This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json) Hash identifier: nqgZ0JUhJi7VfbsziKIAlW9ksgGK6tOxXCGvexha9cA= Subject key identifier: D2:2A:70:0E:13:EB:06:6D:98:33:BE:57:7C:B7:06:A8:66:D8:AC:EC Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Certificate serial: 019AF38913A14C72DEF1181E322C7756CF3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:00:38 +0000 Manifest this update: Sat 06 Dec 2025 12:00:38 +0000 Manifest next update: Sun 07 Dec 2025 12:00:38 +0000 Files and hashes: 1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=) 2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: nWRSjiCzeiuQe0KJJ+PN5FtwcgQd5K1P+S/jQBZTnH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:13:a1:4c:72:de:f1:18:1e:32:2c:77:56:cf:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Validity Not Before: Dec 6 12:00:38 2025 GMT Not After : Dec 7 12:00:38 2025 GMT Subject: CN=d22a700e13eb066d9833be577cb706a866d8acec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:09:9c:26:df:4a:5b:6b:34:7b:61:b5:47: 47:d4:9f:e6:31:bd:7e:a7:83:78:d9:21:70:6c:c2: 9b:e0:be:41:96:71:b4:53:da:b3:7f:27:99:24:1e: 67:5d:55:c6:90:a1:b5:40:f3:93:e2:ea:10:8c:ed: 0b:e3:68:e8:ce:91:30:f3:1b:85:1f:57:70:35:d3: d1:b4:8e:96:c2:ac:a4:25:ab:fd:e7:c6:a2:f4:78: ad:88:14:35:af:64:cb:39:cc:68:f6:41:4f:b4:32: 63:52:d7:99:13:99:f4:3a:73:49:67:f9:f7:96:d0: f2:aa:a6:db:a7:28:b4:32:7d:fc:e9:e3:9f:9a:c2: d4:01:83:9f:dd:64:a1:56:49:dc:eb:bb:05:7f:16: d9:d7:7a:78:5c:31:4e:08:13:a1:c3:fc:a2:c3:5b: 11:75:f9:ac:76:e7:6e:82:f3:62:c1:f3:75:e8:74: ea:d3:f0:d2:d7:7a:d0:d1:a2:a9:ea:c0:31:52:96: a4:0d:95:9b:b2:48:40:29:62:1f:47:5f:64:5a:a1: ae:60:d2:a8:7a:a5:25:6a:99:c3:5a:cf:af:9b:e6: a0:1d:09:2c:a1:d6:b1:21:0a:a7:7d:2b:04:0b:53: 11:6a:fc:81:1b:36:0e:fb:e5:3a:3a:e0:b2:3b:14: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2A:70:0E:13:EB:06:6D:98:33:BE:57:7C:B7:06:A8:66:D8:AC:EC X509v3 Authority Key Identifier: keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:52:4e:f4:c0:4f:46:92:e2:66:b1:1a:a6:6b:6d:62:4b:8b: 1f:de:56:e2:dc:67:73:5a:b5:11:21:89:81:25:14:0f:cc:42: 88:0f:3e:8b:94:81:95:7f:2c:4a:2c:c0:86:3b:6d:36:bd:ec: be:5e:a3:ce:45:6c:e6:2a:1f:1e:16:4b:90:f9:b5:eb:54:c2: 1e:7b:d1:e2:44:35:9c:82:d1:ee:cb:65:ed:17:97:d0:5d:37: 6b:9f:77:15:fb:e0:7c:ef:95:40:4f:a3:8b:aa:66:8d:1b:42: f2:55:6d:62:d2:d6:b7:48:90:7e:1f:c3:0f:e1:bf:15:81:c3: 63:0f:ac:d6:7c:d5:1a:a5:35:35:1b:57:07:95:a1:d3:24:21: 83:b9:f1:37:25:f2:8b:25:1f:07:db:d0:06:ab:30:52:f7:c4: ea:44:c5:b1:f0:99:86:27:f1:e2:e5:5c:e6:56:be:cf:e0:e6: 91:8f:61:da:fe:0a:4b:a3:55:28:c7:b0:81:54:eb:9f:1d:4d: f4:4c:a9:f4:66:28:59:6d:b8:a5:50:e0:81:c6:a8:fe:6c:cf: 96:f9:9d:5f:6c:27:01:43:c3:2d:50:d8:6e:72:4e:fe:02:a0: ec:05:c6:25:24:57:bd:1f:9d:92:22:85:a0:58:9a:6a:20:f3: 19:12:95:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziROhTHLe8RgeMix3Vs8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDJhMzNmNWVjNjY4MDU5MWMwOTdmZGI0YWJhMGUwMjhm NDA4NDUwHhcNMjUxMjA2MTIwMDM4WhcNMjUxMjA3MTIwMDM4WjAzMTEwLwYDVQQD EyhkMjJhNzAwZTEzZWIwNjZkOTgzM2JlNTc3Y2I3MDZhODY2ZDhhY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFgJnCbfSltrNHthtUdH1J/mMb1+ p4N42SFwbMKb4L5BlnG0U9qzfyeZJB5nXVXGkKG1QPOT4uoQjO0L42jozpEw8xuF H1dwNdPRtI6WwqykJav958ai9HitiBQ1r2TLOcxo9kFPtDJjUteZE5n0OnNJZ/n3 ltDyqqbbpyi0Mn386eOfmsLUAYOf3WShVknc67sFfxbZ13p4XDFOCBOhw/yiw1sR dfmsdudugvNiwfN16HTq0/DS13rQ0aKp6sAxUpakDZWbskhAKWIfR19kWqGuYNKo eqUlapnDWs+vm+agHQksodaxIQqnfSsEC1MRavyBGzYO++U6OuCyOxQaSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIqcA4T6wZtmDO+V3y3Bqhm2KzsMB8GA1UdIwQY MBaAFFACoz9exmgFkcCX/bSroOAo9AhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMt ZWRlMWU0YmI2MTFlLzEvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMtZWRlMWU0YmI2MTFl LzEvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1JO9MBP RpLiZrEapmttYkuLH95W4txnc1q1ESGJgSUUD8xCiA8+i5SBlX8sSizAhjttNr3s vl6jzkVs5iofHhZLkPm161TCHnvR4kQ1nILR7stl7ReX0F03a593FfvgfO+VQE+j i6pmjRtC8lVtYtLWt0iQfh/DD+G/FYHDYw+s1nzVGqU1NRtXB5Wh0yQhg7nxNyXy iyUfB9vQBqswUvfE6kTFsfCZhifx4uVc5la+z+DmkY9h2v4KS6NVKMewgVTrnx1N 9Eyp9GYoWW24pVDggcao/mzPlvmdX2wnAUPDLVDYbnJO/gKg7AXGJSRXvR+dkiKF oFiaaiDzGRKV5g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:12 2025 by rpki-client