This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json) Hash identifier: Phskytyr3UNFgqa2siaxYoxCpNtswWfHO2B9rBzOsqg= Subject key identifier: 89:2D:9E:A4:70:6A:07:A8:96:0B:FD:68:CB:1F:3C:91:BB:29:82:AC Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5 Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5 Certificate serial: 019B3CB4AF6B10DF6861400D3F3877F56E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft Manifest number: 0EEE Signing time: Sat 20 Dec 2025 17:00:32 +0000 Manifest this update: Sat 20 Dec 2025 17:00:32 +0000 Manifest next update: Sun 21 Dec 2025 17:00:32 +0000 Files and hashes: 1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=) 2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: TJYATA0uhWxnZJnrkVD4tP7pB8dATF6LcthsCp9b2Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:af:6b:10:df:68:61:40:0d:3f:38:77:f5:6e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5 Validity Not Before: Dec 20 17:00:32 2025 GMT Not After : Dec 21 17:00:32 2025 GMT Subject: CN=892d9ea4706a07a8960bfd68cb1f3c91bb2982ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:2b:17:f9:e5:44:2b:29:2b:12:4c:cd:85: f3:a7:e1:4f:8c:52:fc:ee:7c:ff:7d:8c:d7:88:90: 11:a6:30:73:e4:87:ad:fe:65:d5:fb:f2:21:c2:6b: 9b:47:ca:47:a8:92:91:ed:55:e3:44:a1:46:05:cc: 9f:d9:2b:b8:84:72:94:33:7c:83:4b:75:ee:d5:b6: 32:7e:f8:00:67:38:85:b6:33:d4:fd:e2:70:6d:f9: 6b:8f:70:b9:b0:a1:fd:b4:c0:38:7a:4c:09:27:db: ca:70:b7:06:1e:e8:fe:e1:4f:13:24:e8:a3:64:8a: 41:40:d7:aa:5d:f3:db:4a:f3:34:82:30:a0:4b:3f: bd:74:e6:87:d4:01:6e:18:91:b0:8d:39:9d:0b:44: df:29:c8:db:a7:86:35:69:95:b5:27:e6:bc:8e:2b: 31:29:99:e6:78:c8:19:3c:59:2a:ad:f8:8b:19:db: 62:2e:3a:90:81:85:a8:b9:c8:5c:e5:a4:6e:6f:77: 3f:3a:1c:c5:6e:5c:2f:0f:24:90:fc:a1:5f:6d:20: 3c:18:eb:61:5a:4c:48:bd:36:0f:43:25:f8:77:04: f9:ba:65:61:cf:e0:ed:16:e4:53:9d:09:1a:9b:1d: 2a:1f:7a:3e:7a:72:e9:35:76:53:44:9a:18:20:bc: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2D:9E:A4:70:6A:07:A8:96:0B:FD:68:CB:1F:3C:91:BB:29:82:AC X509v3 Authority Key Identifier: keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e0:3c:9f:99:dd:b9:dc:f0:7e:9e:f4:ff:d7:9d:24:fa:db: d3:83:93:8d:74:74:ce:c7:c6:fd:f5:44:e4:b1:70:c2:05:a2: 39:cc:46:a3:ff:6f:0e:0e:c7:48:53:a2:78:ae:91:b8:15:db: da:3b:5c:b0:48:57:32:78:f3:ce:31:cd:f2:7d:26:06:3d:f6: ea:ba:69:b1:b9:cc:89:cc:62:1b:e5:d9:a5:65:47:19:84:3c: e1:92:ee:63:28:ba:0d:41:2e:73:28:b4:12:6f:4f:8b:d2:4e: 30:8a:30:c1:94:12:e7:15:44:1f:60:bc:4d:30:2e:53:d7:7a: 3f:0a:f4:00:09:56:05:2c:13:18:cc:41:ec:5f:04:55:0c:a8: d4:fc:a7:08:92:4c:60:22:2a:ff:be:fe:2f:11:7b:ad:ea:3b: 46:c1:5d:07:10:b5:54:42:d0:0c:45:9d:8d:e3:97:02:88:41: 5b:3b:15:3d:04:2d:bd:04:ee:bc:71:07:5e:d8:c0:52:65:6a: 52:3b:41:55:88:ba:ec:f2:61:b7:ed:21:9d:ca:a7:2a:f7:35: fc:ec:2d:46:5c:e9:95:d9:0a:89:2a:87:57:35:97:e0:4c:4d: 9b:f1:8e:9a:65:95:82:12:c6:d7:5a:ad:1d:bd:a3:1e:bb:7d: 73:84:52:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tK9rEN9oYUANPzh39W6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzI2ZmFiYjEyNTZmYTAyMjc3ZTVlZTAzNGI3OTkxZmYz MTg1YTUwHhcNMjUxMjIwMTcwMDMyWhcNMjUxMjIxMTcwMDMyWjAzMTEwLwYDVQQD Eyg4OTJkOWVhNDcwNmEwN2E4OTYwYmZkNjhjYjFmM2M5MWJiMjk4MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArigrF/nlRCspKxJMzYXzp+FPjFL8 7nz/fYzXiJARpjBz5Iet/mXV+/IhwmubR8pHqJKR7VXjRKFGBcyf2Su4hHKUM3yD S3Xu1bYyfvgAZziFtjPU/eJwbflrj3C5sKH9tMA4ekwJJ9vKcLcGHuj+4U8TJOij ZIpBQNeqXfPbSvM0gjCgSz+9dOaH1AFuGJGwjTmdC0TfKcjbp4Y1aZW1J+a8jisx KZnmeMgZPFkqrfiLGdtiLjqQgYWouchc5aRub3c/OhzFblwvDySQ/KFfbSA8GOth WkxIvTYPQyX4dwT5umVhz+DtFuRTnQkamx0qH3o+enLpNXZTRJoYILy1ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIktnqRwageolgv9aMsfPJG7KYKsMB8GA1UdIwQY MBaAFFEyb6uxJW+gInfl7gNLeZH/MYWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUt ODdhM2YzYjMxMTUwLzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUtODdhM2YzYjMxMTUw LzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+A8n5nd udzwfp70/9edJPrb04OTjXR0zsfG/fVE5LFwwgWiOcxGo/9vDg7HSFOieK6RuBXb 2jtcsEhXMnjzzjHN8n0mBj326rppsbnMicxiG+XZpWVHGYQ84ZLuYyi6DUEucyi0 Em9Pi9JOMIowwZQS5xVEH2C8TTAuU9d6Pwr0AAlWBSwTGMxB7F8EVQyo1PynCJJM YCIq/77+LxF7reo7RsFdBxC1VELQDEWdjeOXAohBWzsVPQQtvQTuvHEHXtjAUmVq UjtBVYi67PJht+0hncqnKvc1/OwtRlzpldkKiSqHVzWX4ExNm/GOmmWVghLG11qt Hb2jHrt9c4RSKA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:52:36 2025 by rpki-client