This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json) Hash identifier: HjyP11JAwY9Eo7Q1m/rqkzbhrmA5HsYgQ3+HYJHHnlU= Subject key identifier: BE:30:EE:42:41:B5:EE:8B:43:98:22:8A:C6:77:1F:0E:27:31:91:CA Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32 Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032 Certificate serial: 019B0E2605DA8B9510E1BF2D789F17005D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft Manifest number: 109B Signing time: Thu 11 Dec 2025 16:02:11 +0000 Manifest this update: Thu 11 Dec 2025 16:02:11 +0000 Manifest next update: Fri 12 Dec 2025 16:02:11 +0000 Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: oiOvfJw0Ysz/CSv1a6HcM0YqOaOBeWcvwf0pj9HWKOY=) 2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:05:da:8b:95:10:e1:bf:2d:78:9f:17:00:5d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032 Validity Not Before: Dec 11 16:02:11 2025 GMT Not After : Dec 12 16:02:11 2025 GMT Subject: CN=be30ee4241b5ee8b4398228ac6771f0e273191ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:27:ec:89:f3:80:b8:aa:d1:7d:fd:5e:42: be:58:60:43:f8:13:a6:64:ac:b5:ca:8a:9d:28:8e: cd:8b:f1:e8:25:8a:7b:6d:51:2a:47:bf:18:3c:d5: 37:57:8d:79:d7:86:64:b6:97:85:9f:d4:19:97:a7: 8f:bc:00:cb:0a:50:58:ef:5b:24:a1:ff:2a:67:e2: 31:d7:6b:4f:49:81:51:35:61:59:76:14:66:61:4f: c1:ba:91:72:70:1e:38:13:bf:3d:93:3f:67:9b:7b: e7:fe:64:8a:3a:f5:8d:08:74:12:a9:a4:15:1f:c3: 74:e4:37:0a:e2:55:01:88:24:48:6b:15:00:e5:99: 3c:8e:10:86:27:65:ff:7f:15:37:95:27:06:53:71: 2d:89:38:50:69:04:e2:6a:10:ea:5d:7c:85:61:00: 52:3a:61:12:0f:1d:5a:bd:1e:69:ee:91:45:da:d4: 36:92:8c:ee:03:ad:86:bf:96:80:71:94:d4:68:b3: d2:52:df:e8:3d:e4:42:9f:4b:9a:e3:95:b6:9d:01: b3:f4:af:f9:62:c0:62:c3:e9:dd:e2:70:24:15:6b: 0b:50:c8:94:9f:f5:f7:79:3d:03:f6:2d:ae:ae:86: 56:72:18:36:c3:b8:74:2b:a3:05:fa:0e:61:7c:48: 3b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:30:EE:42:41:B5:EE:8B:43:98:22:8A:C6:77:1F:0E:27:31:91:CA X509v3 Authority Key Identifier: keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f0:9d:87:58:38:4a:42:db:1d:73:13:d1:98:64:66:ab:18: b0:52:43:6e:48:a2:d6:96:9a:b9:89:60:67:0c:06:a0:39:9b: fe:4f:b7:bb:01:5e:12:30:0f:1d:09:2d:9e:4b:69:dc:bb:74: 83:8f:fd:84:84:37:c9:67:32:59:9a:af:3e:a6:fb:3b:9d:cb: f6:6d:13:a0:a8:8a:5e:40:4b:68:4f:6f:9d:b0:2d:a1:4d:e6: e6:dc:5e:be:cb:8a:c3:09:f6:5c:c1:5a:40:f5:bf:4d:17:99: 27:d3:3c:80:d9:21:99:f8:97:d2:2b:10:38:48:76:1f:1a:f9: 3a:be:ff:80:5f:94:3d:21:4a:12:8e:53:e6:83:e0:fc:16:fe: ad:5b:eb:97:57:40:b4:f4:c3:99:53:44:0a:04:48:64:72:d6: e0:55:a7:07:8f:61:e6:81:19:c3:7e:1e:f9:c3:39:7e:36:e9: 00:a0:06:05:23:f4:a7:48:f5:5d:40:af:e7:90:d0:ed:aa:16: f5:2b:ef:44:2a:ef:a2:59:0d:ca:53:ba:b0:e9:32:e5:9c:06: 17:c5:ac:7c:aa:59:91:9e:07:d6:85:e2:01:21:35:f2:bc:f3: 32:fb:68:9d:d4:97:e6:ea:e6:b0:0f:b8:75:15:59:8e:6d:86: 9e:0d:b5:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJgXai5UQ4b8teJ8XAF1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4 NGIwMzIwHhcNMjUxMjExMTYwMjExWhcNMjUxMjEyMTYwMjExWjAzMTEwLwYDVQQD EyhiZTMwZWU0MjQxYjVlZThiNDM5ODIyOGFjNjc3MWYwZTI3MzE5MWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot0n7InzgLiq0X39XkK+WGBD+BOm ZKy1yoqdKI7Ni/HoJYp7bVEqR78YPNU3V41514ZktpeFn9QZl6ePvADLClBY71sk of8qZ+Ix12tPSYFRNWFZdhRmYU/BupFycB44E789kz9nm3vn/mSKOvWNCHQSqaQV H8N05DcK4lUBiCRIaxUA5Zk8jhCGJ2X/fxU3lScGU3EtiThQaQTiahDqXXyFYQBS OmESDx1avR5p7pFF2tQ2kozuA62Gv5aAcZTUaLPSUt/oPeRCn0ua45W2nQGz9K/5 YsBiw+nd4nAkFWsLUMiUn/X3eT0D9i2uroZWchg2w7h0K6MF+g5hfEg7pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4w7kJBte6LQ5giisZ3Hw4nMZHKMB8GA1UdIwQY MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfCdh1g4 SkLbHXMT0ZhkZqsYsFJDbkii1paauYlgZwwGoDmb/k+3uwFeEjAPHQktnktp3Lt0 g4/9hIQ3yWcyWZqvPqb7O53L9m0ToKiKXkBLaE9vnbAtoU3m5txevsuKwwn2XMFa QPW/TReZJ9M8gNkhmfiX0isQOEh2Hxr5Or7/gF+UPSFKEo5T5oPg/Bb+rVvrl1dA tPTDmVNECgRIZHLW4FWnB49h5oEZw34e+cM5fjbpAKAGBSP0p0j1XUCv55DQ7aoW 9SvvRCrvolkNylO6sOky5ZwGF8WsfKpZkZ4H1oXiASE18rzzMvtondSX5urmsA+4 dRVZjm2Gng21yw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:47 2025 by rpki-client