This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft File: uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json) Hash identifier: XEKYk5EuTFTR2mVDrOgfH21T2T2HMsOrE81GyGfJvAE= Subject key identifier: 2B:3E:A0:7A:62:64:F0:1D:5C:A6:AC:39:B8:E1:1B:06:87:B8:6F:FE Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA Certificate issuer: /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca Certificate serial: 019B19BC6504849E303EDB0A33FBBB6B0049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft Manifest number: 1778 Signing time: Sat 13 Dec 2025 22:02:15 +0000 Manifest this update: Sat 13 Dec 2025 22:02:15 +0000 Manifest next update: Sun 14 Dec 2025 22:02:15 +0000 Files and hashes: 1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=) 2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: hhrToDh8+CRep968QWoBD9pF2Uvdam7HDlF+MGyFMP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:65:04:84:9e:30:3e:db:0a:33:fb:bb:6b:00:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca Validity Not Before: Dec 13 22:02:15 2025 GMT Not After : Dec 14 22:02:15 2025 GMT Subject: CN=2b3ea07a6264f01d5ca6ac39b8e11b0687b86ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:24:76:d5:4c:04:b4:9b:fc:8e:10:4a:b5: a8:cf:0c:21:67:f5:68:ed:f4:29:c6:95:65:4d:d5: 08:be:a7:7e:45:24:ae:63:45:d5:9f:32:fa:4a:4d: 34:3b:36:4a:74:ab:ad:7c:2e:19:92:7b:a3:04:c6: b2:8f:07:93:f8:a1:bd:9f:21:08:15:e6:ea:68:41: 8e:dd:10:ff:03:52:e2:ff:26:ea:e7:1e:fd:d3:54: f7:5a:3e:39:b8:61:51:e6:fe:bb:e0:d9:f5:dd:4a: c9:43:b4:09:50:d9:75:b0:b6:e0:da:61:59:4b:79: 8b:ec:56:ad:78:d3:fd:f0:fa:e1:bf:c1:34:1d:ed: 56:4a:5b:2b:5c:5f:2f:1b:c0:1d:b8:fb:c8:02:e2: 49:8d:b6:2a:51:08:53:96:cb:fe:d0:2f:c1:67:c4: 2c:60:b0:de:b4:35:eb:5f:36:77:70:3a:19:27:d4: 60:03:d1:51:14:30:3c:c4:1a:e4:60:14:5c:8b:ee: 6b:85:64:e0:8f:5b:f1:f7:4d:20:75:ac:8e:dd:72: 81:75:36:67:88:4d:3d:67:a1:46:2e:4b:b3:2a:d9: 95:4a:9a:4c:51:b1:88:f7:48:dc:66:00:db:c1:87: bc:24:92:89:1b:a2:b9:5f:b7:cb:2a:41:2e:3b:58: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3E:A0:7A:62:64:F0:1D:5C:A6:AC:39:B8:E1:1B:06:87:B8:6F:FE X509v3 Authority Key Identifier: keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:49:62:10:ca:cd:b2:a7:ee:8e:43:7f:80:05:4e:dc:2a:51: dc:b6:b7:c8:c9:14:ff:00:c7:64:2c:36:70:da:df:67:cc:12: df:38:2a:45:f3:af:a7:c3:fb:0a:c7:de:7a:f5:a1:83:dc:42: b3:9f:15:02:6a:11:7e:76:42:b4:bb:0d:e7:99:77:cc:df:08: 61:e2:9c:46:b0:09:84:7a:2f:7f:26:9d:56:a5:0b:f8:1a:17: de:f7:e2:e3:55:71:fa:c6:c6:da:3c:01:64:fb:5c:89:5d:a6: f7:91:f3:a7:4c:50:5b:cd:78:77:80:b9:11:29:87:2a:c7:78: 0f:f3:7e:f6:76:c5:11:cf:d8:45:f8:05:29:02:3a:93:5a:61: 2e:1b:1e:7f:2d:cb:a5:f6:52:86:d5:dc:0c:6a:4c:70:96:85: 23:8f:6c:1f:57:01:15:79:27:0e:5d:b3:25:ba:32:bc:b6:80: dd:52:2d:36:f4:31:b8:7d:8c:d3:b0:e3:14:ba:7f:3f:f6:ee: b9:3d:31:b6:7a:64:c6:64:0e:56:9e:d9:eb:f1:5a:07:12:73: bb:38:4c:94:83:33:94:6d:2a:96:74:6c:4b:ad:25:a9:2d:45: a6:27:10:ff:55:89:9e:a7:83:ea:48:1c:ac:f3:e5:3a:f7:bd: c7:83:6a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvGUEhJ4wPtsKM/u7awBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZTdmNzFiY2Y1MmVkNmQwNWI3ZWIzYjc0MWVjNzkwNmU3 N2RjY2EwHhcNMjUxMjEzMjIwMjE1WhcNMjUxMjE0MjIwMjE1WjAzMTEwLwYDVQQD EygyYjNlYTA3YTYyNjRmMDFkNWNhNmFjMzliOGUxMWIwNjg3Yjg2ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5gkdtVMBLSb/I4QSrWozwwhZ/Vo 7fQpxpVlTdUIvqd+RSSuY0XVnzL6Sk00OzZKdKutfC4ZknujBMayjweT+KG9nyEI FebqaEGO3RD/A1Li/ybq5x7901T3Wj45uGFR5v674Nn13UrJQ7QJUNl1sLbg2mFZ S3mL7FateNP98Prhv8E0He1WSlsrXF8vG8AduPvIAuJJjbYqUQhTlsv+0C/BZ8Qs YLDetDXrXzZ3cDoZJ9RgA9FRFDA8xBrkYBRci+5rhWTgj1vx900gdayO3XKBdTZn iE09Z6FGLkuzKtmVSppMUbGI90jcZgDbwYe8JJKJG6K5X7fLKkEuO1gLSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs+oHpiZPAdXKasObjhGwaHuG/+MB8GA1UdIwQY MBaAFLnn9xvPUu1tBbfrO3Qex5Bud9zKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjE2OTUtN2FkNi00ZDI0LTgwNmQt YjVjZDEzZDkxODRjLzEvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjE2OTUtN2FkNi00ZDI0LTgwNmQtYjVjZDEzZDkxODRj LzEvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0liEMrN sqfujkN/gAVO3CpR3La3yMkU/wDHZCw2cNrfZ8wS3zgqRfOvp8P7CsfeevWhg9xC s58VAmoRfnZCtLsN55l3zN8IYeKcRrAJhHovfyadVqUL+BoX3vfi41Vx+sbG2jwB ZPtciV2m95Hzp0xQW814d4C5ESmHKsd4D/N+9nbFEc/YRfgFKQI6k1phLhsefy3L pfZShtXcDGpMcJaFI49sH1cBFXknDl2zJboyvLaA3VItNvQxuH2M07DjFLp/P/bu uT0xtnpkxmQOVp7Z6/FaBxJzuzhMlIMzlG0qlnRsS60lqS1FpicQ/1WJnqeD6kgc rPPlOve9x4Nqpw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:50 2025 by rpki-client