This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft File: UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json) Hash identifier: Oba0hURjKQenONGcGn+QQRdOub9iJqciKorH7eSLnWs= Subject key identifier: 53:5B:FF:4F:3B:57:CB:47:21:55:03:EC:59:BC:02:D6:AF:DA:0D:E4 Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811 Certificate serial: 019B650DD8B354E935E15B10F4B25EFADF3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft Manifest number: 0844 Signing time: Sun 28 Dec 2025 13:02:44 +0000 Manifest this update: Sun 28 Dec 2025 13:02:44 +0000 Manifest next update: Mon 29 Dec 2025 13:02:44 +0000 Files and hashes: 1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: rWYaskI2xcBpFi54xhM+oL0dVGebLJjHLx5V0QuDQVQ=) 2: pPr-RfjQ8TKLflLIUQw5yKTIFpY.roa (hash: oEBThZTfbjTX75q4IqjgPgOk7OlUAtwvGwGIzijgHts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:d8:b3:54:e9:35:e1:5b:10:f4:b2:5e:fa:df:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811 Validity Not Before: Dec 28 13:02:44 2025 GMT Not After : Dec 29 13:02:44 2025 GMT Subject: CN=535bff4f3b57cb47215503ec59bc02d6afda0de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:1d:1f:56:0d:bc:49:5b:e4:14:ce:19:94: f0:9c:3c:c6:5a:27:ae:7c:f1:18:e7:0e:7d:df:ab: ca:1e:ab:5b:a5:83:1a:9d:a3:76:1b:fc:2a:dd:67: 31:71:f9:0f:0f:c8:09:a4:86:98:a4:ab:84:5a:11: 7b:76:73:61:81:db:bf:dd:2f:61:67:ea:30:24:2d: 02:bb:3b:45:bc:b7:07:1e:f0:6f:d3:e8:42:11:b6: 3a:72:d8:c3:96:15:45:85:e2:80:d7:82:d5:5e:99: c6:03:2f:af:15:5f:20:36:23:5a:97:71:96:0f:50: 5f:b4:85:22:8e:04:46:e0:b8:98:db:c9:61:7e:b6: 6d:4e:21:99:18:59:b6:de:86:41:e7:ab:97:1a:8c: 04:c5:d0:5d:97:8a:96:a5:72:87:19:f7:ec:d7:c0: 07:3b:75:e0:31:0f:96:ce:a2:96:32:9b:30:e7:4f: b9:68:6a:7d:04:1d:e1:0c:16:74:a1:23:93:90:90: b0:b8:dc:38:52:21:4d:1c:c2:8e:84:5a:fb:ab:73: e8:d4:16:8e:f9:73:e5:2e:c2:32:8e:56:75:5d:e6: 3d:20:97:bc:a0:be:8d:fc:24:ed:31:cc:fe:2c:48: 70:8b:e6:35:63:9c:b4:d1:6c:5a:04:70:41:40:24: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:FF:4F:3B:57:CB:47:21:55:03:EC:59:BC:02:D6:AF:DA:0D:E4 X509v3 Authority Key Identifier: keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:66:a9:aa:95:3e:bb:b5:2b:71:6a:7e:37:dc:d8:9f:c7:ad: 11:05:e0:95:71:cb:97:23:0a:95:e8:c0:60:f0:9c:da:c4:3e: 83:ae:bb:7c:d9:48:6b:fd:ef:a6:66:25:88:a1:42:1d:fa:87: d7:91:fd:33:b7:2a:3e:86:5f:85:be:b5:46:68:c1:fd:d4:7e: 1f:2c:42:34:b0:55:0b:d7:a8:c0:40:ef:5b:64:34:7b:fb:d4: ff:3a:ad:bb:ef:7d:b0:d7:dc:96:d1:1e:9b:bb:6a:fd:9b:dc: 0b:4c:d0:de:2b:17:ab:84:d8:23:cd:e1:a8:97:6a:0e:ba:68: c5:fe:e3:ca:b6:42:c6:4b:3c:04:b7:3b:dd:e8:8a:63:41:09: ea:52:73:69:25:6e:1f:60:e6:78:f1:a8:af:46:c1:21:ef:3c: ff:2d:15:b0:fb:eb:1b:2b:0a:9e:a8:4b:de:80:b0:60:5e:a4: 96:2f:91:0e:5d:93:02:78:f7:72:0e:74:07:b3:ed:33:ef:a6: d4:48:f8:f9:3a:1c:70:54:85:61:f2:d0:03:87:a5:fe:dd:95: 4b:54:a2:6f:61:99:ce:6d:b4:2e:cd:29:68:38:38:e5:bf:34: 91:15:bf:19:97:d2:45:c6:cd:2b:cf:19:16:44:d4:a0:8e:ae: b3:96:98:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDdizVOk14VsQ9LJe+t89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDEzZjJlNTU5MDcwMDRjNWFiNjk4OWRlN2VlZDE1NDM1 MzU4MTEwHhcNMjUxMjI4MTMwMjQ0WhcNMjUxMjI5MTMwMjQ0WjAzMTEwLwYDVQQD Eyg1MzViZmY0ZjNiNTdjYjQ3MjE1NTAzZWM1OWJjMDJkNmFmZGEwZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzwdH1YNvElb5BTOGZTwnDzGWieu fPEY5w5936vKHqtbpYManaN2G/wq3WcxcfkPD8gJpIaYpKuEWhF7dnNhgdu/3S9h Z+owJC0CuztFvLcHHvBv0+hCEbY6ctjDlhVFheKA14LVXpnGAy+vFV8gNiNal3GW D1BftIUijgRG4LiY28lhfrZtTiGZGFm23oZB56uXGowExdBdl4qWpXKHGffs18AH O3XgMQ+WzqKWMpsw50+5aGp9BB3hDBZ0oSOTkJCwuNw4UiFNHMKOhFr7q3Po1BaO +XPlLsIyjlZ1XeY9IJe8oL6N/CTtMcz+LEhwi+Y1Y5y00WxaBHBBQCRwcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNb/087V8tHIVUD7Fm8Atav2g3kMB8GA1UdIwQY MBaAFFJBPy5VkHAExatpid5+7RVDU1gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQt OGJmZGI5Njk4NTljLzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQtOGJmZGI5Njk4NTlj LzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWapqpU+ u7UrcWp+N9zYn8etEQXglXHLlyMKlejAYPCc2sQ+g667fNlIa/3vpmYliKFCHfqH 15H9M7cqPoZfhb61RmjB/dR+HyxCNLBVC9eowEDvW2Q0e/vU/zqtu+99sNfcltEe m7tq/ZvcC0zQ3isXq4TYI83hqJdqDrpoxf7jyrZCxks8BLc73eiKY0EJ6lJzaSVu H2DmePGor0bBIe88/y0VsPvrGysKnqhL3oCwYF6kli+RDl2TAnj3cg50B7PtM++m 1Ej4+ToccFSFYfLQA4el/t2VS1Sib2GZzm20Ls0paDg45b80kRW/GZfSRcbNK88Z FkTUoI6us5aYbg== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:41 2025 by rpki-client