This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json) Hash identifier: eDEZWHKj+gShVRCzoBvUz7PnGUq7+0oEqMAiHYtYPZo= Subject key identifier: 54:10:0A:C8:EE:42:5B:CB:23:85:18:FF:D0:FF:08:C3:7A:22:79:D9 Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34 Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034 Certificate serial: 019B42EE12988538405AD6706110C7F49D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft Manifest number: 16AD Signing time: Sun 21 Dec 2025 22:00:57 +0000 Manifest this update: Sun 21 Dec 2025 22:00:57 +0000 Manifest next update: Mon 22 Dec 2025 22:00:57 +0000 Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=) 2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: j6m/etY9uSrM64SJLBiK+PZbWmij18bViAfUCBnaAsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:12:98:85:38:40:5a:d6:70:61:10:c7:f4:9d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034 Validity Not Before: Dec 21 22:00:57 2025 GMT Not After : Dec 22 22:00:57 2025 GMT Subject: CN=54100ac8ee425bcb238518ffd0ff08c37a2279d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:9a:eb:0a:fb:80:b7:a2:10:32:7f:b6:96: 3f:71:c7:7e:ed:66:80:af:c4:a4:2b:3a:ed:9a:df: 80:86:cb:68:39:fd:f9:39:96:7a:75:bf:d9:35:5e: 33:13:8b:6a:93:19:b4:e7:32:e0:02:65:6c:d3:50: 85:1f:4a:16:5b:77:e7:bf:15:96:08:4b:9e:ea:63: 83:be:62:33:85:85:44:1f:35:d2:d6:45:eb:3b:a8: 28:fd:52:74:35:37:7f:7b:58:12:87:84:78:50:b2: 9f:55:7c:75:01:57:b8:b2:8a:e0:f2:a8:26:57:68: d8:a9:98:b1:06:e5:f5:c0:4b:ac:83:8d:1d:ee:46: 71:9d:29:dc:8e:e3:c1:dc:8c:2f:00:5a:fe:07:5f: e2:89:06:ba:53:19:24:98:16:74:46:05:03:7f:12: 31:c2:ba:7d:47:c0:44:04:9a:0b:5a:81:e3:fc:dc: f1:95:75:0c:f6:32:b5:3f:7b:3f:bb:d8:fc:44:6c: 13:ea:00:5c:0f:44:8d:47:9f:3e:07:47:e1:fd:11: 4a:a3:5c:5f:8f:98:be:3b:84:4e:ef:3a:42:40:e6: 66:79:77:e7:09:53:05:11:de:39:49:fd:6f:47:6d: 4c:01:23:ff:0a:18:5a:95:45:a2:78:e3:03:8e:77: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:10:0A:C8:EE:42:5B:CB:23:85:18:FF:D0:FF:08:C3:7A:22:79:D9 X509v3 Authority Key Identifier: keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bd:5c:e9:8a:9e:00:9d:a7:da:71:bf:0d:58:51:54:6c:c2: d2:8b:69:f4:28:07:43:0f:47:3f:b2:74:ed:2f:d4:49:90:89: e1:25:73:57:06:9a:a0:89:5e:9d:60:56:ad:8c:a6:83:f0:30: bf:5e:eb:2c:be:e3:7d:68:f7:27:78:88:7a:02:d0:be:31:ed: 9c:99:c7:ad:e1:82:b6:30:82:c2:35:85:1c:e3:c9:2f:72:5b: 71:ca:c3:68:66:b6:ed:a6:99:f7:e6:f3:e0:78:81:5d:4f:5a: ce:f2:69:22:2b:15:c7:14:93:2e:f4:fe:5a:19:53:8f:85:51: d5:34:70:b0:6a:37:d7:42:e7:e1:0d:09:cf:0f:ce:82:76:3d: 1c:44:d4:dd:82:c8:6f:a0:5d:63:2c:eb:e7:6d:f2:ff:d3:93: 33:9a:67:af:a8:a7:5d:0e:3a:37:70:3b:a8:70:c8:dc:0b:32: 81:b1:31:4a:95:12:3d:c8:cb:c4:ad:8f:06:c2:e1:c9:56:5c: 1d:c7:b1:c2:da:20:06:79:3b:d3:d4:69:6a:30:12:ca:7d:9d: 85:4e:c7:7a:38:4c:97:4b:c9:a8:55:35:97:c8:36:e6:b3:77: 5c:13:51:54:9a:80:ea:a2:90:9d:36:16:25:41:cd:22:de:3b: b8:ba:67:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7hKYhThAWtZwYRDH9J2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWVkYzU3NmJkZjU2MDBiZmU0YzQ3OTAzODVmYWNlZGM0 NmYwMzQwHhcNMjUxMjIxMjIwMDU3WhcNMjUxMjIyMjIwMDU3WjAzMTEwLwYDVQQD Eyg1NDEwMGFjOGVlNDI1YmNiMjM4NTE4ZmZkMGZmMDhjMzdhMjI3OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iKa6wr7gLeiEDJ/tpY/ccd+7WaA r8SkKzrtmt+AhstoOf35OZZ6db/ZNV4zE4tqkxm05zLgAmVs01CFH0oWW3fnvxWW CEue6mODvmIzhYVEHzXS1kXrO6go/VJ0NTd/e1gSh4R4ULKfVXx1AVe4sorg8qgm V2jYqZixBuX1wEusg40d7kZxnSncjuPB3IwvAFr+B1/iiQa6UxkkmBZ0RgUDfxIx wrp9R8BEBJoLWoHj/NzxlXUM9jK1P3s/u9j8RGwT6gBcD0SNR58+B0fh/RFKo1xf j5i+O4RO7zpCQOZmeXfnCVMFEd45Sf1vR21MASP/ChhalUWieOMDjnfjdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQQCsjuQlvLI4UY/9D/CMN6InnZMB8GA1UdIwQY MBaAFFGu3Fdr31YAv+TEeQOF+s7cRvA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQt YjE0ZTU5OWMwY2MyLzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQtYjE0ZTU5OWMwY2My LzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZb1c6Yqe AJ2n2nG/DVhRVGzC0otp9CgHQw9HP7J07S/USZCJ4SVzVwaaoIlenWBWrYymg/Aw v17rLL7jfWj3J3iIegLQvjHtnJnHreGCtjCCwjWFHOPJL3JbccrDaGa27aaZ9+bz 4HiBXU9azvJpIisVxxSTLvT+WhlTj4VR1TRwsGo310Ln4Q0Jzw/OgnY9HETU3YLI b6BdYyzr523y/9OTM5pnr6inXQ46N3A7qHDI3AsygbExSpUSPcjLxK2PBsLhyVZc HcexwtogBnk709RpajASyn2dhU7HejhMl0vJqFU1l8g25rN3XBNRVJqA6qKQnTYW JUHNIt47uLpnFQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:03:46 2025 by rpki-client