This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json) Hash identifier: bYaAkYMEJrRloawB4BAGwflTMpnwLBxe2si2WH2czEU= Subject key identifier: EC:3E:E4:AF:BB:82:4C:79:33:C5:CA:C2:D0:36:CF:6C:50:BE:D4:37 Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf Certificate serial: 019B101308968241909701BA052BF0CD4506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft Manifest number: 1096 Signing time: Fri 12 Dec 2025 01:00:41 +0000 Manifest this update: Fri 12 Dec 2025 01:00:41 +0000 Manifest next update: Sat 13 Dec 2025 01:00:41 +0000 Files and hashes: 1: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: vEJMvtcQEytzsWlNAQR1APpyOdslJhvGKWpo3Ejy9Rs=) 2: bo7KO9XdD_Urskdk1n4Bj-fW4fs.roa (hash: ubQY2gOF+3dPO6O676JWntfiT2uJ103t4smlNmiKGh4=) 3: w9MEWUoUc8xZKY1er3NSZNyKi7U.roa (hash: POwTU/L0ZyJ5NYemVS0exc18aJZvc21A0g3ouxix4G8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:08:96:82:41:90:97:01:ba:05:2b:f0:cd:45:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf Validity Not Before: Dec 12 01:00:41 2025 GMT Not After : Dec 13 01:00:41 2025 GMT Subject: CN=ec3ee4afbb824c7933c5cac2d036cf6c50bed437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:4d:0f:0c:72:93:f9:4f:33:dd:d2:0a:fa: db:49:12:30:5b:ad:b2:e1:62:72:a6:01:16:0e:1b: 52:a2:22:bc:95:9c:38:3a:a1:ba:da:69:d1:cf:e5: 08:fa:ea:54:dd:eb:aa:08:d4:a7:a3:bd:05:5d:8a: 3c:97:4e:0b:22:f8:cd:4f:73:b8:a7:87:39:ad:ce: 20:9e:40:d2:89:08:4b:74:c3:99:05:b2:45:1d:a2: f1:ee:fc:5c:8c:72:3c:74:24:05:b8:f3:2e:59:e1: 50:c4:b2:bb:c9:85:80:d2:44:0b:69:0a:cd:69:01: 26:8c:97:98:7d:59:76:26:bc:66:1a:8b:c0:bc:bb: 9a:21:46:81:24:16:38:6d:fd:32:ac:03:9c:c3:6f: 98:4f:23:0b:3f:f0:29:30:f7:5e:ee:cd:8e:61:f2: 82:3d:4a:c6:6c:59:e8:f6:6e:99:ff:15:30:1a:ee: 44:03:21:75:d1:22:c8:d9:93:93:9a:b2:51:93:b4: a7:37:67:8f:f4:91:0a:f9:a7:6c:59:ad:bb:4c:e1: 7e:f7:e6:33:e6:71:12:22:3a:63:18:60:43:d9:11: ef:44:a5:a7:e0:ae:f2:53:6e:de:a4:38:ed:8f:d2: 3b:d4:66:23:09:53:05:15:42:8d:b3:40:83:cd:42: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3E:E4:AF:BB:82:4C:79:33:C5:CA:C2:D0:36:CF:6C:50:BE:D4:37 X509v3 Authority Key Identifier: keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:96:d8:8f:61:03:25:1d:27:4e:5b:1a:75:c9:0d:eb:e8:44: 3d:73:09:00:8b:4f:c9:fc:c7:a7:3d:fe:3a:c5:73:32:c0:22: b2:24:1f:6b:6c:bb:7d:96:62:34:c3:ce:22:7f:68:01:ad:7d: ae:5a:63:bc:1d:be:ad:b1:27:35:6e:39:f3:24:51:8c:06:3f: 3e:a7:25:bb:cc:08:2b:97:f3:ca:7d:44:58:73:9b:ed:c2:84: ce:9d:b9:9b:81:5a:1f:8b:1b:8d:90:e5:04:09:09:ff:34:57: ae:7e:2e:b9:e5:4e:63:23:83:bc:14:c2:e6:d6:e6:8b:77:46: b3:cf:23:c3:d1:33:d5:8c:2b:4a:4e:74:b1:71:ca:d9:1b:37: 1b:e2:f7:bb:e6:dd:31:51:89:ca:dd:7f:51:24:c5:a8:59:01: 4a:13:52:bb:59:c7:30:9d:7e:e1:c8:a2:74:e4:17:4a:a4:f9: 65:ff:c0:30:44:ee:15:aa:5e:6a:2e:ab:89:76:ca:04:6b:86: 59:48:a7:a8:b8:c2:a3:9d:38:e6:d1:24:c2:fe:38:11:a3:21: db:f7:71:da:01:71:6d:10:fe:95:6d:c6:dd:ca:a3:b3:b0:8b: a7:e8:5c:b6:c7:ea:70:98:7b:c2:fc:b2:5a:45:12:bb:ce:fd: 8e:27:8e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEwiWgkGQlwG6BSvwzUUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDE1MWU0NjRiMjk3OTEzNzZjMGM1N2JlYjQwYzU4NGVm NWExY2YwHhcNMjUxMjEyMDEwMDQxWhcNMjUxMjEzMDEwMDQxWjAzMTEwLwYDVQQD EyhlYzNlZTRhZmJiODI0Yzc5MzNjNWNhYzJkMDM2Y2Y2YzUwYmVkNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV5NDwxyk/lPM93SCvrbSRIwW62y 4WJypgEWDhtSoiK8lZw4OqG62mnRz+UI+upU3euqCNSno70FXYo8l04LIvjNT3O4 p4c5rc4gnkDSiQhLdMOZBbJFHaLx7vxcjHI8dCQFuPMuWeFQxLK7yYWA0kQLaQrN aQEmjJeYfVl2JrxmGovAvLuaIUaBJBY4bf0yrAOcw2+YTyMLP/ApMPde7s2OYfKC PUrGbFno9m6Z/xUwGu5EAyF10SLI2ZOTmrJRk7SnN2eP9JEK+adsWa27TOF+9+Yz 5nESIjpjGGBD2RHvRKWn4K7yU27epDjtj9I71GYjCVMFFUKNs0CDzUIVXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw+5K+7gkx5M8XKwtA2z2xQvtQ3MB8GA1UdIwQY MBaAFFABUeRkspeRN2wMV760DFhO9aHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2Mt MGI5ZmI5N2U1MjlkLzEvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2MtMGI5ZmI5N2U1Mjlk LzEvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZbYj2ED JR0nTlsadckN6+hEPXMJAItPyfzHpz3+OsVzMsAisiQfa2y7fZZiNMPOIn9oAa19 rlpjvB2+rbEnNW458yRRjAY/Pqclu8wIK5fzyn1EWHOb7cKEzp25m4FaH4sbjZDl BAkJ/zRXrn4uueVOYyODvBTC5tbmi3dGs88jw9Ez1YwrSk50sXHK2Rs3G+L3u+bd MVGJyt1/USTFqFkBShNSu1nHMJ1+4ciidOQXSqT5Zf/AMETuFapeai6riXbKBGuG WUinqLjCo5045tEkwv44EaMh2/dx2gFxbRD+lW3G3cqjs7CLp+hctsfqcJh7wvyy WkUSu879jieO2g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:26:52 2025 by rpki-client