This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json) Hash identifier: pPhwJhSlMkSG0fxC+Ja+PiebHRTPodlAdbFRnSTPbao= Subject key identifier: 67:36:2A:E4:9E:EE:32:AB:F1:CF:4E:DA:5D:37:A8:5D:97:B0:CB:F6 Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74 Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874 Certificate serial: 019B3DFE8DD5260DFA6C7A70D15D8377CE36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft Manifest number: 1253 Signing time: Sat 20 Dec 2025 23:00:51 +0000 Manifest this update: Sat 20 Dec 2025 23:00:51 +0000 Manifest next update: Sun 21 Dec 2025 23:00:51 +0000 Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=) 2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: a3zLNE0oGS8RCiSxjNzX/pCjOcQHhN6V7jQ9FcYVy3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:8d:d5:26:0d:fa:6c:7a:70:d1:5d:83:77:ce:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52386e520478e625be1d6282d216b05912f83874 Validity Not Before: Dec 20 23:00:51 2025 GMT Not After : Dec 21 23:00:51 2025 GMT Subject: CN=67362ae49eee32abf1cf4eda5d37a85d97b0cbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:d9:71:32:5b:2a:a7:fc:09:e3:8f:19:02: d2:80:fa:46:4d:72:13:6e:ba:65:a6:27:8e:97:b5: 08:8e:46:ad:75:58:e6:46:4c:e3:50:79:57:b0:d4: da:8e:9b:6a:44:a5:5f:dd:47:3e:25:40:9e:19:83: 7e:26:77:09:54:d4:a2:ad:41:9a:3f:1d:d1:6e:e4: f8:60:23:30:00:0b:50:d9:ab:d9:d7:52:ec:a4:ea: 0f:48:86:50:fe:57:f9:ca:4a:e9:5b:89:fb:91:89: 24:66:f2:d3:0f:24:e8:ce:07:3b:a7:44:d7:66:33: ed:2b:fb:06:71:66:3d:ab:b0:15:13:f6:bf:4c:9f: 79:75:23:91:17:77:bc:36:be:2e:7c:3d:83:1d:02: 0e:40:4d:de:fb:be:ff:4c:45:ec:71:8d:ff:65:df: ef:68:1a:e9:2d:d8:9b:56:81:4c:4b:1e:19:6e:83: 1f:d3:61:f8:7a:85:b1:19:44:02:c2:a0:03:3b:dc: 84:fc:17:2a:a1:6b:4c:b2:43:fd:8e:9b:17:ad:ba: 7c:1c:0f:79:d3:0e:3a:b6:79:68:10:f7:31:c0:ce: 0b:40:3e:53:48:2d:e0:41:49:46:e8:e0:87:dd:da: 47:46:7f:97:36:ad:ed:2f:6c:25:ca:29:4c:84:82: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:36:2A:E4:9E:EE:32:AB:F1:CF:4E:DA:5D:37:A8:5D:97:B0:CB:F6 X509v3 Authority Key Identifier: keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:09:06:89:d5:b8:4d:33:6d:9f:42:cf:48:c3:a1:5c:cf:99: a4:12:91:89:b1:2e:47:d9:2b:13:41:e5:73:a8:5a:81:76:c0: e1:fa:ab:fe:e5:84:f4:8b:ea:e3:7e:9f:bf:4e:6c:67:23:70: 1e:82:7a:01:63:ac:9e:64:13:a3:70:71:09:fd:4f:3e:1e:50: 04:38:f5:d2:69:52:85:60:60:43:c1:78:c1:f7:84:91:c9:ed: 84:f5:45:42:f8:9f:80:ab:d7:3e:c8:4e:62:c1:31:e2:ad:aa: 5d:b2:1b:1d:4d:f4:89:7d:8e:be:6f:34:05:03:79:14:5b:9d: 54:46:c1:27:33:51:a2:80:68:dd:f0:0c:c3:33:58:1c:d1:3b: 4f:0b:0e:4b:6d:ff:af:94:bb:e1:54:6c:08:15:1c:3b:2c:ff: 86:f4:b7:0e:40:cb:e0:79:a1:4a:80:7c:9b:26:7f:d1:32:27: 92:df:6e:48:6c:de:61:a2:44:17:cc:81:20:65:98:57:fc:30: ba:97:17:48:4b:34:b1:42:d1:1c:50:43:cb:00:2c:0c:e9:9a: 1f:d7:3a:4c:65:6f:69:5a:c0:3c:44:88:36:3d:f1:1f:c0:4e: a6:b0:b2:69:02:6c:89:ef:d8:d0:06:69:29:4c:2c:04:51:4d: a6:e6:1d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/o3VJg36bHpw0V2Dd842MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzg2ZTUyMDQ3OGU2MjViZTFkNjI4MmQyMTZiMDU5MTJm ODM4NzQwHhcNMjUxMjIwMjMwMDUxWhcNMjUxMjIxMjMwMDUxWjAzMTEwLwYDVQQD Eyg2NzM2MmFlNDllZWUzMmFiZjFjZjRlZGE1ZDM3YTg1ZDk3YjBjYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxunZcTJbKqf8CeOPGQLSgPpGTXIT brplpieOl7UIjkatdVjmRkzjUHlXsNTajptqRKVf3Uc+JUCeGYN+JncJVNSirUGa Px3RbuT4YCMwAAtQ2avZ11LspOoPSIZQ/lf5ykrpW4n7kYkkZvLTDyTozgc7p0TX ZjPtK/sGcWY9q7AVE/a/TJ95dSORF3e8Nr4ufD2DHQIOQE3e+77/TEXscY3/Zd/v aBrpLdibVoFMSx4ZboMf02H4eoWxGUQCwqADO9yE/BcqoWtMskP9jpsXrbp8HA95 0w46tnloEPcxwM4LQD5TSC3gQUlG6OCH3dpHRn+XNq3tL2wlyilMhILcGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc2KuSe7jKr8c9O2l03qF2XsMv2MB8GA1UdIwQY MBaAFFI4blIEeOYlvh1igtIWsFkS+Dh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDIt YWU1ZGI2ZTE0ODZkLzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDItYWU1ZGI2ZTE0ODZk LzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgkGidW4 TTNtn0LPSMOhXM+ZpBKRibEuR9krE0Hlc6hagXbA4fqr/uWE9Ivq436fv05sZyNw HoJ6AWOsnmQTo3BxCf1PPh5QBDj10mlShWBgQ8F4wfeEkcnthPVFQvifgKvXPshO YsEx4q2qXbIbHU30iX2Ovm80BQN5FFudVEbBJzNRooBo3fAMwzNYHNE7TwsOS23/ r5S74VRsCBUcOyz/hvS3DkDL4HmhSoB8myZ/0TInkt9uSGzeYaJEF8yBIGWYV/ww upcXSEs0sULRHFBDywAsDOmaH9c6TGVvaVrAPESINj3xH8BOprCyaQJsie/Y0AZp KUwsBFFNpuYdQw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:16 2025 by rpki-client