This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft File: uqs_CIW1VmubFTPSCW32jlSf7D4.mft (raw, json) Hash identifier: F8hKWxhUfMc+UWiySQ8PsN7tZfCDrkyILq+HNdpb/pY= Subject key identifier: D4:0D:DA:DC:4B:C4:3C:AA:34:72:30:6D:58:66:2E:7C:28:7C:E9:E9 Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E Certificate issuer: /CN=baab3f0885b5566b9b1533d2096df68e549fec3e Certificate serial: 019AF3C0111669A22C964ACD9307B80E3F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft Manifest number: 14A3 Signing time: Sat 06 Dec 2025 13:00:41 +0000 Manifest this update: Sat 06 Dec 2025 13:00:41 +0000 Manifest next update: Sun 07 Dec 2025 13:00:41 +0000 Files and hashes: 1: UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa (hash: nd0xk/LBWR8Y1uHlUTNuhLFMAeJyMBYmIcQoIT0cSck=) 2: uqs_CIW1VmubFTPSCW32jlSf7D4.crl (hash: wHSFdO098UeFHgp7MwkEoLly9vlsGIQILHLZzU8D54A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:11:16:69:a2:2c:96:4a:cd:93:07:b8:0e:3f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e Validity Not Before: Dec 6 13:00:41 2025 GMT Not After : Dec 7 13:00:41 2025 GMT Subject: CN=d40ddadc4bc43caa3472306d58662e7c287ce9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:a5:10:30:d6:49:5b:dc:f7:34:50:fb:2b: bd:c4:a6:c1:03:1b:4f:58:01:a3:33:ae:29:a1:c5: 04:30:75:04:59:2b:34:b5:06:93:bc:1f:93:d5:51: ac:d4:a3:17:f7:d2:64:12:22:c8:c8:a4:95:da:66: c3:58:14:b9:4c:69:4b:b2:a6:b4:be:a6:38:a7:86: 8c:aa:f4:d6:d4:3f:27:d9:3b:ab:95:97:e2:3d:11: 85:dc:ec:4d:29:57:fd:95:a1:f5:8e:2c:f1:12:b2: 8b:a3:23:82:e9:2f:c2:83:86:e4:34:79:54:81:34: a3:60:fb:6f:fb:5f:b2:fa:42:ef:74:fe:14:0d:f1: 8b:17:79:db:29:10:7e:34:bb:fa:1f:fc:b2:c7:5d: 56:59:11:43:8c:bb:4c:ab:71:41:a1:59:c1:70:4f: 52:21:66:fb:e7:8d:6a:2f:97:eb:1e:a0:7a:3a:7c: da:2e:b6:5b:bf:aa:2d:69:52:f6:3d:6c:92:2a:34: 60:9d:2f:1b:ed:19:99:ea:22:5c:f7:6d:99:b4:13: fc:c2:0e:b8:5a:9d:92:cd:d2:cc:1a:b9:03:08:5c: 18:06:30:64:e1:92:03:2a:f3:5a:ba:fa:b8:c8:a7: 5d:d6:02:7f:cc:be:4e:cc:bd:34:03:79:ba:a2:b1: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:DA:DC:4B:C4:3C:AA:34:72:30:6D:58:66:2E:7C:28:7C:E9:E9 X509v3 Authority Key Identifier: keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d8:2a:9f:60:bd:3a:16:a5:56:8b:9e:f0:05:d4:22:32:c8: 55:ce:39:b2:45:84:aa:06:77:f6:81:7b:9d:59:97:2e:6c:4e: b1:08:8b:f9:aa:88:d7:5d:e3:71:aa:46:b9:6f:20:e3:64:18: ea:40:ab:ab:56:55:59:76:1b:41:9b:1e:79:80:bc:01:cc:72: 19:7c:d6:7a:6e:8d:21:11:dc:dc:f3:cc:61:32:c1:2b:db:c9: a1:7f:c7:56:20:79:cc:ed:87:00:77:fe:84:13:ad:2d:b0:40: 54:76:5a:0e:2e:ab:f9:aa:74:76:84:4f:22:99:ba:b0:62:7f: bd:97:7e:97:12:8c:98:49:ee:3a:f1:34:25:92:08:cb:49:49: 30:8a:0a:17:21:4a:70:f1:16:d8:d9:87:1c:4f:7f:46:aa:9b: c5:68:0b:1c:7f:30:5e:e1:d1:40:8b:27:9d:a8:9b:c7:cb:41: d3:7a:a2:49:bc:50:bd:38:10:b5:cd:23:ba:62:7c:38:59:00: 60:4d:22:70:9f:a2:01:6a:6d:06:55:42:c7:57:86:41:97:60: 3c:34:75:45:ac:cb:ba:85:eb:5e:25:c3:2d:db:23:66:4e:e3: 76:63:d8:20:a9:eb:81:fc:7d:8c:a9:e7:36:85:2f:08:e5:4d: ad:fb:5f:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBEWaaIslkrNkwe4Dj+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWIzZjA4ODViNTU2NmI5YjE1MzNkMjA5NmRmNjhlNTQ5 ZmVjM2UwHhcNMjUxMjA2MTMwMDQxWhcNMjUxMjA3MTMwMDQxWjAzMTEwLwYDVQQD EyhkNDBkZGFkYzRiYzQzY2FhMzQ3MjMwNmQ1ODY2MmU3YzI4N2NlOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ASlEDDWSVvc9zRQ+yu9xKbBAxtP WAGjM64pocUEMHUEWSs0tQaTvB+T1VGs1KMX99JkEiLIyKSV2mbDWBS5TGlLsqa0 vqY4p4aMqvTW1D8n2TurlZfiPRGF3OxNKVf9laH1jizxErKLoyOC6S/Cg4bkNHlU gTSjYPtv+1+y+kLvdP4UDfGLF3nbKRB+NLv6H/yyx11WWRFDjLtMq3FBoVnBcE9S IWb7541qL5frHqB6OnzaLrZbv6otaVL2PWySKjRgnS8b7RmZ6iJc922ZtBP8wg64 Wp2SzdLMGrkDCFwYBjBk4ZIDKvNauvq4yKdd1gJ/zL5OzL00A3m6orH1zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQN2txLxDyqNHIwbVhmLnwofOnpMB8GA1UdIwQY MBaAFLqrPwiFtVZrmxUz0glt9o5Un+w+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYt OWFmMTNmODM2ODc5LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYtOWFmMTNmODM2ODc5 LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtgqn2C9 OhalVoue8AXUIjLIVc45skWEqgZ39oF7nVmXLmxOsQiL+aqI113jcapGuW8g42QY 6kCrq1ZVWXYbQZseeYC8AcxyGXzWem6NIRHc3PPMYTLBK9vJoX/HViB5zO2HAHf+ hBOtLbBAVHZaDi6r+ap0doRPIpm6sGJ/vZd+lxKMmEnuOvE0JZIIy0lJMIoKFyFK cPEW2NmHHE9/RqqbxWgLHH8wXuHRQIsnnaibx8tB03qiSbxQvTgQtc0jumJ8OFkA YE0icJ+iAWptBlVCx1eGQZdgPDR1RazLuoXrXiXDLdsjZk7jdmPYIKnrgfx9jKnn NoUvCOVNrftfQA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:29 2025 by rpki-client