This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json) Hash identifier: 2QggGK2dZOERKdRYLWZedMOINQ+EbRgCdd4WzxVBy/8= Subject key identifier: D0:C4:6F:E3:60:1F:D1:6E:23:98:5B:3A:B1:2D:A1:B8:CF:9A:E5:32 Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32 Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032 Certificate serial: 019AF50AF36473EDD48B2128420897BE53B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft Manifest number: 108E Signing time: Sat 06 Dec 2025 19:02:06 +0000 Manifest this update: Sat 06 Dec 2025 19:02:06 +0000 Manifest next update: Sun 07 Dec 2025 19:02:06 +0000 Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: Guvzwt8ORNSeQK3I6qdwNmkuzapl2G9bW8aVE1tSVj0=) 2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:f3:64:73:ed:d4:8b:21:28:42:08:97:be:53:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032 Validity Not Before: Dec 6 19:02:06 2025 GMT Not After : Dec 7 19:02:06 2025 GMT Subject: CN=d0c46fe3601fd16e23985b3ab12da1b8cf9ae532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:9f:a1:fd:00:a1:4e:9a:b8:ca:ba:7e:2e: f7:02:94:4c:7f:a9:12:46:63:3c:12:06:65:5c:30: 6d:b3:75:af:32:67:a5:3b:76:6d:b6:59:97:45:69: ae:a9:16:80:fe:23:1e:70:fc:ef:9e:b7:04:8e:5e: 2f:1f:57:f9:aa:4e:4c:e0:1d:94:32:f0:f1:ce:d7: f2:30:ff:62:ea:37:ce:6b:58:72:7d:0f:2b:6a:dc: 98:21:44:6e:c0:36:b9:4b:7f:d5:35:f2:30:03:58: 89:89:94:b5:bc:30:9a:b2:f7:b9:de:4e:0b:c7:7c: cb:c2:76:12:b0:65:81:79:d0:8d:8c:f6:2a:76:e7: 2f:f6:20:1d:48:5f:33:73:03:64:a6:21:04:c1:9e: eb:62:2e:1d:67:8c:8b:6a:f6:83:73:e3:b4:5d:29: 6e:db:ce:0c:c5:9e:3c:b4:c3:88:16:df:b5:2e:64: b4:f1:90:4b:8a:7a:d3:fc:a7:3a:26:10:8a:27:0c: 22:8c:e3:05:d9:2a:a3:c5:b0:e1:30:bd:e0:b0:5b: 0c:28:d3:9b:3c:11:87:3f:0e:95:ec:ef:25:bf:93: e4:ab:b9:6d:d9:bc:ae:fb:d0:24:99:a8:35:1a:ee: 69:cb:b7:e4:53:05:28:22:ed:02:c7:f3:73:9a:30: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:6F:E3:60:1F:D1:6E:23:98:5B:3A:B1:2D:A1:B8:CF:9A:E5:32 X509v3 Authority Key Identifier: keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:89:bb:6c:69:f8:30:3f:54:7e:b1:8b:34:e3:8b:28:2e:bd: e9:14:93:d7:10:4c:b5:b8:57:5c:a6:30:6a:20:37:28:0e:93: 5c:6b:63:81:c5:3c:4c:05:3c:f2:55:e2:ec:94:f4:7e:89:88: 2d:8f:04:0b:49:97:9d:be:9a:00:48:57:f1:24:f6:b0:27:d3: a7:c8:4a:9b:f5:5d:78:a4:a3:e7:1b:60:b7:c2:d3:0a:dc:11: fe:5a:f2:17:29:56:14:14:91:26:fb:a2:b4:57:26:ed:c8:25: 6f:07:52:26:26:42:e1:11:26:4f:95:cf:dd:09:da:f4:61:9f: 58:47:23:1e:8a:8c:d5:41:d9:31:6e:92:e9:a3:7d:67:8a:51: a1:e6:30:e3:14:02:44:7f:3b:2d:43:82:cb:d1:37:65:7b:d9: 49:f6:bd:02:c0:ed:7e:85:0c:1f:3a:1b:07:a7:30:db:4e:62: bd:5a:76:67:da:12:c0:46:26:8c:48:e6:e2:6d:f0:dc:b1:65: 54:6a:c3:b8:5f:a8:5b:5e:2e:b0:9c:08:e4:41:9e:0f:a9:7c: d0:0b:f6:44:82:d7:a6:32:bf:3c:a4:af:d7:e8:aa:45:1b:1f: 93:73:93:65:ba:0f:a9:16:59:b2:ac:46:44:e9:20:d5:2a:e8: ed:9f:5f:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CvNkc+3UiyEoQgiXvlO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4 NGIwMzIwHhcNMjUxMjA2MTkwMjA2WhcNMjUxMjA3MTkwMjA2WjAzMTEwLwYDVQQD EyhkMGM0NmZlMzYwMWZkMTZlMjM5ODViM2FiMTJkYTFiOGNmOWFlNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC2fof0AoU6auMq6fi73ApRMf6kS RmM8EgZlXDBts3WvMmelO3ZttlmXRWmuqRaA/iMecPzvnrcEjl4vH1f5qk5M4B2U MvDxztfyMP9i6jfOa1hyfQ8ratyYIURuwDa5S3/VNfIwA1iJiZS1vDCasve53k4L x3zLwnYSsGWBedCNjPYqducv9iAdSF8zcwNkpiEEwZ7rYi4dZ4yLavaDc+O0XSlu 284MxZ48tMOIFt+1LmS08ZBLinrT/Kc6JhCKJwwijOMF2SqjxbDhML3gsFsMKNOb PBGHPw6V7O8lv5Pkq7lt2byu+9Akmag1Gu5py7fkUwUoIu0Cx/NzmjCgcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDEb+NgH9FuI5hbOrEtobjPmuUyMB8GA1UdIwQY MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYm7bGn4 MD9UfrGLNOOLKC696RST1xBMtbhXXKYwaiA3KA6TXGtjgcU8TAU88lXi7JT0fomI LY8EC0mXnb6aAEhX8ST2sCfTp8hKm/VdeKSj5xtgt8LTCtwR/lryFylWFBSRJvui tFcm7cglbwdSJiZC4REmT5XP3Qna9GGfWEcjHoqM1UHZMW6S6aN9Z4pRoeYw4xQC RH87LUOCy9E3ZXvZSfa9AsDtfoUMHzobB6cw205ivVp2Z9oSwEYmjEjm4m3w3LFl VGrDuF+oW14usJwI5EGeD6l80Av2RILXpjK/PKSv1+iqRRsfk3OTZboPqRZZsqxG ROkg1Sro7Z9fzA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:31 2025 by rpki-client