This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: irYxqZr9iJMBD48Jcgn1ncsRQmXWNh55y7xysQ28zuo= Subject key identifier: E4:96:6D:F7:96:F8:3D:5F:23:E3:C8:18:82:5B:1C:A3:9F:3D:1A:B4 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019AFD68A5BF4C81756B7DD08DA53BC775DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 029D Signing time: Mon 08 Dec 2025 10:01:24 +0000 Manifest this update: Mon 08 Dec 2025 10:01:24 +0000 Manifest next update: Tue 09 Dec 2025 10:01:24 +0000 Files and hashes: 1: 05HgK9Pbq_X6f4W_AzeE2mTlZbE.roa (hash: buN/Ij6KRsg7qeC26hVfrI5nLFPtHl3lI39CUoOuFqM=) 2: 3BdeI36IkUxOlCqSmaZfu8I0p4g.roa (hash: 5N4fYvWW73MoWuT7eG7LCKSc0LhblTQNkeac5h0QDT0=) 3: 81Vi1aAuD3_Toh0Zh6ZPftI-RpY.roa (hash: PST7bygH7M5OnItN7WKDLmCebDfhyk3LMCuDadZUDKk=) 4: BTmvUacX11KhS9LCathUoTEntVc.roa (hash: bDcNECfbrkk7qpD/4FGC8Z1C+oM4KiljMpOI1a/HDR8=) 5: GDslLxW-h-nXEnMMIkfH4mIcFXE.roa (hash: gyYQGm9rpXV8IzfS/kLtlucuwYM3L83iTmDufGmG5Ao=) 6: PzNxqQdkgSpGYxNc-jAx_r3OQ5w.roa (hash: TE0cVIygdHu8nD6ddQO4pl85tRSyEis9fR0YP4iCrQg=) 7: VNz7hqvsR-ukZZdtpVM76UMDGBM.roa (hash: jwbsYUXQD8OEknZhDbXeDAo0cGFYmN+VJd34+E+HgvE=) 8: WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa (hash: a3d83I3OM26Rcumlwo5C8tjA1sldnSwvJlMfN0DSpuw=) 9: ceRe27r4TaVzZe1TelFg0Kd7u0Y.roa (hash: B7bH7cuDjJTKEb3qydpXimO3oByn3OasTj45zytGAyc=) 10: dNdlikygHYW9_VCSMxVInvo5wAE.roa (hash: oANbFDFE9Ng6o6gqO/EcOwZNCNKxlzdWPW9zD7faSZw=) 11: eAApdHaPIR2lUBAZFwISpbl18cg.roa (hash: uHl5PY3UQhZY/qolDjgsiFJ+kKN2QHJWQS+PQPcWpx8=) 12: pz5iKSS3DjXvuOKM5710xrPbd3k.roa (hash: BAQauhMx2S4URlRz7DXain/wmvSRTTI+4gS0hRToEQ8=) 13: qYtaBV1QHFqIX4Zzb9pAgcJ7FlM.roa (hash: lX56tQdRTgCel8q/Xo9AvRt49Mx4NjdnE/8coAHzSjc=) 14: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: 6QQ/jjdLCvlGrw69HRT39pvdXvT4dELrtrcnAXlTNaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:68:a5:bf:4c:81:75:6b:7d:d0:8d:a5:3b:c7:75:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Dec 8 10:01:24 2025 GMT Not After : Dec 9 10:01:24 2025 GMT Subject: CN=e4966df796f83d5f23e3c818825b1ca39f3d1ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:00:f3:5a:c2:f4:87:57:4f:0f:4f:cc:ba: bb:08:ec:d1:b8:41:3e:ec:13:4a:1b:13:b7:61:e3: 5b:da:fc:ed:89:68:28:2a:ee:37:d0:0a:a2:11:fc: 50:6b:18:e7:35:72:9d:51:e5:31:22:e9:63:49:c9: 02:07:ab:be:26:3d:57:0d:c0:67:fe:df:68:11:40: af:eb:a0:19:42:31:aa:84:84:0e:be:c1:e8:3a:79: 46:ca:3a:c3:7f:0d:ae:54:f1:a6:f3:4f:7f:02:6f: 2a:7f:24:33:f2:bd:cf:ef:7b:2a:f8:81:e3:01:95: 7c:b0:32:f7:10:d1:07:86:fd:7a:05:88:00:ef:f6: 9c:a3:1e:7c:48:3c:6c:29:7a:47:93:41:34:a5:cc: 83:00:97:0f:80:9a:24:0b:a7:19:1a:6e:ca:77:01: 90:b0:1b:62:ef:c8:4f:9b:c2:3b:d5:7e:1c:77:df: 2a:50:25:2d:b4:9f:c1:06:da:43:1e:1f:32:c5:5b: df:5c:b0:7b:f8:d0:75:bb:4e:69:ce:9e:82:17:f9: bf:38:8c:44:2b:7e:9f:83:b4:1d:ca:8f:78:22:0d: 1b:d7:4c:59:93:de:34:67:c0:4e:54:ff:cb:fa:1d: c6:4f:41:d5:c8:c2:63:7e:81:60:55:ef:21:14:e8: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:6D:F7:96:F8:3D:5F:23:E3:C8:18:82:5B:1C:A3:9F:3D:1A:B4 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6e:3d:e3:e1:4d:45:70:c6:bd:82:4c:1c:85:ca:5b:cf:b0: a0:b7:7e:56:e6:99:f0:95:36:8f:9b:10:5c:9c:6a:d9:db:4b: c5:67:7a:88:55:74:6b:c7:b7:d2:ab:59:e2:f3:77:5f:7b:39: aa:7f:de:9b:7a:5a:9f:73:5f:22:12:ac:19:76:f9:59:fc:11: 78:0d:1c:47:40:3d:99:72:13:51:2d:3d:63:d0:2b:c4:88:48: a6:7d:2f:dc:77:db:33:5a:94:6d:3e:1e:a2:4a:90:1c:c2:08: b1:04:fa:6a:b2:8f:1d:a0:67:61:8a:94:e6:b0:c6:d8:69:74: 3f:7a:e8:93:71:72:c2:45:f4:5f:12:89:61:bd:9a:ed:4a:6e: dc:04:bb:b5:70:f7:f5:be:6a:66:3c:59:1a:14:78:f3:27:84: e6:ab:a7:40:2f:b5:ae:96:a5:2b:89:a4:bd:8d:94:78:df:7e: 61:a4:13:fa:3b:5e:0d:1d:98:31:73:c5:bf:ef:89:9c:5a:c8: 70:3d:a9:51:bc:74:66:38:e5:96:07:42:95:31:a2:88:a0:c3: 18:aa:2b:2f:92:ad:20:be:8a:0b:0a:53:29:17:43:ba:88:2f: d6:10:30:31:3e:64:d3:71:c4:bb:b7:c9:a7:76:63:b7:e2:ff: 53:9c:c6:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9aKW/TIF1a33QjaU7x3XdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjUxMjA4MTAwMTI0WhcNMjUxMjA5MTAwMTI0WjAzMTEwLwYDVQQD EyhlNDk2NmRmNzk2ZjgzZDVmMjNlM2M4MTg4MjViMWNhMzlmM2QxYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7IA81rC9IdXTw9PzLq7COzRuEE+ 7BNKGxO3YeNb2vztiWgoKu430AqiEfxQaxjnNXKdUeUxIuljSckCB6u+Jj1XDcBn /t9oEUCv66AZQjGqhIQOvsHoOnlGyjrDfw2uVPGm809/Am8qfyQz8r3P73sq+IHj AZV8sDL3ENEHhv16BYgA7/acox58SDxsKXpHk0E0pcyDAJcPgJokC6cZGm7KdwGQ sBti78hPm8I71X4cd98qUCUttJ/BBtpDHh8yxVvfXLB7+NB1u05pzp6CF/m/OIxE K36fg7Qdyo94Ig0b10xZk940Z8BOVP/L+h3GT0HVyMJjfoFgVe8hFOiKyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSWbfeW+D1fI+PIGIJbHKOfPRq0MB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArW494+FN RXDGvYJMHIXKW8+woLd+VuaZ8JU2j5sQXJxq2dtLxWd6iFV0a8e30qtZ4vN3X3s5 qn/em3pan3NfIhKsGXb5WfwReA0cR0A9mXITUS09Y9ArxIhIpn0v3HfbM1qUbT4e okqQHMIIsQT6arKPHaBnYYqU5rDG2Gl0P3rok3FywkX0XxKJYb2a7Upu3AS7tXD3 9b5qZjxZGhR48yeE5qunQC+1rpalK4mkvY2UeN9+YaQT+jteDR2YMXPFv++JnFrI cD2pUbx0ZjjllgdClTGiiKDDGKorL5KtIL6KCwpTKRdDuogv1hAwMT5k03HEu7fJ p3Zjt+L/U5zGzw== -----END CERTIFICATE-----Generated at Mon Dec 8 17:40:28 2025 by rpki-client