This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft File: uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json) Hash identifier: 4e3i2pyS/V2hjrBrFzh1EpY5XV3ZFQrDXK99Q3qnang= Subject key identifier: D3:AD:86:83:BA:25:FE:28:CF:E9:F4:C0:88:0A:0D:50:2B:9D:9C:83 Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245 Certificate serial: 019AF01A80C9E89AF84F2A957C1A53A5CF94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft Manifest number: 0E96 Signing time: Fri 05 Dec 2025 20:00:59 +0000 Manifest this update: Fri 05 Dec 2025 20:00:59 +0000 Manifest next update: Sat 06 Dec 2025 20:00:59 +0000 Files and hashes: 1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=) 2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=) 3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=) 4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: 2mAdRGai7b0TRpfp1p7nr5UQgr9KBlYre6WH9OpGdI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:80:c9:e8:9a:f8:4f:2a:95:7c:1a:53:a5:cf:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245 Validity Not Before: Dec 5 20:00:59 2025 GMT Not After : Dec 6 20:00:59 2025 GMT Subject: CN=d3ad8683ba25fe28cfe9f4c0880a0d502b9d9c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:97:d6:52:49:cb:07:99:ed:7f:06:c8:9e: b8:f3:00:fe:2c:ed:5a:0d:a9:5f:16:8e:32:39:1d: 4e:fb:10:91:9b:ac:7d:83:50:87:d1:42:ac:89:05: 14:81:a2:a2:94:ef:63:14:98:e4:93:34:93:57:55: 6e:29:55:45:bc:45:23:7e:8d:ce:48:3b:c2:2c:2d: e7:c9:cd:5c:af:84:bf:2b:e6:07:98:67:a1:81:24: b7:9e:3f:59:2b:10:b5:a0:f8:11:a7:ba:ee:8e:eb: f7:39:0b:ec:c4:5f:49:d6:99:4c:cc:70:a8:35:a9: 9c:65:84:09:6e:8f:77:f0:b9:55:e3:80:84:0d:0b: c0:c4:39:39:c9:c3:34:77:4d:ed:ba:a8:66:3c:96: 65:1e:d9:aa:b2:12:5d:80:f1:0a:2d:16:cc:6d:42: 3a:1f:88:24:79:c5:bf:e5:de:27:fe:91:0c:85:44: 93:aa:49:3b:0e:ed:13:39:d5:17:81:c0:b6:5c:46: 45:6a:ea:ea:ab:91:c3:04:de:fc:ca:f5:f2:fa:c2: 7a:52:10:56:8c:90:6a:89:fd:c3:10:35:f9:43:57: e3:7e:da:c9:0d:45:b0:da:d1:4d:51:58:4b:90:52: d7:45:52:42:42:9a:bc:cb:35:68:2e:5c:84:8f:80: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AD:86:83:BA:25:FE:28:CF:E9:F4:C0:88:0A:0D:50:2B:9D:9C:83 X509v3 Authority Key Identifier: keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:53:10:67:61:6e:67:c5:45:c9:78:48:7f:f1:83:7a:fb:c4: 86:a4:d6:fd:5d:a9:b7:9b:e7:c0:8e:e5:86:05:ed:96:6e:7c: a4:42:69:a8:4e:f6:f1:4b:a5:67:32:e4:b2:36:b6:1d:65:05: fb:5a:76:45:c5:38:b7:3d:16:af:76:ee:cf:f4:e7:e4:c9:4c: a0:30:44:f0:80:d8:a7:86:22:58:51:2c:64:77:56:c5:a6:4d: ef:52:ae:7c:07:08:e0:d6:93:87:49:87:8e:e4:41:ec:5b:74: 28:50:3b:66:16:6d:28:f4:79:e5:ae:44:c6:d5:b2:26:0a:7c: 61:2f:38:22:c2:14:1e:62:bf:ec:53:e8:16:7e:27:4f:df:33: d5:e5:00:89:0c:8b:32:ae:70:05:24:7f:79:99:4f:20:66:21: 12:40:91:3f:53:ee:fe:b2:23:39:53:a6:0c:f1:f7:2f:a7:53: 81:c2:29:80:f2:04:d3:b6:16:cc:48:61:cf:d3:fa:43:ff:17: 8b:66:d0:05:ab:51:6a:7b:51:b5:09:6b:8e:31:5d:5c:ac:fb: bf:1b:bd:16:5a:47:5e:99:3b:be:cf:eb:9f:10:62:50:f0:bf: 65:40:b7:15:17:4c:ac:c0:d6:42:6c:46:c4:0a:0a:e8:70:0a: 79:97:3d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGoDJ6Jr4TyqVfBpTpc+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDViM2QzNzlkMjExNjJlMmI1MjJjNDM4MDFmYjk2MDM5 ODgyNDUwHhcNMjUxMjA1MjAwMDU5WhcNMjUxMjA2MjAwMDU5WjAzMTEwLwYDVQQD EyhkM2FkODY4M2JhMjVmZTI4Y2ZlOWY0YzA4ODBhMGQ1MDJiOWQ5YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvaX1lJJyweZ7X8GyJ648wD+LO1a DalfFo4yOR1O+xCRm6x9g1CH0UKsiQUUgaKilO9jFJjkkzSTV1VuKVVFvEUjfo3O SDvCLC3nyc1cr4S/K+YHmGehgSS3nj9ZKxC1oPgRp7rujuv3OQvsxF9J1plMzHCo NamcZYQJbo938LlV44CEDQvAxDk5ycM0d03tuqhmPJZlHtmqshJdgPEKLRbMbUI6 H4gkecW/5d4n/pEMhUSTqkk7Du0TOdUXgcC2XEZFaurqq5HDBN78yvXy+sJ6UhBW jJBqif3DEDX5Q1fjftrJDUWw2tFNUVhLkFLXRVJCQpq8yzVoLlyEj4DX6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOthoO6Jf4oz+n0wIgKDVArnZyDMB8GA1UdIwQY MBaAFLjVs9N50hFi4rUixDgB+5YDmIJFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMt YjNlOTI1NWQyYjNlLzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMtYjNlOTI1NWQyYjNl LzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFMQZ2Fu Z8VFyXhIf/GDevvEhqTW/V2pt5vnwI7lhgXtlm58pEJpqE728UulZzLksja2HWUF +1p2RcU4tz0Wr3buz/Tn5MlMoDBE8IDYp4YiWFEsZHdWxaZN71KufAcI4NaTh0mH juRB7Ft0KFA7ZhZtKPR55a5ExtWyJgp8YS84IsIUHmK/7FPoFn4nT98z1eUAiQyL Mq5wBSR/eZlPIGYhEkCRP1Pu/rIjOVOmDPH3L6dTgcIpgPIE07YWzEhhz9P6Q/8X i2bQBatRantRtQlrjjFdXKz7vxu9FlpHXpk7vs/rnxBiUPC/ZUC3FRdMrMDWQmxG xAoK6HAKeZc9Ig== -----END CERTIFICATE-----Generated at Fri Dec 5 23:04:22 2025 by rpki-client