This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json) Hash identifier: YRwm7ealTjMElmAGhE9HIGoi78om5cHTKRDby9YmXMA= Subject key identifier: EF:50:0E:08:98:88:F5:79:F6:2C:0C:C0:EB:8C:54:0B:6B:BD:38:FD Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8 Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8 Certificate serial: 019B10152B887CAAAFA4C995683953D11A7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft Manifest number: 146E Signing time: Fri 12 Dec 2025 01:03:01 +0000 Manifest this update: Fri 12 Dec 2025 01:03:01 +0000 Manifest next update: Sat 13 Dec 2025 01:03:01 +0000 Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=) 2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: Vdxoakhxm2I/LGlcuAUEn1RXrJqZFeHKUmCUvex1zlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:15:2b:88:7c:aa:af:a4:c9:95:68:39:53:d1:1a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8 Validity Not Before: Dec 12 01:03:01 2025 GMT Not After : Dec 13 01:03:01 2025 GMT Subject: CN=ef500e089888f579f62c0cc0eb8c540b6bbd38fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:5e:db:52:eb:2b:18:62:ef:f7:52:72:b0: 5a:6e:dd:66:2d:11:e1:32:a2:83:be:01:03:5c:9e: cc:e5:9a:1d:7a:6e:32:fb:12:0b:39:a1:bd:d2:d8: 39:e2:5b:0c:1c:f2:dc:af:4e:17:fe:42:e4:50:d8: 07:2e:92:c2:de:15:c4:e3:85:bd:2e:80:8d:b0:67: 3b:03:f6:ac:b2:b3:30:14:b5:21:4e:7c:2c:d4:bd: 06:a2:f5:79:83:c7:c4:0e:57:c6:6f:41:63:b6:44: 54:fc:8b:89:d0:e2:4a:8c:56:09:e1:0d:9b:d9:c1: fa:7d:15:85:61:d3:91:6a:bf:b2:eb:ae:6f:c0:b8: d7:01:fb:da:20:c6:b0:61:7a:d3:89:e2:fa:ea:c9: fe:9e:f4:ca:fb:db:52:10:2b:0c:f3:5f:69:f8:5d: 31:16:39:00:74:6a:2b:97:ad:ef:bb:51:8e:2d:90: 42:5b:90:89:d9:8e:e7:30:11:09:c1:0a:34:ec:36: c7:da:7b:d5:2f:5c:ae:ff:c1:2f:1d:3d:e3:7b:69: 13:09:e0:eb:27:f3:55:62:eb:07:89:5a:21:6b:4b: 5b:f1:ff:67:39:d1:4f:32:5b:5c:68:cd:a8:fc:fb: 66:6c:cd:99:e8:86:ca:68:c6:60:aa:1d:d5:78:dd: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:50:0E:08:98:88:F5:79:F6:2C:0C:C0:EB:8C:54:0B:6B:BD:38:FD X509v3 Authority Key Identifier: keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cc:a7:c2:dd:14:61:f5:40:09:ea:09:f1:5f:8a:e1:76:18: c3:dd:a7:d1:30:2e:2c:ae:c7:1a:3e:72:46:ad:9d:2c:e6:b1: fb:66:42:61:e7:a2:49:03:fd:c1:1d:51:72:61:38:a1:96:db: 71:c1:e2:db:60:54:ec:e6:ec:04:06:dc:d8:ec:d8:03:66:d5: 71:68:ff:d7:a5:19:84:e8:86:73:d3:2a:e4:15:fa:60:95:67: a6:0b:87:d5:50:ef:20:e4:d5:d3:d3:40:d4:c0:0c:4b:24:a5: df:ee:d5:31:00:51:9f:53:2f:18:88:87:33:41:d1:ee:d1:0b: 49:35:65:b5:76:04:20:e5:f5:84:7d:da:71:5e:ad:0a:d1:9c: 54:04:eb:2f:1c:2c:09:9c:bb:ef:39:33:9c:30:87:7c:20:5d: 2e:49:09:82:15:77:02:c6:f2:dc:bc:53:c3:da:cb:d4:09:5b: af:78:f0:e1:39:74:24:d5:6f:f1:53:28:62:90:1f:61:e4:c0: 65:43:8c:47:79:10:5f:b3:2e:8e:9f:50:e5:39:0d:ab:e7:52: de:d4:6d:7d:68:6e:15:61:4b:a3:bc:e6:41:41:f3:a2:ed:d2: 92:b3:f5:a8:ed:09:8c:10:cb:0e:7b:2c:15:86:5b:1e:4f:23: 56:97:25:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFSuIfKqvpMmVaDlT0Rp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNWY2MWE2ZTA4ZGVkNmYxZmY1MDUxMWM2MjA4OTY5NmFi NTY0YTgwHhcNMjUxMjEyMDEwMzAxWhcNMjUxMjEzMDEwMzAxWjAzMTEwLwYDVQQD EyhlZjUwMGUwODk4ODhmNTc5ZjYyYzBjYzBlYjhjNTQwYjZiYmQzOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ1e21LrKxhi7/dScrBabt1mLRHh MqKDvgEDXJ7M5Zodem4y+xILOaG90tg54lsMHPLcr04X/kLkUNgHLpLC3hXE44W9 LoCNsGc7A/assrMwFLUhTnws1L0GovV5g8fEDlfGb0FjtkRU/IuJ0OJKjFYJ4Q2b 2cH6fRWFYdORar+y665vwLjXAfvaIMawYXrTieL66sn+nvTK+9tSECsM819p+F0x FjkAdGorl63vu1GOLZBCW5CJ2Y7nMBEJwQo07DbH2nvVL1yu/8EvHT3je2kTCeDr J/NVYusHiVoha0tb8f9nOdFPMltcaM2o/PtmbM2Z6IbKaMZgqh3VeN2kEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9QDgiYiPV59iwMwOuMVAtrvTj9MB8GA1UdIwQY MBaAFFFfYabgje1vH/UFEcYgiWlqtWSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zYTkwZjUtNjViNS00MGI1LThlZDkt OThjMDk1YzA3ZTI0LzEvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zYTkwZjUtNjViNS00MGI1LThlZDktOThjMDk1YzA3ZTI0 LzEvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcynwt0U YfVACeoJ8V+K4XYYw92n0TAuLK7HGj5yRq2dLOax+2ZCYeeiSQP9wR1RcmE4oZbb ccHi22BU7ObsBAbc2OzYA2bVcWj/16UZhOiGc9Mq5BX6YJVnpguH1VDvIOTV09NA 1MAMSySl3+7VMQBRn1MvGIiHM0HR7tELSTVltXYEIOX1hH3acV6tCtGcVATrLxws CZy77zkznDCHfCBdLkkJghV3Asby3LxTw9rL1Albr3jw4Tl0JNVv8VMoYpAfYeTA ZUOMR3kQX7Mujp9Q5TkNq+dS3tRtfWhuFWFLo7zmQUHzou3SkrP1qO0JjBDLDnss FYZbHk8jVpclwA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:07:44 2025 by rpki-client