This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json) Hash identifier: bh7szCvTMExwltxxya3Z6LxmZN5LwhjU//+UX4T3djc= Subject key identifier: A7:42:71:87:42:1D:FD:C2:10:BB:60:D1:CE:09:AB:E1:FE:6F:9B:48 Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61 Certificate serial: 019B2107594AEE08ADEE6268893DA3AA1368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft Manifest number: 05C0 Signing time: Mon 15 Dec 2025 08:01:28 +0000 Manifest this update: Mon 15 Dec 2025 08:01:28 +0000 Manifest next update: Tue 16 Dec 2025 08:01:28 +0000 Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=) 2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: NVpfXjgDpNhbWw/0tw/58xDPuGIL7Z8gC00KgyiCS6s=) 3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:59:4a:ee:08:ad:ee:62:68:89:3d:a3:aa:13:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61 Validity Not Before: Dec 15 08:01:28 2025 GMT Not After : Dec 16 08:01:28 2025 GMT Subject: CN=a7427187421dfdc210bb60d1ce09abe1fe6f9b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:c2:e7:21:ec:e8:26:b7:36:df:e1:ef:89: 4c:2e:b3:f9:ce:e1:a9:1c:f9:4b:55:fb:31:65:94: 9a:31:ee:6a:ce:5a:db:2a:7c:ce:36:27:6f:01:8b: 09:6c:83:97:9b:eb:4e:dd:fb:18:f9:1f:4a:32:6b: 73:5e:e5:65:e9:9d:40:27:a0:13:1c:ae:b6:ff:8f: 93:8e:21:d2:1c:31:70:6d:a5:14:63:bf:21:f1:79: a5:da:d4:3b:d1:98:b1:00:d7:98:90:f0:cd:08:a6: 5f:59:68:be:0f:d6:2a:73:7c:b1:00:89:fd:a1:9c: f9:6f:f9:75:19:2a:8e:b4:ad:8a:54:6f:b7:cc:25: 45:ea:97:74:24:a6:10:b6:ea:3e:ab:09:35:b2:ab: 98:ec:e4:8a:03:dc:d2:9d:8a:34:d8:93:b1:cd:75: b8:f4:c5:5b:90:80:ae:27:0a:9d:93:e1:ac:9e:89: ae:92:64:83:d6:9d:31:f4:09:f0:b5:e7:4d:4d:e9: e8:6a:7c:4c:0f:5e:c7:23:4b:6f:32:dc:ff:2d:6e: 4b:41:61:6b:d7:53:ca:55:3b:d2:42:8d:57:1a:5f: fc:02:73:11:e0:40:8a:e5:41:5f:47:85:6b:5f:89: b6:a7:1b:20:36:9b:bf:d0:55:98:d2:0f:97:2e:97: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:42:71:87:42:1D:FD:C2:10:BB:60:D1:CE:09:AB:E1:FE:6F:9B:48 X509v3 Authority Key Identifier: keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f6:00:12:fe:c8:a3:9d:0f:9b:b1:54:1f:03:06:8e:41:c3: 17:53:ab:cb:ae:6a:a7:b4:d1:04:8c:2f:a7:4e:ab:80:96:77: 3d:4b:33:06:4c:78:ce:31:ec:6e:36:6c:ae:2d:82:b1:09:08: 65:2d:97:b4:aa:f6:3a:c7:ac:d2:91:06:47:ad:3d:d8:2f:3b: 57:a4:d3:06:26:9b:e1:e3:24:1c:4b:7b:3f:2e:3f:bc:3f:c2: a5:67:51:3c:ae:0f:23:10:2b:db:bd:b4:e8:58:a8:91:67:3c: c0:8a:98:46:aa:e8:e6:62:13:26:18:78:da:29:d7:29:33:50: a6:a8:93:89:cf:38:3b:59:b5:a7:03:eb:23:4d:ed:e8:70:db: 14:70:4c:19:29:cf:0e:84:e4:ca:9f:5a:82:50:01:82:a4:39: 36:39:fb:e8:1b:48:0c:06:a0:33:3d:bc:05:31:59:6e:d9:ab: e5:73:56:4d:23:02:05:b0:ff:98:62:19:7d:62:f0:e0:8e:23: e1:60:c3:0b:ed:51:0a:1d:c3:fe:fc:0e:2f:1f:1f:3b:78:f3: c1:d7:d0:5f:72:5f:b3:f5:85:77:c5:1e:c5:68:91:77:21:06: ce:9a:f4:33:84:fb:69:2d:ed:d4:0d:d2:69:4c:af:16:46:e6: b7:b5:37:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB1lK7git7mJoiT2jqhNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk MWZjNjEwHhcNMjUxMjE1MDgwMTI4WhcNMjUxMjE2MDgwMTI4WjAzMTEwLwYDVQQD EyhhNzQyNzE4NzQyMWRmZGMyMTBiYjYwZDFjZTA5YWJlMWZlNmY5YjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTbC5yHs6Ca3Nt/h74lMLrP5zuGp HPlLVfsxZZSaMe5qzlrbKnzONidvAYsJbIOXm+tO3fsY+R9KMmtzXuVl6Z1AJ6AT HK62/4+TjiHSHDFwbaUUY78h8Xml2tQ70ZixANeYkPDNCKZfWWi+D9Yqc3yxAIn9 oZz5b/l1GSqOtK2KVG+3zCVF6pd0JKYQtuo+qwk1squY7OSKA9zSnYo02JOxzXW4 9MVbkICuJwqdk+GsnomukmSD1p0x9AnwtedNTenoanxMD17HI0tvMtz/LW5LQWFr 11PKVTvSQo1XGl/8AnMR4ECK5UFfR4VrX4m2pxsgNpu/0FWY0g+XLpcGMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdCcYdCHf3CELtg0c4Jq+H+b5tIMB8GA1UdIwQY MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5 LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvYAEv7I o50Pm7FUHwMGjkHDF1Ory65qp7TRBIwvp06rgJZ3PUszBkx4zjHsbjZsri2CsQkI ZS2XtKr2Oses0pEGR6092C87V6TTBiab4eMkHEt7Py4/vD/CpWdRPK4PIxAr2720 6FiokWc8wIqYRqro5mITJhh42inXKTNQpqiTic84O1m1pwPrI03t6HDbFHBMGSnP DoTkyp9aglABgqQ5Njn76BtIDAagMz28BTFZbtmr5XNWTSMCBbD/mGIZfWLw4I4j 4WDDC+1RCh3D/vwOLx8fO3jzwdfQX3Jfs/WFd8UexWiRdyEGzpr0M4T7aS3t1A3S aUyvFkbmt7U3KQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:20 2025 by rpki-client