This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json) Hash identifier: TS6Jh67L03QGTmdSH9mBn1sUh4+N1EpFNvcZ0G+ZAV0= Subject key identifier: A1:06:0A:88:F9:B1:8B:56:A6:F8:BC:85:F3:2D:14:58:C9:3C:CD:D2 Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61 Certificate serial: 019AFA674EEBBA80911AC8FD9C3761E910B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft Manifest number: 05AC Signing time: Sun 07 Dec 2025 20:01:05 +0000 Manifest this update: Sun 07 Dec 2025 20:01:05 +0000 Manifest next update: Mon 08 Dec 2025 20:01:05 +0000 Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=) 2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: iLKEK6iBD3kZyrB763EtP8U0jurWXRiRH3nHlWXOosQ=) 3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:67:4e:eb:ba:80:91:1a:c8:fd:9c:37:61:e9:10:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61 Validity Not Before: Dec 7 20:01:05 2025 GMT Not After : Dec 8 20:01:05 2025 GMT Subject: CN=a1060a88f9b18b56a6f8bc85f32d1458c93ccdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:65:23:32:b2:6e:a1:a6:63:65:0b:e7:97: 64:be:ec:67:22:95:6d:45:c4:f9:a5:01:71:25:9c: 6b:bb:06:02:29:07:e1:84:47:b1:ab:a8:e1:83:09: ba:81:1c:f5:f7:d8:2b:75:93:45:1b:4d:1d:73:bf: 60:14:16:81:94:e5:cf:d8:1e:64:79:7e:e2:54:ee: 5c:22:d6:c1:04:4a:c5:2a:41:9e:90:fe:61:1d:14: f7:3d:51:ed:3d:4a:f7:12:39:27:20:61:ca:6e:15: 3d:f6:1e:52:24:de:4c:ef:16:fb:83:5c:a1:fe:26: b5:dd:64:06:71:17:76:f9:59:f6:e5:87:a8:1b:21: ff:e2:ed:71:4e:8e:1c:ec:e7:c7:33:52:21:f8:f5: 5a:3e:1d:c6:37:c9:4d:5d:7f:ad:2e:99:ce:6b:e3: 26:02:0e:f5:0c:58:df:2b:4a:8d:cb:d8:76:94:b0: 74:0e:f2:86:db:f1:9c:af:54:f8:8e:fe:a1:82:21: 34:0a:16:6e:1c:0d:1b:1a:b0:90:00:ec:a0:78:ef: 42:ec:0b:e8:ef:e6:52:ba:eb:9c:db:58:0b:8c:08: 31:05:09:04:8b:0b:bc:bb:6e:c6:82:85:f4:4a:9b: f4:12:1a:2f:b7:1c:bb:e3:26:97:31:5b:9c:d3:65: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:0A:88:F9:B1:8B:56:A6:F8:BC:85:F3:2D:14:58:C9:3C:CD:D2 X509v3 Authority Key Identifier: keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:68:39:83:fb:4d:eb:31:ba:c1:a7:83:9e:92:d6:36:dc:a3: 59:43:39:db:6b:2f:9d:79:2b:07:d8:11:8d:d4:c2:d3:63:6f: b9:5e:bc:ae:44:c9:ed:05:b3:28:79:1d:c6:eb:51:ce:6f:24: 5a:23:95:ea:3d:1b:75:70:94:07:fb:64:bb:4c:77:77:c6:20: d0:ef:06:7f:8f:e4:0e:3c:f4:a0:18:4f:f9:0e:5a:6e:cb:51: 0b:54:c7:a9:5a:48:52:49:ee:9f:c4:40:e1:16:e8:c4:7a:d3: 9f:52:49:12:4b:f9:12:f6:23:40:19:be:7b:9a:59:4c:1e:cb: 3a:8c:6a:d2:2a:f2:08:8b:14:12:47:d9:00:dd:66:5f:dd:f4: 8c:c5:a1:7a:0c:99:1c:c5:c5:48:24:4a:28:97:2d:f4:15:d4: 43:b2:8b:0a:d8:1f:3e:2e:64:13:4f:8f:e9:8d:0f:4e:8f:92: 5d:91:f9:3f:bd:b3:0e:cc:21:18:19:56:d1:ef:4c:ed:f1:72: 49:24:22:b9:51:c1:80:b9:2c:36:16:9a:ef:d3:5f:75:a0:d1: 2a:a5:ae:21:fe:a8:a7:15:30:d0:b5:b3:a5:1d:71:6b:8e:28: 09:cd:c6:c9:a3:52:32:01:b3:c6:a7:9b:d4:12:c9:b9:fc:52: a0:a1:45:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6Z07ruoCRGsj9nDdh6RC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk MWZjNjEwHhcNMjUxMjA3MjAwMTA1WhcNMjUxMjA4MjAwMTA1WjAzMTEwLwYDVQQD EyhhMTA2MGE4OGY5YjE4YjU2YTZmOGJjODVmMzJkMTQ1OGM5M2NjZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OhlIzKybqGmY2UL55dkvuxnIpVt RcT5pQFxJZxruwYCKQfhhEexq6jhgwm6gRz199grdZNFG00dc79gFBaBlOXP2B5k eX7iVO5cItbBBErFKkGekP5hHRT3PVHtPUr3EjknIGHKbhU99h5SJN5M7xb7g1yh /ia13WQGcRd2+Vn25YeoGyH/4u1xTo4c7OfHM1Ih+PVaPh3GN8lNXX+tLpnOa+Mm Ag71DFjfK0qNy9h2lLB0DvKG2/Gcr1T4jv6hgiE0ChZuHA0bGrCQAOygeO9C7Avo 7+ZSuuuc21gLjAgxBQkEiwu8u27GgoX0Spv0Ehovtxy74yaXMVuc02U+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEGCoj5sYtWpvi8hfMtFFjJPM3SMB8GA1UdIwQY MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5 LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGg5g/tN 6zG6waeDnpLWNtyjWUM522svnXkrB9gRjdTC02NvuV68rkTJ7QWzKHkdxutRzm8k WiOV6j0bdXCUB/tku0x3d8Yg0O8Gf4/kDjz0oBhP+Q5abstRC1THqVpIUknun8RA 4RboxHrTn1JJEkv5EvYjQBm+e5pZTB7LOoxq0iryCIsUEkfZAN1mX930jMWhegyZ HMXFSCRKKJct9BXUQ7KLCtgfPi5kE0+P6Y0PTo+SXZH5P72zDswhGBlW0e9M7fFy SSQiuVHBgLksNhaa79NfdaDRKqWuIf6opxUw0LWzpR1xa44oCc3GyaNSMgGzxqeb 1BLJufxSoKFFDg== -----END CERTIFICATE-----Generated at Sun Dec 7 21:57:32 2025 by rpki-client