This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: cwot5trMS23Al6qrxNPosHp25ZDoobjUYNqOZ/hgXpE= Subject key identifier: 14:FB:17:21:F1:76:C0:A8:98:FF:1D:70:7F:7E:ED:45:C7:3B:A1:B6 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019AF088EDE7476738224E614B279F8C1663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 0FDE Signing time: Fri 05 Dec 2025 22:01:36 +0000 Manifest this update: Fri 05 Dec 2025 22:01:36 +0000 Manifest next update: Sat 06 Dec 2025 22:01:36 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: F6uC/eq5V7y+4wzT0jaaeOqMJzaSJyTGUSX7sxzey8k=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ed:e7:47:67:38:22:4e:61:4b:27:9f:8c:16:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Dec 5 22:01:36 2025 GMT Not After : Dec 6 22:01:36 2025 GMT Subject: CN=14fb1721f176c0a898ff1d707f7eed45c73ba1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:50:da:50:9a:7f:ea:f9:5b:da:46:53:22:85: 4a:f6:2c:97:aa:48:51:11:20:d8:75:fd:25:bb:58: bb:c1:82:57:d6:19:4f:05:fd:62:31:84:a4:db:fc: 0f:69:bb:6a:43:82:c6:98:7c:fb:b0:bc:7b:b0:09: ee:dd:a6:74:03:ec:4d:bb:0b:b7:89:82:24:31:5f: d7:ae:f2:10:91:e2:46:78:01:c8:db:97:35:f0:04: f1:6f:69:19:3c:cf:7c:d5:e8:5c:11:d2:3d:29:39: 14:69:80:e8:4c:f4:cb:f5:16:15:ac:8e:a6:c1:2c: 1e:b8:ef:a8:62:3a:08:09:b9:e7:e4:7d:2b:77:a0: 57:5a:9e:88:3b:66:1b:29:c9:cf:da:61:c0:7c:c4: 72:d0:61:1c:e0:88:c0:2c:af:c9:d5:47:cb:b4:8f: ed:b2:d0:62:a7:64:3f:9c:ea:d7:7e:cc:b9:5b:5a: 4c:e9:45:57:ee:22:3d:13:2c:29:1d:46:d3:f1:6a: b4:bf:18:82:ae:dc:25:b9:e2:11:0b:b6:9f:a0:20: 00:cb:e5:4e:5b:a8:29:33:ff:f8:47:8f:98:5c:3a: 42:28:10:90:35:87:22:75:75:75:9a:ae:96:a4:08: cb:30:90:4e:31:8d:53:7a:c0:93:73:69:f8:28:02: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FB:17:21:F1:76:C0:A8:98:FF:1D:70:7F:7E:ED:45:C7:3B:A1:B6 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:2d:c3:1b:89:36:4b:ef:72:b2:40:e9:90:5e:85:8b:f3:8f: 68:b8:bb:2b:39:4b:79:71:d3:5b:f3:4a:89:b8:e9:cc:62:28: 09:28:b7:12:54:c9:50:c0:f7:e7:f2:38:87:67:11:c9:0a:e9: 4e:50:7c:64:97:58:ce:11:0f:5d:8b:c9:7a:29:0c:fe:14:62: 3d:00:0b:c6:d4:b1:3e:07:e2:19:13:8b:ba:eb:13:0d:d7:fd: 10:7e:90:a4:4b:b5:42:fc:37:92:15:43:bb:e4:6d:5c:6b:d1: d2:0e:be:23:d3:a3:70:69:ba:4a:55:97:8c:1e:c2:64:f3:bb: 29:e5:a9:16:11:97:89:d5:7c:48:39:95:06:f4:d6:79:56:02: 41:ec:65:87:ab:05:92:f1:58:05:4b:27:fb:de:7c:e6:20:10: 58:57:58:72:f6:51:24:39:ce:5d:50:75:26:71:7a:a9:bd:2a: 31:c4:56:d2:00:54:fa:88:37:7d:6a:73:29:07:53:b4:91:a4: b8:33:ab:8a:f5:06:08:47:2c:22:58:0e:a5:77:ef:be:f0:8d: ad:a6:e0:b4:b6:12:9d:db:8e:03:2d:83:2f:13:9a:5a:d9:a3: 05:39:9f:e2:ca:fa:1b:03:20:76:08:77:66:b1:60:26:cb:f1: 9c:fe:c7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiO3nR2c4Ik5hSyefjBZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUxMjA1MjIwMTM2WhcNMjUxMjA2MjIwMTM2WjAzMTEwLwYDVQQD EygxNGZiMTcyMWYxNzZjMGE4OThmZjFkNzA3ZjdlZWQ0NWM3M2JhMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VDaUJp/6vlb2kZTIoVK9iyXqkhR ESDYdf0lu1i7wYJX1hlPBf1iMYSk2/wPabtqQ4LGmHz7sLx7sAnu3aZ0A+xNuwu3 iYIkMV/XrvIQkeJGeAHI25c18ATxb2kZPM981ehcEdI9KTkUaYDoTPTL9RYVrI6m wSweuO+oYjoICbnn5H0rd6BXWp6IO2YbKcnP2mHAfMRy0GEc4IjALK/J1UfLtI/t stBip2Q/nOrXfsy5W1pM6UVX7iI9EywpHUbT8Wq0vxiCrtwlueIRC7afoCAAy+VO W6gpM//4R4+YXDpCKBCQNYcidXV1mq6WpAjLMJBOMY1TesCTc2n4KAL0ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT7FyHxdsComP8dcH9+7UXHO6G2MB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2C3DG4k2 S+9yskDpkF6Fi/OPaLi7KzlLeXHTW/NKibjpzGIoCSi3ElTJUMD35/I4h2cRyQrp TlB8ZJdYzhEPXYvJeikM/hRiPQALxtSxPgfiGROLuusTDdf9EH6QpEu1Qvw3khVD u+RtXGvR0g6+I9OjcGm6SlWXjB7CZPO7KeWpFhGXidV8SDmVBvTWeVYCQexlh6sF kvFYBUsn+9585iAQWFdYcvZRJDnOXVB1JnF6qb0qMcRW0gBU+og3fWpzKQdTtJGk uDOrivUGCEcsIlgOpXfvvvCNrabgtLYSnduOAy2DLxOaWtmjBTmf4sr6GwMgdgh3 ZrFgJsvxnP7HZw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:44 2025 by rpki-client