This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json) Hash identifier: Qo+N4uFrGu9X5Y1RRnSRaN7Op4sqesS7U1aPDBlY7BE= Subject key identifier: 93:2A:BB:C6:A3:5B:CF:42:8A:BC:FD:8D:E0:EE:4C:4E:C8:EB:F3:3C Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f Certificate serial: 019B0E5BB2A204D3A5AC626D7AF01B3B7181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft Manifest number: 0DDB Signing time: Thu 11 Dec 2025 17:00:48 +0000 Manifest this update: Thu 11 Dec 2025 17:00:48 +0000 Manifest next update: Fri 12 Dec 2025 17:00:48 +0000 Files and hashes: 1: NwhX1fpUUKISwRaP6RgnnH_Cl-k.roa (hash: 46uueaf8TwY6xllVk4bGf8Po+XSFPtY1TUSEHJE8zWc=) 2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: qqjQJEJdi3lw+8NPJhfchTxFFCFWPmjjI0F2XFGyOWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:b2:a2:04:d3:a5:ac:62:6d:7a:f0:1b:3b:71:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f Validity Not Before: Dec 11 17:00:48 2025 GMT Not After : Dec 12 17:00:48 2025 GMT Subject: CN=932abbc6a35bcf428abcfd8de0ee4c4ec8ebf33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:3c:b8:d9:07:78:f8:dc:59:5a:80:b8:36: 52:59:b7:07:7f:a7:99:5d:21:b3:fc:35:1c:4d:05: 59:88:b0:d8:3d:d6:6b:dc:e0:8c:2f:6c:c3:e4:61: d9:0a:4f:a6:1c:af:c2:5b:c6:40:6b:a8:29:0f:fc: cc:57:1b:42:7e:f8:b1:a5:22:4a:a6:72:2d:d0:de: 76:42:bd:4e:e3:65:12:ca:d6:13:9b:99:86:f3:28: b4:83:93:18:4a:9e:c5:ee:31:4d:3b:0d:d3:9e:f9: ac:c0:0b:c8:e1:cc:e6:7c:d9:85:55:b7:9a:fb:63: 81:7b:b0:3b:8b:3a:e6:7f:63:16:86:fc:64:71:c1: 32:d3:85:26:df:85:86:5e:6e:89:1a:48:b0:ed:53: af:26:20:1e:14:46:cd:3c:5d:b1:10:9a:2b:80:ec: 5b:8d:b5:1d:16:e7:36:a4:4e:42:0a:ca:41:4e:e9: ab:4d:b5:48:17:93:08:ed:c8:b8:ff:fb:8b:1a:d8: 76:0a:45:a8:40:ba:df:6b:6c:d4:27:61:ea:e8:f7: 47:a8:a0:75:bd:bf:8a:ae:05:c0:d3:b0:f9:39:f6: e9:19:11:04:5c:13:3a:91:f3:5e:79:c3:a2:f8:32: ab:f3:ce:3d:27:4c:ef:b9:07:3c:35:9d:c7:bf:b2: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:BB:C6:A3:5B:CF:42:8A:BC:FD:8D:E0:EE:4C:4E:C8:EB:F3:3C X509v3 Authority Key Identifier: keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:88:80:f0:76:b2:87:94:f3:22:6e:b2:19:1f:12:03:e7:87: 84:b0:0c:76:1d:ac:41:4a:7a:2a:5a:27:d4:a9:03:64:70:0c: 31:25:a8:69:ff:02:3d:d3:a5:8a:67:8a:3b:66:bf:72:02:5a: 81:ea:81:da:ad:29:4b:27:57:f8:46:96:b0:8b:50:58:f4:1f: a5:41:18:fe:a6:d5:36:8b:9a:24:f6:d5:ae:8c:d3:0c:fe:42: 79:40:46:9f:67:4b:55:58:14:e5:50:24:21:6c:cb:d0:d2:e9: 5f:19:e9:37:10:f9:5f:cd:9e:fd:c3:d1:e0:b6:d0:31:4e:fe: ff:d4:52:0a:28:dd:6c:fa:65:c2:94:73:d8:d5:ab:45:57:01: 4f:51:5a:0a:54:ba:10:1e:18:62:cb:ca:7c:cd:fa:b7:13:8f: d0:c7:4e:88:e3:d2:99:67:bc:e0:c0:42:5e:8d:26:e7:7a:4f: 88:3d:ac:bd:0b:f9:74:89:a7:4d:77:db:a7:8b:db:34:63:3c: 94:2a:13:4a:9d:19:d4:6a:61:6b:64:8a:0d:bc:a1:97:39:a9: 85:20:c4:70:49:1a:47:ae:7b:63:2c:50:0e:9d:c1:a8:32:c4: 67:f2:d4:c3:ee:16:30:cb:0f:73:af:34:96:b7:f9:fa:17:ba: 46:ae:7c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW7KiBNOlrGJtevAbO3GBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNGU1Zjc5NjEyMjVmYmZlMzQxZjZiZmQ2YmU4ZTFhMjFl ZjhjMGYwHhcNMjUxMjExMTcwMDQ4WhcNMjUxMjEyMTcwMDQ4WjAzMTEwLwYDVQQD Eyg5MzJhYmJjNmEzNWJjZjQyOGFiY2ZkOGRlMGVlNGM0ZWM4ZWJmMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotU8uNkHePjcWVqAuDZSWbcHf6eZ XSGz/DUcTQVZiLDYPdZr3OCML2zD5GHZCk+mHK/CW8ZAa6gpD/zMVxtCfvixpSJK pnIt0N52Qr1O42USytYTm5mG8yi0g5MYSp7F7jFNOw3TnvmswAvI4czmfNmFVbea +2OBe7A7izrmf2MWhvxkccEy04Um34WGXm6JGkiw7VOvJiAeFEbNPF2xEJorgOxb jbUdFuc2pE5CCspBTumrTbVIF5MI7ci4//uLGth2CkWoQLrfa2zUJ2Hq6PdHqKB1 vb+KrgXA07D5OfbpGREEXBM6kfNeecOi+DKr8849J0zvuQc8NZ3Hv7I52wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMqu8ajW89Cirz9jeDuTE7I6/M8MB8GA1UdIwQY MBaAFFJOX3lhIl+/40H2v9a+jhoh74wPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWIt MmFiOTA0NmViYzExLzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWItMmFiOTA0NmViYzEx LzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4iA8Hay h5TzIm6yGR8SA+eHhLAMdh2sQUp6Klon1KkDZHAMMSWoaf8CPdOlimeKO2a/cgJa geqB2q0pSydX+EaWsItQWPQfpUEY/qbVNouaJPbVrozTDP5CeUBGn2dLVVgU5VAk IWzL0NLpXxnpNxD5X82e/cPR4LbQMU7+/9RSCijdbPplwpRz2NWrRVcBT1FaClS6 EB4YYsvKfM36txOP0MdOiOPSmWe84MBCXo0m53pPiD2svQv5dImnTXfbp4vbNGM8 lCoTSp0Z1Gpha2SKDbyhlzmphSDEcEkaR657YyxQDp3BqDLEZ/LUw+4WMMsPc680 lrf5+he6Rq58NQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:40:01 2025 by rpki-client