This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json) Hash identifier: wY+8uJgh55jIwCRrLEbsnAa90onzCtkyeFwIoKF9I5A= Subject key identifier: 0A:17:F8:D4:29:D6:01:32:98:A8:2A:5A:8E:CC:9C:93:F0:A8:07:35 Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64 Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64 Certificate serial: 019B5A5138D3456F3E33DA2061A15FADFBBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft Manifest number: 169A Signing time: Fri 26 Dec 2025 11:00:30 +0000 Manifest this update: Fri 26 Dec 2025 11:00:30 +0000 Manifest next update: Sat 27 Dec 2025 11:00:30 +0000 Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=) 2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: dNyr7UK/8KCGSNTttPeW15KH+2KHU7CbeChE9SIiUn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:38:d3:45:6f:3e:33:da:20:61:a1:5f:ad:fb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64 Validity Not Before: Dec 26 11:00:30 2025 GMT Not After : Dec 27 11:00:30 2025 GMT Subject: CN=0a17f8d429d6013298a82a5a8ecc9c93f0a80735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:1a:8a:17:1b:4b:b1:3e:ea:34:3b:b3:b8: d8:aa:a5:e8:72:71:70:36:50:89:31:29:1c:0d:b8: 2e:6e:b6:56:fe:dc:4a:52:69:b2:51:c0:89:7f:8f: 76:ea:3f:6a:8a:96:4d:38:4c:f9:1e:f0:c2:a8:5a: 02:15:59:aa:28:32:f6:b5:3c:3f:38:14:99:ff:48: 60:62:aa:cc:ac:75:2e:fd:6a:bc:4f:fb:25:e9:0d: 59:ef:b4:57:fe:fe:e9:6d:ef:49:46:51:82:6a:dd: 05:0a:20:fd:30:91:32:69:da:d2:76:75:0b:65:11: e6:14:1a:b7:a0:10:a0:f5:a9:ce:64:41:fe:3d:de: 7e:27:07:7a:13:07:26:f6:10:5a:08:bf:76:bf:24: 87:e4:24:8d:4a:f5:e7:0a:b1:b6:17:55:c3:5f:77: f3:f0:0e:61:ca:96:47:2b:3f:cc:c1:4d:b9:f3:69: cc:37:99:20:08:a8:66:a5:fc:e8:01:d6:de:ee:a5: 33:12:9f:a1:32:2c:2c:98:9d:54:0f:61:e1:a2:3a: 17:63:a7:79:de:f7:26:95:55:9e:b2:e1:9e:c6:f9: 3b:fa:43:40:e1:f0:f6:72:0d:fb:2c:72:08:f5:79: c1:28:dd:e6:16:30:74:e9:02:72:34:ea:e0:a0:bc: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:F8:D4:29:D6:01:32:98:A8:2A:5A:8E:CC:9C:93:F0:A8:07:35 X509v3 Authority Key Identifier: keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4a:cb:13:5d:aa:05:d9:1b:16:b2:6e:51:4d:4a:97:40:05: 8c:e9:16:23:ed:7e:b9:5e:32:45:e3:9c:d7:b4:61:11:81:b5: 75:9a:7a:39:59:ce:e3:fa:ce:d8:1c:0b:ae:24:e9:2e:f7:51: f6:09:e2:fa:21:6f:82:3b:0f:b8:88:1f:8d:be:e5:18:03:06: 6a:99:76:05:b7:b6:e3:e2:8a:78:44:62:33:44:c8:02:61:5d: ee:2a:6c:ee:51:30:ac:64:34:0f:a3:26:79:93:8c:86:8b:34: f5:e9:52:c1:59:03:56:c9:fb:a3:27:8a:fc:e8:b9:60:9a:29: da:f1:5c:55:8a:11:25:c4:de:1c:8a:55:19:93:57:d7:c7:27: 3e:d5:37:e4:13:e9:15:32:bb:da:83:7f:ec:fb:8b:5c:cc:ae: e3:01:07:ff:cb:54:3e:e7:5b:10:c8:6e:ca:e6:5d:c3:8c:72: 0a:81:a9:e8:4e:fa:e5:65:5b:67:0a:7a:db:e4:ed:69:5c:34: 92:78:fd:81:52:55:80:47:f7:8f:99:21:56:62:8b:b3:e8:6a: 9c:f5:d7:b4:16:c7:80:59:26:ed:d8:63:8f:59:d8:ce:1d:ff: 33:f8:2a:0a:af:43:13:a7:41:eb:d6:f5:b9:62:6d:10:1b:18: e6:4b:b2:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUTjTRW8+M9ogYaFfrfu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWUxYTY3NzI1ZWI0YTc2NGE1ODdiYzM3MDc5ZGViYmU4 MWZiNjQwHhcNMjUxMjI2MTEwMDMwWhcNMjUxMjI3MTEwMDMwWjAzMTEwLwYDVQQD EygwYTE3ZjhkNDI5ZDYwMTMyOThhODJhNWE4ZWNjOWM5M2YwYTgwNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8oaihcbS7E+6jQ7s7jYqqXocnFw NlCJMSkcDbgubrZW/txKUmmyUcCJf4926j9qipZNOEz5HvDCqFoCFVmqKDL2tTw/ OBSZ/0hgYqrMrHUu/Wq8T/sl6Q1Z77RX/v7pbe9JRlGCat0FCiD9MJEyadrSdnUL ZRHmFBq3oBCg9anOZEH+Pd5+Jwd6Ewcm9hBaCL92vySH5CSNSvXnCrG2F1XDX3fz 8A5hypZHKz/MwU2582nMN5kgCKhmpfzoAdbe7qUzEp+hMiwsmJ1UD2HhojoXY6d5 3vcmlVWesuGexvk7+kNA4fD2cg37LHII9XnBKN3mFjB06QJyNOrgoLw1TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoX+NQp1gEymKgqWo7MnJPwqAc1MB8GA1UdIwQY MBaAFFHuGmdyXrSnZKWHvDcHneu+gftkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5Mjkt M2Q3ZjkyYzIzYThiLzEvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5MjktM2Q3ZjkyYzIzYThi LzEvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbErLE12q BdkbFrJuUU1Kl0AFjOkWI+1+uV4yReOc17RhEYG1dZp6OVnO4/rO2BwLriTpLvdR 9gni+iFvgjsPuIgfjb7lGAMGapl2Bbe24+KKeERiM0TIAmFd7ips7lEwrGQ0D6Mm eZOMhos09elSwVkDVsn7oyeK/Oi5YJop2vFcVYoRJcTeHIpVGZNX18cnPtU35BPp FTK72oN/7PuLXMyu4wEH/8tUPudbEMhuyuZdw4xyCoGp6E765WVbZwp62+TtaVw0 knj9gVJVgEf3j5khVmKLs+hqnPXXtBbHgFkm7dhjj1nYzh3/M/gqCq9DE6dB69b1 uWJtEBsY5kuyVw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:58 2025 by rpki-client