This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json) Hash identifier: sepK2AcSHdaJOgPW4+GV2Pt5iT4QonR2ofyPTr3rheQ= Subject key identifier: B4:A2:C2:2C:92:75:F9:C5:92:C3:0E:83:FE:36:2C:02:38:57:07:4C Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Certificate serial: 019B67D5EB159BC59D5C20CAD73DA92211ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft Manifest number: 02AB Signing time: Mon 29 Dec 2025 02:00:31 +0000 Manifest this update: Mon 29 Dec 2025 02:00:31 +0000 Manifest next update: Tue 30 Dec 2025 02:00:31 +0000 Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=) 2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: V+3cS+RR1OH6IPen/7WGIFv/9a7wuUEL2xVoqnE+zXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d5:eb:15:9b:c5:9d:5c:20:ca:d7:3d:a9:22:11:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Validity Not Before: Dec 29 02:00:31 2025 GMT Not After : Dec 30 02:00:31 2025 GMT Subject: CN=b4a2c22c9275f9c592c30e83fe362c023857074c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:53:43:eb:42:7f:a9:9d:c6:f4:5c:c7:43: 2b:8d:1d:09:87:48:c3:1a:36:f1:6e:fa:f4:6c:70: 6e:79:5a:2d:5c:80:c1:6f:4a:58:8f:01:51:b3:bd: 6a:2e:df:ec:2b:e2:91:bf:a0:9b:ed:03:12:2d:6d: 1b:e2:2c:5c:71:63:23:22:9a:c5:47:3d:45:34:af: 99:90:7b:8d:7b:39:82:7d:b0:bd:b7:0e:24:63:8e: aa:7e:d8:3a:84:21:94:ce:5a:0d:4b:1b:cd:b3:c6: 5f:fc:81:77:37:30:bc:79:de:99:1f:9d:6f:e2:85: 42:da:50:50:92:a2:fb:19:ce:87:48:aa:28:7b:03: c7:d9:f2:d5:e8:81:72:30:11:9f:5a:f8:bf:c9:a4: 9c:eb:c1:70:0a:33:24:5a:3a:05:dc:f7:a9:08:f6: 7a:4c:2a:9d:d8:e3:33:81:0e:fe:a5:7b:f5:eb:b3: 9c:8a:b2:cc:d3:0b:86:07:c3:46:8c:dd:4c:b6:23: 8f:11:64:ce:02:2f:77:17:18:2a:72:08:be:d5:92: ce:a2:b9:7d:77:fe:f1:d8:28:b0:b6:38:a1:6e:a6: 03:0a:e6:57:fe:64:b0:fa:5d:fa:83:45:60:af:aa: 9d:dd:b0:72:fd:13:d3:22:51:d8:a9:58:f9:cb:60: c4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A2:C2:2C:92:75:F9:C5:92:C3:0E:83:FE:36:2C:02:38:57:07:4C X509v3 Authority Key Identifier: keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:3c:60:70:96:a4:17:39:19:0c:a4:28:ef:26:e8:9b:21:66: 22:d8:11:1c:5b:f3:e5:85:9a:cb:b3:07:67:ec:27:17:9a:53: b2:2f:0b:f4:e1:43:a2:82:fe:b9:b5:c8:3d:47:9b:98:93:20: 01:81:f0:d0:d7:de:be:51:7c:8b:60:d9:ed:ed:25:0f:5c:e7: 8c:18:6d:e4:d7:9b:24:47:fc:e4:a0:4e:f7:0f:1a:1e:e7:82: b1:8d:e9:67:b2:5a:17:08:30:96:59:34:3a:f5:f7:4b:8d:3b: e0:43:76:6e:26:cb:75:12:1e:d5:a8:02:ea:f8:00:b3:36:83: 20:f0:5d:89:47:83:3e:5d:69:87:d1:1c:c2:59:7f:9b:4e:b2: af:54:c0:19:68:95:92:87:73:d4:2e:a5:d4:19:d0:cc:eb:e1: 23:ba:38:78:9e:65:d6:f2:ac:00:c1:b4:75:57:85:fa:1b:c8: 0b:ea:0a:48:3b:35:f5:b8:c6:44:51:cf:e4:59:00:13:0e:f4: 03:e3:55:df:db:27:e5:ea:71:1f:ac:f6:3d:b2:bf:ac:57:55: a9:07:e5:1f:63:5c:06:d3:c9:6b:87:1b:1c:61:b1:c6:5d:bf: 10:de:13:73:02:27:d6:22:c6:4c:24:c3:56:a7:df:d1:89:17: 65:e9:50:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1esVm8WdXCDK1z2pIhHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi OTEzOTgwHhcNMjUxMjI5MDIwMDMxWhcNMjUxMjMwMDIwMDMxWjAzMTEwLwYDVQQD EyhiNGEyYzIyYzkyNzVmOWM1OTJjMzBlODNmZTM2MmMwMjM4NTcwNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTdTQ+tCf6mdxvRcx0MrjR0Jh0jD Gjbxbvr0bHBueVotXIDBb0pYjwFRs71qLt/sK+KRv6Cb7QMSLW0b4ixccWMjIprF Rz1FNK+ZkHuNezmCfbC9tw4kY46qftg6hCGUzloNSxvNs8Zf/IF3NzC8ed6ZH51v 4oVC2lBQkqL7Gc6HSKooewPH2fLV6IFyMBGfWvi/yaSc68FwCjMkWjoF3PepCPZ6 TCqd2OMzgQ7+pXv167OcirLM0wuGB8NGjN1MtiOPEWTOAi93Fxgqcgi+1ZLOorl9 d/7x2CiwtjihbqYDCuZX/mSw+l36g0Vgr6qd3bBy/RPTIlHYqVj5y2DEVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSiwiySdfnFksMOg/42LAI4VwdMMB8GA1UdIwQY MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzxgcJak FzkZDKQo7ybomyFmItgRHFvz5YWay7MHZ+wnF5pTsi8L9OFDooL+ubXIPUebmJMg AYHw0NfevlF8i2DZ7e0lD1znjBht5NebJEf85KBO9w8aHueCsY3pZ7JaFwgwllk0 OvX3S4074EN2bibLdRIe1agC6vgAszaDIPBdiUeDPl1ph9Ecwll/m06yr1TAGWiV kodz1C6l1BnQzOvhI7o4eJ5l1vKsAMG0dVeF+hvIC+oKSDs19bjGRFHP5FkAEw70 A+NV39sn5epxH6z2PbK/rFdVqQflH2NcBtPJa4cbHGGxxl2/EN4TcwIn1iLGTCTD Vqff0YkXZelQmw== -----END CERTIFICATE-----Generated at Mon Dec 29 05:25:43 2025 by rpki-client