This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json) Hash identifier: EwKpOD+On5MJTCYW7ujf8Ra5+lrtdvFg4UsrlwPiJsY= Subject key identifier: C2:D1:72:BA:48:82:B2:6E:BD:45:6A:EB:F8:78:E7:FC:2B:C3:6F:71 Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Certificate serial: 019B32683EAD0466D484F0796EF3853762C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft Manifest number: 0DD2 Signing time: Thu 18 Dec 2025 17:00:51 +0000 Manifest this update: Thu 18 Dec 2025 17:00:51 +0000 Manifest next update: Fri 19 Dec 2025 17:00:51 +0000 Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=) 2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=) 3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: qbmcHbOSSEo7SwH1B0EI2reaROoDDrkGNUm6N8vuHPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:3e:ad:04:66:d4:84:f0:79:6e:f3:85:37:62:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Validity Not Before: Dec 18 17:00:51 2025 GMT Not After : Dec 19 17:00:51 2025 GMT Subject: CN=c2d172ba4882b26ebd456aebf878e7fc2bc36f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:71:ff:c9:2e:16:1c:e7:da:7d:b0:4a:8c: 5c:b4:73:e8:b5:63:73:e5:8d:53:a1:f3:1a:42:50: c6:22:fe:9c:61:22:31:b5:b7:d4:e1:f5:08:77:05: e0:fa:12:b5:c1:a4:7f:78:a1:83:8c:a5:18:5f:20: f4:d6:da:cd:39:28:a2:51:cf:9f:02:a6:fe:ed:34: 7f:7f:cc:c8:d0:2f:24:b0:ba:d2:72:a1:a4:bf:07: 56:1b:13:87:5d:1c:8d:d0:66:fe:bc:3d:ab:cd:52: 5c:ba:7f:a8:e2:a0:79:59:73:38:2b:00:fc:85:0a: b0:88:65:56:b0:4d:2a:89:5c:07:cd:d3:e5:08:94: 8c:66:f5:8f:de:82:4d:25:a2:75:34:ba:86:20:0b: de:da:73:9d:fd:75:4d:08:65:73:9b:fe:7d:d6:73: c6:29:83:c7:55:5a:4b:d3:07:6d:e3:79:cf:86:40: 6c:f4:ca:94:1e:e9:39:18:42:b0:8b:b4:03:dc:79: 0c:6d:48:63:f7:ba:79:03:2c:91:65:8f:3d:12:c0: 69:70:ac:3c:c6:6d:7d:65:e5:63:52:2e:53:10:90: f8:0f:19:2b:08:aa:76:f9:6d:de:05:e5:54:fa:66: dc:d7:88:bd:43:bf:77:46:0c:a0:ee:41:23:3d:a8: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D1:72:BA:48:82:B2:6E:BD:45:6A:EB:F8:78:E7:FC:2B:C3:6F:71 X509v3 Authority Key Identifier: keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3b:1c:8f:c0:c2:f4:87:97:91:ee:96:a5:d3:ca:da:5a:93: 38:75:64:d2:ad:3d:37:c4:61:cc:06:d6:dd:84:ce:e2:e1:21: d8:48:7d:07:30:fb:ea:2f:af:64:be:a3:d1:8d:3e:7f:9e:67: 46:8d:8c:f1:77:92:d2:1b:4a:ca:65:dc:21:ea:ab:ba:9d:8b: 09:d9:d2:44:46:96:07:76:9f:d0:72:2c:e0:63:b8:bb:a2:9f: a6:96:20:e0:4c:75:2c:dc:7c:4d:f4:60:d6:22:a5:4c:78:e3: d3:33:09:e6:52:b7:4d:76:cc:51:5a:7c:ac:29:1a:59:7c:93: 75:c5:16:47:9e:b1:66:2c:4e:80:5a:28:14:5e:b3:57:88:58: 00:6c:c2:48:fb:39:a7:4c:31:35:0a:6a:41:3f:2f:fb:08:74: 96:f8:79:2e:6c:38:40:11:aa:3f:c2:04:87:b2:00:97:f7:03: f1:ea:ff:ba:f4:39:de:82:af:d2:44:27:76:60:a9:a9:a8:16: de:73:15:20:cb:50:7e:1d:73:68:a1:1a:92:c4:0b:0e:28:f2: 51:0f:0e:04:b1:c6:b4:79:7b:4f:00:95:29:87:ba:37:68:c4: d5:cf:ca:bd:9f:64:9e:6a:f0:57:02:a4:12:c6:6f:fb:c9:00: b8:64:23:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaD6tBGbUhPB5bvOFN2LEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4 MjhkZWEwHhcNMjUxMjE4MTcwMDUxWhcNMjUxMjE5MTcwMDUxWjAzMTEwLwYDVQQD EyhjMmQxNzJiYTQ4ODJiMjZlYmQ0NTZhZWJmODc4ZTdmYzJiYzM2ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqndx/8kuFhzn2n2wSoxctHPotWNz 5Y1TofMaQlDGIv6cYSIxtbfU4fUIdwXg+hK1waR/eKGDjKUYXyD01trNOSiiUc+f Aqb+7TR/f8zI0C8ksLrScqGkvwdWGxOHXRyN0Gb+vD2rzVJcun+o4qB5WXM4KwD8 hQqwiGVWsE0qiVwHzdPlCJSMZvWP3oJNJaJ1NLqGIAve2nOd/XVNCGVzm/591nPG KYPHVVpL0wdt43nPhkBs9MqUHuk5GEKwi7QD3HkMbUhj97p5AyyRZY89EsBpcKw8 xm19ZeVjUi5TEJD4DxkrCKp2+W3eBeVU+mbc14i9Q793Rgyg7kEjPajkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLRcrpIgrJuvUVq6/h45/wrw29xMB8GA1UdIwQY MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1 LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjscj8DC 9IeXke6WpdPK2lqTOHVk0q09N8RhzAbW3YTO4uEh2Eh9BzD76i+vZL6j0Y0+f55n Ro2M8XeS0htKymXcIeqrup2LCdnSREaWB3af0HIs4GO4u6KfppYg4Ex1LNx8TfRg 1iKlTHjj0zMJ5lK3TXbMUVp8rCkaWXyTdcUWR56xZixOgFooFF6zV4hYAGzCSPs5 p0wxNQpqQT8v+wh0lvh5Lmw4QBGqP8IEh7IAl/cD8er/uvQ53oKv0kQndmCpqagW 3nMVIMtQfh1zaKEaksQLDijyUQ8OBLHGtHl7TwCVKYe6N2jE1c/KvZ9knmrwVwKk EsZv+8kAuGQjEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:11:26 2025 by rpki-client