This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json) Hash identifier: QSMSai1UgaABww7br337miS8d8NqwJguTeI9Q7+yK1o= Subject key identifier: 94:15:90:F0:3E:2A:48:78:80:42:52:7A:20:CB:FE:87:BA:AD:F0:8E Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3 Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3 Certificate serial: 019B194DCDE8CF7B4377CC7E92C3B1EB8751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft Manifest number: 0FF9 Signing time: Sat 13 Dec 2025 20:01:27 +0000 Manifest this update: Sat 13 Dec 2025 20:01:27 +0000 Manifest next update: Sun 14 Dec 2025 20:01:27 +0000 Files and hashes: 1: LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa (hash: mQpu5Z0eDQkFYVXPC9Ju2CwxJctFEU3LSWItHzUvqPk=) 2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: WPlwpOL3RDgVzMTt83Lic39c0bY2sGmR0/6yf8aWox8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:cd:e8:cf:7b:43:77:cc:7e:92:c3:b1:eb:87:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3 Validity Not Before: Dec 13 20:01:27 2025 GMT Not After : Dec 14 20:01:27 2025 GMT Subject: CN=941590f03e2a48788042527a20cbfe87baadf08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:e0:6c:b9:55:aa:1c:e2:69:e6:49:f6:27: 94:00:2c:e6:b8:22:5c:77:2d:d9:01:64:42:17:e8: 33:41:69:88:11:c4:f3:84:2f:d1:90:19:86:ae:4b: e3:bf:86:77:be:b5:6e:9e:d6:69:7f:2a:6c:6b:52: 14:0e:47:64:dd:bd:0e:8c:05:a8:10:1c:5b:78:2b: 19:a6:a9:50:f3:84:08:f5:30:96:8a:98:6c:da:21: 4f:95:ef:c8:6e:a1:f8:9a:a6:bd:ce:a6:6b:69:8f: 9f:d6:b3:d5:25:b4:7a:9a:fd:e6:c5:0c:7f:7d:29: ef:d0:71:4b:bf:95:4b:90:f5:fd:d8:af:9f:a6:43: 81:d1:c0:40:aa:ea:23:08:45:40:89:70:24:72:cc: 46:6c:7a:b2:09:0c:b2:72:9b:81:54:e1:0c:60:61: b7:46:4f:fc:89:f0:a3:6e:39:ca:ad:0e:c4:f8:c1: b6:45:3c:59:1c:90:62:72:72:0c:26:2c:e2:1e:43: 96:a9:6e:3c:8d:19:e7:52:ae:eb:ab:8b:cb:e2:48: b4:92:86:6d:6a:de:ef:1b:35:a3:f7:10:7b:37:ab: 4b:34:dc:38:10:86:1c:f4:89:c7:d8:46:87:8f:77: c9:48:a4:ef:c1:3d:9f:26:e1:21:ec:ae:e6:c1:99: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:15:90:F0:3E:2A:48:78:80:42:52:7A:20:CB:FE:87:BA:AD:F0:8E X509v3 Authority Key Identifier: keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8d:4c:a9:68:8c:1a:4c:4f:80:48:2e:e8:7f:6c:fd:b0:7b: 99:b4:14:5d:19:fd:c8:df:2b:7b:cf:b6:73:2b:50:75:5a:27: 35:51:b6:c1:e0:ae:57:ef:09:72:d6:d7:85:d5:03:88:81:ec: 50:28:e8:ac:6a:8c:8f:2b:0a:f3:28:64:d0:7e:fa:c2:3a:47: 5c:31:47:4c:0f:3c:5c:30:dc:f7:15:62:c6:7b:d9:d5:ea:3d: bc:f3:bc:e0:fa:86:e0:ff:66:65:0b:b8:df:a1:bc:38:13:14: 68:04:51:58:94:70:bb:7e:62:8c:ca:57:fe:82:2c:e7:52:43: c8:ed:f1:7b:8c:22:07:be:1e:0f:f0:d5:46:ae:fb:cb:61:f4: 18:52:c0:c1:16:69:8a:3c:eb:35:c9:91:8e:8a:48:ee:e6:4f: 27:e0:35:7f:ec:d2:12:2b:fe:8c:5e:69:d2:24:87:84:9b:08: 37:bf:b3:37:6a:0a:20:dd:b0:5f:78:23:4b:73:b8:aa:fe:f8: 2a:03:c1:6f:95:24:14:f6:e8:5c:ac:0d:cb:00:0b:4d:51:7d: cb:cd:e4:f3:1d:ec:90:d1:0c:32:38:c6:39:5c:78:a4:e3:23: f3:87:c2:dc:68:0f:a4:88:a8:a6:19:74:2d:84:56:81:cb:3e: 5d:a8:52:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTc3oz3tDd8x+ksOx64dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3 YWE2YzMwHhcNMjUxMjEzMjAwMTI3WhcNMjUxMjE0MjAwMTI3WjAzMTEwLwYDVQQD Eyg5NDE1OTBmMDNlMmE0ODc4ODA0MjUyN2EyMGNiZmU4N2JhYWRmMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsngbLlVqhziaeZJ9ieUACzmuCJc dy3ZAWRCF+gzQWmIEcTzhC/RkBmGrkvjv4Z3vrVuntZpfypsa1IUDkdk3b0OjAWo EBxbeCsZpqlQ84QI9TCWiphs2iFPle/IbqH4mqa9zqZraY+f1rPVJbR6mv3mxQx/ fSnv0HFLv5VLkPX92K+fpkOB0cBAquojCEVAiXAkcsxGbHqyCQyycpuBVOEMYGG3 Rk/8ifCjbjnKrQ7E+MG2RTxZHJBicnIMJiziHkOWqW48jRnnUq7rq4vL4ki0koZt at7vGzWj9xB7N6tLNNw4EIYc9InH2EaHj3fJSKTvwT2fJuEh7K7mwZlGvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQVkPA+Kkh4gEJSeiDL/oe6rfCOMB8GA1UdIwQY MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI1MqWiM GkxPgEgu6H9s/bB7mbQUXRn9yN8re8+2cytQdVonNVG2weCuV+8JctbXhdUDiIHs UCjorGqMjysK8yhk0H76wjpHXDFHTA88XDDc9xVixnvZ1eo9vPO84PqG4P9mZQu4 36G8OBMUaARRWJRwu35ijMpX/oIs51JDyO3xe4wiB74eD/DVRq77y2H0GFLAwRZp ijzrNcmRjopI7uZPJ+A1f+zSEiv+jF5p0iSHhJsIN7+zN2oKIN2wX3gjS3O4qv74 KgPBb5UkFPboXKwNywALTVF9y83k8x3skNEMMjjGOVx4pOMj84fC3GgPpIiophl0 LYRWgcs+XahSPw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:52 2025 by rpki-client