This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json) Hash identifier: xgwoqoUj0hMDWpw5+QMrmmKSjcFV8lizJC9otiIw1AI= Subject key identifier: C5:19:20:CA:E1:D4:F8:7A:93:07:A1:65:C5:D9:C7:9E:B5:17:9E:A6 Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83 Certificate serial: 019AF3C0A74D647482DBDF1E3AFB212F8406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 13:01:20 +0000 Manifest this update: Sat 06 Dec 2025 13:01:20 +0000 Manifest next update: Sun 07 Dec 2025 13:01:20 +0000 Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=) 2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=) 3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=) 4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: FORAsM8x/Dy417cLV/rsZrV8CUFGIa4lEIf59QC+7KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a7:4d:64:74:82:db:df:1e:3a:fb:21:2f:84:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83 Validity Not Before: Dec 6 13:01:20 2025 GMT Not After : Dec 7 13:01:20 2025 GMT Subject: CN=c51920cae1d4f87a9307a165c5d9c79eb5179ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:c5:7c:ab:d1:fc:6d:e3:c8:dd:ca:d9:62: 14:50:1e:c7:2d:5b:58:52:b4:c0:3c:7f:6f:52:a3: 48:3d:9d:e8:f3:9d:9d:8c:d8:a1:81:65:8f:41:2f: dd:85:17:ac:54:7e:ac:ce:47:ad:c3:84:04:61:8a: 91:40:86:b7:9d:13:dd:7c:da:60:f1:6e:4b:06:df: 9f:88:05:f9:e6:50:7d:31:d0:dc:74:ac:29:fd:cf: 18:1d:51:7f:68:14:9a:c0:dd:7b:3a:e1:e6:92:37: d5:9e:1b:66:3f:bd:14:45:21:da:8c:17:8e:23:80: fc:c2:f3:01:22:4c:31:f6:9f:94:7f:1d:15:a3:d3: 9e:8f:d0:d3:9d:c3:88:86:31:c3:03:62:d2:01:7e: f0:c9:e6:66:91:89:da:ba:4e:3f:f1:82:0a:6f:1c: 26:46:3e:0e:c5:df:a5:2c:2e:e1:84:90:03:5e:c8: 23:ac:d3:75:c7:76:39:98:ef:31:3e:63:dd:2f:d5: 4a:55:52:41:b0:1b:d3:75:a2:c8:ef:86:87:5f:cf: ac:15:81:d9:f1:a7:39:b8:9a:59:85:1c:b4:18:ad: fa:e6:ab:42:1d:a9:3d:76:a7:4a:9b:b6:00:b6:e0: 48:73:d5:7a:48:27:77:56:2b:e8:48:3d:f7:e1:5e: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:20:CA:E1:D4:F8:7A:93:07:A1:65:C5:D9:C7:9E:B5:17:9E:A6 X509v3 Authority Key Identifier: keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3a:1f:74:44:a5:cd:1c:63:44:36:d6:98:8f:40:a7:fc:7d: d6:b0:dc:a3:85:b7:8b:3b:25:64:50:15:46:d7:62:3d:72:54: 68:dc:45:bf:90:cc:da:b0:31:5b:ad:ca:c6:e8:33:41:cc:fc: 7d:4e:03:58:18:b4:c9:6c:91:0e:b5:c8:01:1a:e7:08:08:1e: 26:4c:bd:50:d3:db:8d:8b:d7:f9:1f:0c:2e:40:86:a4:41:7f: bf:b9:49:d0:44:fd:af:0f:4a:28:2c:d1:35:31:f7:34:d2:95: 27:fe:af:3e:52:7e:ec:2c:6b:1f:09:af:37:2d:5b:f7:86:cc: 6f:e6:68:6d:e5:c4:02:c7:b4:09:d2:10:18:5d:dd:4b:7e:e0: 27:5e:31:a5:88:a7:32:bb:08:7b:0d:82:9a:c3:0d:e0:79:88: a3:34:b2:60:07:d5:ad:0b:11:e0:b7:00:97:c7:1f:b7:eb:b3: 63:6f:e3:9e:51:0d:6e:d1:63:54:a6:04:ad:90:1d:c4:77:c7: 80:b1:f1:09:4f:09:89:f1:c5:bc:56:5a:e4:af:03:c7:b9:f1: 02:27:9e:15:03:bf:34:04:b1:97:7a:a8:2d:a9:de:d6:a4:4e: 31:e8:a2:a3:33:3d:a9:dc:b7:a4:cf:c2:64:17:43:64:bf:f6: 3c:12:05:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKdNZHSC298eOvshL4QGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MzBkYTIxNTE4MTg0MTQ1ZjZkNzYyMWI1YTEzYmQ1NDAz NWFjODMwHhcNMjUxMjA2MTMwMTIwWhcNMjUxMjA3MTMwMTIwWjAzMTEwLwYDVQQD EyhjNTE5MjBjYWUxZDRmODdhOTMwN2ExNjVjNWQ5Yzc5ZWI1MTc5ZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A/FfKvR/G3jyN3K2WIUUB7HLVtY UrTAPH9vUqNIPZ3o852djNihgWWPQS/dhResVH6szketw4QEYYqRQIa3nRPdfNpg 8W5LBt+fiAX55lB9MdDcdKwp/c8YHVF/aBSawN17OuHmkjfVnhtmP70URSHajBeO I4D8wvMBIkwx9p+Ufx0Vo9Oej9DTncOIhjHDA2LSAX7wyeZmkYnauk4/8YIKbxwm Rj4Oxd+lLC7hhJADXsgjrNN1x3Y5mO8xPmPdL9VKVVJBsBvTdaLI74aHX8+sFYHZ 8ac5uJpZhRy0GK365qtCHak9dqdKm7YAtuBIc9V6SCd3VivoSD334V7NhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUZIMrh1Ph6kwehZcXZx561F56mMB8GA1UdIwQY MBaAFLkw2iFRgYQUX212IbWhO9VANayDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWIt OTk0YWY1YzM0NDAyLzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWItOTk0YWY1YzM0NDAy LzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDofdESl zRxjRDbWmI9Ap/x91rDco4W3izslZFAVRtdiPXJUaNxFv5DM2rAxW63KxugzQcz8 fU4DWBi0yWyRDrXIARrnCAgeJky9UNPbjYvX+R8MLkCGpEF/v7lJ0ET9rw9KKCzR NTH3NNKVJ/6vPlJ+7CxrHwmvNy1b94bMb+ZobeXEAse0CdIQGF3dS37gJ14xpYin MrsIew2CmsMN4HmIozSyYAfVrQsR4LcAl8cft+uzY2/jnlENbtFjVKYErZAdxHfH gLHxCU8JifHFvFZa5K8Dx7nxAieeFQO/NASxl3qoLane1qROMeiiozM9qdy3pM/C ZBdDZL/2PBIFSw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:39 2025 by rpki-client