This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json) Hash identifier: Hlabn92hqleKJyulJ2MTvGMK0Wocr2KroSVlP/MXxXI= Subject key identifier: 3E:3D:8E:9F:6B:AF:49:57:F0:9F:F4:76:B4:20:FE:EB:93:85:64:20 Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Certificate serial: 019AF0BEF57F74CC7B672FAB1C146D58FD1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft Manifest number: 071A Signing time: Fri 05 Dec 2025 23:00:37 +0000 Manifest this update: Fri 05 Dec 2025 23:00:37 +0000 Manifest next update: Sat 06 Dec 2025 23:00:37 +0000 Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: jFMTORYa30PBPFTIrsZVHQt6LgYzrax3owCu9nlhO/Y=) 2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f5:7f:74:cc:7b:67:2f:ab:1c:14:6d:58:fd:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Validity Not Before: Dec 5 23:00:37 2025 GMT Not After : Dec 6 23:00:37 2025 GMT Subject: CN=3e3d8e9f6baf4957f09ff476b420feeb93856420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:b6:f2:23:ce:c4:8a:da:41:55:b1:67:cd: 24:e6:60:36:3a:ed:25:c3:2a:eb:f0:63:59:cb:d0: 00:8e:72:4f:7b:54:53:f7:0a:1f:85:4c:eb:4c:21: 21:a6:0f:ea:c8:d1:91:9a:51:b6:74:56:c8:99:1e: 45:60:cb:f4:d9:06:7e:7d:59:fd:e6:a0:a9:f7:7e: 83:23:0d:a6:7c:62:2d:cc:e7:6b:ce:46:e0:c6:97: 46:11:38:a2:7e:f6:42:91:eb:ef:7d:b2:1d:c2:3c: 09:53:1c:22:9e:fe:a1:f0:bf:aa:d0:a4:c2:1a:c9: 99:4e:7b:ca:63:03:79:ba:10:dc:3b:54:69:57:07: a4:90:18:07:b6:cc:b5:42:56:09:53:9a:c1:96:b9: f4:e8:0a:c8:20:69:a2:b6:c6:81:32:0b:01:76:08: 8e:14:fb:34:f1:e1:ae:4a:13:b2:a2:24:b0:8a:d8: 1b:81:c3:b7:d1:e1:55:87:93:94:94:fb:16:44:5d: eb:09:07:cb:c9:4c:79:c8:b7:20:4d:6a:49:5c:98: c4:73:6d:0f:a1:a8:17:1d:cf:bd:04:c2:e3:cf:de: 6a:7a:b6:10:7c:a6:fe:99:52:06:7e:0f:b4:00:0e: 7e:36:7b:f8:0b:2c:0b:64:9b:92:78:43:08:2c:6d: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3D:8E:9F:6B:AF:49:57:F0:9F:F4:76:B4:20:FE:EB:93:85:64:20 X509v3 Authority Key Identifier: keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:83:f9:42:84:5d:37:0c:7c:52:a5:68:7f:fd:80:eb:c4:f4: bd:b6:9b:11:f2:ba:44:04:4e:6f:00:02:d3:aa:68:00:da:28: 6e:07:bc:86:11:14:79:29:e7:0d:19:50:e8:4c:60:c7:00:2e: 28:96:52:c9:28:06:48:61:e8:a0:6c:73:f6:74:03:29:6f:a0: 70:4a:c2:ab:98:90:d0:3c:be:ce:61:af:50:c8:40:42:ef:cd: 85:81:c9:3f:2c:37:22:47:85:ff:e5:b4:f3:66:4b:8b:41:e1: cb:b0:8b:cf:68:7a:fb:7f:6d:ee:21:23:a6:f7:0d:8e:41:01: a0:de:9e:bc:e3:9b:fb:da:b0:4c:ba:3c:a8:00:e2:ae:aa:92: ff:55:af:98:2c:04:44:01:90:3e:45:17:6e:5a:3b:d8:02:e8: 06:fc:08:72:67:99:0f:d5:d4:ee:16:9a:c1:65:42:bc:54:a1: 52:d3:12:bf:b8:ae:3c:b1:68:b9:f3:28:0a:83:1a:0f:1e:70: 24:42:ff:b0:4f:ec:5e:73:aa:81:a3:92:d4:1f:c6:fd:bd:dc: 42:80:22:48:d7:34:3c:5b:84:63:3e:f6:e9:72:22:5e:11:5f: 4b:56:68:a6:a3:8d:2e:0a:da:42:0f:e6:d8:27:c4:8c:dd:05: 77:d0:4d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvV/dMx7Zy+rHBRtWP0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWU3MWQxYjg2MDVhMzNiOWRkNjU0YmEzOGRkZmFiYzFj ZWY1ZWIwHhcNMjUxMjA1MjMwMDM3WhcNMjUxMjA2MjMwMDM3WjAzMTEwLwYDVQQD EygzZTNkOGU5ZjZiYWY0OTU3ZjA5ZmY0NzZiNDIwZmVlYjkzODU2NDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVW28iPOxIraQVWxZ80k5mA2Ou0l wyrr8GNZy9AAjnJPe1RT9wofhUzrTCEhpg/qyNGRmlG2dFbImR5FYMv02QZ+fVn9 5qCp936DIw2mfGItzOdrzkbgxpdGETiifvZCkevvfbIdwjwJUxwinv6h8L+q0KTC GsmZTnvKYwN5uhDcO1RpVwekkBgHtsy1QlYJU5rBlrn06ArIIGmitsaBMgsBdgiO FPs08eGuShOyoiSwitgbgcO30eFVh5OUlPsWRF3rCQfLyUx5yLcgTWpJXJjEc20P oagXHc+9BMLjz95qerYQfKb+mVIGfg+0AA5+Nnv4CywLZJuSeEMILG32jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD49jp9rr0lX8J/0drQg/uuThWQgMB8GA1UdIwQY MBaAFFGecdG4YFozud1lS6ON36vBzvXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQt ZmQ2ZjIzNWRhZjBiLzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQtZmQ2ZjIzNWRhZjBi LzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIP5QoRd Nwx8UqVof/2A68T0vbabEfK6RARObwAC06poANoobge8hhEUeSnnDRlQ6ExgxwAu KJZSySgGSGHooGxz9nQDKW+gcErCq5iQ0Dy+zmGvUMhAQu/NhYHJPyw3IkeF/+W0 82ZLi0Hhy7CLz2h6+39t7iEjpvcNjkEBoN6evOOb+9qwTLo8qADirqqS/1WvmCwE RAGQPkUXblo72ALoBvwIcmeZD9XU7haawWVCvFShUtMSv7iuPLFoufMoCoMaDx5w JEL/sE/sXnOqgaOS1B/G/b3cQoAiSNc0PFuEYz726XIiXhFfS1ZopqONLgraQg/m 2CfEjN0Fd9BNgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:49 2025 by rpki-client