 Dec 2025 19:01:29 +0000 Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=) 2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=) 3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: TZU+gUnXskdChOn9OSu5V4qEwn9FfsU7kfyWhThhCMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fd:0c:fc:a4:6c:bd:70:3d:fd:f5:8b:11:88:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4 Validity Not Before: Dec 19 19:01:29 2025 GMT Not After : Dec 20 19:01:29 2025 GMT Subject: CN=0a1f970ddc92caa02c74a6cda0ec219573527937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:17:f5:26:99:e1:d2:1e:7b:b7:a7:1e:8c: a5:b7:a7:2b:6c:bb:ec:60:d8:52:3c:91:a3:79:68: 2c:ad:fe:7b:51:e6:70:97:71:50:8b:0b:7e:65:cd: b8:e3:f0:8d:bd:7a:0d:b4:21:c7:28:c7:c7:e1:cc: ac:f8:cf:40:a7:53:f2:bb:fe:97:f7:0a:1d:8a:5f: d6:7c:b6:67:bd:1a:2f:95:ac:de:60:9a:63:16:dd: ea:a4:b8:64:73:cb:8e:35:c6:23:42:24:b7:2b:70: 28:61:87:02:1a:fb:ef:b0:36:63:38:50:0d:ef:cf: 8d:73:7e:4f:42:7e:51:c1:f6:53:f5:c2:31:14:2a: 73:a5:3b:a3:15:0e:16:35:2e:47:57:b9:fc:50:5d: fa:4b:76:d8:8e:19:83:5e:de:bf:13:14:b0:9d:dd: 01:e3:6d:e2:14:6a:76:ee:e4:fc:7d:4c:49:cf:38: 47:6c:56:bd:7a:c7:07:f2:b4:38:ac:a0:32:8f:75: 43:f1:06:f3:ea:c7:a3:e6:d0:86:c7:7a:e4:b1:4c: 3f:70:46:1a:92:19:be:d5:f1:f2:4d:ad:e9:15:f8: fb:f1:db:06:55:9e:f0:ee:62:21:2c:59:86:5e:49: d3:a0:b6:5a:17:5b:cd:54:03:51:ec:f7:e4:53:86: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1F:97:0D:DC:92:CA:A0:2C:74:A6:CD:A0:EC:21:95:73:52:79:37 X509v3 Authority Key Identifier: keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0e:c2:83:78:8d:1f:d8:a9:58:4e:38:a1:12:c0:76:44:9e: 75:85:89:47:f7:fe:ae:6e:b2:9a:ed:fc:56:44:74:0a:c2:e5: 18:d2:af:2e:65:68:f4:e7:ce:77:2e:7a:93:6f:14:4a:a9:67: 07:1f:58:3a:24:7e:e0:ca:fb:e6:9a:e1:8c:dc:0a:48:6d:4a: 92:66:5d:f5:af:0a:07:7a:b7:5c:ad:cd:47:f3:ad:a3:a9:18: 99:43:19:81:29:e2:b6:6f:82:ba:a6:02:44:ae:d1:cb:39:58: cb:4a:1b:00:ed:da:4a:01:0e:79:5e:38:6c:9f:bb:7d:0e:b9: 15:a5:a0:1e:e4:1d:b3:8c:e9:23:7d:a1:a9:bb:67:1d:db:44: 0e:39:f5:12:d6:69:d3:e1:c6:0c:cc:1e:94:28:63:c2:1f:06: ca:00:75:df:5c:01:6d:3c:91:04:ac:b7:05:9f:89:d7:95:af: 6c:d9:0e:98:3d:f5:b2:be:03:de:4a:d5:99:ce:b0:d3:90:de: a9:be:16:e9:de:c3:14:1d:a7:1d:5f:45:d0:bd:4f:99:40:44: b7:b1:4a:04:bc:fe:96:f9:07:e7:00:b0:7f:ff:1a:9c:a6:c1: 74:b0:2a:bd:7a:8b:3f:53:96:a9:ad:c1:c9:5c:fc:4d:9d:83: 5f:6d:81:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Qz8pGy9cD399YsRiNz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy MGI0YzQwHhcNMjUxMjE5MTkwMTI5WhcNMjUxMjIwMTkwMTI5WjAzMTEwLwYDVQQD EygwYTFmOTcwZGRjOTJjYWEwMmM3NGE2Y2RhMGVjMjE5NTczNTI3OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGkX9SaZ4dIee7enHoylt6crbLvs YNhSPJGjeWgsrf57UeZwl3FQiwt+Zc244/CNvXoNtCHHKMfH4cys+M9Ap1Pyu/6X 9wodil/WfLZnvRovlazeYJpjFt3qpLhkc8uONcYjQiS3K3AoYYcCGvvvsDZjOFAN 78+Nc35PQn5RwfZT9cIxFCpzpTujFQ4WNS5HV7n8UF36S3bYjhmDXt6/ExSwnd0B 423iFGp27uT8fUxJzzhHbFa9escH8rQ4rKAyj3VD8Qbz6sej5tCGx3rksUw/cEYa khm+1fHyTa3pFfj78dsGVZ7w7mIhLFmGXknToLZaF1vNVANR7PfkU4ak5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoflw3cksqgLHSmzaDsIZVzUnk3MB8GA1UdIwQY MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt ZTNlNWZhMzZiYjJmLzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAng7Cg3iN H9ipWE44oRLAdkSedYWJR/f+rm6ymu38VkR0CsLlGNKvLmVo9OfOdy56k28USqln Bx9YOiR+4Mr75prhjNwKSG1KkmZd9a8KB3q3XK3NR/Oto6kYmUMZgSnitm+CuqYC RK7RyzlYy0obAO3aSgEOeV44bJ+7fQ65FaWgHuQds4zpI32hqbtnHdtEDjn1EtZp 0+HGDMwelChjwh8GygB131wBbTyRBKy3BZ+J15WvbNkOmD31sr4D3krVmc6w05De qb4W6d7DFB2nHV9F0L1PmUBEt7FKBLz+lvkH5wCwf/8anKbBdLAqvXqLP1OWqa3B yVz8TZ2DX22Btg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:26 2025 by rpki-client