This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft File: UHQRWPPtZb7hveEvNPiVr7DdUNU.mft (raw, json) Hash identifier: nGiFxygln+ifEQxUfrvNn0kDyKZS9wKwwIjZFbvJqtY= Subject key identifier: 48:1D:7B:A4:8D:16:E2:83:89:D0:44:D3:66:5B:8B:B2:C3:EC:44:98 Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Certificate serial: 019AF164257DE2D0E8F82FDBE5F31EC2ABF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft Manifest number: 17A3 Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: 1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa (hash: RYE6k3//z5KNEk7H3IQ1JZYxDGCNXiKaq546ajQsong=) 2: C-2Nv77vdORBtXODMBObwRD87Wk.roa (hash: N6t7RosiMXetfLBziLoQs8MiQEYjeO1vmrwr27Ix98Y=) 3: HEwByDo5NsJkjq0KP_e43JX1Y-I.roa (hash: KBL6f/ipp4MstSEvkMgxey8LBfXIJhOUyz3ctrFmblM=) 4: UHQRWPPtZb7hveEvNPiVr7DdUNU.crl (hash: ZsnNoxmUG8nrru1sFGPEyGkGTY0emFR1c2vA+OodszE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:25:7d:e2:d0:e8:f8:2f:db:e5:f3:1e:c2:ab:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=481d7ba48d16e28389d044d3665b8bb2c3ec4498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:0d:c6:29:9b:91:6f:23:93:94:7c:5a:75: d4:bb:dd:af:48:46:09:7a:e3:e8:e2:5b:f4:68:73: de:6c:bd:ef:1c:66:81:43:de:f8:22:10:6b:9c:23: d0:0e:11:94:28:59:6b:c0:87:25:2b:f3:fe:0d:d9: ba:de:e3:98:05:71:a3:7c:92:5c:b6:42:ec:8c:d6: cb:7a:38:d5:76:33:75:68:62:90:73:fd:2c:66:d1: 2d:1e:dc:ef:13:a9:d6:a3:a3:bc:99:b4:fd:91:1e: 9f:1c:a6:6a:1b:5c:de:08:91:5f:d1:83:be:a8:8c: a8:44:29:09:47:de:bd:54:8e:4a:74:7b:bf:a7:60: 37:34:69:60:84:ba:79:b5:a5:10:3a:57:ef:fa:8d: 65:74:70:b7:d6:9f:93:6e:13:3e:d6:27:b1:d9:5a: 0d:b6:3d:e6:fa:1a:b1:be:1d:7e:d1:ca:4e:25:b4: f1:e2:b1:af:55:ee:b5:ac:4a:78:e5:30:62:db:a3: 74:5d:17:f3:6f:61:c0:42:1c:96:2f:a1:b5:18:13: d1:36:6d:72:cf:fa:85:3b:42:fa:78:0e:ea:b0:db: 1f:f8:a0:12:f2:05:7d:16:1b:42:38:28:f0:9a:7c: 21:90:58:9a:c6:4e:10:85:b4:20:91:fd:93:b9:97: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1D:7B:A4:8D:16:E2:83:89:D0:44:D3:66:5B:8B:B2:C3:EC:44:98 X509v3 Authority Key Identifier: keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:19:0c:c8:1c:54:74:e9:f4:0c:33:23:84:aa:24:47:53:7e: 0c:38:b2:d8:0a:7f:fb:53:64:ab:52:1e:b6:f9:b1:47:b8:bc: f8:0b:d2:06:40:60:b8:53:f2:0a:0e:f6:ce:41:9c:c1:5a:70: e9:06:a3:74:5f:03:17:42:a5:0e:c5:72:f1:3e:18:62:3f:fc: 55:6e:d3:25:d9:74:65:94:12:fd:b0:7d:80:a6:c9:6c:72:a8: a7:19:90:8b:6e:f5:49:e0:74:13:b3:ea:80:44:93:b7:9e:9c: c1:a9:15:f4:97:b8:79:da:10:35:d7:24:c3:c6:2f:0b:e6:7f: 4f:88:a6:0d:86:20:c6:6a:e9:25:f5:14:1a:7b:d8:fd:10:74: 63:32:19:e7:2d:6f:4c:3d:c0:de:19:b3:71:17:ba:25:92:f9: ba:cd:e9:c7:33:4c:31:df:a2:d9:91:72:3d:66:28:40:38:a1: ab:c5:7f:e8:c4:24:9f:c1:95:bd:de:a5:c0:36:fc:02:14:76: f3:30:32:88:48:a7:35:83:d2:28:60:bc:90:a4:34:13:69:ab: 11:18:57:3a:62:bc:1e:b6:65:d6:02:29:6f:48:c2:44:63:2e: 6e:d4:aa:15:e3:b4:81:6a:d9:da:dc:4c:88:2f:c1:9d:69:9d: b1:0b:1f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCV94tDo+C/b5fMewqv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzQxMTU4ZjNlZDY1YmVlMWJkZTEyZjM0Zjg5NWFmYjBk ZDUwZDUwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD Eyg0ODFkN2JhNDhkMTZlMjgzODlkMDQ0ZDM2NjViOGJiMmMzZWM0NDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofsNximbkW8jk5R8WnXUu92vSEYJ euPo4lv0aHPebL3vHGaBQ974IhBrnCPQDhGUKFlrwIclK/P+Ddm63uOYBXGjfJJc tkLsjNbLejjVdjN1aGKQc/0sZtEtHtzvE6nWo6O8mbT9kR6fHKZqG1zeCJFf0YO+ qIyoRCkJR969VI5KdHu/p2A3NGlghLp5taUQOlfv+o1ldHC31p+TbhM+1iex2VoN tj3m+hqxvh1+0cpOJbTx4rGvVe61rEp45TBi26N0XRfzb2HAQhyWL6G1GBPRNm1y z/qFO0L6eA7qsNsf+KAS8gV9FhtCOCjwmnwhkFiaxk4QhbQgkf2TuZcz2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgde6SNFuKDidBE02Zbi7LD7ESYMB8GA1UdIwQY MBaAFFB0EVjz7WW+4b3hLzT4la+w3VDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQt MzU1M2I0ZWQ2Nzk0LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQtMzU1M2I0ZWQ2Nzk0 LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexkMyBxU dOn0DDMjhKokR1N+DDiy2Ap/+1Nkq1IetvmxR7i8+AvSBkBguFPyCg72zkGcwVpw 6QajdF8DF0KlDsVy8T4YYj/8VW7TJdl0ZZQS/bB9gKbJbHKopxmQi271SeB0E7Pq gESTt56cwakV9Je4edoQNdckw8YvC+Z/T4imDYYgxmrpJfUUGnvY/RB0YzIZ5y1v TD3A3hmzcRe6JZL5us3pxzNMMd+i2ZFyPWYoQDihq8V/6MQkn8GVvd6lwDb8AhR2 8zAyiEinNYPSKGC8kKQ0E2mrERhXOmK8HrZl1gIpb0jCRGMubtSqFeO0gWrZ2txM iC/BnWmdsQsf8w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:16 2025 by rpki-client