This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft File: UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json) Hash identifier: +XMUa6CqqpV22OTqfHXB/aE5bmnxFtMML/k8lMyLtSs= Subject key identifier: 37:12:3F:E5:10:C7:78:37:0A:C7:0A:6D:98:E1:79:80:20:E0:69:4A Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08 Certificate issuer: /CN=530841e82aa46d9959fc7811b25795c56cd50608 Certificate serial: 019AF163EE282650089859356CD858ACBB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft Manifest number: 1744 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: xBfnDRrFjwGcJ2xc2MG0lY7edRuUWKHY565yOrpPu6s=) 2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:28:26:50:08:98:59:35:6c:d8:58:ac:bb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=37123fe510c778370ac70a6d98e1798020e0694a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:2d:3d:e3:aa:a6:07:cc:34:89:b8:30:a8: 91:b1:60:22:5c:46:a6:ea:a4:6f:db:49:10:64:34: 3d:8c:27:09:54:16:01:b9:52:3b:4c:78:e1:25:cc: 9d:a2:41:fe:9d:40:a3:7f:dc:29:b8:d0:8d:6b:82: dc:da:57:29:2b:42:4f:04:aa:e6:d4:44:4b:d2:77: c9:c0:47:f5:d3:4b:d9:41:8b:95:dc:3e:92:58:be: c6:e5:be:d9:1f:81:14:3c:b6:4b:37:c3:19:23:17: 70:f9:5b:01:b3:4b:8d:e9:13:fa:e4:00:02:35:40: 97:56:b7:d6:d3:d8:ae:af:d0:5a:95:ed:1c:bf:68: 65:d5:77:1e:83:71:d0:c2:17:29:5f:64:d4:2d:ff: f4:33:02:dd:8f:c8:ee:89:3a:1a:54:8c:03:01:6c: 2e:16:e1:d1:20:bb:91:a5:b6:32:7f:7c:24:90:b3: c1:07:b1:9f:54:c9:16:c5:83:c2:aa:06:65:25:f5: 6a:f2:5c:7c:d9:ed:f0:45:8e:91:e8:ed:b5:8d:6b: 03:61:ed:20:91:e5:cf:54:b8:46:bc:54:45:80:d3: 56:d2:10:89:1b:3e:e1:ee:b7:de:4c:00:bb:36:53: 88:77:14:78:66:27:81:3b:c6:91:a5:14:0b:46:cd: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:12:3F:E5:10:C7:78:37:0A:C7:0A:6D:98:E1:79:80:20:E0:69:4A X509v3 Authority Key Identifier: keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9b:ec:bb:0b:35:1e:49:3d:06:35:a2:53:69:b8:76:57:bf: ab:3a:e9:8e:bf:25:ba:ee:0d:b8:30:fe:45:28:7d:02:1e:ab: c7:5e:9d:47:88:35:9e:23:9b:89:9d:e4:a7:78:3f:5b:1e:9b: f8:a5:3c:a6:ef:81:45:52:b7:d4:9b:36:ba:7a:e3:ed:b0:6f: 5f:ef:db:87:cf:91:d8:6c:df:9d:80:f9:86:2a:6a:74:dc:d4: 27:b5:28:8f:9f:5a:21:ac:7a:91:27:4c:6f:07:32:7d:d7:90: cd:df:0b:d4:29:6a:fc:92:7d:e8:13:5d:7c:a3:8c:27:f3:b6: bf:ca:60:52:a1:08:7b:12:f7:89:d6:9e:cb:74:77:b8:82:2b: be:e4:40:4d:f4:96:16:ff:6a:19:eb:1a:d6:9d:50:5a:e8:86: dd:10:64:40:c7:fb:6b:81:77:54:78:6b:1f:1d:80:49:40:b1: 05:24:88:4a:af:66:28:3f:5e:09:a2:51:e8:a0:0a:2c:9c:9e: f0:32:28:e9:ff:a2:69:d2:76:60:67:b2:1c:a7:5e:f6:f3:e1: d6:23:a8:26:b9:5e:2e:7e:18:65:97:62:e7:a4:63:ed:fc:46: c7:98:bb:1c:fc:ec:4e:19:8c:7e:8a:f1:a9:27:9a:4f:0c:bb: 8c:0b:3b:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+4oJlAImFk1bNhYrLtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMDg0MWU4MmFhNDZkOTk1OWZjNzgxMWIyNTc5NWM1NmNk NTA2MDgwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygzNzEyM2ZlNTEwYzc3ODM3MGFjNzBhNmQ5OGUxNzk4MDIwZTA2OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1igtPeOqpgfMNIm4MKiRsWAiXEam 6qRv20kQZDQ9jCcJVBYBuVI7THjhJcydokH+nUCjf9wpuNCNa4Lc2lcpK0JPBKrm 1ERL0nfJwEf100vZQYuV3D6SWL7G5b7ZH4EUPLZLN8MZIxdw+VsBs0uN6RP65AAC NUCXVrfW09iur9Bale0cv2hl1Xceg3HQwhcpX2TULf/0MwLdj8juiToaVIwDAWwu FuHRILuRpbYyf3wkkLPBB7GfVMkWxYPCqgZlJfVq8lx82e3wRY6R6O21jWsDYe0g keXPVLhGvFRFgNNW0hCJGz7h7rfeTAC7NlOIdxR4ZieBO8aRpRQLRs151QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcSP+UQx3g3CscKbZjheYAg4GlKMB8GA1UdIwQY MBaAFFMIQegqpG2ZWfx4EbJXlcVs1QYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTkt NGE4MmNkZDRiMWEwLzEvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTktNGE4MmNkZDRiMWEw LzEvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5vsuws1 Hkk9BjWiU2m4dle/qzrpjr8luu4NuDD+RSh9Ah6rx16dR4g1niObiZ3kp3g/Wx6b +KU8pu+BRVK31Js2unrj7bBvX+/bh8+R2GzfnYD5hipqdNzUJ7Uoj59aIax6kSdM bwcyfdeQzd8L1Clq/JJ96BNdfKOMJ/O2v8pgUqEIexL3idaey3R3uIIrvuRATfSW Fv9qGesa1p1QWuiG3RBkQMf7a4F3VHhrHx2ASUCxBSSISq9mKD9eCaJR6KAKLJye 8DIo6f+iadJ2YGeyHKde9vPh1iOoJrleLn4YZZdi56Rj7fxGx5i7HPzsThmMforx qSeaTwy7jAs7Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:12 2025 by rpki-client