This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft File: UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json) Hash identifier: NExxN+IuY3hXZ6AwLTeA1CZ9A98nGpjTFV+i7aEyNvY= Subject key identifier: 3B:AF:39:54:E9:4A:F5:BB:5F:39:07:E9:84:77:1B:4B:55:6B:5A:74 Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5 Certificate issuer: /CN=500596ce6073e8ededc5105f814ec97191b5e1d5 Certificate serial: 019B32D60D35C9BF7686B97C1DA26818E080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft Manifest number: 10AD Signing time: Thu 18 Dec 2025 19:00:47 +0000 Manifest this update: Thu 18 Dec 2025 19:00:47 +0000 Manifest next update: Fri 19 Dec 2025 19:00:47 +0000 Files and hashes: 1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=) 2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: 0RuaO9E/ZneZepkFXWR6+bYD5Osv+v6xKHOknJtWGGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:0d:35:c9:bf:76:86:b9:7c:1d:a2:68:18:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5 Validity Not Before: Dec 18 19:00:47 2025 GMT Not After : Dec 19 19:00:47 2025 GMT Subject: CN=3baf3954e94af5bb5f3907e984771b4b556b5a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:ab:f9:2e:5d:3e:a2:f4:93:08:45:f9:9d: f9:1f:34:91:13:49:e4:7c:44:f6:6a:0f:96:1b:b1: 74:03:f5:9b:63:80:4f:43:fa:fa:41:98:f5:39:26: 7c:46:e3:58:a7:6a:b4:98:bd:7c:6d:99:55:57:3b: 6c:11:f6:5d:45:e0:f7:13:9e:b7:76:30:8e:c8:7b: ae:13:70:66:47:0b:39:24:9f:e2:2b:50:62:6c:86: 22:97:e4:83:22:30:0f:4d:e3:41:c0:a2:a2:86:83: a0:b4:95:84:8b:d0:1d:b9:7c:da:b3:0f:b9:e9:9b: 11:46:8e:27:c1:91:14:13:bc:f0:f0:e6:2d:f4:21: b7:21:88:09:79:65:2f:ec:8c:96:e5:9d:03:c1:7f: 5e:3e:f8:b2:2d:ff:2b:dd:12:62:d6:7c:88:3d:e5: 25:58:82:49:9d:d9:e6:a3:e3:b3:d0:26:74:bb:23: c1:e3:7a:92:6e:9f:f4:23:67:2f:c7:d2:c8:c1:5e: 5b:8a:4a:44:30:f2:28:16:7a:2f:88:d4:7d:da:9f: 1b:40:d3:3c:8a:a3:9c:b5:ec:24:91:88:48:8f:7d: 82:5d:8e:c2:26:31:01:98:0f:a7:54:be:da:18:83: d1:d4:31:9b:f0:50:c0:87:96:cf:37:bb:82:45:b4: 10:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AF:39:54:E9:4A:F5:BB:5F:39:07:E9:84:77:1B:4B:55:6B:5A:74 X509v3 Authority Key Identifier: keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b3:25:46:77:bb:0b:0f:17:a4:2f:8d:3c:dc:5d:fe:bb:f3: 03:39:a8:0c:db:91:34:99:14:9c:3e:21:49:8d:8e:3e:9c:40: 3b:69:46:84:9c:52:3d:34:29:76:c4:f4:88:21:66:1d:13:5a: b5:0b:7f:4c:ac:69:bd:60:71:8c:90:9c:b9:89:15:f7:dd:ef: 60:ee:22:5e:aa:ae:d9:b4:bf:06:dd:27:f3:34:77:ef:aa:32: e2:bc:77:76:41:56:77:c1:8c:79:d3:74:1d:a6:58:54:46:c7: fd:24:5f:fa:40:91:3c:07:ed:71:44:88:e2:2f:df:25:62:b3: b2:70:50:64:40:14:2f:85:63:dc:19:3f:fc:34:42:70:de:67: bc:2d:7c:38:4b:15:b8:0d:90:91:ca:f3:83:28:5a:d5:1f:ce: e0:56:cd:66:54:d8:61:ba:e7:44:b2:ec:19:7a:0b:f3:cc:a8: 54:97:75:47:dd:d6:26:0f:fd:37:f1:8f:97:79:73:4e:e1:0f: 36:33:45:33:f6:b3:d2:af:79:02:16:18:7e:89:96:20:3b:4b: a6:57:f9:d5:ba:13:69:dd:92:78:11:9a:dc:16:e1:23:17:3d: 00:5f:1a:bf:ec:57:e3:80:83:85:9f:ea:e7:73:90:40:cd:c2: bd:87:f6:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1g01yb92hrl8HaJoGOCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDU5NmNlNjA3M2U4ZWRlZGM1MTA1ZjgxNGVjOTcxOTFi NWUxZDUwHhcNMjUxMjE4MTkwMDQ3WhcNMjUxMjE5MTkwMDQ3WjAzMTEwLwYDVQQD EygzYmFmMzk1NGU5NGFmNWJiNWYzOTA3ZTk4NDc3MWI0YjU1NmI1YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZCr+S5dPqL0kwhF+Z35HzSRE0nk fET2ag+WG7F0A/WbY4BPQ/r6QZj1OSZ8RuNYp2q0mL18bZlVVztsEfZdReD3E563 djCOyHuuE3BmRws5JJ/iK1BibIYil+SDIjAPTeNBwKKihoOgtJWEi9AduXzasw+5 6ZsRRo4nwZEUE7zw8OYt9CG3IYgJeWUv7IyW5Z0DwX9ePviyLf8r3RJi1nyIPeUl WIJJndnmo+Oz0CZ0uyPB43qSbp/0I2cvx9LIwV5bikpEMPIoFnoviNR92p8bQNM8 iqOctewkkYhIj32CXY7CJjEBmA+nVL7aGIPR1DGb8FDAh5bPN7uCRbQQBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuvOVTpSvW7XzkH6YR3G0tVa1p0MB8GA1UdIwQY MBaAFFAFls5gc+jt7cUQX4FOyXGRteHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUt MWUxNjdmYTExM2IyLzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUtMWUxNjdmYTExM2Iy LzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7MlRne7 Cw8XpC+NPNxd/rvzAzmoDNuRNJkUnD4hSY2OPpxAO2lGhJxSPTQpdsT0iCFmHRNa tQt/TKxpvWBxjJCcuYkV993vYO4iXqqu2bS/Bt0n8zR376oy4rx3dkFWd8GMedN0 HaZYVEbH/SRf+kCRPAftcUSI4i/fJWKzsnBQZEAUL4Vj3Bk//DRCcN5nvC18OEsV uA2Qkcrzgyha1R/O4FbNZlTYYbrnRLLsGXoL88yoVJd1R93WJg/9N/GPl3lzTuEP NjNFM/az0q95AhYYfomWIDtLplf51boTad2SeBGa3BbhIxc9AF8av+xX44CDhZ/q 53OQQM3CvYf2Kw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:29 2025 by rpki-client