This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json) Hash identifier: v997N3fO1szXpErEqZSBsmFsODbTlT7kmWJjfL4w9ys= Subject key identifier: 0E:5B:E0:EC:31:81:A1:B4:AD:E8:D7:0C:83:DE:26:28:E1:66:88:49 Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580 Certificate serial: 019AF5098C66455D473FFA5DC456FA275F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft Manifest number: 0BDB Signing time: Sat 06 Dec 2025 19:00:34 +0000 Manifest this update: Sat 06 Dec 2025 19:00:34 +0000 Manifest next update: Sun 07 Dec 2025 19:00:34 +0000 Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=) 2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: xFLIWES2L9mm59biEzvv4AqC2IEeyPd/Rg6EzCWkZss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8c:66:45:5d:47:3f:fa:5d:c4:56:fa:27:5f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580 Validity Not Before: Dec 6 19:00:34 2025 GMT Not After : Dec 7 19:00:34 2025 GMT Subject: CN=0e5be0ec3181a1b4ade8d70c83de2628e1668849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:ec:a6:f0:e4:dd:c8:9f:aa:cf:c7:d1:23: 27:54:12:90:3f:56:f2:a5:b1:d6:90:16:ec:62:60: 05:17:75:84:a5:46:c5:3b:03:e9:c2:a1:7c:6a:8c: fb:5c:02:e8:7a:61:23:ed:3d:75:ed:90:4e:41:d1: b0:3d:cd:53:e4:24:58:45:5c:52:a4:73:a7:01:ac: 59:1b:9c:7d:a9:a3:ff:10:56:b1:ba:42:ed:75:35: 62:05:ab:28:8b:a2:78:dd:ba:e8:ce:d6:9c:72:1a: 8d:81:3c:96:00:ea:a3:1d:ab:09:b5:bc:11:3e:76: 40:08:df:4b:f0:24:12:83:53:24:e8:46:d4:c7:24: c6:4d:fc:1b:9c:e3:fe:2f:20:4d:f1:83:b8:27:b5: 66:55:5a:27:98:9d:b3:9d:42:57:7f:14:ea:93:fc: 1b:1a:16:c8:e7:87:7b:c7:47:52:e3:2f:73:2b:77: 05:dd:8c:be:26:39:05:ba:d7:2c:bb:8a:9a:f6:54: 0b:ca:75:8b:37:6d:7d:d9:1c:3e:7c:4b:0b:c2:cd: 21:95:d5:98:c7:79:57:1d:1f:5c:57:57:55:81:2f: 65:77:22:fa:22:2a:64:c3:e2:a1:43:70:24:1a:03: 8e:9d:a0:ad:7d:8f:7f:69:bb:29:61:64:a4:3e:11: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5B:E0:EC:31:81:A1:B4:AD:E8:D7:0C:83:DE:26:28:E1:66:88:49 X509v3 Authority Key Identifier: keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d7:66:11:5c:60:ce:4a:b1:35:46:4e:77:a1:ec:76:a0:d3: 42:3f:86:15:2b:ec:29:2e:cb:86:fb:af:f1:da:39:33:97:a4: d1:e7:33:a4:60:db:7e:ec:7a:26:86:a7:58:8f:1a:e7:e6:15: 0d:70:5f:2b:aa:77:88:90:71:7c:76:a9:fe:85:bc:63:86:a7: 54:60:5c:ee:bc:b4:97:e9:87:75:ea:8f:2b:c7:cc:f7:6a:76: 21:3b:d4:54:ae:47:ef:46:52:a7:41:21:f2:a8:20:e0:54:38: f7:2d:67:be:50:0c:06:6b:c3:dd:f9:e7:89:5d:83:4e:e3:c8: 03:86:ac:f2:12:d8:88:cf:37:07:71:ae:56:40:15:6b:f7:f4: b0:0a:ad:45:db:d6:ac:d8:af:90:40:61:d4:3e:da:85:ad:48: e6:2a:a6:dd:06:2f:b6:3b:85:6d:42:ab:ac:64:5c:e2:2d:f1: 7c:0c:b5:28:c2:31:a0:90:8e:22:d5:fa:80:80:7c:05:22:50: f5:fd:fd:8f:55:65:36:4f:f2:93:84:77:53:81:dd:af:5d:c1: 93:39:00:7d:d1:9a:b1:9a:da:19:a5:7e:ce:ad:ee:df:8a:75: 03:53:bc:76:4d:59:cc:4a:20:c1:62:a2:e7:b7:73:d8:af:87: e6:1d:bc:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYxmRV1HP/pdxFb6J1+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTIzZjc0MGFkNTY0YzU2OTNiNzcwOTFjNzFiM2MwMzEz NmE1ODAwHhcNMjUxMjA2MTkwMDM0WhcNMjUxMjA3MTkwMDM0WjAzMTEwLwYDVQQD EygwZTViZTBlYzMxODFhMWI0YWRlOGQ3MGM4M2RlMjYyOGUxNjY4ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1DspvDk3cifqs/H0SMnVBKQP1by pbHWkBbsYmAFF3WEpUbFOwPpwqF8aoz7XALoemEj7T117ZBOQdGwPc1T5CRYRVxS pHOnAaxZG5x9qaP/EFaxukLtdTViBasoi6J43broztacchqNgTyWAOqjHasJtbwR PnZACN9L8CQSg1Mk6EbUxyTGTfwbnOP+LyBN8YO4J7VmVVonmJ2znUJXfxTqk/wb GhbI54d7x0dS4y9zK3cF3Yy+JjkFutcsu4qa9lQLynWLN2192Rw+fEsLws0hldWY x3lXHR9cV1dVgS9ldyL6Iipkw+KhQ3AkGgOOnaCtfY9/abspYWSkPhFYSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5b4OwxgaG0rejXDIPeJijhZohJMB8GA1UdIwQY MBaAFLqiP3QK1WTFaTt3CRxxs8AxNqWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMt ODUyN2M5YjNlNzVmLzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMtODUyN2M5YjNlNzVm LzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNdmEVxg zkqxNUZOd6HsdqDTQj+GFSvsKS7Lhvuv8do5M5ek0eczpGDbfux6JoanWI8a5+YV DXBfK6p3iJBxfHap/oW8Y4anVGBc7ry0l+mHdeqPK8fM92p2ITvUVK5H70ZSp0Eh 8qgg4FQ49y1nvlAMBmvD3fnniV2DTuPIA4as8hLYiM83B3GuVkAVa/f0sAqtRdvW rNivkEBh1D7aha1I5iqm3QYvtjuFbUKrrGRc4i3xfAy1KMIxoJCOItX6gIB8BSJQ 9f39j1VlNk/yk4R3U4Hdr13BkzkAfdGasZraGaV+zq3u34p1A1O8dk1ZzEogwWKi 57dz2K+H5h284w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:55 2025 by rpki-client