This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json) Hash identifier: dcWSglJROtBAKkZi9CKQzOBpKydsu/++AaZSOc/HaPQ= Subject key identifier: D4:02:6E:58:B6:8A:38:73:E7:FC:D7:D5:04:FB:67:B0:3B:EB:67:FA Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e Certificate serial: 019B23644B92C37BC8B85DE4C919CA594649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft Manifest number: 0EFE Signing time: Mon 15 Dec 2025 19:02:14 +0000 Manifest this update: Mon 15 Dec 2025 19:02:14 +0000 Manifest next update: Tue 16 Dec 2025 19:02:14 +0000 Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: dUAmN4nTUva/WL1aaMJ/nR8lzGPRTb5ZaqK5z3wU0K8=) 2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:4b:92:c3:7b:c8:b8:5d:e4:c9:19:ca:59:46:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e Validity Not Before: Dec 15 19:02:14 2025 GMT Not After : Dec 16 19:02:14 2025 GMT Subject: CN=d4026e58b68a3873e7fcd7d504fb67b03beb67fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:6b:25:03:2a:d7:96:8f:b8:c2:ab:d7:c9: 68:1a:6d:0d:6c:d8:43:06:43:ca:71:eb:bf:a3:29: af:9f:29:ab:2d:b4:78:1a:87:a9:d4:72:de:e3:31: bc:f7:ff:b2:9f:1b:e1:7e:03:9a:96:15:47:fa:fe: 89:09:87:70:69:56:5e:37:ce:f6:6a:ad:c0:8c:a8: 86:d3:77:90:41:5e:58:9e:73:b3:31:c5:0e:d1:85: f5:44:3c:6e:8f:cf:ce:a2:56:5c:c9:37:30:5f:16: 00:23:0c:c6:0c:61:b6:73:24:3d:ae:81:a3:c0:de: c6:f2:1a:5f:de:c1:5e:0a:23:a2:c5:fe:16:58:4e: bd:3b:b3:75:1b:6d:9d:09:8d:29:d6:6a:e3:24:47: 42:91:8e:fc:4e:d1:9a:a4:8e:65:0c:f8:0f:df:6e: 06:9a:c4:be:a0:f7:3d:8c:40:77:b8:47:95:78:d5: b4:ad:ca:29:4d:dc:3f:b4:55:83:1c:84:51:63:9b: 92:9d:84:a5:10:e4:b9:b1:60:83:3c:4d:ca:74:76: 73:a1:d9:e6:c5:63:24:8f:30:99:c9:f1:ce:bc:10: 07:f8:13:83:d7:22:11:ae:8a:11:d2:77:dc:79:3b: 32:d3:ec:ce:9f:c9:a9:c8:41:df:ba:1c:6c:c7:be: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:02:6E:58:B6:8A:38:73:E7:FC:D7:D5:04:FB:67:B0:3B:EB:67:FA X509v3 Authority Key Identifier: keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c0:80:fa:b0:38:0c:22:d0:88:21:44:9a:b2:bf:e7:6d:75: 02:10:7e:08:86:e5:0e:d5:db:d4:89:d8:e2:30:6c:fc:f9:1d: 83:33:6b:88:24:54:31:ac:23:bf:b2:a1:2e:3b:0a:5e:94:7c: 59:e4:e5:5c:66:9e:82:98:f3:dd:21:41:7b:f5:2f:80:ed:b2: 2f:9c:45:ad:73:ee:ba:8e:35:af:e6:75:c2:fe:13:c4:2e:a4: eb:e6:49:58:4d:c3:a5:1b:89:ff:dd:a6:05:45:ac:d0:fa:d7: d7:34:cd:12:b8:2d:e9:86:18:27:9c:85:90:77:cc:2b:6d:94: 34:9c:fe:72:91:f3:08:ba:9d:67:f8:44:e6:ad:2c:5a:66:c6: 9e:ee:85:ea:21:39:e0:10:de:ef:ab:ea:c0:50:8a:70:a2:84: ce:17:dd:5f:4f:f5:01:a9:16:62:4a:9b:ec:b7:27:22:37:26: 68:e6:28:76:81:55:cc:60:31:20:37:e2:b9:85:20:77:74:e6: 3b:2a:5b:bc:ec:b9:4c:01:1d:68:65:a1:c6:5f:79:2d:25:f6: 05:23:7c:9b:32:8a:45:85:1f:56:40:42:e4:0f:ea:8a:3e:ab: dd:a6:bb:3e:f8:1f:48:82:b9:22:52:d6:51:a5:29:e0:a3:de: d3:7a:ca:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZEuSw3vIuF3kyRnKWUZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWJiMDAxNTI4MjgxNzM0YmY1Yzk0YmM0YmVmNmY2ZTk5 YTM3N2UwHhcNMjUxMjE1MTkwMjE0WhcNMjUxMjE2MTkwMjE0WjAzMTEwLwYDVQQD EyhkNDAyNmU1OGI2OGEzODczZTdmY2Q3ZDUwNGZiNjdiMDNiZWI2N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnARrJQMq15aPuMKr18loGm0NbNhD BkPKceu/oymvnymrLbR4Goep1HLe4zG89/+ynxvhfgOalhVH+v6JCYdwaVZeN872 aq3AjKiG03eQQV5YnnOzMcUO0YX1RDxuj8/OolZcyTcwXxYAIwzGDGG2cyQ9roGj wN7G8hpf3sFeCiOixf4WWE69O7N1G22dCY0p1mrjJEdCkY78TtGapI5lDPgP324G msS+oPc9jEB3uEeVeNW0rcopTdw/tFWDHIRRY5uSnYSlEOS5sWCDPE3KdHZzodnm xWMkjzCZyfHOvBAH+BOD1yIRrooR0nfceTsy0+zOn8mpyEHfuhxsx75x9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQCbli2ijhz5/zX1QT7Z7A762f6MB8GA1UdIwQY MBaAFAPrsAFSgoFzS/XJS8S+9vbpmjd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEt ZWFiODI4ZWNhNDViLzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEtZWFiODI4ZWNhNDVi LzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcCA+rA4 DCLQiCFEmrK/5211AhB+CIblDtXb1InY4jBs/PkdgzNriCRUMawjv7KhLjsKXpR8 WeTlXGaegpjz3SFBe/UvgO2yL5xFrXPuuo41r+Z1wv4TxC6k6+ZJWE3DpRuJ/92m BUWs0PrX1zTNErgt6YYYJ5yFkHfMK22UNJz+cpHzCLqdZ/hE5q0sWmbGnu6F6iE5 4BDe76vqwFCKcKKEzhfdX0/1AakWYkqb7LcnIjcmaOYodoFVzGAxIDfiuYUgd3Tm OypbvOy5TAEdaGWhxl95LSX2BSN8mzKKRYUfVkBC5A/qij6r3aa7PvgfSIK5IlLW UaUp4KPe03rK3Q== -----END CERTIFICATE-----Generated at Mon Dec 15 21:52:57 2025 by rpki-client