This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json) Hash identifier: MF9lq90bU0n4jg9T0Xu8RTwqDgJ5jQwaNbdywJIdGVs= Subject key identifier: 93:E9:45:37:F5:C6:49:A0:11:8E:C4:BB:F5:22:AA:85:B0:36:80:38 Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e Certificate serial: 019B3AC65B019C0605B84FB7D96FF103838C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 08:00:36 +0000 Manifest this update: Sat 20 Dec 2025 08:00:36 +0000 Manifest next update: Sun 21 Dec 2025 08:00:36 +0000 Files and hashes: 1: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: Akuna9r+NhhUrEdunPnnT+fBES5yiUWadcEvVIOs2uw=) 2: vffye4B_maKGCuAE9ICWvmcHW6I.roa (hash: VaColu6D/X0DZ0KpxU1etnd04XXSodxmzmHPWI2Hjvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:5b:01:9c:06:05:b8:4f:b7:d9:6f:f1:03:83:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e Validity Not Before: Dec 20 08:00:36 2025 GMT Not After : Dec 21 08:00:36 2025 GMT Subject: CN=93e94537f5c649a0118ec4bbf522aa85b0368038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:17:6d:e6:4c:2e:e1:d4:95:d0:38:36:4a: a0:0a:0f:81:81:20:f0:32:fd:74:89:71:0d:7b:fb: 97:dc:a1:3a:cc:57:e3:60:20:cb:6c:b9:81:57:a6: ee:bd:22:08:b2:f7:04:02:b6:4c:a7:06:7c:35:62: 90:0d:7e:64:e6:16:c5:19:bb:82:2d:b4:20:98:73: ec:e8:d4:69:29:52:73:67:12:6d:18:f6:5e:0b:d7: 88:99:0e:fb:ae:1b:7e:f7:86:04:13:ed:56:e0:a7: 2c:bb:8e:72:74:b8:bb:e9:c7:a6:2e:39:37:fd:05: 5b:76:0c:7b:61:0d:bf:0d:88:53:d4:04:25:6e:e2: de:3b:1c:be:3a:9a:fd:1a:75:65:0d:f0:2d:e4:52: 09:42:1b:0f:30:dc:ff:ba:76:46:04:27:03:ee:77: 70:34:82:a2:95:9c:3a:12:6f:6c:cc:3a:88:08:e1: 46:46:e2:5d:fc:7d:12:99:9d:b2:63:fa:47:24:0f: 96:27:e6:9d:d2:33:64:49:ba:9b:dc:28:5f:e0:f0: 5c:d3:fb:e2:7a:ca:1a:92:e6:69:0f:28:d9:6f:bd: ca:f6:6e:a0:31:0b:fb:ba:a5:a0:79:7f:56:ac:58: f7:f4:44:02:ab:eb:12:d7:cb:c2:5b:7f:09:ea:61: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:45:37:F5:C6:49:A0:11:8E:C4:BB:F5:22:AA:85:B0:36:80:38 X509v3 Authority Key Identifier: keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f1:28:2f:c8:c3:cb:e4:18:c0:35:bc:d6:61:2d:0f:b5:e6: f6:11:51:fa:11:8d:b5:28:e7:b5:99:28:4f:12:54:9d:96:9e: 59:e5:bd:45:a5:c0:df:16:91:9d:96:23:92:ac:fc:3e:6e:2c: d4:5e:49:67:66:cf:21:40:e9:9e:cf:44:12:0b:5c:82:b6:d0: ac:8b:5c:98:10:8d:2f:cb:fe:68:a9:1b:f9:30:bd:f8:b7:cc: 79:7f:b3:05:24:a4:40:57:bd:de:1e:d9:ea:81:ba:c1:5f:3e: 08:e2:b2:8d:dc:35:e2:bd:94:01:6d:4b:3b:65:00:c7:85:62: 37:9d:da:46:d7:ce:9f:01:ce:13:7b:65:c2:d9:5d:b1:38:ff: dd:bc:97:47:5e:ee:9c:d8:3d:fa:c3:1f:e2:b8:bc:9b:38:f4: 4d:a0:df:92:ab:d6:59:4b:bc:b3:1c:da:ef:28:ab:1b:f5:82: 86:dc:8e:17:fc:28:df:6b:df:53:6f:32:d3:33:66:f8:53:be: c2:75:2f:1a:83:b5:b6:db:0b:fd:03:a4:7f:a4:23:77:8e:07: 69:ad:c0:21:a4:b1:5e:47:51:13:3c:ea:86:d1:e0:50:11:32: 5d:db:15:15:e4:cb:6b:67:e9:36:40:d3:c9:54:50:23:7b:29: 4a:1f:00:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xlsBnAYFuE+32W/xA4OMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTUzMDAzNzM3ZDc4ZjcyMmRiOWEyOGUyMjA0M2UzNWQ4 ZDg3MWUwHhcNMjUxMjIwMDgwMDM2WhcNMjUxMjIxMDgwMDM2WjAzMTEwLwYDVQQD Eyg5M2U5NDUzN2Y1YzY0OWEwMTE4ZWM0YmJmNTIyYWE4NWIwMzY4MDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6MXbeZMLuHUldA4NkqgCg+BgSDw Mv10iXENe/uX3KE6zFfjYCDLbLmBV6buvSIIsvcEArZMpwZ8NWKQDX5k5hbFGbuC LbQgmHPs6NRpKVJzZxJtGPZeC9eImQ77rht+94YEE+1W4Kcsu45ydLi76cemLjk3 /QVbdgx7YQ2/DYhT1AQlbuLeOxy+Opr9GnVlDfAt5FIJQhsPMNz/unZGBCcD7ndw NIKilZw6Em9szDqICOFGRuJd/H0SmZ2yY/pHJA+WJ+ad0jNkSbqb3Chf4PBc0/vi esoakuZpDyjZb73K9m6gMQv7uqWgeX9WrFj39EQCq+sS18vCW38J6mGJ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPpRTf1xkmgEY7Eu/UiqoWwNoA4MB8GA1UdIwQY MBaAFFMVMANzfXj3ItuaKOIgQ+NdjYceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYt NjY1OTk1YzYyODM4LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYtNjY1OTk1YzYyODM4 LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/EoL8jD y+QYwDW81mEtD7Xm9hFR+hGNtSjntZkoTxJUnZaeWeW9RaXA3xaRnZYjkqz8Pm4s 1F5JZ2bPIUDpns9EEgtcgrbQrItcmBCNL8v+aKkb+TC9+LfMeX+zBSSkQFe93h7Z 6oG6wV8+COKyjdw14r2UAW1LO2UAx4ViN53aRtfOnwHOE3tlwtldsTj/3byXR17u nNg9+sMf4ri8mzj0TaDfkqvWWUu8sxza7yirG/WChtyOF/wo32vfU28y0zNm+FO+ wnUvGoO1ttsL/QOkf6Qjd44Haa3AIaSxXkdREzzqhtHgUBEyXdsVFeTLa2fpNkDT yVRQI3spSh8A5A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:22:09 2025 by rpki-client