This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json) Hash identifier: YUPsI+pqiB+K1496SAyppjfGRlQEkJoUZyeCcSszcCI= Subject key identifier: 35:97:65:FA:CE:FB:BF:0D:96:4D:89:DD:03:83:43:08:C8:66:8F:C0 Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29 Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629 Certificate serial: 019AF12CF6971DA1A7F163869FAC057532C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=) 2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: scAq6B5Zp4MxmTkITUZd8sFkfrX1ZtC4XZABsVb0uFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f6:97:1d:a1:a7:f1:63:86:9f:ac:05:75:32:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629 Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=359765facefbbf0d964d89dd03834308c8668fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:3e:f9:c0:bf:67:e5:c9:58:c7:27:ad:24: 23:51:91:48:09:f7:cb:e5:06:c6:b4:f6:ae:f8:ea: 1d:ae:08:bf:c5:8b:0e:d6:4d:12:5f:0e:87:aa:c7: d2:01:58:3d:23:20:ce:23:2c:5b:c2:3a:0c:12:02: b0:45:33:62:c2:b1:55:20:43:a5:d2:5b:66:98:87: 18:0a:3c:03:c6:34:b2:e2:fb:48:90:14:09:01:05: 4e:27:91:3c:68:93:c2:c9:43:7c:79:8e:8c:73:bc: 99:7b:27:7e:de:7b:b2:31:d1:40:b4:ca:71:d2:70: 2d:d6:00:b9:00:6f:1a:84:96:1d:db:df:b4:06:29: f2:6d:22:d1:81:ac:ba:43:ad:81:df:ca:03:6b:3c: 38:73:aa:f3:fb:ff:d7:4d:5a:d3:3e:e1:7c:41:6b: da:bf:0e:7e:84:14:bb:48:60:a3:4a:4d:1b:00:79: f2:e8:b8:65:b5:ec:b1:da:5b:f7:62:8d:65:65:6d: cf:cd:d1:71:6a:5e:e2:72:22:ae:b8:66:2f:6e:56: 26:0a:7f:ff:67:3f:f8:b5:54:13:68:45:78:c8:7c: ab:1c:dd:37:14:78:e1:41:20:63:9c:26:a5:0e:58: 72:0e:96:35:62:2a:55:b0:17:0b:c8:a3:f0:62:6c: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:97:65:FA:CE:FB:BF:0D:96:4D:89:DD:03:83:43:08:C8:66:8F:C0 X509v3 Authority Key Identifier: keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:70:1d:23:f7:0b:7b:e4:ab:22:8b:b5:99:31:3d:31:1a:9e: 71:0f:0b:96:79:6a:c9:b3:ba:39:33:c3:8b:3d:f1:38:e2:83: 89:a1:88:1b:00:43:2d:be:1a:6d:ae:13:91:f9:41:68:c5:1f: fd:eb:f5:1c:ad:26:5e:69:39:59:cc:9e:50:df:4d:bc:f5:0b: 51:29:1f:61:9a:58:e4:48:8a:9f:ce:0e:83:17:96:b5:73:4f: 14:4f:8a:46:cc:b4:63:ff:be:b9:fb:bf:97:44:3b:0f:ea:f5: 91:f9:88:ba:52:c3:7b:06:8d:a2:60:c2:9f:55:77:98:be:79: 76:d1:ec:89:d3:70:25:e5:df:6f:e7:6d:11:29:02:bb:5a:5c: eb:51:d4:86:fd:f7:80:3a:c8:2f:c7:6e:c6:9d:38:14:66:28: 6e:24:ae:54:86:6b:2b:34:50:fc:70:de:48:ce:b2:8a:fe:58: fe:df:02:25:42:9a:7c:b2:a0:6c:e8:aa:87:e3:45:43:45:3c: a9:60:24:41:4d:1a:53:e3:cc:08:02:25:7d:f5:60:2b:33:af: 17:a3:79:8e:64:d9:5c:ee:de:0e:fa:34:bf:19:7b:4f:7c:dc: 02:bc:45:10:56:19:97:4e:a5:17:98:d0:04:6a:f8:d7:85:2a: 66:9e:f6:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPaXHaGn8WOGn6wFdTLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjljYzQyNDE1ZWFjNjVjNGJhYTFhMzkyNjMwMmU4OGI1 ZTE2MjkwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EygzNTk3NjVmYWNlZmJiZjBkOTY0ZDg5ZGQwMzgzNDMwOGM4NjY4ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33E++cC/Z+XJWMcnrSQjUZFICffL 5QbGtPau+Oodrgi/xYsO1k0SXw6HqsfSAVg9IyDOIyxbwjoMEgKwRTNiwrFVIEOl 0ltmmIcYCjwDxjSy4vtIkBQJAQVOJ5E8aJPCyUN8eY6Mc7yZeyd+3nuyMdFAtMpx 0nAt1gC5AG8ahJYd29+0BinybSLRgay6Q62B38oDazw4c6rz+//XTVrTPuF8QWva vw5+hBS7SGCjSk0bAHny6Lhlteyx2lv3Yo1lZW3PzdFxal7iciKuuGYvblYmCn// Zz/4tVQTaEV4yHyrHN03FHjhQSBjnCalDlhyDpY1YipVsBcLyKPwYmxhFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWXZfrO+78Nlk2J3QODQwjIZo/AMB8GA1UdIwQY MBaAFLhpzEJBXqxlxLqho5JjAuiLXhYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUt YWY2ODQ2N2MzNzI3LzEvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUtYWY2ODQ2N2MzNzI3 LzEvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXAdI/cL e+SrIou1mTE9MRqecQ8LlnlqybO6OTPDiz3xOOKDiaGIGwBDLb4aba4TkflBaMUf /ev1HK0mXmk5WcyeUN9NvPULUSkfYZpY5EiKn84OgxeWtXNPFE+KRsy0Y/++ufu/ l0Q7D+r1kfmIulLDewaNomDCn1V3mL55dtHsidNwJeXfb+dtESkCu1pc61HUhv33 gDrIL8duxp04FGYobiSuVIZrKzRQ/HDeSM6yiv5Y/t8CJUKafLKgbOiqh+NFQ0U8 qWAkQU0aU+PMCAIlffVgKzOvF6N5jmTZXO7eDvo0vxl7T3zcArxFEFYZl06lF5jQ BGr414UqZp72Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:47 2025 by rpki-client