This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json) Hash identifier: TktYPiATObTt4vXnvPDaifnh51cZtXKJT2ek5YQR/ew= Subject key identifier: 10:5E:03:F3:14:59:08:EA:C6:C5:1C:98:72:6C:36:BE:B4:EC:10:55 Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Certificate serial: 019B175F0F61D2B32380F7553BA329B02515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft Manifest number: 072E Signing time: Sat 13 Dec 2025 11:01:04 +0000 Manifest this update: Sat 13 Dec 2025 11:01:04 +0000 Manifest next update: Sun 14 Dec 2025 11:01:04 +0000 Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: z6uWnFWJhbu7T9+Wzuvrfb7x0jWr+T955EGhN/2LS8A=) 2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:0f:61:d2:b3:23:80:f7:55:3b:a3:29:b0:25:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Validity Not Before: Dec 13 11:01:04 2025 GMT Not After : Dec 14 11:01:04 2025 GMT Subject: CN=105e03f3145908eac6c51c98726c36beb4ec1055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:53:5e:fe:fd:49:78:f0:0c:09:30:f4:1c: 2b:cd:8c:58:35:f3:af:a7:91:22:3e:5b:13:98:4f: dc:55:c2:14:d1:9c:68:a4:a2:34:57:1a:05:b3:23: e1:e8:0b:e8:96:6a:a8:dd:56:ea:33:55:a6:c6:b6: 83:f9:af:66:f0:4e:2d:42:55:41:1d:ca:a9:8c:9e: a8:d0:83:f8:62:de:8b:87:1e:ed:c2:dd:13:76:d6: 3f:32:5e:07:f2:06:a6:d3:19:a2:3b:b0:0b:a5:fe: f1:8b:ce:8e:22:2d:1c:75:30:d5:06:f8:a2:cb:c0: 77:f0:aa:c5:2a:62:8c:0c:d8:08:b9:be:a6:e0:ff: 06:ed:f2:89:7b:ec:62:8d:6f:cc:20:a0:dd:77:b6: 4e:0e:83:56:53:21:d1:4e:3c:0b:64:f9:e3:1e:75: ae:78:bb:ad:8c:da:fa:82:26:37:2c:6b:96:47:34: b6:22:b2:21:56:ad:dc:d6:eb:57:8f:b8:c3:d5:8e: 22:72:53:63:91:dc:ad:d3:9b:21:6c:98:63:55:68: fd:8e:0a:31:99:e6:67:fa:37:19:37:74:e5:77:cd: 71:e7:2c:45:b1:ce:eb:06:15:c0:05:71:64:fd:32: 06:af:9f:4a:7f:6c:9f:9e:7c:ba:b3:80:ee:27:65: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:03:F3:14:59:08:EA:C6:C5:1C:98:72:6C:36:BE:B4:EC:10:55 X509v3 Authority Key Identifier: keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ef:56:ec:a2:af:af:62:f9:ff:47:e5:c1:a6:2a:69:e4:fa: 88:d6:3c:a2:87:8e:f5:1e:58:b9:92:87:1f:5b:44:8e:64:5b: 77:98:2d:c6:ca:df:41:ad:8c:87:38:cd:d1:70:f7:a3:6e:b0: c7:57:2b:f1:73:fa:36:b1:02:ab:b7:99:e7:11:18:10:43:ae: 0f:57:75:93:3a:54:05:69:7c:c7:e0:47:fb:b0:57:ae:ff:37: 72:23:3c:97:06:90:96:1b:b2:12:a8:ce:da:28:74:49:c6:15: b0:ad:f9:60:1b:2d:00:50:42:35:cb:25:9d:70:ec:5d:0f:e6: c3:ac:7c:be:c5:a3:21:47:ac:65:a1:79:dd:6c:4b:55:d8:8d: ea:5e:f2:c3:3f:9a:16:99:28:f0:c4:5e:ea:46:4e:72:88:4e: 6e:ce:cc:f7:bd:98:2c:93:cd:33:0a:a8:ef:59:ab:3a:34:2c: b7:c6:41:d8:ec:77:29:5e:6d:4f:47:08:8d:53:41:66:6e:52: 51:f6:49:14:2b:91:c1:c9:ac:b8:a8:55:55:e6:dd:73:9f:dc: 81:d9:f7:70:3a:2f:1e:ab:ce:25:dc:14:8d:b7:76:69:cc:05: 40:0d:02:59:29:c8:f3:18:e0:d6:df:5e:9c:cd:19:d6:dd:a8: 8e:13:ca:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXXw9h0rMjgPdVO6MpsCUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWU3MWQxYjg2MDVhMzNiOWRkNjU0YmEzOGRkZmFiYzFj ZWY1ZWIwHhcNMjUxMjEzMTEwMTA0WhcNMjUxMjE0MTEwMTA0WjAzMTEwLwYDVQQD EygxMDVlMDNmMzE0NTkwOGVhYzZjNTFjOTg3MjZjMzZiZWI0ZWMxMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERTXv79SXjwDAkw9BwrzYxYNfOv p5EiPlsTmE/cVcIU0ZxopKI0VxoFsyPh6Avolmqo3VbqM1WmxraD+a9m8E4tQlVB HcqpjJ6o0IP4Yt6Lhx7twt0TdtY/Ml4H8gam0xmiO7ALpf7xi86OIi0cdTDVBvii y8B38KrFKmKMDNgIub6m4P8G7fKJe+xijW/MIKDdd7ZODoNWUyHRTjwLZPnjHnWu eLutjNr6giY3LGuWRzS2IrIhVq3c1utXj7jD1Y4iclNjkdyt05shbJhjVWj9jgox meZn+jcZN3Tld81x5yxFsc7rBhXABXFk/TIGr59Kf2yfnny6s4DuJ2V35wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBeA/MUWQjqxsUcmHJsNr607BBVMB8GA1UdIwQY MBaAFFGecdG4YFozud1lS6ON36vBzvXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQt ZmQ2ZjIzNWRhZjBiLzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQtZmQ2ZjIzNWRhZjBi LzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO9W7KKv r2L5/0flwaYqaeT6iNY8ooeO9R5YuZKHH1tEjmRbd5gtxsrfQa2MhzjN0XD3o26w x1cr8XP6NrECq7eZ5xEYEEOuD1d1kzpUBWl8x+BH+7BXrv83ciM8lwaQlhuyEqjO 2ih0ScYVsK35YBstAFBCNcslnXDsXQ/mw6x8vsWjIUesZaF53WxLVdiN6l7ywz+a Fpko8MRe6kZOcohObs7M972YLJPNMwqo71mrOjQst8ZB2Ox3KV5tT0cIjVNBZm5S UfZJFCuRwcmsuKhVVebdc5/cgdn3cDovHqvOJdwUjbd2acwFQA0CWSnI8xjg1t9e nM0Z1t2ojhPKvA== -----END CERTIFICATE-----Generated at Sat Dec 13 13:53:39 2025 by rpki-client