This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json) Hash identifier: 6ig8tjTC7o92GC8+yT6CNk7yNlCy26/GKo1UdkuLRW4= Subject key identifier: 08:45:A9:19:AF:E0:CF:B7:02:19:22:D9:5B:1D:27:2C:E6:A2:FA:B4 Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf Certificate serial: 019B19BAD80CC398BB3EE0C8A885C545E245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft Manifest number: 109B Signing time: Sat 13 Dec 2025 22:00:33 +0000 Manifest this update: Sat 13 Dec 2025 22:00:33 +0000 Manifest next update: Sun 14 Dec 2025 22:00:33 +0000 Files and hashes: 1: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: nxlWgNGrWS62l+am3skGXGkFtPM5hraZBDxVXkJ3nzA=) 2: bo7KO9XdD_Urskdk1n4Bj-fW4fs.roa (hash: ubQY2gOF+3dPO6O676JWntfiT2uJ103t4smlNmiKGh4=) 3: w9MEWUoUc8xZKY1er3NSZNyKi7U.roa (hash: POwTU/L0ZyJ5NYemVS0exc18aJZvc21A0g3ouxix4G8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:d8:0c:c3:98:bb:3e:e0:c8:a8:85:c5:45:e2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf Validity Not Before: Dec 13 22:00:33 2025 GMT Not After : Dec 14 22:00:33 2025 GMT Subject: CN=0845a919afe0cfb7021922d95b1d272ce6a2fab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:cd:80:df:6e:79:22:2d:b8:47:14:17:e4: a5:28:28:79:50:af:8f:ec:61:04:b0:63:15:ca:51: 09:23:4d:38:e8:09:6f:4d:79:f2:bc:4b:2b:8c:5b: 5f:af:19:67:91:08:9e:b1:17:8f:a3:36:9a:05:eb: 5e:04:59:35:ab:91:f9:6e:ab:88:43:44:b0:02:24: 77:61:59:27:16:ee:2e:88:14:57:c4:40:b1:8e:c0: 9d:87:57:fb:65:29:11:5f:59:c9:0e:53:4e:d5:a6: 6b:1c:5f:c3:b5:89:4f:0b:84:12:9e:d6:2a:36:b9: 28:6c:33:00:57:3c:3a:e7:8e:99:23:fa:d4:4c:06: 09:9f:0a:65:31:a6:fd:d7:95:3e:c7:cb:5f:ea:9e: 46:97:fc:ab:21:f3:23:3c:25:b9:0f:60:3c:8c:ac: ad:2c:71:58:c1:aa:18:0f:d7:91:c6:b4:02:d4:8c: 43:39:36:e7:37:d0:62:8c:56:a9:05:b8:6c:df:94: cd:3d:31:af:41:5c:1c:f0:64:7b:e2:31:4a:e5:8f: c9:5f:07:f3:c8:96:2e:b1:40:74:c7:e5:c1:70:97: 5c:26:9e:ef:3f:b1:8d:b2:53:92:5d:cf:ad:6a:21: af:08:e1:f3:d9:26:54:29:b9:f6:d6:8f:e3:ea:fc: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:45:A9:19:AF:E0:CF:B7:02:19:22:D9:5B:1D:27:2C:E6:A2:FA:B4 X509v3 Authority Key Identifier: keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:45:62:eb:2d:c8:57:ea:31:d2:43:ff:b3:6d:6c:b9:9e:1a: bc:0a:c3:5b:26:5e:e7:c1:8b:9d:3e:27:b7:5e:23:7e:fd:35: 8d:b5:88:e9:12:13:34:4c:a4:f1:dd:ae:01:51:56:5d:c7:e6: cf:d4:29:f6:48:a7:f3:e5:f9:17:fe:8c:11:84:d3:d3:99:47: c8:78:71:90:12:0f:d0:69:b5:14:f3:43:4e:f9:4b:dd:71:be: e9:68:6e:b0:42:c7:28:85:3a:46:46:13:8a:62:dd:d5:a1:11: 74:0e:01:64:c1:8d:1f:89:0b:e5:e6:8d:f7:c4:e8:65:ff:af: da:39:40:0c:47:70:8b:35:70:c1:12:18:7a:09:1f:9a:70:84: fa:4b:9d:78:35:1a:28:09:d5:40:74:e1:77:9b:0b:9c:27:76: ec:c9:50:16:6d:21:1a:85:e6:5b:15:2a:08:48:ad:7c:41:3d: 68:0e:49:80:9f:e8:bc:43:a3:81:bf:1b:8e:d9:0b:3f:1d:6a: d1:cf:d8:2d:3d:6b:1a:bf:d0:86:33:c7:a7:6e:a1:fc:3b:81: 8f:73:a2:02:0a:a8:b8:5e:46:ff:8a:07:81:2a:f1:02:c8:7e: 4d:cd:43:1f:17:be:90:4f:19:b1:17:9f:3c:bf:69:e8:48:fd: 35:40:3e:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZutgMw5i7PuDIqIXFReJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDE1MWU0NjRiMjk3OTEzNzZjMGM1N2JlYjQwYzU4NGVm NWExY2YwHhcNMjUxMjEzMjIwMDMzWhcNMjUxMjE0MjIwMDMzWjAzMTEwLwYDVQQD EygwODQ1YTkxOWFmZTBjZmI3MDIxOTIyZDk1YjFkMjcyY2U2YTJmYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygvNgN9ueSItuEcUF+SlKCh5UK+P 7GEEsGMVylEJI0046AlvTXnyvEsrjFtfrxlnkQiesRePozaaBeteBFk1q5H5bquI Q0SwAiR3YVknFu4uiBRXxECxjsCdh1f7ZSkRX1nJDlNO1aZrHF/DtYlPC4QSntYq NrkobDMAVzw6546ZI/rUTAYJnwplMab915U+x8tf6p5Gl/yrIfMjPCW5D2A8jKyt LHFYwaoYD9eRxrQC1IxDOTbnN9BijFapBbhs35TNPTGvQVwc8GR74jFK5Y/JXwfz yJYusUB0x+XBcJdcJp7vP7GNslOSXc+taiGvCOHz2SZUKbn21o/j6vy5/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhFqRmv4M+3Ahki2VsdJyzmovq0MB8GA1UdIwQY MBaAFFABUeRkspeRN2wMV760DFhO9aHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2Mt MGI5ZmI5N2U1MjlkLzEvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2MtMGI5ZmI5N2U1Mjlk LzEvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUVi6y3I V+ox0kP/s21suZ4avArDWyZe58GLnT4nt14jfv01jbWI6RITNEyk8d2uAVFWXcfm z9Qp9kin8+X5F/6MEYTT05lHyHhxkBIP0Gm1FPNDTvlL3XG+6WhusELHKIU6RkYT imLd1aERdA4BZMGNH4kL5eaN98ToZf+v2jlADEdwizVwwRIYegkfmnCE+kudeDUa KAnVQHThd5sLnCd27MlQFm0hGoXmWxUqCEitfEE9aA5JgJ/ovEOjgb8bjtkLPx1q 0c/YLT1rGr/QhjPHp26h/DuBj3OiAgqouF5G/4oHgSrxAsh+Tc1DHxe+kE8ZsRef PL9p6Ej9NUA+Cg== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:44 2025 by rpki-client