This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft File: uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json) Hash identifier: JFjV9YUUdzHUpZRH1F1pcw5GzlYXzEe6KxGAs+g0A0w= Subject key identifier: 2D:62:F4:4A:54:B7:D0:54:99:19:0F:78:00:CE:D4:2A:E6:10:0C:61 Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2 Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2 Certificate serial: 019B0F37BF5FE8E24F00103B6E107F5F4505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft Manifest number: 140B Signing time: Thu 11 Dec 2025 21:01:10 +0000 Manifest this update: Thu 11 Dec 2025 21:01:10 +0000 Manifest next update: Fri 12 Dec 2025 21:01:10 +0000 Files and hashes: 1: Qzb63e7PrJpZnvdh_5KRROvhZ1c.roa (hash: NrGLLIb4hN1ItaaNKC1Rm9N6KTQQi8aKbLrok20ftwo=) 2: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=) 3: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=) 4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: veMJmIjHctOLqTwjYjpcVHvyuK1YY2KSGJ24Z8zdzK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:bf:5f:e8:e2:4f:00:10:3b:6e:10:7f:5f:45:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2 Validity Not Before: Dec 11 21:01:10 2025 GMT Not After : Dec 12 21:01:10 2025 GMT Subject: CN=2d62f44a54b7d05499190f7800ced42ae6100c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:85:25:36:c5:ee:ea:f0:03:4b:55:d2:58: e5:8b:0f:ab:89:02:b2:ac:70:e9:e6:7d:9e:a7:5b: 56:ad:9b:b3:f9:78:01:12:f7:ee:1a:db:ae:71:5c: a8:53:b7:99:3b:8d:94:3c:09:ef:ea:8d:73:2a:0f: ac:bc:70:f4:af:04:2c:8a:28:3c:f4:d6:3b:7f:d0: 55:0c:5b:f7:32:87:2a:0b:fa:e1:a1:5c:77:8a:af: 53:37:d0:e8:96:2e:00:3d:ee:37:aa:e3:b0:31:1a: 74:40:28:d5:4b:d3:d4:4d:49:c7:bf:d0:5c:d9:9c: a5:3a:2f:27:f7:f8:2f:e0:68:ef:ac:ad:91:89:05: ba:51:3a:4b:ee:c0:2f:22:d4:2f:61:f5:8a:66:4b: 13:d1:f4:db:97:3c:80:f3:9c:98:58:2e:20:8c:8b: d3:a1:d9:7b:9b:72:05:3e:d5:e0:90:5e:04:3c:7d: 2d:8c:ae:e2:5f:c4:90:57:5a:f3:7d:2b:70:37:8d: 1c:e2:7b:e6:27:77:0a:db:4a:e6:90:b7:d5:c5:5a: e9:7a:39:ee:9c:a3:d5:b4:4d:26:d1:3b:d7:3d:ec: c6:84:87:b4:1e:59:67:c1:f1:bc:39:2c:20:75:d1: c6:53:56:af:ee:e8:f9:86:0c:97:55:d1:20:64:dc: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:62:F4:4A:54:B7:D0:54:99:19:0F:78:00:CE:D4:2A:E6:10:0C:61 X509v3 Authority Key Identifier: keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:81:07:6c:18:06:fa:1c:6f:fb:3c:51:81:d4:6f:96:e9:36: b3:f3:d4:20:c6:f2:d1:bf:19:d5:8b:77:28:8d:a6:5a:04:e6: b9:34:bb:94:73:73:ca:42:ad:96:25:0b:9e:e7:7d:5e:4c:24: f4:10:3e:48:a1:65:fa:42:e1:88:ab:39:1c:35:ec:60:0b:7d: 23:ee:40:59:ce:47:5b:9b:ee:d7:08:de:b4:e6:cc:5c:84:39: ee:15:32:92:7a:83:d9:8e:da:3f:e3:9b:40:2a:6e:78:f5:e3: bd:e6:9d:5e:5b:b7:b6:f5:9c:4d:5e:3c:c7:7e:9b:0b:46:73: ed:7c:7c:87:ff:f2:47:52:30:da:f7:58:4a:62:fe:0e:fb:f9: 37:60:e0:e8:60:9b:b8:1b:af:5b:91:81:82:b4:b8:9b:1c:4f: 15:21:51:51:42:37:70:8a:2d:ad:4c:b8:95:6f:e7:76:0f:bb: b2:e1:88:61:6e:f7:56:95:a0:4c:e1:c0:4b:89:dd:b1:6f:25: ec:eb:a8:14:3d:04:1a:8e:6f:5b:50:43:78:af:15:a5:85:de: 47:dc:1e:e2:e0:a1:89:20:fd:da:97:01:20:e0:23:d7:72:23: 37:a1:a5:4b:c5:72:b2:59:05:d8:1f:07:5f:86:54:a6:73:34: a8:ab:fb:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN79f6OJPABA7bhB/X0UFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3 NDFmZjIwHhcNMjUxMjExMjEwMTEwWhcNMjUxMjEyMjEwMTEwWjAzMTEwLwYDVQQD EygyZDYyZjQ0YTU0YjdkMDU0OTkxOTBmNzgwMGNlZDQyYWU2MTAwYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3KFJTbF7urwA0tV0ljliw+riQKy rHDp5n2ep1tWrZuz+XgBEvfuGtuucVyoU7eZO42UPAnv6o1zKg+svHD0rwQsiig8 9NY7f9BVDFv3MocqC/rhoVx3iq9TN9Doli4APe43quOwMRp0QCjVS9PUTUnHv9Bc 2ZylOi8n9/gv4GjvrK2RiQW6UTpL7sAvItQvYfWKZksT0fTblzyA85yYWC4gjIvT odl7m3IFPtXgkF4EPH0tjK7iX8SQV1rzfStwN40c4nvmJ3cK20rmkLfVxVrpejnu nKPVtE0m0TvXPezGhIe0HllnwfG8OSwgddHGU1av7uj5hgyXVdEgZNxGiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1i9EpUt9BUmRkPeADO1CrmEAxhMB8GA1UdIwQY MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt YWFkZmE5YzA2NzQyLzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoEHbBgG +hxv+zxRgdRvluk2s/PUIMby0b8Z1Yt3KI2mWgTmuTS7lHNzykKtliULnud9Xkwk 9BA+SKFl+kLhiKs5HDXsYAt9I+5AWc5HW5vu1wjetObMXIQ57hUyknqD2Y7aP+Ob QCpuePXjveadXlu3tvWcTV48x36bC0Zz7Xx8h//yR1Iw2vdYSmL+Dvv5N2Dg6GCb uBuvW5GBgrS4mxxPFSFRUUI3cIotrUy4lW/ndg+7suGIYW73VpWgTOHAS4ndsW8l 7OuoFD0EGo5vW1BDeK8VpYXeR9we4uChiSD92pcBIOAj13IjN6GlS8VyslkF2B8H X4ZUpnM0qKv70A== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:24 2025 by rpki-client