This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json) Hash identifier: qUCd9s88+k9kuSEwkx5KUI/rzpLQV/zr1dW3YpUPnoU= Subject key identifier: 84:16:43:2A:81:90:BA:DC:B8:53:5F:7F:67:A3:3C:9E:77:1E:5F:73 Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Certificate serial: 019B0FA590372F762014FA34E33E9A464C3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft Manifest number: 049B Signing time: Thu 11 Dec 2025 23:01:07 +0000 Manifest this update: Thu 11 Dec 2025 23:01:07 +0000 Manifest next update: Fri 12 Dec 2025 23:01:07 +0000 Files and hashes: 1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=) 2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=) 3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=) 4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=) 5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: czpQxJaGtz70kf9cs86GHBtly2Qd05LLZA8esRfC8XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:90:37:2f:76:20:14:fa:34:e3:3e:9a:46:4c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Validity Not Before: Dec 11 23:01:07 2025 GMT Not After : Dec 12 23:01:07 2025 GMT Subject: CN=8416432a8190badcb8535f7f67a33c9e771e5f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6d:ee:ba:b3:8a:2d:53:1f:cc:98:7a:c6:41: 96:b5:de:1f:25:ee:b1:13:4a:39:38:ef:c6:71:76: e6:1d:0c:66:d2:38:6d:fb:7a:5b:77:b3:4f:33:54: 64:67:21:4d:4c:b0:a6:5e:08:d5:ca:13:4b:31:38: fe:0c:ff:90:c0:2b:78:98:a5:ae:b1:7c:53:bd:f9: cc:a4:65:e9:22:b8:69:0e:88:92:6b:d4:36:15:b3: 64:33:f3:56:c3:bf:72:9f:3c:51:57:6a:af:a5:4a: 29:9d:6f:44:88:dd:75:18:6b:63:d5:ea:f5:fa:0b: f1:61:6e:29:26:f1:ea:91:f1:b6:0f:85:4a:89:4e: 92:66:47:8f:cf:0f:4d:91:b5:aa:e3:d2:86:ec:07: fa:a2:ae:f6:8c:47:c1:2a:94:a5:76:ee:13:55:50: a8:f3:90:b8:1a:91:97:5a:03:9c:9b:21:47:c6:2a: 16:46:08:db:12:ad:4a:b8:04:02:94:6e:f3:d1:76: 12:a7:7e:a1:6f:85:2f:9c:f9:1a:77:14:e5:c1:00: f1:34:9c:20:18:97:0a:b2:af:f7:59:ed:99:d2:38: 34:11:04:a6:d8:13:a6:bc:32:ae:e7:32:2e:a8:55: f8:c3:90:41:4a:36:d7:61:60:2e:d0:76:3f:0d:b6: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:16:43:2A:81:90:BA:DC:B8:53:5F:7F:67:A3:3C:9E:77:1E:5F:73 X509v3 Authority Key Identifier: keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c2:b2:d9:aa:78:9f:ff:c9:17:28:bb:8b:9d:d4:49:80:10: 29:ce:bf:cb:80:82:29:11:a9:87:bb:e9:93:7f:41:40:96:e9: bd:3f:9f:7a:f0:65:99:de:a9:4f:56:5a:69:bf:6d:02:36:15: ba:aa:24:ea:98:06:41:c2:02:b5:e3:61:d5:16:7c:fd:26:fd: e6:93:f4:ac:bd:a1:91:76:1f:22:f9:01:59:91:e9:ab:f6:d0: 24:90:ed:c8:b3:03:b0:4d:9d:83:62:91:74:15:bc:e1:0a:ac: b0:fa:d2:26:b3:7c:d0:ff:b0:65:51:90:95:f0:a6:ea:3c:fd: dd:bb:6a:94:14:d4:33:99:e1:1d:e9:77:19:fd:59:e0:f7:d6: c1:d1:9c:80:ac:e5:3d:6c:91:77:c9:86:cd:d8:e5:f9:3a:b9: 43:3c:74:a6:0e:5e:c0:0d:88:dc:58:1a:7b:41:2d:83:cf:f5: 3a:09:3a:f5:8d:43:a0:db:05:17:8c:94:f9:6f:92:58:c0:ef: 16:f6:2e:6b:f2:4c:f5:39:c2:48:30:57:55:9a:db:7b:4f:92: a3:75:7d:32:58:8c:55:80:3c:98:a5:83:34:b7:8f:5d:89:a8: 4d:c9:2e:d8:b1:99:22:ef:e5:34:61:d5:03:80:0a:47:5e:a1: 48:70:62:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpZA3L3YgFPo04z6aRkw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz ODg1ZTcwHhcNMjUxMjExMjMwMTA3WhcNMjUxMjEyMjMwMTA3WjAzMTEwLwYDVQQD Eyg4NDE2NDMyYTgxOTBiYWRjYjg1MzVmN2Y2N2EzM2M5ZTc3MWU1ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA823uurOKLVMfzJh6xkGWtd4fJe6x E0o5OO/GcXbmHQxm0jht+3pbd7NPM1RkZyFNTLCmXgjVyhNLMTj+DP+QwCt4mKWu sXxTvfnMpGXpIrhpDoiSa9Q2FbNkM/NWw79ynzxRV2qvpUopnW9EiN11GGtj1er1 +gvxYW4pJvHqkfG2D4VKiU6SZkePzw9NkbWq49KG7Af6oq72jEfBKpSldu4TVVCo 85C4GpGXWgOcmyFHxioWRgjbEq1KuAQClG7z0XYSp36hb4UvnPkadxTlwQDxNJwg GJcKsq/3We2Z0jg0EQSm2BOmvDKu5zIuqFX4w5BBSjbXYWAu0HY/DbYBCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQWQyqBkLrcuFNff2ejPJ53Hl9zMB8GA1UdIwQY MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct OGE5NmYwM2JjNjE3LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3 LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8Ky2ap4 n//JFyi7i53USYAQKc6/y4CCKRGph7vpk39BQJbpvT+fevBlmd6pT1Zaab9tAjYV uqok6pgGQcICteNh1RZ8/Sb95pP0rL2hkXYfIvkBWZHpq/bQJJDtyLMDsE2dg2KR dBW84QqssPrSJrN80P+wZVGQlfCm6jz93btqlBTUM5nhHel3Gf1Z4PfWwdGcgKzl PWyRd8mGzdjl+Tq5Qzx0pg5ewA2I3Fgae0Etg8/1Ogk69Y1DoNsFF4yU+W+SWMDv FvYua/JM9TnCSDBXVZrbe0+So3V9MliMVYA8mKWDNLePXYmoTcku2LGZIu/lNGHV A4AKR16hSHBiUA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:19:41 2025 by rpki-client