This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft File: uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json) Hash identifier: 0Mrwtan6ODOCYl9OkQj6i6u5k+E51qGoxWnVNzEHLVA= Subject key identifier: 0C:0E:29:C8:62:1C:D8:3E:02:A0:2D:FF:B1:34:5E:15:7E:BD:5E:36 Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Certificate serial: 019B10B86F58DB9B2F1A4A2080E708F1F822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft Manifest number: 0EA5 Signing time: Fri 12 Dec 2025 04:01:21 +0000 Manifest this update: Fri 12 Dec 2025 04:01:21 +0000 Manifest next update: Sat 13 Dec 2025 04:01:21 +0000 Files and hashes: 1: PTr_xLhLcnvTFVipGw3CUMEPXjY.roa (hash: JBHsIcKHiwsHSBwzyO5y4DSKBgdwzbxJQ0ol4khS4A0=) 2: Wyw6f7z9XFhQdDF9UwLgPYFT6_Q.roa (hash: 1RzZ4RihPLYHjPztE9UylSZaMNlezfJjIV9fNaanWRg=) 3: X9RNdUxkmLFNiFpUP9LHqq5hH5Q.roa (hash: sO05RjG57ukJeOdbo7TbIC4ef+lfKmg1XE7a20jQ0B4=) 4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=) 5: d28wWwBXF7wZOaWJd6qwT3PVrxQ.roa (hash: KkRypZGbs6Pg3NFKFlWtxFDByCJE0sYuwQPwJi599do=) 6: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: Fky5crBJUR/7acElhPMXfXjLrZ2jEhBcGXqS2uITJjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:6f:58:db:9b:2f:1a:4a:20:80:e7:08:f1:f8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Validity Not Before: Dec 12 04:01:21 2025 GMT Not After : Dec 13 04:01:21 2025 GMT Subject: CN=0c0e29c8621cd83e02a02dffb1345e157ebd5e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:c4:d8:4e:86:81:df:66:92:77:41:a8:98: 6b:6f:19:de:fa:21:9d:0c:fd:d1:d8:6b:1a:ce:cb: 95:8b:28:fd:22:b1:7b:d8:15:e0:03:78:fd:03:80: 6b:74:46:00:17:1f:c3:ad:30:dd:41:fa:e8:0e:03: 47:b3:ad:43:0a:c1:00:a5:34:1a:05:98:8e:a7:6e: 67:80:24:5c:ef:53:7e:82:aa:c6:14:e2:a4:72:c8: 95:64:01:f5:2e:0a:55:47:0a:fe:f7:f3:4d:f8:1c: e9:69:1d:25:08:2d:49:69:d6:fe:31:43:99:a8:eb: 4b:a1:2a:29:74:8a:7b:42:db:f5:0c:50:d0:e2:70: 03:a1:e7:ea:2f:32:1a:81:e4:5f:c3:0e:47:1a:e6: bb:1b:fa:4d:b1:58:20:95:ba:d5:37:4b:60:5c:e1: a7:d1:c3:86:8a:a4:66:eb:39:fa:1c:f1:82:4c:19: f4:3e:ba:09:99:eb:d7:e2:73:7a:c5:23:e1:91:43: b2:e6:b9:48:12:0a:93:0c:c1:70:09:d5:fb:25:98: e8:94:94:0e:d0:01:48:9e:ff:49:f3:4e:ff:7a:3f: e2:72:e3:ee:b9:f7:19:cd:fe:5f:4a:76:6b:66:4c: 43:c3:7f:18:bf:70:dc:06:8d:9c:3f:57:4d:39:b9: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0E:29:C8:62:1C:D8:3E:02:A0:2D:FF:B1:34:5E:15:7E:BD:5E:36 X509v3 Authority Key Identifier: keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:88:3b:de:ce:8b:f5:ad:a4:66:a3:2d:58:60:92:9f:64:d1: d4:c2:ff:8b:9f:fe:6a:50:8e:19:3c:d1:c3:8b:52:67:87:c2: 99:c6:5f:60:7a:5c:cb:a8:34:3e:9a:9c:ad:5a:fc:89:66:87: 19:f7:ce:ff:ea:0f:18:97:63:10:aa:7f:3e:89:ed:bc:f6:89: 55:0a:f9:77:77:da:38:3d:74:88:31:28:f4:fb:af:92:4e:4e: 69:5a:9b:bf:59:aa:16:fb:85:cb:9c:be:f9:46:73:e0:95:97: 34:1f:67:1b:55:0b:65:8c:06:4f:6c:98:37:13:0f:f5:81:fe: e9:4d:bf:c3:34:dd:0a:0d:ce:16:dd:0f:b8:fb:be:ba:56:93: b6:d5:93:84:2d:d7:d2:e4:03:f0:85:a7:8a:93:24:01:4d:2f: 5f:5f:55:3e:db:e2:c7:00:ed:fa:59:4e:04:7a:d5:6c:ff:87: 2c:18:11:fb:79:ce:d2:29:a7:21:8f:a6:0c:bf:31:ce:ad:2a: ec:a0:13:ca:9b:80:1a:f4:1e:1b:c3:de:60:98:01:f2:99:2e: 8f:1d:ed:1a:44:30:b0:4b:7d:5f:16:ba:e8:a5:bb:db:72:78: 4c:e8:c8:bb:d6:19:83:ed:86:f1:c0:69:c6:d9:86:cc:0a:c2: de:53:2c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuG9Y25svGkoggOcI8fgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk YzExMTIwHhcNMjUxMjEyMDQwMTIxWhcNMjUxMjEzMDQwMTIxWjAzMTEwLwYDVQQD EygwYzBlMjljODYyMWNkODNlMDJhMDJkZmZiMTM0NWUxNTdlYmQ1ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdvE2E6Ggd9mkndBqJhrbxne+iGd DP3R2GsazsuViyj9IrF72BXgA3j9A4BrdEYAFx/DrTDdQfroDgNHs61DCsEApTQa BZiOp25ngCRc71N+gqrGFOKkcsiVZAH1LgpVRwr+9/NN+BzpaR0lCC1Jadb+MUOZ qOtLoSopdIp7Qtv1DFDQ4nADoefqLzIageRfww5HGua7G/pNsVgglbrVN0tgXOGn 0cOGiqRm6zn6HPGCTBn0ProJmevX4nN6xSPhkUOy5rlIEgqTDMFwCdX7JZjolJQO 0AFInv9J807/ej/icuPuufcZzf5fSnZrZkxDw38Yv3DcBo2cP1dNObkJbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwOKchiHNg+AqAt/7E0XhV+vV42MB8GA1UdIwQY MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt ZmZlNDNhNTJkM2Y2LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2 LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIg73s6L 9a2kZqMtWGCSn2TR1ML/i5/+alCOGTzRw4tSZ4fCmcZfYHpcy6g0PpqcrVr8iWaH GffO/+oPGJdjEKp/PontvPaJVQr5d3faOD10iDEo9Puvkk5OaVqbv1mqFvuFy5y+ +UZz4JWXNB9nG1ULZYwGT2yYNxMP9YH+6U2/wzTdCg3OFt0PuPu+ulaTttWThC3X 0uQD8IWnipMkAU0vX19VPtvixwDt+llOBHrVbP+HLBgR+3nO0imnIY+mDL8xzq0q 7KATypuAGvQeG8PeYJgB8pkujx3tGkQwsEt9Xxa66KW723J4TOjIu9YZg+2G8cBp xtmGzArC3lMsiQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:00 2025 by rpki-client