This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft File: UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json) Hash identifier: pzdEtqUkdeUNKaE74X0C9osQHymzwv7BRneOPRoTeSY= Subject key identifier: A5:99:07:29:D0:06:02:3B:40:4B:90:6A:42:9D:E7:E1:8B:58:85:E6 Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72 Certificate issuer: /CN=51e63cf6087311347f314f24e2696c7f6cea6d72 Certificate serial: 019AF7D4B7A84A3D86E6118241F96560784D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft Manifest number: 0F Signing time: Sun 07 Dec 2025 08:01:44 +0000 Manifest this update: Sun 07 Dec 2025 08:01:44 +0000 Manifest next update: Mon 08 Dec 2025 08:01:44 +0000 Files and hashes: 1: 64cOQxiZnrejgF_yLbuSNNh-5DY.asa (hash: /CmbqsnAzo+sIy4VN1xw/guWwGwOsWmQxl16cZjywCU=) 2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: uuOiYCUftY9oCan4DO77i66DY8rPgdOqrYmpgwDupps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:b7:a8:4a:3d:86:e6:11:82:41:f9:65:60:78:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72 Validity Not Before: Dec 7 08:01:44 2025 GMT Not After : Dec 8 08:01:44 2025 GMT Subject: CN=a5990729d006023b404b906a429de7e18b5885e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:b2:6b:d2:d7:87:6d:9a:ce:2c:aa:64:2e: 91:ac:89:7a:4c:f1:f0:08:ff:38:b2:fe:e3:ed:5f: 78:70:49:4e:85:68:13:ab:bc:a5:21:b2:94:2a:d0: 94:f9:bb:20:04:07:22:97:30:af:d2:c3:5c:1e:3c: 26:63:17:ad:fd:3e:1d:d3:4e:a3:4c:2c:2e:03:85: bd:30:72:a2:12:c5:e0:95:53:02:81:7e:ef:df:19: 5f:00:41:55:15:1e:54:b7:df:8d:d7:80:02:b2:ad: 81:a2:aa:62:3d:3b:11:3d:ba:95:0c:93:90:dc:3b: 6f:93:37:23:80:04:19:17:05:42:e1:30:8f:48:48: 96:c3:09:61:c5:d6:f3:3b:8d:a4:91:65:59:eb:2c: 3f:72:2a:30:0c:e0:ab:6b:0d:34:b6:83:f4:ba:a9: e0:78:52:92:66:89:65:71:2c:3c:4c:64:77:a4:e2: 68:ab:0d:ce:3a:e1:c1:c0:5a:78:72:52:e5:a1:69: cd:b9:e8:3b:0c:79:a2:50:51:36:6e:c5:9e:f6:68: fa:0c:45:9c:4b:66:8e:1f:2c:3b:29:0c:50:61:19: aa:5b:bd:29:bf:f2:25:00:74:ad:2c:12:7f:5b:cc: 24:6a:41:89:9a:d2:0f:51:0b:03:06:cf:78:c9:42: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:99:07:29:D0:06:02:3B:40:4B:90:6A:42:9D:E7:E1:8B:58:85:E6 X509v3 Authority Key Identifier: keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:de:e2:45:ea:fc:96:0f:90:41:d6:f3:87:8e:73:0e:47:19: 47:9d:f5:17:68:09:68:62:a8:4e:4a:f9:fd:65:5b:15:07:24: 29:bc:29:94:6e:94:00:f7:8e:bb:1f:7d:e1:fd:2b:78:40:8d: b9:b6:b9:8b:fd:f7:7f:ca:90:87:08:4d:fd:1f:2f:27:16:f2: 62:7b:ff:18:6e:6b:6c:a2:e4:52:d9:65:e8:0b:29:b4:4a:23: 87:a2:e1:46:46:ae:34:f2:77:fd:fc:7b:f9:24:30:ed:4b:7d: 95:da:9b:1f:26:b2:80:2d:a0:20:71:4e:0b:06:ad:81:34:9d: 7d:df:04:b3:8b:e4:8a:9e:0f:4b:ec:1e:40:11:70:a5:d7:3a: c8:fd:7e:f5:b8:3d:4f:05:83:fe:f9:b8:e0:2f:30:da:67:a4: e4:69:a8:0f:a5:d3:1f:06:37:5f:c8:2f:e2:5b:b8:1f:64:fe: 43:cd:0e:f4:49:27:18:1c:21:08:05:1d:11:0f:4d:50:2b:cb: 24:6f:00:f9:9e:f1:98:ec:83:14:15:96:ae:13:ee:41:df:20: 11:43:9d:b6:dc:22:e9:b5:a4:e4:d7:e6:5d:2f:e8:8c:e0:c9: 4e:ea:79:5c:29:9c:f3:9e:00:58:76:34:34:3d:8d:77:ba:f7: 40:c6:be:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31LeoSj2G5hGCQfllYHhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTYzY2Y2MDg3MzExMzQ3ZjMxNGYyNGUyNjk2YzdmNmNl YTZkNzIwHhcNMjUxMjA3MDgwMTQ0WhcNMjUxMjA4MDgwMTQ0WjAzMTEwLwYDVQQD EyhhNTk5MDcyOWQwMDYwMjNiNDA0YjkwNmE0MjlkZTdlMThiNTg4NWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnguya9LXh22aziyqZC6RrIl6TPHw CP84sv7j7V94cElOhWgTq7ylIbKUKtCU+bsgBAcilzCv0sNcHjwmYxet/T4d006j TCwuA4W9MHKiEsXglVMCgX7v3xlfAEFVFR5Ut9+N14ACsq2BoqpiPTsRPbqVDJOQ 3DtvkzcjgAQZFwVC4TCPSEiWwwlhxdbzO42kkWVZ6yw/ciowDOCraw00toP0uqng eFKSZollcSw8TGR3pOJoqw3OOuHBwFp4clLloWnNueg7DHmiUFE2bsWe9mj6DEWc S2aOHyw7KQxQYRmqW70pv/IlAHStLBJ/W8wkakGJmtIPUQsDBs94yUKhMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWZBynQBgI7QEuQakKd5+GLWIXmMB8GA1UdIwQY MBaAFFHmPPYIcxE0fzFPJOJpbH9s6m1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVZODlnaHpFVFJfTVU4azRtbHNmMnpxYlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NzM3MDItYjllMy00MDVmLTk2ZTIt YWM2ZGZjOTJmNTg1LzEvVWVZODlnaHpFVFJfTVU4azRtbHNmMnpxYlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC80NzM3MDItYjllMy00MDVmLTk2ZTItYWM2ZGZjOTJmNTg1 LzEvVWVZODlnaHpFVFJfTVU4azRtbHNmMnpxYlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd7iRer8 lg+QQdbzh45zDkcZR531F2gJaGKoTkr5/WVbFQckKbwplG6UAPeOux994f0reECN uba5i/33f8qQhwhN/R8vJxbyYnv/GG5rbKLkUtll6AsptEojh6LhRkauNPJ3/fx7 +SQw7Ut9ldqbHyaygC2gIHFOCwatgTSdfd8Es4vkip4PS+weQBFwpdc6yP1+9bg9 TwWD/vm44C8w2mek5GmoD6XTHwY3X8gv4lu4H2T+Q80O9EknGBwhCAUdEQ9NUCvL JG8A+Z7xmOyDFBWWrhPuQd8gEUOdttwi6bWk5NfmXS/ojODJTup5XCmc854AWHY0 ND2Nd7r3QMa+TQ== -----END CERTIFICATE-----Generated at Sun Dec 7 17:13:45 2025 by rpki-client