This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: WrkX2jY8N+y415DNuZKgt7IeoMqIjc7J7Eg8+ZsTUPQ= Subject key identifier: 3D:97:6D:6D:C7:28:78:85:D6:EB:DA:51:04:CF:04:6C:7D:F9:35:20 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B40918888380E568F0F8ADBE8EA362CB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0905 Signing time: Sun 21 Dec 2025 11:00:37 +0000 Manifest this update: Sun 21 Dec 2025 11:00:37 +0000 Manifest next update: Mon 22 Dec 2025 11:00:37 +0000 Files and hashes: 1: 1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa (hash: pZugq23EDIU544OpCuM7hDUd1+y/txfCOV3C5E6h3Bk=) 2: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 3: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 4: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 5: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 6: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: uZKEYB90Dk++EpbUkoRL3Ud8CjgnIpN53bd7QFPUoHQ=) 7: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:88:88:38:0e:56:8f:0f:8a:db:e8:ea:36:2c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Dec 21 11:00:37 2025 GMT Not After : Dec 22 11:00:37 2025 GMT Subject: CN=3d976d6dc7287885d6ebda5104cf046c7df93520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:18:5b:85:7e:fa:d4:19:c4:fc:10:1d:5c: 95:51:24:ae:11:9f:af:01:23:5a:cf:a2:85:7f:75: 5d:db:4d:c4:f7:12:e7:b1:b9:dd:6a:cb:9c:a5:57: 0b:da:0c:1d:dc:2b:b6:f4:dc:26:b6:1c:cc:a8:fa: b7:c0:cf:98:8c:36:a1:35:a7:a4:e9:28:a5:ac:13: f8:20:f6:6d:94:ef:53:c8:11:be:4e:ba:7b:6e:62: 79:95:90:d6:82:e3:1e:02:e7:1f:b3:6a:8c:a1:90: 89:77:62:01:d0:bf:cd:a2:ab:25:f6:53:4e:12:50: 7a:df:e7:dd:3b:79:86:33:7b:93:ea:c0:c0:af:b8: ef:50:cb:12:e9:61:97:f9:3f:3d:95:82:06:8a:9d: 61:04:e4:30:40:a0:1b:a7:04:0c:33:df:d6:6a:18: 34:f7:01:43:9f:e5:9a:10:d2:84:e0:04:06:6c:24: d2:b0:7f:38:a8:05:ca:b2:19:50:ed:b1:90:ed:31: b6:2d:ba:61:1f:ac:0c:1b:f1:ad:b3:63:25:80:49: 66:19:6a:b4:1e:42:e7:8f:44:8b:dc:5c:5f:3a:b6: a4:0c:91:3b:1b:28:d1:fc:22:82:4d:ec:fa:63:db: ed:a4:2d:19:19:75:31:d6:7e:37:c5:c3:14:09:cd: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:6D:6D:C7:28:78:85:D6:EB:DA:51:04:CF:04:6C:7D:F9:35:20 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:04:f5:40:d9:d7:70:90:35:b3:d8:d3:aa:d5:c9:fc:31:b2: d8:86:d0:7f:1b:90:30:ed:29:4b:06:2e:99:f8:5f:1c:fc:dc: 53:68:d5:43:b7:d2:e6:68:85:88:56:1d:75:c0:13:34:e3:1e: 85:df:d7:6a:bb:fe:a6:5b:e7:f9:c8:e1:27:c8:5a:e8:d8:fd: a3:27:27:81:df:04:24:78:3e:75:ec:9f:5c:b9:1c:7f:d6:4e: bb:98:40:66:b1:87:71:12:be:16:94:a9:57:64:e0:92:1a:2e: 30:eb:8f:ab:91:00:d8:83:5c:cf:3c:6e:83:be:8d:e8:b5:3b: b3:d6:10:e8:d0:0b:91:32:35:e2:bc:81:0c:74:22:5d:a9:b0: 9f:b7:e3:73:07:dc:9a:6f:f7:2c:5d:e1:67:81:16:a6:b9:f8: e0:34:e9:39:5b:12:30:69:39:4b:d8:0e:9b:c7:ec:8c:cf:7a: 30:dd:6a:64:8f:0b:cf:d2:25:cd:b0:e8:ca:5a:94:11:2c:24: 30:8b:4f:0d:77:36:df:ef:5e:4b:26:04:91:37:9d:0c:55:88: ed:36:02:14:8a:58:9a:64:4a:8a:ee:6d:20:b8:82:db:c5:60: d8:06:53:0b:16:d0:ce:2d:7e:28:48:be:c0:13:57:31:23:62: dc:b5:b3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkYiIOA5Wjw+K2+jqNiy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUxMjIxMTEwMDM3WhcNMjUxMjIyMTEwMDM3WjAzMTEwLwYDVQQD EygzZDk3NmQ2ZGM3Mjg3ODg1ZDZlYmRhNTEwNGNmMDQ2YzdkZjkzNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3gYW4V++tQZxPwQHVyVUSSuEZ+v ASNaz6KFf3Vd203E9xLnsbndasucpVcL2gwd3Cu29NwmthzMqPq3wM+YjDahNaek 6SilrBP4IPZtlO9TyBG+Trp7bmJ5lZDWguMeAucfs2qMoZCJd2IB0L/Noqsl9lNO ElB63+fdO3mGM3uT6sDAr7jvUMsS6WGX+T89lYIGip1hBOQwQKAbpwQMM9/Wahg0 9wFDn+WaENKE4AQGbCTSsH84qAXKshlQ7bGQ7TG2LbphH6wMG/Gts2MlgElmGWq0 HkLnj0SL3FxfOrakDJE7GyjR/CKCTez6Y9vtpC0ZGXUx1n43xcMUCc0ZNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2XbW3HKHiF1uvaUQTPBGx9+TUgMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQT1QNnX cJA1s9jTqtXJ/DGy2IbQfxuQMO0pSwYumfhfHPzcU2jVQ7fS5miFiFYddcATNOMe hd/Xarv+plvn+cjhJ8ha6Nj9oycngd8EJHg+deyfXLkcf9ZOu5hAZrGHcRK+FpSp V2TgkhouMOuPq5EA2INczzxug76N6LU7s9YQ6NALkTI14ryBDHQiXamwn7fjcwfc mm/3LF3hZ4EWprn44DTpOVsSMGk5S9gOm8fsjM96MN1qZI8Lz9IlzbDoylqUESwk MItPDXc23+9eSyYEkTedDFWI7TYCFIpYmmRKiu5tILiC28Vg2AZTCxbQzi1+KEi+ wBNXMSNi3LWzuw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:02:14 2025 by rpki-client