This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: pcm5p16zHmmTm/pp5YexZibNGR217XEsLnb40jQ7fXo= Subject key identifier: AF:9E:8F:37:B9:7B:DC:46:9D:B1:78:7A:68:01:78:A1:49:33:9D:63 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B35A0AC09E1E6BFC7DCD3022673735BC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 17BD Signing time: Fri 19 Dec 2025 08:01:20 +0000 Manifest this update: Fri 19 Dec 2025 08:01:20 +0000 Manifest next update: Sat 20 Dec 2025 08:01:20 +0000 Files and hashes: 1: 7E6Yjtw4S5woPVdagJ7udCJl5RA.roa (hash: 39Gi/rZHLqlNm15z+oavTYHN+xuEGg13WlzRqzoNz+w=) 2: 8zCnIgh-ZctwaWW9UWnhk5D47-Y.roa (hash: MUHP885QC53KyVAwA3OVuIpjRfltCfNEkey65yD1E0A=) 3: AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa (hash: 8hVhVqsbKGADU2c8IHCYOqECSdJOghmC2FEZohLEksw=) 4: JfBP6dS5I5N35c7vJqB7NgG5BpQ.roa (hash: mlxyZUvm8D4amiftjMjNylfXPIWgAcCSgND1WevSbxo=) 5: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: AUUVleoYO7ZzjDf9+/K5QGkF52BZOqpA8DWA/qHbIlM=) 6: V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa (hash: QCQZA5MTKnem3+fJ+k+YcmhfhWTERBGnKLkTrN+uSlA=) 7: W0tavrjJSSiPuQlULsDp4KDy2W4.roa (hash: t/YLBngwq/zvwgwACF50uiu831rnT/Xxzg6t8YeTWtM=) 8: Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa (hash: bCKy9ray9aVGb5cuUoApuza4mHQIk6NOLCOgkU76NG8=) 9: dNnxl9eshyIT4nX_fYkG9f0tJfU.roa (hash: M4nzGQsVxbsKWipOFOtukrmX3AJDrEypgI6i1id8uus=) 10: dRFON_8KZhLV3A8FKdT60GP8fXU.roa (hash: vZFsSXY8KKaWJVwCaYPPKczwOc+ZUmysk+xkANhTrsk=) 11: fs4X3zJFq3DUP70BE5KHHq5PW6A.roa (hash: bGR4PpXG1RT4m3/7nflg7BgdcGbpPQ/v8739XylkQso=) 12: qrKrZlWqP1xYMoyEfKssy_MBOPc.roa (hash: 7HCvDFegj/Om6sM+U3B+gHYXUnQzqvdjd1JcBWwGFb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:ac:09:e1:e6:bf:c7:dc:d3:02:26:73:73:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Dec 19 08:01:20 2025 GMT Not After : Dec 20 08:01:20 2025 GMT Subject: CN=af9e8f37b97bdc469db1787a680178a149339d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:f9:ab:c1:56:cf:17:ae:b6:ca:85:e0:08: 1a:a3:f9:d2:b5:c6:43:3d:b5:2e:fc:25:f1:5e:c5: 24:d3:40:77:d3:4f:5d:19:92:64:87:65:55:ba:7c: a8:ba:8a:84:c5:9c:76:c3:37:bd:00:23:e1:5d:23: 57:48:c5:9b:8c:68:3a:c5:39:9d:d1:f2:e0:09:1b: 5c:0b:42:59:6e:56:5f:6a:fc:a1:1a:62:d3:9b:20: 69:c8:d6:1d:2d:87:f1:7e:ee:59:6f:4d:89:da:fd: 77:5f:60:ec:d6:d0:08:b8:2a:49:4d:6f:b9:9b:d3: 0d:cd:b0:a2:00:92:e4:ce:89:88:f8:b0:20:96:9b: 89:23:7c:79:0a:21:34:72:e5:26:6f:e7:2f:7b:97: 0e:5f:b2:ee:ea:7a:9c:55:1a:6c:47:87:fa:8a:89: 0c:48:44:42:40:a9:76:78:c7:f9:07:3e:32:8d:2e: 99:6c:bb:4a:c4:42:bb:96:66:65:ea:90:78:bc:96: 50:39:a4:5f:ae:42:ed:0f:df:13:5b:cd:a7:c1:93: ec:1b:92:98:c7:fd:b1:b0:7a:ee:ca:7b:f0:5d:3b: 7d:94:fe:8f:ec:1c:6c:2e:72:06:a6:65:0f:f3:62: 2b:dd:b1:b3:a7:19:69:6e:34:b9:49:85:de:b9:7e: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:8F:37:B9:7B:DC:46:9D:B1:78:7A:68:01:78:A1:49:33:9D:63 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:99:1e:7d:41:e5:5e:e0:25:47:21:2e:de:b9:e2:84:e8:fa: 5d:ba:e7:91:72:4b:ce:6c:8a:13:43:3a:05:b6:a6:5e:99:d5: 42:79:ad:92:34:32:9d:37:b7:a6:60:8d:ef:00:36:06:ce:53: 7b:71:1b:bd:93:21:f2:03:a6:8b:e9:68:7f:e3:f7:a3:02:0b: 9d:27:ea:c6:a5:36:be:e4:a5:ae:d1:67:ce:57:c0:3c:a4:37: d4:86:4d:e0:3d:41:9e:1a:b0:8c:4f:dd:ee:c1:f5:cd:16:86: a7:71:c8:07:c6:17:36:07:30:27:7b:54:91:22:18:3c:b3:5a: 88:55:b2:85:69:b1:e1:15:08:91:9b:34:d5:dd:fc:5f:9a:4b: c7:b6:c0:89:00:51:1b:94:b3:06:fa:14:76:b6:17:0f:0a:ee: a4:64:61:e8:e6:8a:d0:9d:d9:55:2a:d6:51:8d:3b:6e:f2:3e: ef:b4:1b:56:3d:6a:34:24:e6:06:85:97:d5:06:1e:40:05:ea: e4:73:7e:67:4a:6e:91:f1:26:5a:d6:66:d1:db:6b:f6:bd:15: f5:90:7c:a5:e1:f1:3b:50:55:dc:50:fa:fe:2b:84:dc:22:c1: 06:05:c3:0d:d2:5e:50:71:d1:a9:ad:8d:80:f6:7c:dc:d6:40: d7:2e:ee:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKwJ4ea/x9zTAiZzc1vAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjUxMjE5MDgwMTIwWhcNMjUxMjIwMDgwMTIwWjAzMTEwLwYDVQQD EyhhZjllOGYzN2I5N2JkYzQ2OWRiMTc4N2E2ODAxNzhhMTQ5MzM5ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iX5q8FWzxeutsqF4Agao/nStcZD PbUu/CXxXsUk00B3009dGZJkh2VVunyouoqExZx2wze9ACPhXSNXSMWbjGg6xTmd 0fLgCRtcC0JZblZfavyhGmLTmyBpyNYdLYfxfu5Zb02J2v13X2Ds1tAIuCpJTW+5 m9MNzbCiAJLkzomI+LAglpuJI3x5CiE0cuUmb+cve5cOX7Lu6nqcVRpsR4f6iokM SERCQKl2eMf5Bz4yjS6ZbLtKxEK7lmZl6pB4vJZQOaRfrkLtD98TW82nwZPsG5KY x/2xsHruynvwXTt9lP6P7BxsLnIGpmUP82Ir3bGzpxlpbjS5SYXeuX7G6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+ejze5e9xGnbF4emgBeKFJM51jMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJkefUHl XuAlRyEu3rnihOj6XbrnkXJLzmyKE0M6BbamXpnVQnmtkjQynTe3pmCN7wA2Bs5T e3EbvZMh8gOmi+lof+P3owILnSfqxqU2vuSlrtFnzlfAPKQ31IZN4D1BnhqwjE/d 7sH1zRaGp3HIB8YXNgcwJ3tUkSIYPLNaiFWyhWmx4RUIkZs01d38X5pLx7bAiQBR G5SzBvoUdrYXDwrupGRh6OaK0J3ZVSrWUY07bvI+77QbVj1qNCTmBoWX1QYeQAXq 5HN+Z0pukfEmWtZm0dtr9r0V9ZB8peHxO1BV3FD6/iuE3CLBBgXDDdJeUHHRqa2N gPZ83NZA1y7uVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:25 2025 by rpki-client