This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft File: uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json) Hash identifier: OFbpupR0hARBELpNV24Sumez/pUaaA02KWVH0ov8jok= Subject key identifier: 20:FD:69:F2:DF:D7:58:28:DB:32:E9:79:10:07:CD:C7:C9:5A:7B:52 Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF Certificate issuer: /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf Certificate serial: 019AF31B23FDE545F8C03E895A00C3A48F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft Manifest number: 0E2E Signing time: Sat 06 Dec 2025 10:00:33 +0000 Manifest this update: Sat 06 Dec 2025 10:00:33 +0000 Manifest next update: Sun 07 Dec 2025 10:00:33 +0000 Files and hashes: 1: UEiFsCsSTC0Pg31Jp2WQ3gV01xE.roa (hash: ITQdPL8nWruiENBkvvq4/6T+xWub5wb4OWq1AfgZvKY=) 2: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: Oraq4pvWOg8jLRm7ZU4OnVfRB7b1X75KL73Mo8iJFKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:23:fd:e5:45:f8:c0:3e:89:5a:00:c3:a4:8f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf Validity Not Before: Dec 6 10:00:33 2025 GMT Not After : Dec 7 10:00:33 2025 GMT Subject: CN=20fd69f2dfd75828db32e9791007cdc7c95a7b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:d6:47:48:c5:2b:96:69:77:97:82:ba:86: 0a:5d:d5:56:16:59:bd:b9:de:45:0f:0f:a5:ef:3c: ab:88:7d:ef:ce:2a:f2:9c:4a:75:e1:46:b2:37:b9: cd:96:37:93:80:43:ab:40:47:7f:37:3c:0b:55:f8: be:dd:36:f7:5a:7c:38:b9:8a:ff:40:75:d8:fd:f1: dd:15:26:cd:9d:05:64:43:b0:6e:f7:f1:9e:2e:e9: dd:17:c4:78:0c:87:31:b3:c8:13:d7:ef:e5:39:ef: 76:49:42:47:5a:64:ba:d1:a5:24:80:0a:3e:98:37: 1e:9b:c7:6a:3b:01:4d:d8:78:7a:13:d1:79:29:3b: 73:43:d1:01:30:5b:d7:6f:1b:1e:c0:56:4c:f8:6c: 67:3e:77:c3:f8:e0:8d:a0:a5:7f:8e:8a:dd:67:7d: 7d:e8:1b:89:d3:d5:c9:ad:c3:ef:06:b2:a3:af:44: c9:93:43:a4:1b:f9:00:6e:4b:3e:80:94:31:c8:c6: ff:f0:2c:db:6e:72:7e:ce:23:79:20:a8:0e:ae:be: 76:ee:bd:5c:7c:09:5d:bb:16:bc:1f:95:dd:e9:22: 22:9b:98:6a:53:1b:2b:14:4f:cb:60:86:d6:3d:f5: e8:35:04:00:e1:22:a9:d1:22:ce:f0:64:37:f1:2d: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FD:69:F2:DF:D7:58:28:DB:32:E9:79:10:07:CD:C7:C9:5A:7B:52 X509v3 Authority Key Identifier: keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:47:27:ab:1e:45:a0:14:25:04:b8:ed:5b:13:14:31:ac:7d: d8:23:78:ab:d7:8f:15:5e:20:f5:03:83:aa:e4:18:77:3f:d0: 00:9e:88:bc:6d:46:58:de:70:1e:6f:f2:f0:fa:4c:8d:d8:be: a2:17:8d:75:7a:1a:94:1b:9f:d1:17:bb:2e:13:bf:4c:c8:8d: e1:62:1a:ab:8b:24:ff:6f:c8:f3:0a:c6:cf:d1:b4:c6:e9:e2: f7:81:20:26:98:55:55:1a:fc:34:29:9e:5b:75:bb:14:49:6c: 4a:1f:37:bb:3b:d5:97:17:16:f7:a6:d0:de:04:c8:05:32:4b: 9a:1c:53:d3:4f:f6:a4:df:75:8d:1e:c6:26:23:97:bb:38:75: 79:3d:1d:3f:4e:05:22:4c:2f:13:c9:2f:af:64:2d:a6:41:15: 48:8e:49:71:8e:bc:c1:cf:90:28:ee:88:0a:b0:92:93:b7:6d: c2:46:9a:31:f8:1f:e6:cb:a4:65:13:94:84:6a:ee:e5:b6:5e: 63:83:87:9d:2f:75:0a:3f:9e:fd:81:0d:09:04:18:9e:a2:1e: 1a:d8:5a:be:62:bb:ab:3d:7c:74:1b:e2:c2:22:91:1f:b3:ff: bc:f1:51:67:b0:97:4c:de:dd:43:a4:1a:76:95:09:a4:d9:57: 15:1c:53:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyP95UX4wD6JWgDDpI8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MDA2MzJkNGY4MDE1N2Q2OWVmNWI1M2ZlNjI0ZGJmOGFk ZmVmYWYwHhcNMjUxMjA2MTAwMDMzWhcNMjUxMjA3MTAwMDMzWjAzMTEwLwYDVQQD EygyMGZkNjlmMmRmZDc1ODI4ZGIzMmU5NzkxMDA3Y2RjN2M5NWE3YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugDWR0jFK5Zpd5eCuoYKXdVWFlm9 ud5FDw+l7zyriH3vzirynEp14UayN7nNljeTgEOrQEd/NzwLVfi+3Tb3Wnw4uYr/ QHXY/fHdFSbNnQVkQ7Bu9/GeLundF8R4DIcxs8gT1+/lOe92SUJHWmS60aUkgAo+ mDcem8dqOwFN2Hh6E9F5KTtzQ9EBMFvXbxsewFZM+GxnPnfD+OCNoKV/jordZ319 6BuJ09XJrcPvBrKjr0TJk0OkG/kAbks+gJQxyMb/8CzbbnJ+ziN5IKgOrr527r1c fAlduxa8H5Xd6SIim5hqUxsrFE/LYIbWPfXoNQQA4SKp0SLO8GQ38S1JkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD9afLf11go2zLpeRAHzcfJWntSMB8GA1UdIwQY MBaAFLkAYy1PgBV9ae9bU/5iTb+K3++vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEt YjgwZmYyZjE1NTJiLzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEtYjgwZmYyZjE1NTJi LzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUcnqx5F oBQlBLjtWxMUMax92CN4q9ePFV4g9QODquQYdz/QAJ6IvG1GWN5wHm/y8PpMjdi+ oheNdXoalBuf0Re7LhO/TMiN4WIaq4sk/2/I8wrGz9G0xuni94EgJphVVRr8NCme W3W7FElsSh83uzvVlxcW96bQ3gTIBTJLmhxT00/2pN91jR7GJiOXuzh1eT0dP04F IkwvE8kvr2QtpkEVSI5JcY68wc+QKO6ICrCSk7dtwkaaMfgf5sukZROUhGru5bZe Y4OHnS91Cj+e/YENCQQYnqIeGthavmK7qz18dBviwiKRH7P/vPFRZ7CXTN7dQ6Qa dpUJpNlXFRxT2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:17 2025 by rpki-client