This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json) Hash identifier: k/4p/qG89CMsOGD7xsZQLKZ0gueTZByIYp93QKAMy5E= Subject key identifier: AB:61:EF:19:37:03:0D:27:87:38:1A:1E:28:61:58:81:40:B3:B9:36 Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32 Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032 Certificate serial: 019B3C7F04725EE6B463B0C3DBA9796585A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft Manifest number: 10B3 Signing time: Sat 20 Dec 2025 16:01:55 +0000 Manifest this update: Sat 20 Dec 2025 16:01:55 +0000 Manifest next update: Sun 21 Dec 2025 16:01:55 +0000 Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: B5p+Xj5QC1PNZThJfIB1KdQJhADmoka3FTwrXCmI98k=) 2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:04:72:5e:e6:b4:63:b0:c3:db:a9:79:65:85:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032 Validity Not Before: Dec 20 16:01:55 2025 GMT Not After : Dec 21 16:01:55 2025 GMT Subject: CN=ab61ef1937030d2787381a1e2861588140b3b936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:ab:ff:4c:9f:68:df:b7:2b:5c:78:55:cd: 90:fb:26:1d:52:1e:5e:c5:66:10:6c:15:45:2d:11: f1:b3:26:29:9c:94:d8:20:62:4d:b1:17:4d:68:6c: 3e:f9:e7:88:e6:c3:29:83:e7:64:c5:ed:b4:94:0c: f9:9f:4b:d0:f5:f9:85:6c:df:43:7c:eb:1f:8a:fa: 07:48:88:1e:36:aa:6a:67:05:9c:2e:cc:2b:c4:00: b2:09:e7:e7:58:45:5f:be:97:6c:30:6a:84:ae:b6: bc:f1:75:af:62:fb:8e:fd:2f:57:06:bb:09:30:ff: ce:07:38:c8:6e:a6:28:de:b5:6e:4b:48:87:92:f0: 5d:13:72:df:d5:44:64:bb:21:d3:ef:ff:f4:bf:06: ce:96:6b:87:63:e3:a9:28:13:32:5e:10:29:48:a1: 74:c9:a7:57:fa:9e:80:5e:a5:d0:31:18:bc:95:74: ea:7c:42:1f:5c:c3:e6:db:0b:48:2c:42:2d:48:5b: a7:83:b5:07:e1:f6:ef:46:54:6e:3d:03:a3:47:61: 30:59:60:04:d5:23:82:1b:26:76:0a:bc:18:15:6b: aa:c2:82:5c:0b:8b:16:92:5b:79:ef:f7:df:14:2f: 9d:bc:37:a0:b1:94:dc:b0:c1:97:7a:d9:56:47:09: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:EF:19:37:03:0D:27:87:38:1A:1E:28:61:58:81:40:B3:B9:36 X509v3 Authority Key Identifier: keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6f:9c:2d:f4:3b:ef:83:28:a1:9e:41:7a:44:05:2d:2a:78: 71:a1:f6:d7:dc:f1:d7:a8:ce:bf:90:99:56:f0:8a:1e:14:36: ad:fa:81:b3:3a:b5:61:96:e6:49:8e:34:2f:17:d5:09:2b:41: 1d:1a:7e:00:f2:c7:a5:fe:13:13:f8:80:d6:6d:9f:5e:d9:19: 9e:b1:4e:bd:fa:b7:c6:f7:61:2c:0e:a6:2c:0e:26:58:64:07: a4:c2:13:26:fe:1b:c8:f4:c8:d0:69:87:8f:d8:e5:ea:9e:30: 70:24:8c:59:d6:9d:07:11:63:39:76:77:88:cf:45:5b:3c:cd: ca:30:b2:00:82:f7:eb:28:5a:24:2a:be:f8:78:10:30:f8:2f: 4b:2b:ff:f8:ff:5d:c1:15:f7:e9:be:48:2f:0c:8f:7e:eb:75: 31:84:88:c1:a0:af:ec:08:e9:5d:d7:ff:70:f8:6b:f4:b2:54: 15:f8:01:55:ad:02:32:da:af:2f:ed:bc:83:34:d5:79:d9:f8: 92:37:21:37:3b:2b:0b:4b:a4:aa:21:6c:0f:a7:20:8b:62:98: a4:bd:cf:54:a5:7b:2f:4d:4b:f2:47:1e:7f:07:56:ac:a7:8e: b4:9a:c9:d5:55:8e:17:af:23:81:32:e5:48:26:79:f4:ab:7f: 79:7a:30:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwRyXua0Y7DD26l5ZYWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4 NGIwMzIwHhcNMjUxMjIwMTYwMTU1WhcNMjUxMjIxMTYwMTU1WjAzMTEwLwYDVQQD EyhhYjYxZWYxOTM3MDMwZDI3ODczODFhMWUyODYxNTg4MTQwYjNiOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHSr/0yfaN+3K1x4Vc2Q+yYdUh5e xWYQbBVFLRHxsyYpnJTYIGJNsRdNaGw++eeI5sMpg+dkxe20lAz5n0vQ9fmFbN9D fOsfivoHSIgeNqpqZwWcLswrxACyCefnWEVfvpdsMGqErra88XWvYvuO/S9XBrsJ MP/OBzjIbqYo3rVuS0iHkvBdE3Lf1URkuyHT7//0vwbOlmuHY+OpKBMyXhApSKF0 yadX+p6AXqXQMRi8lXTqfEIfXMPm2wtILEItSFung7UH4fbvRlRuPQOjR2EwWWAE 1SOCGyZ2CrwYFWuqwoJcC4sWklt57/ffFC+dvDegsZTcsMGXetlWRwmDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKth7xk3Aw0nhzgaHihhWIFAs7k2MB8GA1UdIwQY MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkG+cLfQ7 74MooZ5BekQFLSp4caH219zx16jOv5CZVvCKHhQ2rfqBszq1YZbmSY40LxfVCStB HRp+APLHpf4TE/iA1m2fXtkZnrFOvfq3xvdhLA6mLA4mWGQHpMITJv4byPTI0GmH j9jl6p4wcCSMWdadBxFjOXZ3iM9FWzzNyjCyAIL36yhaJCq++HgQMPgvSyv/+P9d wRX36b5ILwyPfut1MYSIwaCv7AjpXdf/cPhr9LJUFfgBVa0CMtqvL+28gzTVedn4 kjchNzsrC0ukqiFsD6cgi2KYpL3PVKV7L01L8kcefwdWrKeOtJrJ1VWOF68jgTLl SCZ59Kt/eXow1w== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:20 2025 by rpki-client