This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json) Hash identifier: kIIxcjUdEW+TDWNWYMGdfInHen7f2pWbwgkKNTlCciA= Subject key identifier: 01:E4:C6:DF:0B:60:BB:88:35:7B:82:5C:F7:7E:4C:BA:F6:96:4A:B3 Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3 Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3 Certificate serial: 019AF2AD81621BB6E8F7EB17A4C422EC74F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft Manifest number: 0FE5 Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa (hash: mQpu5Z0eDQkFYVXPC9Ju2CwxJctFEU3LSWItHzUvqPk=) 2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: WsP1bsgusYZrf1a5f+rMFMLXon2PplLcpmvMXF1gbZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:81:62:1b:b6:e8:f7:eb:17:a4:c4:22:ec:74:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3 Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=01e4c6df0b60bb88357b825cf77e4cbaf6964ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:01:07:71:16:1c:2b:58:79:b8:f1:9a:a1: 7f:a9:b5:bb:cf:d3:be:22:7b:95:b2:e6:dc:62:ad: 27:82:3d:94:36:81:77:ff:3c:31:16:e6:19:23:df: 37:ae:29:cf:60:5a:88:ef:cb:f0:05:02:12:b6:19: 7d:74:b0:aa:a4:ad:9a:b2:ea:22:18:47:24:f2:99: 17:3f:b1:18:e6:5e:bf:8a:7f:55:f5:04:0a:f2:81: 4d:a5:74:cc:6b:02:c7:0a:af:ee:ff:c4:ad:ab:e6: 7b:02:ec:54:83:0d:22:f5:90:2a:a4:2a:c5:f4:6f: e4:a4:d9:81:d6:e9:8d:b0:24:05:05:da:ff:cd:5c: 54:3a:ff:e9:74:d0:ba:eb:9e:ba:64:c6:0d:92:d9: c0:29:95:39:05:52:05:9e:c3:d6:b5:8d:68:79:75: 10:15:c8:78:1a:1d:25:a2:13:84:01:30:31:f8:2d: 15:39:80:08:77:55:5a:41:79:3c:d3:e2:83:65:db: b5:28:bd:a3:5a:63:be:9c:32:de:2b:23:fc:89:5c: 46:4c:bf:f0:f7:4f:1b:d8:9b:0a:be:f8:d5:f3:5c: 3a:53:a5:2a:2c:6c:36:6e:72:a8:91:9b:77:c9:f0: c2:aa:ce:8c:f8:9c:a0:e8:f8:88:97:38:fb:57:78: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:C6:DF:0B:60:BB:88:35:7B:82:5C:F7:7E:4C:BA:F6:96:4A:B3 X509v3 Authority Key Identifier: keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:71:97:78:5d:ca:95:ed:b4:16:26:64:0d:a4:75:af:3a:6a: 6a:30:64:66:bb:d7:fe:31:62:53:9c:6b:99:12:2b:d2:1d:73: aa:73:25:8f:76:20:50:5b:15:fd:e1:6f:bc:8f:cf:6c:6a:21: a1:91:7e:a5:2c:66:d6:d3:5c:d0:59:03:2a:e1:00:6c:13:90: 74:9d:c7:c2:fa:76:91:8d:cd:20:87:cb:fa:54:8a:a7:3f:6b: 42:28:fd:85:9c:a3:37:7e:5c:21:70:3b:e4:e7:56:eb:29:bf: c6:91:f8:89:82:87:22:8e:ce:19:fd:3a:90:da:5d:7a:5e:58: 37:f4:47:01:8b:af:1a:3a:76:32:b2:75:cb:ea:79:7d:dd:be: 48:ed:66:e4:63:6b:d8:8b:bd:19:9a:ba:44:ab:27:16:d9:df: 71:34:0f:ba:82:24:a7:80:34:eb:89:1d:e3:ca:b9:6c:62:cc: 3c:1b:4d:8f:32:90:46:75:68:58:0c:24:35:6c:1c:01:a8:4b: ea:a3:b6:77:f8:3b:6a:30:cc:04:d6:ec:bc:c7:8f:cd:4d:ae: ee:48:d7:f4:a0:33:cd:79:ff:0b:4d:95:ab:99:13:33:e8:4f: 54:ac:c3:08:a6:81:59:7a:ce:82:c6:e3:6c:69:86:91:a2:33: 76:04:55:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYFiG7bo9+sXpMQi7HTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3 YWE2YzMwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD EygwMWU0YzZkZjBiNjBiYjg4MzU3YjgyNWNmNzdlNGNiYWY2OTY0YWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOcBB3EWHCtYebjxmqF/qbW7z9O+ InuVsubcYq0ngj2UNoF3/zwxFuYZI983rinPYFqI78vwBQISthl9dLCqpK2asuoi GEck8pkXP7EY5l6/in9V9QQK8oFNpXTMawLHCq/u/8Stq+Z7AuxUgw0i9ZAqpCrF 9G/kpNmB1umNsCQFBdr/zVxUOv/pdNC66566ZMYNktnAKZU5BVIFnsPWtY1oeXUQ Fch4Gh0lohOEATAx+C0VOYAId1VaQXk80+KDZdu1KL2jWmO+nDLeKyP8iVxGTL/w 908b2JsKvvjV81w6U6UqLGw2bnKokZt3yfDCqs6M+Jyg6PiIlzj7V3hNcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHkxt8LYLuINXuCXPd+TLr2lkqzMB8GA1UdIwQY MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnGXeF3K le20FiZkDaR1rzpqajBkZrvX/jFiU5xrmRIr0h1zqnMlj3YgUFsV/eFvvI/PbGoh oZF+pSxm1tNc0FkDKuEAbBOQdJ3Hwvp2kY3NIIfL+lSKpz9rQij9hZyjN35cIXA7 5OdW6ym/xpH4iYKHIo7OGf06kNpdel5YN/RHAYuvGjp2MrJ1y+p5fd2+SO1m5GNr 2Iu9GZq6RKsnFtnfcTQPuoIkp4A064kd48q5bGLMPBtNjzKQRnVoWAwkNWwcAahL 6qO2d/g7ajDMBNbsvMePzU2u7kjX9KAzzXn/C02Vq5kTM+hPVKzDCKaBWXrOgsbj bGmGkaIzdgRVgg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:13 2025 by rpki-client