This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json) Hash identifier: u3LMQqhngkeCBFTkA8cCOIeFrO3Rp+YYxS+bidEy4gk= Subject key identifier: 57:6E:2C:95:93:3E:0A:C3:65:44:1E:F7:AD:ED:74:19:2D:98:1D:10 Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Certificate serial: 019AF2AD4D0F43080AB22B9C22F56DDDBC9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft Manifest number: 0DB1 Signing time: Sat 06 Dec 2025 08:00:34 +0000 Manifest this update: Sat 06 Dec 2025 08:00:34 +0000 Manifest next update: Sun 07 Dec 2025 08:00:34 +0000 Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=) 2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=) 3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: CY2yTPvxQ28Lep7ysoZFTOkdNdTn0WGfLx0ZqaYKJ9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4d:0f:43:08:0a:b2:2b:9c:22:f5:6d:dd:bc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Validity Not Before: Dec 6 08:00:34 2025 GMT Not After : Dec 7 08:00:34 2025 GMT Subject: CN=576e2c95933e0ac365441ef7aded74192d981d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:12:2a:ba:3b:ed:3a:98:09:ce:c1:c6:00: a2:67:69:fd:2e:ff:3c:62:d2:f2:a4:51:2d:d8:f9: d6:73:a2:e9:51:c9:c8:c5:e1:bc:33:e4:37:13:a6: ce:7d:38:14:b0:0b:34:df:25:76:77:ab:07:6d:10: f3:0f:b7:04:67:58:58:17:55:65:30:82:da:cd:c7: 6b:47:65:9c:d1:55:ce:2e:be:af:0b:97:da:da:df: 3b:c5:54:53:9b:2e:fd:22:ce:7b:46:48:c0:5d:df: 26:4f:06:8c:4f:20:0f:3b:cc:5f:84:e5:1d:29:b9: 57:c7:88:06:ca:a1:5c:9e:1f:c7:a7:a6:82:41:d9: 80:f4:68:ec:9a:c3:aa:2c:e3:6a:e9:99:2f:b6:f3: 51:5d:1c:dc:a5:71:c8:f1:8a:6f:8a:69:b3:b9:f4: 8b:78:4d:ad:8b:f8:51:78:97:07:66:57:95:91:a7: 3c:a1:9c:4e:8c:96:cf:f6:dd:00:1a:2f:50:15:3e: 0d:3f:b2:f5:8c:53:2e:7d:aa:cb:1b:93:c5:9d:82: 2f:b4:4a:85:60:60:ad:95:87:d3:6a:3c:93:b4:24: db:22:02:bc:a7:44:52:36:8f:20:d0:01:1f:05:f7: 71:b2:2c:54:ad:bd:51:42:05:a7:fe:5c:97:70:ed: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6E:2C:95:93:3E:0A:C3:65:44:1E:F7:AD:ED:74:19:2D:98:1D:10 X509v3 Authority Key Identifier: keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:c6:c2:6f:dc:7d:fd:52:7c:cb:e7:ad:cb:00:fb:bb:8e: 55:91:f7:35:71:33:a3:b9:bd:e2:37:19:0e:e9:f4:a0:7b:aa: f0:04:7f:cb:e0:26:96:5f:10:5f:9e:f2:89:15:9a:2d:e6:8f: 76:91:46:0d:1a:1e:09:51:93:a9:bf:9e:6c:fe:9d:8f:2f:5e: b7:94:7c:c0:b4:fd:ab:13:86:3a:51:76:28:1f:b6:27:8c:08: 15:09:e9:0b:bd:3a:25:e5:2a:9f:e0:5c:18:65:48:4c:46:ff: 0e:04:7c:f0:d7:ad:3b:64:47:8f:35:7e:38:34:a3:02:0e:f6: 39:29:dc:fd:d6:1c:0d:52:fc:ac:8e:71:d3:c9:8c:6d:33:1b: cb:0f:d5:38:28:ac:5c:41:7d:4f:d2:42:a0:6b:c0:f1:02:3b: 39:3b:0e:fe:aa:b2:02:1f:d8:a4:92:41:bb:85:19:98:20:8b: 66:66:bd:41:9a:74:8c:0d:67:4f:1e:08:b1:dc:7e:d7:b6:75: c0:32:fe:88:66:65:b8:8d:c4:39:fb:4f:b7:7a:e1:63:ef:d7: d8:02:7b:ea:2d:af:0e:03:6d:aa:a8:20:d8:d0:a1:4c:fb:39: f5:53:bd:7c:87:ef:e3:b7:2f:4c:cf:38:0b:1f:4a:94:44:2b: 94:0a:36:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU0PQwgKsiucIvVt3byeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4 MjhkZWEwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD Eyg1NzZlMmM5NTkzM2UwYWMzNjU0NDFlZjdhZGVkNzQxOTJkOTgxZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy4SKro77TqYCc7BxgCiZ2n9Lv88 YtLypFEt2PnWc6LpUcnIxeG8M+Q3E6bOfTgUsAs03yV2d6sHbRDzD7cEZ1hYF1Vl MILazcdrR2Wc0VXOLr6vC5fa2t87xVRTmy79Is57RkjAXd8mTwaMTyAPO8xfhOUd KblXx4gGyqFcnh/Hp6aCQdmA9GjsmsOqLONq6ZkvtvNRXRzcpXHI8YpvimmzufSL eE2ti/hReJcHZleVkac8oZxOjJbP9t0AGi9QFT4NP7L1jFMufarLG5PFnYIvtEqF YGCtlYfTajyTtCTbIgK8p0RSNo8g0AEfBfdxsixUrb1RQgWn/lyXcO2DgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFduLJWTPgrDZUQe963tdBktmB0QMB8GA1UdIwQY MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1 LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGnGwm/c ff1SfMvnrcsA+7uOVZH3NXEzo7m94jcZDun0oHuq8AR/y+Amll8QX57yiRWaLeaP dpFGDRoeCVGTqb+ebP6djy9et5R8wLT9qxOGOlF2KB+2J4wIFQnpC706JeUqn+Bc GGVITEb/DgR88NetO2RHjzV+ODSjAg72OSnc/dYcDVL8rI5x08mMbTMbyw/VOCis XEF9T9JCoGvA8QI7OTsO/qqyAh/YpJJBu4UZmCCLZma9QZp0jA1nTx4Isdx+17Z1 wDL+iGZluI3EOftPt3rhY+/X2AJ76i2vDgNtqqgg2NChTPs59VO9fIfv47cvTM84 Cx9KlEQrlAo2Og== -----END CERTIFICATE-----Generated at Sat Dec 6 14:13:16 2025 by rpki-client