This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json) Hash identifier: MfrVrf2DWpJxFFYz8IgzCjdPrda+dg6XSij8jxuU2Ro= Subject key identifier: 49:77:C1:D7:E3:1C:30:5A:95:3F:E8:AF:7A:84:18:19:88:71:0A:8E Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c Certificate serial: 019AF1D1E718621FBA622CEFE9624BEEAF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft Manifest number: 14AC Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=) 2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: 4l+bduBZnjHeQTHmHT2l9eMqurrmZkPNenZxiNMw5rI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e7:18:62:1f:ba:62:2c:ef:e9:62:4b:ee:af:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=4977c1d7e31c305a953fe8af7a84181988710a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:97:ca:ad:8f:55:1a:29:91:f6:26:f7:2d: 95:e6:92:a7:ba:98:e1:40:cd:15:a9:b4:c2:3f:80: 05:95:84:a1:16:e9:d7:6c:34:65:7e:75:7c:bc:cf: 35:c8:33:7b:87:bb:52:17:fb:ee:36:46:92:47:9e: 58:a0:32:b3:78:31:76:b2:b3:35:a5:c4:71:8d:f0: a1:87:8d:60:46:66:89:58:74:89:74:8d:9b:df:cf: 01:79:2a:f0:18:f9:49:62:14:03:0b:f0:f7:0d:88: 3e:5d:4a:83:1b:ed:69:4a:93:a5:9f:e3:a1:d6:b8: 90:bd:f2:b4:72:74:3c:5e:02:f8:88:2a:aa:61:16: cf:0a:d4:af:e8:7f:06:79:e0:49:1c:96:2d:7a:d1: 81:49:63:e6:ca:e9:2c:fa:bb:62:b8:f3:fe:d6:30: 31:01:94:b3:23:36:7f:d4:ae:cd:e1:85:0c:6b:1d: f0:9c:01:8f:12:c7:a9:7e:b8:07:82:37:17:a2:a0: 72:7e:75:95:24:9c:f3:97:7e:da:b3:c7:4b:52:64: 0c:3c:2e:56:ae:31:1a:8d:99:7a:b3:c6:bd:2f:e1: 6f:fb:eb:16:99:b7:df:a2:d1:98:81:76:30:5a:91: 0e:5f:69:66:de:7f:58:37:ea:39:77:63:8f:78:fc: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:77:C1:D7:E3:1C:30:5A:95:3F:E8:AF:7A:84:18:19:88:71:0A:8E X509v3 Authority Key Identifier: keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:93:6f:b8:5b:2f:28:7d:a0:18:5e:b0:18:8e:41:c3:bb:d0: 49:a1:a5:4d:ff:cd:9f:56:39:88:82:36:ce:f6:23:4e:52:37: 9f:c3:2b:79:f1:15:5a:6d:68:a4:e2:11:bc:5f:e3:e7:36:a1: bf:0a:e1:de:14:a7:5d:11:de:cc:47:36:3d:2b:df:c0:fc:00: ed:7a:cf:5d:fc:d9:36:74:3d:b9:36:7b:e7:33:0c:fd:33:70: fd:08:af:ce:ba:b5:23:e2:4a:f4:77:fb:87:0d:8a:78:71:9c: bf:b2:6e:59:aa:7c:29:cd:de:c3:50:0b:87:6b:c9:b3:c4:47: 4f:08:13:43:2a:53:40:f2:b3:18:bf:21:9b:eb:40:e0:a1:7c: 54:18:6d:d3:04:16:db:26:7c:63:0e:82:08:2f:cb:9f:58:f5: a9:37:5b:5d:ec:c1:91:1e:34:2a:18:d0:9b:4e:07:6f:6d:c7: f6:e8:08:ed:bf:ad:69:52:06:b2:0f:31:ac:2e:79:a4:0b:8d: af:6b:04:42:06:0f:0b:f6:c8:2e:ad:bc:69:a8:8c:8e:e1:cc: 63:51:77:94:d1:0d:4d:7e:85:84:38:07:aa:89:b9:87:a7:f6: 3a:63:b1:34:16:cf:76:02:1b:6c:b4:6c:5c:ea:71:7b:92:6c: 46:1e:3c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ecYYh+6Yizv6WJL7q+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWE2YTliZWI1MmVmZjI5NjQ0NjU5Yjk0MzJhMGE1OTIz NzMxNGMwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg0OTc3YzFkN2UzMWMzMDVhOTUzZmU4YWY3YTg0MTgxOTg4NzEwYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR+Xyq2PVRopkfYm9y2V5pKnupjh QM0VqbTCP4AFlYShFunXbDRlfnV8vM81yDN7h7tSF/vuNkaSR55YoDKzeDF2srM1 pcRxjfChh41gRmaJWHSJdI2b388BeSrwGPlJYhQDC/D3DYg+XUqDG+1pSpOln+Oh 1riQvfK0cnQ8XgL4iCqqYRbPCtSv6H8GeeBJHJYtetGBSWPmyuks+rtiuPP+1jAx AZSzIzZ/1K7N4YUMax3wnAGPEsepfrgHgjcXoqByfnWVJJzzl37as8dLUmQMPC5W rjEajZl6s8a9L+Fv++sWmbffotGYgXYwWpEOX2lm3n9YN+o5d2OPePwCvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl3wdfjHDBalT/or3qEGBmIcQqOMB8GA1UdIwQY MBaAFFGaapvrUu/ylkRlm5QyoKWSNzFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQt OTA1ZDlkY2Y1MGFlLzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQtOTA1ZDlkY2Y1MGFl LzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJNvuFsv KH2gGF6wGI5Bw7vQSaGlTf/Nn1Y5iII2zvYjTlI3n8MrefEVWm1opOIRvF/j5zah vwrh3hSnXRHezEc2PSvfwPwA7XrPXfzZNnQ9uTZ75zMM/TNw/Qivzrq1I+JK9Hf7 hw2KeHGcv7JuWap8Kc3ew1ALh2vJs8RHTwgTQypTQPKzGL8hm+tA4KF8VBht0wQW 2yZ8Yw6CCC/Ln1j1qTdbXezBkR40KhjQm04Hb23H9ugI7b+taVIGsg8xrC55pAuN r2sEQgYPC/bILq28aaiMjuHMY1F3lNENTX6FhDgHqom5h6f2OmOxNBbPdgIbbLRs XOpxe5JsRh483Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:21 2025 by rpki-client