This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json) Hash identifier: xZpmq3VoSeQja4inEQGFVfwGWzYIlZstLEKy0huquhg= Subject key identifier: 08:27:82:FE:7F:77:D4:BD:8F:C9:0B:DA:D5:8B:F2:9D:C9:F4:29:7B Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Certificate serial: 019AF49BC07EF98FA2381C55452A906F3957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft Manifest number: 0DB2 Signing time: Sat 06 Dec 2025 17:00:39 +0000 Manifest this update: Sat 06 Dec 2025 17:00:39 +0000 Manifest next update: Sun 07 Dec 2025 17:00:39 +0000 Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=) 2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=) 3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: ewfT+Hwtsa8x1fOskgy/ht7Djpx+m1hv4/gdJj+YgyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c0:7e:f9:8f:a2:38:1c:55:45:2a:90:6f:39:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Validity Not Before: Dec 6 17:00:39 2025 GMT Not After : Dec 7 17:00:39 2025 GMT Subject: CN=082782fe7f77d4bd8fc90bdad58bf29dc9f4297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:bd:c1:99:d9:4f:a3:5f:cb:41:51:23:42: 42:d3:13:be:e4:36:3f:ea:b2:3f:91:c0:8d:28:ee: 09:85:fc:7f:17:55:59:c7:d9:ce:f2:c8:3f:d0:38: ac:81:02:31:26:49:ab:44:75:3c:d9:2f:3b:c4:ff: a7:24:6d:c2:f1:3c:bd:ab:15:ac:8e:bd:9f:cf:4a: c6:80:c0:01:5f:e7:e1:99:f4:4b:31:57:d3:2c:f3: 29:de:78:d3:b2:32:2a:12:04:b2:0f:61:98:10:06: 20:9c:c9:80:12:a5:a8:80:2b:9f:d9:36:9b:85:df: 09:91:74:91:c1:ea:aa:19:a0:e5:4c:e8:16:9f:46: 96:3d:f1:f3:41:4d:b4:7c:18:72:59:07:9f:af:54: 36:2a:e4:f4:0e:5e:17:36:7c:ef:28:28:e2:93:30: 60:26:73:ab:80:de:dd:14:75:16:41:3e:85:be:e2: 5e:6d:a6:8f:fb:71:11:93:44:e7:d5:d8:6d:09:02: 52:cd:51:a5:fc:80:31:8c:a1:94:d9:cc:8a:21:cd: 5c:84:f6:6d:ca:7b:7f:61:8f:d6:75:ed:85:d5:73: 5a:7b:d3:0f:e5:d3:5e:33:5d:cb:6a:8e:da:55:ef: 89:61:8e:22:cd:e3:b7:3c:1d:00:13:b0:fe:e9:5d: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:27:82:FE:7F:77:D4:BD:8F:C9:0B:DA:D5:8B:F2:9D:C9:F4:29:7B X509v3 Authority Key Identifier: keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cb:3c:23:c0:90:f6:49:49:38:26:81:11:d0:65:98:3f:32: 92:da:59:6a:c9:75:5c:a6:9f:b1:c7:35:d2:1a:9a:49:60:df: d8:ac:7a:f7:8d:91:6e:4a:83:75:63:d7:32:d4:be:54:23:a8: ba:bb:88:76:89:8d:30:30:4a:40:2b:86:a8:d3:2e:a6:53:15: 69:78:05:64:cb:54:b4:df:98:b8:4b:48:c8:53:02:06:35:97: 07:4f:7e:d4:c1:58:2a:b4:e6:4c:8e:c8:ec:9f:a2:59:71:66: 72:cb:67:c1:5a:b2:77:ac:e7:be:2e:3e:c2:8e:0d:dc:96:15: 99:9e:0e:2d:eb:6a:26:35:ff:46:70:9a:e2:4b:10:3f:bf:b7: c8:f9:f1:39:6e:be:cf:12:32:85:03:df:3a:77:dd:04:28:5c: ec:81:e8:11:55:e1:f1:cf:74:5f:8e:2e:99:3d:96:9f:f7:60: 4d:48:fe:86:d4:4d:d3:0b:db:0b:70:86:cd:3e:44:4c:7f:32: b5:b5:36:7a:d1:5b:84:c1:fe:27:b7:ed:9f:d0:eb:46:fb:bc: 39:9b:87:c7:ed:f1:42:b7:5b:4c:d9:42:35:a2:9f:a0:45:7a: 71:6f:74:1f:21:f4:3f:8d:2d:e2:53:04:11:0f:b4:d8:2c:ef: b0:7c:49:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8B++Y+iOBxVRSqQbzlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4 MjhkZWEwHhcNMjUxMjA2MTcwMDM5WhcNMjUxMjA3MTcwMDM5WjAzMTEwLwYDVQQD EygwODI3ODJmZTdmNzdkNGJkOGZjOTBiZGFkNThiZjI5ZGM5ZjQyOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn969wZnZT6Nfy0FRI0JC0xO+5DY/ 6rI/kcCNKO4Jhfx/F1VZx9nO8sg/0DisgQIxJkmrRHU82S87xP+nJG3C8Ty9qxWs jr2fz0rGgMABX+fhmfRLMVfTLPMp3njTsjIqEgSyD2GYEAYgnMmAEqWogCuf2Tab hd8JkXSRweqqGaDlTOgWn0aWPfHzQU20fBhyWQefr1Q2KuT0Dl4XNnzvKCjikzBg JnOrgN7dFHUWQT6FvuJebaaP+3ERk0Tn1dhtCQJSzVGl/IAxjKGU2cyKIc1chPZt ynt/YY/Wde2F1XNae9MP5dNeM13Lao7aVe+JYY4izeO3PB0AE7D+6V1tzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgngv5/d9S9j8kL2tWL8p3J9Cl7MB8GA1UdIwQY MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1 LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8s8I8CQ 9klJOCaBEdBlmD8yktpZasl1XKafscc10hqaSWDf2Kx6942RbkqDdWPXMtS+VCOo uruIdomNMDBKQCuGqNMuplMVaXgFZMtUtN+YuEtIyFMCBjWXB09+1MFYKrTmTI7I 7J+iWXFmcstnwVqyd6znvi4+wo4N3JYVmZ4OLetqJjX/RnCa4ksQP7+3yPnxOW6+ zxIyhQPfOnfdBChc7IHoEVXh8c90X44umT2Wn/dgTUj+htRN0wvbC3CGzT5ETH8y tbU2etFbhMH+J7ftn9DrRvu8OZuHx+3xQrdbTNlCNaKfoEV6cW90HyH0P40t4lME EQ+02CzvsHxJ0g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:46 2025 by rpki-client