This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json) Hash identifier: KPVumO/gOBN3fBgvrbWVIjodtxUT2ve//q/iVVM32is= Subject key identifier: 15:27:95:02:9A:9B:A9:17:EF:34:B8:82:1C:2E:C2:B3:28:97:B1:F1 Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f Certificate serial: 019AF3F72FE9CD63FFE70DBDE2B3E8DA1436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft Manifest number: 1413 Signing time: Sat 06 Dec 2025 14:00:54 +0000 Manifest this update: Sat 06 Dec 2025 14:00:54 +0000 Manifest next update: Sun 07 Dec 2025 14:00:54 +0000 Files and hashes: 1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=) 2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: EkeHDktmnn7XYR2S8Zn8wRXd0qVTrs6OGNnbQ3zzcpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:2f:e9:cd:63:ff:e7:0d:bd:e2:b3:e8:da:14:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f Validity Not Before: Dec 6 14:00:54 2025 GMT Not After : Dec 7 14:00:54 2025 GMT Subject: CN=152795029a9ba917ef34b8821c2ec2b32897b1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:74:a7:82:d5:27:5f:5a:ed:1a:4a:27:61: de:f6:90:3b:5c:8b:24:5c:74:0f:21:c0:5c:2c:be: a9:46:25:a1:89:e0:30:11:82:71:ef:cb:ec:39:2f: 35:1f:8e:76:3a:2c:d4:8e:1a:f1:16:10:80:b8:2c: ff:03:49:c8:7a:0d:c7:da:f0:cc:bc:1f:d7:ff:9b: 50:53:96:eb:c5:e9:eb:33:45:56:ee:e1:3e:ad:ce: 02:b3:d4:eb:2e:50:12:80:e2:cb:30:96:4b:8e:5a: 1b:43:e0:82:21:e7:73:11:7d:87:10:2d:98:ac:5f: 56:83:a2:9e:10:41:91:e0:5c:31:c8:4b:22:4d:9f: af:ed:32:8f:b6:22:e8:94:67:bc:8b:c7:14:58:05: ec:95:29:8a:84:d9:c9:9d:0a:60:7e:a2:b6:51:16: 47:48:be:1d:a0:29:d3:66:7d:aa:3e:85:aa:50:3a: 7a:8c:8a:a1:cf:1b:ec:e8:29:85:08:db:4d:a0:92: 6b:ee:6a:cf:d6:55:d0:42:e3:b2:35:9c:45:1f:fe: 6b:e2:0a:a3:28:5a:a2:45:01:a9:5c:0d:bd:37:20: d5:bd:ea:11:3c:be:aa:c6:80:f0:bc:23:90:83:c8: 47:45:2a:aa:8e:bd:04:4e:a0:ac:2d:b9:82:7a:7b: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:27:95:02:9A:9B:A9:17:EF:34:B8:82:1C:2E:C2:B3:28:97:B1:F1 X509v3 Authority Key Identifier: keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0a:b0:c8:60:2d:04:76:f3:6d:f6:6f:6d:6d:f4:7a:ca:e5: 0f:ca:a6:d3:a6:6b:93:25:94:21:28:e9:7e:e6:62:c8:2b:61: 95:23:f7:32:3b:83:29:dd:db:60:58:17:69:7e:aa:a4:6e:44: 30:6f:f1:68:c7:e8:d7:f1:44:5d:54:62:c3:7c:91:3b:66:1a: a5:ae:37:eb:91:f4:f1:a1:25:71:1a:03:6d:e3:ed:ca:ae:9d: bf:c4:72:2d:1c:f6:da:2a:24:29:7a:ae:14:a2:30:b0:3b:51: 1c:35:c6:c5:a0:aa:55:83:ca:cf:26:52:43:c9:17:d0:19:06: 83:34:b6:91:93:e1:5e:75:89:f2:a1:1f:00:1a:29:d9:47:24: d1:3a:c4:23:2f:a8:93:46:6a:b9:b1:d3:9f:71:36:98:21:a6: 2e:9a:62:aa:35:23:d8:92:84:35:2f:29:9a:9b:7f:1b:f7:35: 92:87:cd:32:4f:53:4c:fa:c0:da:aa:79:77:cc:fd:17:7d:d9: 61:f0:b2:ea:a8:cd:8b:bf:c6:90:c6:dc:f7:4c:dd:40:96:7e: 0f:1f:55:00:55:e1:27:5f:9b:20:3e:56:ef:36:14:7e:51:32: db:2f:eb:48:f0:ab:a3:47:17:c0:1a:d2:0f:87:bd:fa:c7:5f: f0:4d:ec:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9y/pzWP/5w294rPo2hQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzhmMjNkMGM0OGM2MmUxOGUyOGY1NjBjYzkxNTk4OTNk NGU0MmYwHhcNMjUxMjA2MTQwMDU0WhcNMjUxMjA3MTQwMDU0WjAzMTEwLwYDVQQD EygxNTI3OTUwMjlhOWJhOTE3ZWYzNGI4ODIxYzJlYzJiMzI4OTdiMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtR0p4LVJ19a7RpKJ2He9pA7XIsk XHQPIcBcLL6pRiWhieAwEYJx78vsOS81H452OizUjhrxFhCAuCz/A0nIeg3H2vDM vB/X/5tQU5brxenrM0VW7uE+rc4Cs9TrLlASgOLLMJZLjlobQ+CCIedzEX2HEC2Y rF9Wg6KeEEGR4FwxyEsiTZ+v7TKPtiLolGe8i8cUWAXslSmKhNnJnQpgfqK2URZH SL4doCnTZn2qPoWqUDp6jIqhzxvs6CmFCNtNoJJr7mrP1lXQQuOyNZxFH/5r4gqj KFqiRQGpXA29NyDVveoRPL6qxoDwvCOQg8hHRSqqjr0ETqCsLbmCenvTKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUnlQKam6kX7zS4ghwuwrMol7HxMB8GA1UdIwQY MBaAFLjI8j0MSMYuGOKPVgzJFZiT1OQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEt NDI0ODFhNjIxMjNjLzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEtNDI0ODFhNjIxMjNj LzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAqwyGAt BHbzbfZvbW30esrlD8qm06ZrkyWUISjpfuZiyCthlSP3MjuDKd3bYFgXaX6qpG5E MG/xaMfo1/FEXVRiw3yRO2Yapa4365H08aElcRoDbePtyq6dv8RyLRz22iokKXqu FKIwsDtRHDXGxaCqVYPKzyZSQ8kX0BkGgzS2kZPhXnWJ8qEfABop2Uck0TrEIy+o k0ZqubHTn3E2mCGmLppiqjUj2JKENS8pmpt/G/c1kofNMk9TTPrA2qp5d8z9F33Z YfCy6qjNi7/GkMbc90zdQJZ+Dx9VAFXhJ1+bID5W7zYUflEy2y/rSPCro0cXwBrS D4e9+sdf8E3sHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:11 2025 by rpki-client