This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json) Hash identifier: /Bj5EnH3DB26e5I8P+Vp4XOgW3FMd2K9nY8BE1DO8S0= Subject key identifier: BB:19:48:CD:C2:10:78:FC:0B:6F:6B:1C:DB:E6:E8:6F:17:F0:10:3E Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Certificate serial: 019B34567BB35C1D60797440868DBA07FCFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft Manifest number: 0A64 Signing time: Fri 19 Dec 2025 02:00:41 +0000 Manifest this update: Fri 19 Dec 2025 02:00:41 +0000 Manifest next update: Sat 20 Dec 2025 02:00:41 +0000 Files and hashes: 1: DYFmv5SEYYlddrISWWXVdY1hSCw.roa (hash: TKf7tOlhVLq0cOqQ0nNkYPFgdP68RF3GWaqOQkMnAHw=) 2: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: w+ytKTK1mGgGgjeh2kfpNE/M2ToLmUGZlvI+VY6td4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:7b:b3:5c:1d:60:79:74:40:86:8d:ba:07:fc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Validity Not Before: Dec 19 02:00:41 2025 GMT Not After : Dec 20 02:00:41 2025 GMT Subject: CN=bb1948cdc21078fc0b6f6b1cdbe6e86f17f0103e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:96:28:ce:43:6b:70:16:96:da:b9:4e:2e: 7d:da:56:cf:10:78:32:90:59:51:f4:33:23:6d:20: 3d:a5:14:03:73:77:3e:66:76:25:fc:e7:6e:c3:0a: 93:e3:a2:26:d3:c1:5e:30:09:25:53:1b:cf:5e:46: 04:00:de:73:15:a5:1a:e5:03:e1:e3:3b:25:d7:64: 25:e8:15:02:fa:fd:f8:ea:57:75:61:cb:a9:55:9b: 3b:ae:3e:10:cf:1c:52:1f:0b:91:06:d4:1a:33:63: f1:26:b9:e7:a8:67:27:75:b7:08:44:c2:5e:93:7d: 57:c8:41:42:62:b2:c8:53:6b:78:24:d5:ee:44:81: ab:f5:42:aa:27:fc:22:d4:d8:be:08:5b:34:53:60: 7c:02:37:aa:25:de:fc:1d:0e:2a:7d:da:fc:05:c1: ba:df:0e:5c:ce:f7:a4:93:c5:e3:65:98:34:df:ce: f6:2b:03:5e:03:4b:f6:a4:fc:8a:a0:4a:70:da:8c: 51:f0:15:c5:ad:a0:14:bc:18:d4:a5:e6:c4:1b:75: 5e:62:6e:10:dd:56:47:9c:7b:13:e2:c5:24:63:d7: 12:e6:54:d5:bc:2a:78:30:d7:3d:05:f6:41:9b:e7: 44:76:cb:cc:c9:38:3a:b7:2b:56:48:c9:a6:dd:09: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:19:48:CD:C2:10:78:FC:0B:6F:6B:1C:DB:E6:E8:6F:17:F0:10:3E X509v3 Authority Key Identifier: keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c1:46:dc:d7:fe:fd:34:9c:8b:87:e5:f6:17:dd:28:31:c2: 1b:99:b0:5d:d9:e2:d3:ff:92:9e:63:52:7f:89:a7:30:60:55: f9:0a:8d:36:52:cd:91:3e:ed:0e:e1:5d:3b:5a:27:ad:c6:c4: b4:26:a6:fd:8b:87:89:f8:9b:c3:b0:a1:35:c6:a4:21:48:c0: 78:b8:bf:d6:d4:5c:3e:ee:d1:98:da:5e:a2:ac:dc:b7:cc:12: 46:04:20:74:42:77:97:20:53:8d:32:1c:a3:b8:0f:6c:d8:cb: 91:1a:15:71:ff:21:03:aa:2c:9a:07:35:8c:f8:93:c4:58:1d: 29:db:1e:f3:90:54:7f:68:a7:78:08:85:2e:a0:99:87:25:61: 14:11:6e:a5:4c:59:8b:75:b5:ad:cf:f8:d3:ac:21:76:b8:5c: a2:09:62:64:b0:b2:3d:53:66:de:0f:84:c2:39:16:94:08:e8: b4:b8:93:70:ad:cf:00:fe:47:cb:08:16:8d:59:67:2f:30:68: b6:75:2c:b7:f4:cd:cc:0c:4e:3a:08:75:89:c0:9e:b2:10:4f: 9b:fd:a8:0c:7f:6c:25:8b:ea:83:a1:96:e5:a8:0c:1d:d7:a2: 37:e5:38:32:bc:93:15:f6:d4:e9:78:4f:e3:47:dd:36:1c:7b: a3:a8:2b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VnuzXB1geXRAho26B/z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx MWE2ODEwHhcNMjUxMjE5MDIwMDQxWhcNMjUxMjIwMDIwMDQxWjAzMTEwLwYDVQQD EyhiYjE5NDhjZGMyMTA3OGZjMGI2ZjZiMWNkYmU2ZTg2ZjE3ZjAxMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn+WKM5Da3AWltq5Ti592lbPEHgy kFlR9DMjbSA9pRQDc3c+ZnYl/OduwwqT46Im08FeMAklUxvPXkYEAN5zFaUa5QPh 4zsl12Ql6BUC+v346ld1YcupVZs7rj4QzxxSHwuRBtQaM2PxJrnnqGcndbcIRMJe k31XyEFCYrLIU2t4JNXuRIGr9UKqJ/wi1Ni+CFs0U2B8AjeqJd78HQ4qfdr8BcG6 3w5czvekk8XjZZg03872KwNeA0v2pPyKoEpw2oxR8BXFraAUvBjUpebEG3VeYm4Q 3VZHnHsT4sUkY9cS5lTVvCp4MNc9BfZBm+dEdsvMyTg6tytWSMmm3QlVkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsZSM3CEHj8C29rHNvm6G8X8BA+MB8GA1UdIwQY MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1 LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMFG3Nf+ /TSci4fl9hfdKDHCG5mwXdni0/+SnmNSf4mnMGBV+QqNNlLNkT7tDuFdO1onrcbE tCam/YuHifibw7ChNcakIUjAeLi/1tRcPu7RmNpeoqzct8wSRgQgdEJ3lyBTjTIc o7gPbNjLkRoVcf8hA6osmgc1jPiTxFgdKdse85BUf2ineAiFLqCZhyVhFBFupUxZ i3W1rc/406whdrhcogliZLCyPVNm3g+EwjkWlAjotLiTcK3PAP5HywgWjVlnLzBo tnUst/TNzAxOOgh1icCeshBPm/2oDH9sJYvqg6GW5agMHdeiN+U4MryTFfbU6XhP 40fdNhx7o6grtQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:39:54 2025 by rpki-client