This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json) Hash identifier: 46SY64T1WXai17OyUa7DChnJxxaBJzFBsmGqO+FS/hM= Subject key identifier: 65:54:52:CD:FE:71:7B:3C:FF:46:B3:49:A0:26:52:FE:94:F2:F7:9D Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66 Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766 Certificate serial: 019AF0F5E74CCA9FB197B4BB2325F4DC92AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft Manifest number: 05C0 Signing time: Sat 06 Dec 2025 00:00:38 +0000 Manifest this update: Sat 06 Dec 2025 00:00:38 +0000 Manifest next update: Sun 07 Dec 2025 00:00:38 +0000 Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: j+b9j+NFnEW9NLML++WtShfXOtBa0p0+6VDKyUaOTNk=) 2: mQRNvpgGDTxl1ClE8lP4fBCE_zY.roa (hash: Y4EjZw1j54zSv6D2ykaYLyeNan8XUPzgXS8YGYvdiOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e7:4c:ca:9f:b1:97:b4:bb:23:25:f4:dc:92:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766 Validity Not Before: Dec 6 00:00:38 2025 GMT Not After : Dec 7 00:00:38 2025 GMT Subject: CN=655452cdfe717b3cff46b349a02652fe94f2f79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:a6:6f:e2:59:9d:3a:b3:78:dd:39:98:e9: 53:4a:60:64:db:1f:7c:87:77:33:4e:69:64:0e:be: 63:62:66:d5:3f:fe:73:f3:7c:8f:54:08:81:f0:d7: 33:ee:b0:24:7f:64:7b:7f:1c:54:3e:95:17:8d:7e: 15:cd:7e:0a:1a:8d:bf:7f:dd:0a:0f:e5:bf:30:78: 64:16:88:42:22:0e:3a:45:6e:e4:d8:25:85:46:cb: e0:de:08:1f:7e:99:fe:cc:f1:d2:bb:08:85:8d:4b: 69:bb:05:7f:09:a6:aa:49:ed:65:cf:2b:57:b1:4e: 98:d3:53:c2:7a:16:b4:c8:f0:6e:9f:64:e0:17:b4: 1d:4f:a1:94:32:ae:cb:2d:22:7b:cb:19:2f:80:38: 0d:e5:8e:3b:4b:e7:bd:87:24:e5:4b:bf:23:ae:7d: bb:06:50:18:b1:2e:ea:b3:bd:f6:24:e9:49:e6:17: 22:47:5a:f7:5d:e4:b7:3a:51:f9:6d:6f:7a:5f:eb: ae:7c:43:98:ec:9e:6e:e7:92:6f:73:6b:42:ff:60: 10:d0:ed:67:96:fd:39:a3:4b:84:58:a4:5d:09:8a: a1:67:3a:03:47:c4:6a:e2:95:c8:13:42:74:18:bc: 2d:cc:a3:68:43:19:51:58:b8:93:a6:2a:fd:76:ba: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:54:52:CD:FE:71:7B:3C:FF:46:B3:49:A0:26:52:FE:94:F2:F7:9D X509v3 Authority Key Identifier: keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:33:4a:5e:ed:9e:8f:64:56:c8:fa:2b:7c:0d:fe:ad:81:01: ac:25:af:45:85:da:52:19:49:d8:2f:e7:19:a8:a3:ce:ce:97: 7d:f5:97:2f:33:e3:53:c9:f9:5b:a1:52:3d:c3:35:39:48:bd: 11:8d:5d:77:b3:19:5f:ba:6a:0c:f7:a8:59:2c:0e:99:21:77: e7:35:ff:c5:cd:b8:68:fc:32:22:de:08:96:6a:1a:d4:a9:93: 5f:1c:14:17:9d:20:ed:11:45:71:d4:4a:53:cf:bf:24:d9:7d: 97:d6:24:df:74:03:30:86:0a:af:9e:3d:5e:bd:0d:94:9d:a4: 26:50:ba:77:18:43:e5:1f:2d:b2:69:d0:8b:d2:c1:7b:e1:7f: 89:49:13:d8:8c:30:f3:88:04:64:ed:65:0d:04:b3:dd:33:86: 43:9c:a1:67:00:54:b3:7d:9b:22:f1:bf:9e:b9:ca:b6:56:72: 9e:65:69:9a:b8:97:9d:f7:e9:e8:ea:44:aa:ad:ce:9f:d2:8a: d9:8a:fe:64:3f:9f:96:b6:79:67:e3:1f:26:8b:a2:88:64:2e: 1e:ed:9a:dc:99:61:fa:e1:7e:a7:f2:92:02:23:ea:ca:cb:2b: 53:8f:05:56:2a:9d:4c:bd:c4:f2:dc:bf:51:ce:b1:bd:fb:d4: 3a:12:ca:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9edMyp+xl7S7IyX03JKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYTJjMmMwNmRkYjg0NjY5YTg5YTk5ZmI4NzU2MDk1MTM0 Yzg3NjYwHhcNMjUxMjA2MDAwMDM4WhcNMjUxMjA3MDAwMDM4WjAzMTEwLwYDVQQD Eyg2NTU0NTJjZGZlNzE3YjNjZmY0NmIzNDlhMDI2NTJmZTk0ZjJmNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8mmb+JZnTqzeN05mOlTSmBk2x98 h3czTmlkDr5jYmbVP/5z83yPVAiB8Ncz7rAkf2R7fxxUPpUXjX4VzX4KGo2/f90K D+W/MHhkFohCIg46RW7k2CWFRsvg3ggffpn+zPHSuwiFjUtpuwV/CaaqSe1lzytX sU6Y01PCeha0yPBun2TgF7QdT6GUMq7LLSJ7yxkvgDgN5Y47S+e9hyTlS78jrn27 BlAYsS7qs732JOlJ5hciR1r3XeS3OlH5bW96X+uufEOY7J5u55Jvc2tC/2AQ0O1n lv05o0uEWKRdCYqhZzoDR8Rq4pXIE0J0GLwtzKNoQxlRWLiTpir9drqsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVUUs3+cXs8/0azSaAmUv6U8vedMB8GA1UdIwQY MBaAFFGiwsBt24Rmmompn7h1YJUTTIdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjct NzA1NGVhNmE2MGQ2LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjctNzA1NGVhNmE2MGQ2 LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjNKXu2e j2RWyPorfA3+rYEBrCWvRYXaUhlJ2C/nGaijzs6XffWXLzPjU8n5W6FSPcM1OUi9 EY1dd7MZX7pqDPeoWSwOmSF35zX/xc24aPwyIt4Ilmoa1KmTXxwUF50g7RFFcdRK U8+/JNl9l9Yk33QDMIYKr549Xr0NlJ2kJlC6dxhD5R8tsmnQi9LBe+F/iUkT2Iww 84gEZO1lDQSz3TOGQ5yhZwBUs32bIvG/nrnKtlZynmVpmriXnffp6OpEqq3On9KK 2Yr+ZD+flrZ5Z+MfJouiiGQuHu2a3Jlh+uF+p/KSAiPqyssrU48FViqdTL3E8ty/ Uc6xvfvUOhLKgw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:06 2025 by rpki-client