This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json) Hash identifier: 9RXYoVLRWG09kghSkLXqG3V58u+tjsKR4gqQutYp0xQ= Subject key identifier: 1F:9F:5C:B8:0F:15:8E:B1:AF:34:FF:ED:2F:25:26:B7:E2:46:F0:DE Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Certificate serial: 019B3A9054DA47FF41BA7CF2C723A222EC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft Manifest number: 0B4D Signing time: Sat 20 Dec 2025 07:01:35 +0000 Manifest this update: Sat 20 Dec 2025 07:01:35 +0000 Manifest next update: Sun 21 Dec 2025 07:01:35 +0000 Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=) 2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: qH2rKwt2wddiVPQ6Q67B4ggxDq+TRaSoFISfcY3xWYs=) 3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:54:da:47:ff:41:ba:7c:f2:c7:23:a2:22:ec:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Validity Not Before: Dec 20 07:01:35 2025 GMT Not After : Dec 21 07:01:35 2025 GMT Subject: CN=1f9f5cb80f158eb1af34ffed2f2526b7e246f0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:37:14:e3:79:7f:c8:27:68:9b:e9:33:d9: 00:ae:f7:cd:73:7e:96:c8:87:4f:77:1c:24:ae:87: c2:40:63:06:67:4b:95:8c:ac:27:b7:2a:8d:29:2e: 1f:0f:c8:98:81:e1:bd:1a:92:a1:83:e0:d7:c6:d5: ed:0f:40:6a:d1:8c:17:25:20:cb:ab:37:5a:cc:68: cf:f4:ac:e3:2b:a8:7d:d1:d0:54:04:dd:1a:b3:92: bd:bd:c2:cb:86:81:71:46:bc:44:7a:54:74:42:82: 3e:e7:d7:e6:25:80:a7:53:f7:e9:92:77:3f:22:72: 52:a6:b2:a0:f0:a7:be:43:45:aa:01:25:d1:d8:ea: b0:f9:4f:b2:ad:f2:4e:5a:46:23:60:9e:8e:18:ab: ab:cd:70:59:ad:fe:09:15:c1:c4:46:4f:51:22:1f: 46:84:2b:d0:df:54:58:8e:04:a3:a8:c5:f1:46:c9: ad:bd:c1:27:a9:d4:22:68:dc:47:7e:10:35:5c:59: d6:9e:45:ce:f1:ed:47:e5:96:a5:4e:1d:ff:7a:72: 73:64:ab:3a:ea:bf:85:28:73:68:cb:0d:91:51:0d: b7:a7:36:36:4d:48:92:3c:38:7a:8b:fe:2d:fa:5d: fa:c2:e9:bd:56:ca:92:6c:df:22:b1:6f:6f:3a:ee: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9F:5C:B8:0F:15:8E:B1:AF:34:FF:ED:2F:25:26:B7:E2:46:F0:DE X509v3 Authority Key Identifier: keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fd:5f:ab:11:94:16:2b:b3:b4:cf:bf:74:65:05:e7:8b:7b: f1:fa:c8:a0:d7:52:dd:d7:08:b9:22:6e:da:a2:e0:1c:db:aa: d5:ee:64:60:28:24:8c:89:25:36:8a:65:98:23:6f:c0:a2:b3: 06:05:87:c0:77:18:7d:a0:97:81:e4:07:08:93:33:c5:4d:dc: b7:8c:7e:68:5b:3a:57:0b:77:15:7f:47:62:00:67:f5:76:87: 5f:a0:8a:a2:49:d8:f8:4f:31:ab:d5:db:4a:18:fb:ef:30:04: f1:b6:dd:09:59:c6:ee:d7:e5:23:0a:81:b3:fe:c3:be:3c:28: a3:a5:39:70:85:d1:cc:17:bd:5d:67:28:ad:b0:5b:1b:cd:d6: a8:b7:aa:20:6e:b4:72:5d:c2:a0:a9:fe:b5:d9:dc:44:44:e1: 64:fe:27:36:4e:7c:4c:af:28:a8:f8:a2:38:c6:89:91:ff:37: 52:0d:78:ed:02:fb:40:3f:9d:49:23:4e:1e:f3:24:9b:18:24: 4d:13:c4:48:fa:82:63:10:be:56:07:8e:b3:ee:fc:83:d8:1d: 3e:8f:39:20:af:63:ca:ca:62:8f:e4:91:c7:49:c7:dc:c6:32: a7:eb:24:97:5f:32:c2:ef:35:1a:ab:80:fa:b5:d7:8e:ce:b4: 7e:44:53:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kFTaR/9BunzyxyOiIuxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3 OWMwMTUwHhcNMjUxMjIwMDcwMTM1WhcNMjUxMjIxMDcwMTM1WjAzMTEwLwYDVQQD EygxZjlmNWNiODBmMTU4ZWIxYWYzNGZmZWQyZjI1MjZiN2UyNDZmMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6k3FON5f8gnaJvpM9kArvfNc36W yIdPdxwkrofCQGMGZ0uVjKwntyqNKS4fD8iYgeG9GpKhg+DXxtXtD0Bq0YwXJSDL qzdazGjP9KzjK6h90dBUBN0as5K9vcLLhoFxRrxEelR0QoI+59fmJYCnU/fpknc/ InJSprKg8Ke+Q0WqASXR2Oqw+U+yrfJOWkYjYJ6OGKurzXBZrf4JFcHERk9RIh9G hCvQ31RYjgSjqMXxRsmtvcEnqdQiaNxHfhA1XFnWnkXO8e1H5ZalTh3/enJzZKs6 6r+FKHNoyw2RUQ23pzY2TUiSPDh6i/4t+l36wum9VsqSbN8isW9vOu7I/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+fXLgPFY6xrzT/7S8lJrfiRvDeMB8GA1UdIwQY MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAov1fqxGU FiuztM+/dGUF54t78frIoNdS3dcIuSJu2qLgHNuq1e5kYCgkjIklNoplmCNvwKKz BgWHwHcYfaCXgeQHCJMzxU3ct4x+aFs6Vwt3FX9HYgBn9XaHX6CKoknY+E8xq9Xb Shj77zAE8bbdCVnG7tflIwqBs/7Dvjwoo6U5cIXRzBe9XWcorbBbG83WqLeqIG60 cl3CoKn+tdncREThZP4nNk58TK8oqPiiOMaJkf83Ug147QL7QD+dSSNOHvMkmxgk TRPESPqCYxC+VgeOs+78g9gdPo85IK9jyspij+SRx0nH3MYyp+skl18ywu81GquA +rXXjs60fkRT3g== -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:19 2025 by rpki-client