This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: pwfcpZrfMiXubI1j/QS0e3eNtsXwt5Q5WHklXIA7UKw= Subject key identifier: C2:A2:47:40:2E:5C:54:3F:4F:8F:46:BD:79:1D:9F:28:A4:FE:F0:D5 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B413690937324A845D06C85DEC63BA2EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 17C3 Signing time: Sun 21 Dec 2025 14:00:53 +0000 Manifest this update: Sun 21 Dec 2025 14:00:53 +0000 Manifest next update: Mon 22 Dec 2025 14:00:53 +0000 Files and hashes: 1: 7E6Yjtw4S5woPVdagJ7udCJl5RA.roa (hash: 39Gi/rZHLqlNm15z+oavTYHN+xuEGg13WlzRqzoNz+w=) 2: 8zCnIgh-ZctwaWW9UWnhk5D47-Y.roa (hash: MUHP885QC53KyVAwA3OVuIpjRfltCfNEkey65yD1E0A=) 3: AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa (hash: 8hVhVqsbKGADU2c8IHCYOqECSdJOghmC2FEZohLEksw=) 4: JfBP6dS5I5N35c7vJqB7NgG5BpQ.roa (hash: mlxyZUvm8D4amiftjMjNylfXPIWgAcCSgND1WevSbxo=) 5: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: VGNF+u+dWa+jKBzH1kP8Cd7mr6UKogfBwjXPLWES6gA=) 6: V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa (hash: QCQZA5MTKnem3+fJ+k+YcmhfhWTERBGnKLkTrN+uSlA=) 7: W0tavrjJSSiPuQlULsDp4KDy2W4.roa (hash: t/YLBngwq/zvwgwACF50uiu831rnT/Xxzg6t8YeTWtM=) 8: Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa (hash: bCKy9ray9aVGb5cuUoApuza4mHQIk6NOLCOgkU76NG8=) 9: dNnxl9eshyIT4nX_fYkG9f0tJfU.roa (hash: M4nzGQsVxbsKWipOFOtukrmX3AJDrEypgI6i1id8uus=) 10: dRFON_8KZhLV3A8FKdT60GP8fXU.roa (hash: vZFsSXY8KKaWJVwCaYPPKczwOc+ZUmysk+xkANhTrsk=) 11: fs4X3zJFq3DUP70BE5KHHq5PW6A.roa (hash: bGR4PpXG1RT4m3/7nflg7BgdcGbpPQ/v8739XylkQso=) 12: qrKrZlWqP1xYMoyEfKssy_MBOPc.roa (hash: 7HCvDFegj/Om6sM+U3B+gHYXUnQzqvdjd1JcBWwGFb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:90:93:73:24:a8:45:d0:6c:85:de:c6:3b:a2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Dec 21 14:00:53 2025 GMT Not After : Dec 22 14:00:53 2025 GMT Subject: CN=c2a247402e5c543f4f8f46bd791d9f28a4fef0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:f9:8d:2d:fa:19:74:35:58:f3:df:75:1e: 71:3a:dc:b2:52:10:05:a6:a2:c7:9c:9f:72:a9:94: 73:4d:ad:66:2b:42:19:98:29:46:2a:8c:98:48:73: ed:1a:4d:f3:5e:8f:6e:49:5e:bd:64:3d:41:a0:36: 17:ab:45:14:01:45:e3:5e:a7:54:83:a5:00:dd:9f: 03:a7:ab:44:ad:87:39:a2:5b:50:a6:04:cb:92:00: e6:50:b9:b9:bb:bf:ce:f1:50:9b:74:9d:5d:4e:65: 07:40:e5:fa:5e:74:e1:be:3e:f8:21:2b:29:79:16: fd:d6:cd:35:85:49:8e:43:16:52:1e:41:2f:3b:ae: 22:41:56:6f:76:ee:57:8a:3c:5e:6a:b1:a5:e0:4c: 6f:74:67:d8:21:0f:07:24:dd:41:27:6e:71:c1:c9: 09:eb:be:35:46:b5:b7:3c:68:35:2d:9c:ca:ee:1e: b2:83:2e:a4:43:d9:93:eb:84:9a:f2:16:0b:45:48: a1:a6:0c:8f:37:68:18:e3:a8:19:2f:5f:5d:ef:56: 65:3d:05:d3:65:5a:b6:83:74:48:99:8f:05:54:77: 4d:2c:2d:58:3f:71:9b:73:69:f8:2c:39:5c:76:e0: 4b:36:af:b8:ba:e0:04:2b:a0:47:65:82:b7:f8:b9: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:47:40:2E:5C:54:3F:4F:8F:46:BD:79:1D:9F:28:A4:FE:F0:D5 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:33:d7:5f:85:f9:34:3b:ab:5d:6c:fa:87:83:64:60:77:4a: 4d:cd:6c:86:1b:bb:2d:02:bc:18:9b:a1:e6:c1:e3:be:5b:79: 37:f7:98:b2:b1:1d:54:86:1b:95:cc:65:31:6e:ff:30:c8:f0: 3e:f8:be:7a:dd:6a:74:e7:5e:9c:50:2d:42:f8:2b:b5:ec:5a: 7c:36:80:a3:09:61:98:c1:6d:f4:b4:30:69:71:a4:eb:28:4f: 27:27:f4:ef:53:c3:f0:ab:af:11:24:19:cb:ce:10:da:af:c5: 4f:6c:72:20:af:d7:00:32:a0:e0:c8:93:4b:c3:e1:82:66:df: 4b:aa:f6:3e:1d:3c:07:3d:9a:9b:42:b5:fb:15:98:d0:10:c9: 54:a7:5c:a6:48:ad:a4:ff:6a:96:7b:01:f5:17:02:5e:45:c8: 5d:eb:8c:30:89:71:30:b3:75:f1:41:87:0a:06:3c:02:13:ea: 15:88:ab:c1:6b:41:51:85:70:5f:5c:9e:59:7d:6b:e2:1d:16: 27:07:a5:cb:9e:b5:5d:8c:cd:f2:19:fd:4d:99:1a:a1:05:a1: 3a:d2:82:a7:b6:4a:c8:cd:5f:51:02:8b:ba:82:ce:0d:0c:8f: 93:24:59:b9:7c:af:e7:87:92:e1:22:fc:86:00:8c:21:5b:10: a8:5e:fa:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpCTcySoRdBshd7GO6LrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjUxMjIxMTQwMDUzWhcNMjUxMjIyMTQwMDUzWjAzMTEwLwYDVQQD EyhjMmEyNDc0MDJlNWM1NDNmNGY4ZjQ2YmQ3OTFkOWYyOGE0ZmVmMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjT5jS36GXQ1WPPfdR5xOtyyUhAF pqLHnJ9yqZRzTa1mK0IZmClGKoyYSHPtGk3zXo9uSV69ZD1BoDYXq0UUAUXjXqdU g6UA3Z8Dp6tErYc5oltQpgTLkgDmULm5u7/O8VCbdJ1dTmUHQOX6XnThvj74ISsp eRb91s01hUmOQxZSHkEvO64iQVZvdu5XijxearGl4ExvdGfYIQ8HJN1BJ25xwckJ 6741RrW3PGg1LZzK7h6ygy6kQ9mT64Sa8hYLRUihpgyPN2gY46gZL19d71ZlPQXT ZVq2g3RImY8FVHdNLC1YP3Gbc2n4LDlcduBLNq+4uuAEK6BHZYK3+LlgKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKiR0AuXFQ/T49GvXkdnyik/vDVMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDPXX4X5 NDurXWz6h4NkYHdKTc1shhu7LQK8GJuh5sHjvlt5N/eYsrEdVIYblcxlMW7/MMjw Pvi+et1qdOdenFAtQvgrtexafDaAowlhmMFt9LQwaXGk6yhPJyf071PD8KuvESQZ y84Q2q/FT2xyIK/XADKg4MiTS8PhgmbfS6r2Ph08Bz2am0K1+xWY0BDJVKdcpkit pP9qlnsB9RcCXkXIXeuMMIlxMLN18UGHCgY8AhPqFYirwWtBUYVwX1yeWX1r4h0W Jwely561XYzN8hn9TZkaoQWhOtKCp7ZKyM1fUQKLuoLODQyPkyRZuXyv54eS4SL8 hgCMIVsQqF76vw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:52 2025 by rpki-client