This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json) Hash identifier: M4q2Ug06XDakBm9p7Grh4v/jgPeUJBlIItN6EhOw7SE= Subject key identifier: 28:25:FC:3D:65:1F:4E:B2:2E:7F:A6:C4:DB:D8:D7:99:EE:1B:F4:A0 Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34 Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034 Certificate serial: 019AF3C04C63F82EB93BFE836AF7D49C95C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft Manifest number: 1684 Signing time: Sat 06 Dec 2025 13:00:57 +0000 Manifest this update: Sat 06 Dec 2025 13:00:57 +0000 Manifest next update: Sun 07 Dec 2025 13:00:57 +0000 Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=) 2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: wH7jH97Ru50C0qiPzp/56xmuYgGJE9n4IqNuINRZCeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:4c:63:f8:2e:b9:3b:fe:83:6a:f7:d4:9c:95:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034 Validity Not Before: Dec 6 13:00:57 2025 GMT Not After : Dec 7 13:00:57 2025 GMT Subject: CN=2825fc3d651f4eb22e7fa6c4dbd8d799ee1bf4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:eb:f6:d5:99:f5:d8:b7:78:d7:35:c2:b1: e9:e4:31:4b:e7:53:a6:2e:9a:a1:bf:07:9d:b9:bd: c4:c9:59:de:32:f8:5a:c1:2e:12:60:a4:f0:a8:3a: 06:a3:78:e4:cf:e1:30:e0:e7:3e:94:92:21:1b:2c: a9:69:f3:b6:9b:e0:33:23:eb:82:b5:f7:ab:a7:73: 81:f6:e6:7e:df:6f:0c:6a:c4:8b:2a:8b:53:98:a5: dc:b1:33:c0:4e:98:52:46:67:61:28:c2:c8:9c:3e: 53:3f:84:a3:f8:a7:69:fb:1b:ab:85:d2:63:2c:a5: d7:1f:c9:52:58:c4:4c:8f:ee:df:21:c0:37:ad:9e: 0c:5b:62:5d:74:bd:e1:55:a9:55:58:64:eb:8e:dc: 2b:bd:39:92:49:66:0c:64:3c:c7:09:08:3b:f8:1f: 0e:ee:ee:de:7c:27:45:08:12:d1:23:27:8a:4e:98: 4c:b1:ab:5d:9a:29:d6:94:76:29:88:03:f3:91:e1: 69:d2:76:7d:4b:96:b4:61:e1:64:2f:15:d7:d1:b0: df:ef:94:a3:f1:12:76:c9:90:d7:fe:d0:27:f8:7f: 9d:8f:10:d1:ff:1e:9e:17:92:82:37:cb:a5:8e:4e: e8:c7:4b:5e:00:64:e3:8a:20:0d:12:d1:e4:ea:05: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:25:FC:3D:65:1F:4E:B2:2E:7F:A6:C4:DB:D8:D7:99:EE:1B:F4:A0 X509v3 Authority Key Identifier: keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:44:2a:96:77:a9:14:35:4a:95:b5:c9:46:7a:34:94:d9:4a: c3:ed:e4:98:c3:85:90:cb:bc:ac:16:05:59:6f:84:d2:83:7a: b5:41:36:ef:73:a1:03:50:6f:fb:06:3a:5c:22:6d:c8:8d:05: c9:44:a4:5c:23:57:c9:4a:01:14:77:fd:c1:aa:9d:72:24:3c: 29:ad:61:e4:22:72:7a:27:a1:15:c5:25:7b:3a:5d:02:53:c5: 1a:e4:42:c1:d0:f6:9e:b4:c9:36:88:29:0e:75:20:47:17:d4: 09:aa:40:38:f3:72:0a:62:55:c1:75:97:05:25:d6:75:e8:4b: 83:6d:ee:bc:7b:14:20:ca:49:9b:b3:ea:54:0a:24:86:a6:ad: 7e:ed:65:ec:67:51:c8:da:62:7a:72:28:4d:ad:1a:91:ac:02: cf:02:43:77:7d:8b:13:1d:ba:f4:5f:ea:ab:4c:7d:dc:88:cb: 88:58:1c:a0:8d:91:97:f2:14:79:db:18:34:d0:78:9e:90:87: 70:ce:45:a7:d3:4c:b5:5b:e0:ec:66:62:59:bb:86:bf:46:c1: 84:49:9c:a9:d3:43:0a:18:b7:b1:5b:bd:1a:4d:26:a1:2e:f8: 45:b4:c0:f7:f7:c5:95:5f:fb:88:a6:21:c3:80:af:6b:d0:db: e4:23:dd:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwExj+C65O/6DavfUnJXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWVkYzU3NmJkZjU2MDBiZmU0YzQ3OTAzODVmYWNlZGM0 NmYwMzQwHhcNMjUxMjA2MTMwMDU3WhcNMjUxMjA3MTMwMDU3WjAzMTEwLwYDVQQD EygyODI1ZmMzZDY1MWY0ZWIyMmU3ZmE2YzRkYmQ4ZDc5OWVlMWJmNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Lr9tWZ9di3eNc1wrHp5DFL51Om Lpqhvwedub3EyVneMvhawS4SYKTwqDoGo3jkz+Ew4Oc+lJIhGyypafO2m+AzI+uC tferp3OB9uZ+328MasSLKotTmKXcsTPATphSRmdhKMLInD5TP4Sj+Kdp+xurhdJj LKXXH8lSWMRMj+7fIcA3rZ4MW2JddL3hValVWGTrjtwrvTmSSWYMZDzHCQg7+B8O 7u7efCdFCBLRIyeKTphMsatdminWlHYpiAPzkeFp0nZ9S5a0YeFkLxXX0bDf75Sj 8RJ2yZDX/tAn+H+djxDR/x6eF5KCN8uljk7ox0teAGTjiiANEtHk6gX+NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgl/D1lH06yLn+mxNvY15nuG/SgMB8GA1UdIwQY MBaAFFGu3Fdr31YAv+TEeQOF+s7cRvA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQt YjE0ZTU5OWMwY2MyLzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQtYjE0ZTU5OWMwY2My LzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUQqlnep FDVKlbXJRno0lNlKw+3kmMOFkMu8rBYFWW+E0oN6tUE273OhA1Bv+wY6XCJtyI0F yUSkXCNXyUoBFHf9waqdciQ8Ka1h5CJyeiehFcUlezpdAlPFGuRCwdD2nrTJNogp DnUgRxfUCapAOPNyCmJVwXWXBSXWdehLg23uvHsUIMpJm7PqVAokhqatfu1l7GdR yNpienIoTa0akawCzwJDd32LEx269F/qq0x93IjLiFgcoI2Rl/IUedsYNNB4npCH cM5Fp9NMtVvg7GZiWbuGv0bBhEmcqdNDChi3sVu9Gk0moS74RbTA9/fFlV/7iKYh w4Cva9Db5CPdiw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:16 2025 by rpki-client