This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: UHUJA4lEZ/8TDi7HEi9ULDUdq2YGhSTpf11FExkRFdM= Subject key identifier: 66:C6:74:BA:F4:5C:F0:B3:84:7C:29:1F:26:2F:9C:08:E1:45:3C:1D Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B70D906DC69895DF17BC04E258C262247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 091E Signing time: Tue 30 Dec 2025 20:00:29 +0000 Manifest this update: Tue 30 Dec 2025 20:00:29 +0000 Manifest next update: Wed 31 Dec 2025 20:00:29 +0000 Files and hashes: 1: 1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa (hash: pZugq23EDIU544OpCuM7hDUd1+y/txfCOV3C5E6h3Bk=) 2: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 3: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 4: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 5: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 6: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: mVuzVOF8RnbXz4VC692b3jtR88kJHx15m1gCp1Vdw48=) 7: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:06:dc:69:89:5d:f1:7b:c0:4e:25:8c:26:22:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Dec 30 20:00:29 2025 GMT Not After : Dec 31 20:00:29 2025 GMT Subject: CN=66c674baf45cf0b3847c291f262f9c08e1453c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:87:fe:46:25:f3:f3:61:2a:8c:94:5b:94: b5:20:d4:2e:83:cf:f4:99:a3:b7:53:1c:25:9a:ee: 3a:32:2e:13:44:4b:dd:1f:f4:58:3b:57:bb:a3:82: 5b:c6:56:cc:1f:7b:3f:81:f4:a9:99:b4:75:d1:6a: 99:10:8d:af:3b:5b:55:3c:e8:21:2d:28:ba:85:2e: a8:b9:5d:e3:d8:48:76:51:07:56:4d:62:72:c4:01: 4f:a3:ad:72:ad:e3:e7:a4:34:30:b5:e7:86:94:fa: 5b:12:66:05:7b:e5:ae:a1:61:91:5d:c3:93:a5:c0: a6:5b:d3:df:7c:39:e7:c8:09:83:2f:d7:05:af:05: 87:47:c4:14:21:5d:00:13:96:13:33:11:02:af:c5: c6:bf:a9:d8:13:26:08:c0:28:25:70:e1:bf:23:15: 64:a3:a1:7c:6e:10:0a:e0:e7:83:01:48:56:9f:1e: 98:00:d2:0e:9d:24:46:a8:be:0b:95:5e:43:9a:15: be:d1:73:d6:71:60:e6:e2:c8:a9:09:53:d5:15:e3: 73:8e:da:1b:bd:ea:78:63:fb:e6:02:1e:51:bb:00: ec:31:1a:e9:ed:35:0c:36:f7:a3:3d:d5:b4:97:15: 41:fc:31:54:26:47:9d:29:c5:8a:83:77:bb:55:d2: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:74:BA:F4:5C:F0:B3:84:7C:29:1F:26:2F:9C:08:E1:45:3C:1D X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:92:38:8e:ec:fe:8b:74:27:40:31:9e:30:55:05:04:b7:4c: 3a:29:79:e4:4a:ae:b3:2b:0a:38:03:56:42:63:9c:a7:23:e5: ac:c6:46:2a:89:1b:04:42:be:40:ca:ea:76:37:3a:53:ec:85: 8f:dc:b7:fb:a5:f6:5a:c2:dc:1e:4f:93:73:c0:40:2f:c5:16: ee:8d:32:67:46:e5:78:3d:88:ec:a0:d9:6c:6e:22:96:47:a5: f7:83:e4:37:d8:3d:f5:a9:0e:49:80:e1:a6:5b:cc:98:fe:d4: ce:f6:b1:a4:b6:72:47:80:c2:8e:55:9f:16:be:7e:1d:1c:89: 2c:80:2e:9a:cd:2c:dc:a4:ce:57:c3:46:ec:fc:43:b2:c4:4d: 70:9d:26:45:c5:d7:2e:99:e8:4b:db:4b:75:f1:d8:e0:28:a5: 32:8f:b5:75:0a:cb:14:0f:51:90:aa:2a:c6:a3:b6:e8:68:94: da:2a:c2:7d:72:ac:f6:8b:ef:30:d3:d9:97:69:69:cf:4b:0f: 69:fc:b0:89:3e:f8:0a:83:8f:22:4a:9e:53:fc:06:4c:ca:ab: 66:65:15:13:44:e9:ab:0c:08:75:56:27:a6:51:24:b6:b1:8f: b4:a7:12:4c:20:49:d9:4c:01:b3:c8:8b:fe:63:d0:91:9f:1b: 3b:89:d2:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2QbcaYld8XvATiWMJiJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUxMjMwMjAwMDI5WhcNMjUxMjMxMjAwMDI5WjAzMTEwLwYDVQQD Eyg2NmM2NzRiYWY0NWNmMGIzODQ3YzI5MWYyNjJmOWMwOGUxNDUzYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFOH/kYl8/NhKoyUW5S1INQug8/0 maO3Uxwlmu46Mi4TREvdH/RYO1e7o4JbxlbMH3s/gfSpmbR10WqZEI2vO1tVPOgh LSi6hS6ouV3j2Eh2UQdWTWJyxAFPo61yrePnpDQwteeGlPpbEmYFe+WuoWGRXcOT pcCmW9PffDnnyAmDL9cFrwWHR8QUIV0AE5YTMxECr8XGv6nYEyYIwCglcOG/IxVk o6F8bhAK4OeDAUhWnx6YANIOnSRGqL4LlV5DmhW+0XPWcWDm4sipCVPVFeNzjtob vep4Y/vmAh5RuwDsMRrp7TUMNvejPdW0lxVB/DFUJkedKcWKg3e7VdK74QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbGdLr0XPCzhHwpHyYvnAjhRTwdMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpI4juz+ i3QnQDGeMFUFBLdMOil55EqusysKOANWQmOcpyPlrMZGKokbBEK+QMrqdjc6U+yF j9y3+6X2WsLcHk+Tc8BAL8UW7o0yZ0bleD2I7KDZbG4ilkel94PkN9g99akOSYDh plvMmP7UzvaxpLZyR4DCjlWfFr5+HRyJLIAums0s3KTOV8NG7PxDssRNcJ0mRcXX LpnoS9tLdfHY4CilMo+1dQrLFA9RkKoqxqO26GiU2irCfXKs9ovvMNPZl2lpz0sP afywiT74CoOPIkqeU/wGTMqrZmUVE0TpqwwIdVYnplEktrGPtKcSTCBJ2UwBs8iL /mPQkZ8bO4nSCQ== -----END CERTIFICATE-----Generated at Wed Dec 31 00:11:48 2025 by rpki-client