This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json) Hash identifier: txckrEcJQPv5ObFGgo4uT27DL1/oZG2L2QocYUG49FQ= Subject key identifier: DB:43:AE:51:F4:AD:49:3D:43:98:0C:78:B1:8E:C3:66:A9:61:0E:C3 Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019B3D231BAB0935552C3FD09EE909CA8522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft Manifest number: 052B Signing time: Sat 20 Dec 2025 19:01:09 +0000 Manifest this update: Sat 20 Dec 2025 19:01:09 +0000 Manifest next update: Sun 21 Dec 2025 19:01:09 +0000 Files and hashes: 1: 4QBOhoFNUxak77byKINjZVmZ2fE.roa (hash: v5Sp6DRTjrIUknZcB2dDqhlDf9TOw4Vufs1sIAdSgTo=) 2: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 3+p7nfvnaiz/edySYA/G+na4J5OOEgwV8mevrd0Bz8s=) 3: e0bJRqMtYuh9ohw7_55dd6lUhaI.roa (hash: fUH0stkssrWBdiZb/F3KzscDpiWHvrKAjv681mirVo0=) 4: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=) 5: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=) 6: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1b:ab:09:35:55:2c:3f:d0:9e:e9:09:ca:85:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Dec 20 19:01:09 2025 GMT Not After : Dec 21 19:01:09 2025 GMT Subject: CN=db43ae51f4ad493d43980c78b18ec366a9610ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:f9:e3:ee:e7:23:ac:5e:67:a4:ea:74:cf: 3c:21:52:f7:88:eb:c3:f5:20:fc:7e:29:76:be:e3: 03:ef:31:fe:9e:cd:12:c1:0c:ee:b6:3d:06:77:88: 67:54:14:ed:80:a8:11:b8:ed:4d:8f:bb:05:35:20: d9:4b:93:d2:c3:8d:5c:1f:5f:f1:26:05:af:0e:2b: 19:16:32:92:cb:a5:a0:66:e0:e6:cd:81:33:22:0b: 53:7b:3b:f5:97:11:b2:d1:d5:7d:50:72:a2:7c:d8: 61:e3:13:02:73:55:92:34:bd:63:6c:50:56:e3:cc: 61:bf:e6:25:88:6d:73:50:ae:3d:1e:ea:8e:99:4e: 99:11:72:25:73:c5:fc:dc:2a:e8:fb:73:e9:50:75: 0e:d6:56:ce:f7:f2:db:fc:3a:ba:c5:9a:58:86:e8: 13:8f:88:2a:bf:fd:51:aa:28:ae:cb:ac:37:0c:74: 21:81:fa:3a:d6:13:0b:94:0f:47:15:03:82:53:d7: b9:4b:67:78:20:50:98:18:fc:73:8b:89:d4:54:e1: 87:13:52:f5:2e:c4:bf:b6:1f:b6:88:16:02:2f:4b: cd:e5:fc:8e:fc:eb:c1:b6:39:c4:8d:ff:c8:f6:30: fd:cf:89:2f:bb:3b:23:ec:b1:62:57:75:a8:eb:40: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:AE:51:F4:AD:49:3D:43:98:0C:78:B1:8E:C3:66:A9:61:0E:C3 X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1e:7d:6d:39:8d:d9:0a:c9:53:fe:41:c7:d5:7b:99:68:ad: b3:c3:23:56:2a:77:18:cb:09:d9:bf:12:de:ce:58:56:d3:7a: 17:72:2a:f2:f1:49:57:ad:e1:7e:70:e7:13:9a:e4:88:33:c1: 2b:13:43:b8:e4:6b:c7:73:59:c8:02:15:96:54:62:75:5f:00: 01:88:41:a8:51:1d:0d:c9:0e:63:de:5a:bd:96:80:75:cc:3a: 45:70:18:64:c5:13:d7:2d:a9:bf:a5:3b:6b:39:36:b5:fb:36: 3c:0f:3f:d0:41:24:76:ee:d6:ff:e2:d0:bc:cc:d5:9c:17:b0: 93:c4:94:9b:bb:89:37:37:2b:70:2d:43:25:42:f1:97:a2:21: 7a:b6:d9:d8:db:9a:0b:ab:3d:ad:28:3a:22:af:f4:95:c5:ca: cc:a0:90:46:ba:d6:8e:76:0d:68:2e:8b:99:4f:dd:fe:c6:7c: e8:0b:f2:fe:60:a2:dc:56:99:13:df:47:92:ab:e6:75:59:1c: 70:b4:91:e7:f9:ff:f3:c8:16:5c:95:a9:ab:17:54:06:df:2d: 24:f7:75:27:e1:88:bd:37:05:4a:1e:3c:ec:26:5f:71:bc:0f: 5c:07:fc:13:60:b1:d2:a0:9e:57:6c:54:ae:82:ab:78:ea:c9: 4e:bf:5c:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IxurCTVVLD/QnukJyoUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjUxMjIwMTkwMTA5WhcNMjUxMjIxMTkwMTA5WjAzMTEwLwYDVQQD EyhkYjQzYWU1MWY0YWQ0OTNkNDM5ODBjNzhiMThlYzM2NmE5NjEwZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hD54+7nI6xeZ6TqdM88IVL3iOvD 9SD8fil2vuMD7zH+ns0SwQzutj0Gd4hnVBTtgKgRuO1Nj7sFNSDZS5PSw41cH1/x JgWvDisZFjKSy6WgZuDmzYEzIgtTezv1lxGy0dV9UHKifNhh4xMCc1WSNL1jbFBW 48xhv+YliG1zUK49HuqOmU6ZEXIlc8X83Cro+3PpUHUO1lbO9/Lb/Dq6xZpYhugT j4gqv/1Rqiiuy6w3DHQhgfo61hMLlA9HFQOCU9e5S2d4IFCYGPxzi4nUVOGHE1L1 LsS/th+2iBYCL0vN5fyO/OvBtjnEjf/I9jD9z4kvuzsj7LFiV3Wo60D+KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtDrlH0rUk9Q5gMeLGOw2apYQ7DMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR59bTmN 2QrJU/5Bx9V7mWits8MjVip3GMsJ2b8S3s5YVtN6F3Iq8vFJV63hfnDnE5rkiDPB KxNDuORrx3NZyAIVllRidV8AAYhBqFEdDckOY95avZaAdcw6RXAYZMUT1y2pv6U7 azk2tfs2PA8/0EEkdu7W/+LQvMzVnBewk8SUm7uJNzcrcC1DJULxl6IherbZ2Nua C6s9rSg6Iq/0lcXKzKCQRrrWjnYNaC6LmU/d/sZ86Avy/mCi3FaZE99HkqvmdVkc cLSR5/n/88gWXJWpqxdUBt8tJPd1J+GIvTcFSh487CZfcbwPXAf8E2Cx0qCeV2xU roKreOrJTr9cHw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:08 2025 by rpki-client