This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft File: Uev2DyIajjHTawfqptLlP20GS20.mft (raw, json) Hash identifier: eUt3anetKugXmTp4AFtzPwl+aNYfnhJ/aUu53VGcAJY= Subject key identifier: 3E:7C:39:C4:0F:65:B3:07:E8:29:39:62:AF:46:66:FC:F1:E4:C3:78 Authority key identifier: 51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D Certificate issuer: /CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d Certificate serial: 019AF1D1E6AAD23FB42CA688169FD50D8CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft Manifest number: 022B Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 6cL0Kq2jENP4RbTfqSWNtMD0gog.roa (hash: B9YDbFIbrVtsJdUb+90YG+5LOIPbPTqvU71w0BJqJSg=) 2: Uev2DyIajjHTawfqptLlP20GS20.crl (hash: AvXwO+uWr3tnsVk5Enn3PRv2iQ/rMIH11U8Yxl7rtfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e6:aa:d2:3f:b4:2c:a6:88:16:9f:d5:0d:8c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=3e7c39c40f65b307e8293962af4666fcf1e4c378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:89:d3:24:74:28:c0:08:22:49:12:75:ae: 44:e6:4d:08:77:8e:79:18:c7:50:82:72:2f:9a:ed: 09:0c:32:00:53:16:b5:a8:3e:1a:4a:63:dc:ef:13: f1:47:fd:41:7a:c3:31:16:78:e7:c4:d5:98:4f:30: 5f:dc:00:f1:ec:38:8e:b3:ae:1c:af:63:6b:0c:c5: b9:fc:ee:8e:1b:f8:93:f8:33:a7:a3:80:40:9c:44: cf:6c:3f:e8:b1:75:91:4f:39:84:10:ca:ee:75:09: 8f:3a:6c:82:d5:63:9b:4d:58:57:d0:7b:83:3a:4c: a4:94:17:8a:74:06:9f:86:cb:e3:71:08:5b:9d:64: d2:a3:4a:ef:ed:70:5b:74:b9:cc:01:5f:ce:72:28: 87:34:f7:10:d1:22:69:e1:72:51:8e:a6:f8:9b:59: e2:5c:2e:36:a3:4f:e1:c9:b0:de:2a:b2:b5:fa:f1: 51:f7:39:44:77:9d:ee:75:ad:b2:ba:63:06:1b:64: 52:6e:6a:42:e3:9c:b1:bb:46:18:a3:93:a2:65:23: f1:2a:f8:6b:54:ea:a9:5c:4d:2f:36:8e:96:0c:9a: 8c:7f:1a:63:fb:44:2d:47:3e:cb:be:ff:58:2f:cd: 89:26:87:78:98:b7:4b:08:b7:f8:ce:da:0d:b0:c4: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7C:39:C4:0F:65:B3:07:E8:29:39:62:AF:46:66:FC:F1:E4:C3:78 X509v3 Authority Key Identifier: keyid:51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ac:a6:1c:39:29:41:db:7e:dd:f1:80:7e:c6:09:ea:17:34: 9d:6c:c0:e7:b9:38:da:67:13:31:36:94:1a:87:bc:bd:9c:16: 02:2e:cf:c2:61:36:45:2e:04:c8:56:fe:90:b2:b8:17:7a:eb: 82:ed:f2:30:6d:df:03:58:b8:a8:de:2e:3b:53:10:b4:1f:83: b2:05:ae:10:82:fc:0b:fb:c7:d2:6d:d5:8f:90:ac:49:e9:0f: 34:b2:ef:76:62:e8:35:c6:79:fe:0c:50:d0:4a:52:25:b3:b2: c9:67:70:24:36:c6:51:4c:9b:7e:d9:a0:b7:bd:e3:a4:68:f4: 80:9f:11:1a:4c:0c:53:14:fc:4c:2a:b6:8b:9b:96:fe:1b:db: 38:56:8e:b1:f4:39:c5:e4:0a:5c:01:ce:1b:9b:fd:fb:2a:38: b2:b1:06:7d:38:8f:c5:58:8c:2e:4a:3c:12:8b:3c:87:68:a9: a9:ab:68:fb:dc:5c:fe:9d:7c:26:82:05:c5:b5:3b:a6:2f:2e: a5:9c:f4:c2:35:8b:bd:12:50:5f:bc:21:3a:aa:f5:65:71:4a: 61:ec:2f:02:49:00:9a:a1:9b:66:31:46:ab:9e:77:a3:4a:44: b4:06:d5:c7:05:a4:07:af:0d:0e:3f:73:21:9f:c7:de:55:c2: 73:f1:b5:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eaq0j+0LKaIFp/VDYy4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWJmNjBmMjIxYThlMzFkMzZiMDdlYWE2ZDJlNTNmNmQw NjRiNmQwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EygzZTdjMzljNDBmNjViMzA3ZTgyOTM5NjJhZjQ2NjZmY2YxZTRjMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMuJ0yR0KMAIIkkSda5E5k0Id455 GMdQgnIvmu0JDDIAUxa1qD4aSmPc7xPxR/1BesMxFnjnxNWYTzBf3ADx7DiOs64c r2NrDMW5/O6OG/iT+DOno4BAnETPbD/osXWRTzmEEMrudQmPOmyC1WObTVhX0HuD OkyklBeKdAafhsvjcQhbnWTSo0rv7XBbdLnMAV/OciiHNPcQ0SJp4XJRjqb4m1ni XC42o0/hybDeKrK1+vFR9zlEd53uda2yumMGG2RSbmpC45yxu0YYo5OiZSPxKvhr VOqpXE0vNo6WDJqMfxpj+0QtRz7Lvv9YL82JJod4mLdLCLf4ztoNsMQdDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD58OcQPZbMH6Ck5Yq9GZvzx5MN4MB8GA1UdIwQY MBaAFFHr9g8iGo4x02sH6qbS5T9tBkttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWV2MkR5SWFqakhUYXdmcXB0TGxQMjBHUzIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2FlMTgtNTk2Ny00YzY4LWIwOWIt NzdjNzAzNjU3NDFmLzEvVWV2MkR5SWFqakhUYXdmcXB0TGxQMjBHUzIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yY2FlMTgtNTk2Ny00YzY4LWIwOWItNzdjNzAzNjU3NDFm LzEvVWV2MkR5SWFqakhUYXdmcXB0TGxQMjBHUzIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqymHDkp Qdt+3fGAfsYJ6hc0nWzA57k42mcTMTaUGoe8vZwWAi7PwmE2RS4EyFb+kLK4F3rr gu3yMG3fA1i4qN4uO1MQtB+DsgWuEIL8C/vH0m3Vj5CsSekPNLLvdmLoNcZ5/gxQ 0EpSJbOyyWdwJDbGUUybftmgt73jpGj0gJ8RGkwMUxT8TCq2i5uW/hvbOFaOsfQ5 xeQKXAHOG5v9+yo4srEGfTiPxViMLko8Eos8h2ipqato+9xc/p18JoIFxbU7pi8u pZz0wjWLvRJQX7whOqr1ZXFKYewvAkkAmqGbZjFGq553o0pEtAbVxwWkB68NDj9z IZ/H3lXCc/G1dA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:20:46 2025 by rpki-client