This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft File: UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json) Hash identifier: keXCmMDZqg0b2mrXEcQJoM/Hk4dq+pHFcH4ByNSe9Mk= Subject key identifier: 4F:7E:5F:3B:41:D0:D3:7D:28:9B:88:4C:96:B5:83:E0:25:E4:73:C1 Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6 Certificate issuer: /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6 Certificate serial: 019AF766A2625018FAA1E117EF761AC26879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 06:01:29 +0000 Manifest this update: Sun 07 Dec 2025 06:01:29 +0000 Manifest next update: Mon 08 Dec 2025 06:01:29 +0000 Files and hashes: 1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=) 2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: AM3fS6pfoSWgcys/fCB7p3njfs6BO2Kh1b4PtMUEPEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:a2:62:50:18:fa:a1:e1:17:ef:76:1a:c2:68:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6 Validity Not Before: Dec 7 06:01:29 2025 GMT Not After : Dec 8 06:01:29 2025 GMT Subject: CN=4f7e5f3b41d0d37d289b884c96b583e025e473c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:53:4e:e0:0d:31:61:1b:82:7c:25:a6:0e: a0:b3:a8:ef:03:f8:2f:ea:bd:04:90:58:61:6b:71: a6:50:f6:15:5f:54:4a:e6:e7:65:13:f0:19:d6:33: 42:7c:d3:6e:c8:4e:50:41:f9:64:2c:37:19:fe:f2: 8d:04:99:cd:aa:72:c5:86:4b:bf:89:b6:5a:a3:89: 54:b8:f9:8f:aa:0d:d7:6c:ba:6b:35:34:ce:bb:90: 89:bf:13:be:a0:16:0a:0b:84:bb:c8:3e:92:78:33: 6d:8d:33:c6:e4:e0:a7:f9:00:33:2b:4a:7f:51:6e: a5:0c:a7:b9:a0:de:e5:3d:69:ab:af:94:54:57:c8: 2d:64:8a:1d:27:96:5b:66:0f:6f:4f:d6:c0:fd:b0: 35:6f:e3:8b:c1:0a:fd:09:3e:7c:90:51:e3:f4:ac: 51:a2:e0:7d:c5:76:9e:cc:9f:bd:c2:fa:2a:05:c7: a1:39:0b:29:cc:08:52:e3:cb:97:0c:18:71:c1:79: 8c:81:ca:44:70:d8:20:14:5f:d5:2d:38:d6:b6:e1: 76:63:f9:32:45:bd:88:4e:af:8f:db:1e:8f:9e:52: 67:cf:2f:94:94:bc:28:39:85:2d:ec:12:19:79:c8: a5:47:61:e9:64:c5:6a:09:30:eb:10:3c:7b:4b:32: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7E:5F:3B:41:D0:D3:7D:28:9B:88:4C:96:B5:83:E0:25:E4:73:C1 X509v3 Authority Key Identifier: keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b7:e2:64:84:5c:1b:86:96:97:f9:2f:68:3d:ba:9d:58:62: c0:b4:a5:bf:07:25:c8:87:51:89:a2:80:5c:f9:2f:11:82:63: 27:7a:51:43:9e:6b:56:cb:af:ff:9a:02:9b:4c:f5:55:7e:59: 9e:a3:ef:6e:8a:d9:4d:43:ad:5e:fa:a9:f7:d0:28:d0:77:89: 4b:11:4a:c5:49:f8:99:d1:85:c4:26:c8:36:53:cf:5f:5e:87: 34:ed:89:e8:74:8a:77:76:47:81:01:64:4a:a2:42:ad:26:c5: fd:86:48:c3:74:cc:9f:20:27:0e:41:c6:01:6a:91:23:52:c6: c9:03:1a:24:25:d8:35:b4:45:5c:dc:d7:76:85:24:d2:6c:ef: 08:af:8e:b9:db:8b:48:f4:59:63:35:a1:6e:f0:3b:c4:dc:ca: ee:d6:e5:60:6f:66:5f:96:4d:50:1a:83:06:ac:69:e8:36:b3: fb:99:b3:eb:e2:8e:98:c0:2a:80:f0:87:72:1e:66:32:02:6a: c1:f3:ae:21:68:81:a0:d9:32:fe:4c:42:dd:15:50:aa:37:d0: 0f:03:a8:9f:3f:05:f6:1b:67:c3:2f:4d:da:ad:c2:c5:14:18: 66:14:05:6c:b4:b8:52:b8:54:0c:64:03:c3:7d:cc:53:b2:5a: 41:52:bc:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZqJiUBj6oeEX73Yawmh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDU1ZWJjM2QxYzUyZjE3YWU2NWFjMjkyZWJlMDk5MzEw MDljZjYwHhcNMjUxMjA3MDYwMTI5WhcNMjUxMjA4MDYwMTI5WjAzMTEwLwYDVQQD Eyg0ZjdlNWYzYjQxZDBkMzdkMjg5Yjg4NGM5NmI1ODNlMDI1ZTQ3M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu5TTuANMWEbgnwlpg6gs6jvA/gv 6r0EkFhha3GmUPYVX1RK5udlE/AZ1jNCfNNuyE5QQflkLDcZ/vKNBJnNqnLFhku/ ibZao4lUuPmPqg3XbLprNTTOu5CJvxO+oBYKC4S7yD6SeDNtjTPG5OCn+QAzK0p/ UW6lDKe5oN7lPWmrr5RUV8gtZIodJ5ZbZg9vT9bA/bA1b+OLwQr9CT58kFHj9KxR ouB9xXaezJ+9wvoqBcehOQspzAhS48uXDBhxwXmMgcpEcNggFF/VLTjWtuF2Y/ky Rb2ITq+P2x6PnlJnzy+UlLwoOYUt7BIZecilR2HpZMVqCTDrEDx7SzIO7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9+XztB0NN9KJuITJa1g+Al5HPBMB8GA1UdIwQY MBaAFFAFXrw9HFLxeuZawpLr4JkxAJz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQt Yzc4MTMyNGI3OTc5LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQtYzc4MTMyNGI3OTc5 LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7fiZIRc G4aWl/kvaD26nVhiwLSlvwclyIdRiaKAXPkvEYJjJ3pRQ55rVsuv/5oCm0z1VX5Z nqPvborZTUOtXvqp99Ao0HeJSxFKxUn4mdGFxCbINlPPX16HNO2J6HSKd3ZHgQFk SqJCrSbF/YZIw3TMnyAnDkHGAWqRI1LGyQMaJCXYNbRFXNzXdoUk0mzvCK+OuduL SPRZYzWhbvA7xNzK7tblYG9mX5ZNUBqDBqxp6Daz+5mz6+KOmMAqgPCHch5mMgJq wfOuIWiBoNky/kxC3RVQqjfQDwOonz8F9htnwy9N2q3CxRQYZhQFbLS4UrhUDGQD w33MU7JaQVK8PQ== -----END CERTIFICATE-----Generated at Sun Dec 7 11:35:57 2025 by rpki-client