This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft File: UuvM2QyKD8Eempj4VmboGDte-mw.mft (raw, json) Hash identifier: vmkO6o3UXhegFiYiGgfeHR6iwPHXu3HFQnsVRNQBrbg= Subject key identifier: E7:C5:8B:A9:7C:B3:CD:C3:14:D6:75:64:05:0B:2C:A4:F9:BF:13:82 Authority key identifier: 52:EB:CC:D9:0C:8A:0F:C1:1E:9A:98:F8:56:66:E8:18:3B:5E:FA:6C Certificate issuer: /CN=52ebccd90c8a0fc11e9a98f85666e8183b5efa6c Certificate serial: 019AF1D1AEB16632F8510DA034B95D5486D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft Manifest number: EC Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: UuvM2QyKD8Eempj4VmboGDte-mw.crl (hash: se77M1FK1ToJORFIPE1oRLIhxaUM3H4JVaekPKtudx4=) 2: sVTCT8sEkXxJuhkBNIhtjsKN-fc.roa (hash: 1LlLgeWONb0LHd1NES4d+bEdwCY//jkVZ5AxYbJmCGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:b1:66:32:f8:51:0d:a0:34:b9:5d:54:86:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ebccd90c8a0fc11e9a98f85666e8183b5efa6c Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=e7c58ba97cb3cdc314d67564050b2ca4f9bf1382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:57:53:d2:0f:ab:0d:5f:9c:a2:f4:92:88: 44:60:4c:b3:f8:3a:2e:31:0d:6e:e0:5c:e7:22:b2: b4:11:b6:8f:0e:ed:c1:b1:f1:85:99:fa:ed:3c:41: 85:ae:1d:db:ba:4a:bf:43:43:8a:13:04:9e:58:bd: e3:de:56:c5:b0:c3:4b:c5:e3:3e:45:32:16:0f:ba: c9:99:d7:6a:09:d4:32:0d:db:31:57:f3:11:64:a7: ff:7b:70:41:db:10:db:dd:5a:5f:5a:75:fa:18:eb: af:69:c2:e0:18:eb:6d:62:a0:7f:34:e1:b9:b7:e8: c8:7b:38:9f:38:3d:59:d2:1d:5f:7d:8c:4e:a9:e9: 3d:23:a9:b2:c3:d5:61:bf:d7:37:ce:2a:b8:b9:b3: 07:79:90:ec:14:10:2d:11:e3:9c:82:3b:ce:f3:c1: 55:e5:1d:66:d3:8c:6c:c6:f7:38:4b:08:8c:85:74: 88:db:43:6f:33:f1:72:6a:03:b0:93:62:63:6e:b5: fe:37:a8:42:e3:97:7e:10:b8:fa:78:76:9a:0d:47: 87:e9:85:3e:2c:eb:73:6a:4d:53:a1:ef:c8:db:c4: 28:c1:80:b9:57:80:07:41:f6:0b:cb:af:ad:b1:71: b2:43:ce:c8:92:18:d0:ce:05:4f:5c:e8:c8:dc:c2: f9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C5:8B:A9:7C:B3:CD:C3:14:D6:75:64:05:0B:2C:A4:F9:BF:13:82 X509v3 Authority Key Identifier: keyid:52:EB:CC:D9:0C:8A:0F:C1:1E:9A:98:F8:56:66:E8:18:3B:5E:FA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fa:ce:ae:d6:90:21:8f:c4:c2:37:bc:74:50:35:52:e1:ae: 47:10:37:a3:fb:04:19:1e:0a:78:0f:4b:bd:f5:b9:1d:f0:25: e5:ca:bd:86:b7:d7:8f:e3:9b:c3:7c:00:4a:4c:f9:83:21:3f: bd:99:4e:3b:53:3c:b3:58:32:b1:43:3f:39:27:0e:2a:50:f5: 60:36:c0:66:75:60:2a:eb:bb:b4:e1:39:dd:57:e6:cc:89:5b: d4:85:74:d1:64:e7:3c:b4:ed:cb:43:ae:d1:50:bb:95:28:71: fb:f5:9b:b7:80:1c:84:89:ae:3d:ba:90:a2:89:47:fd:7c:87: a3:0f:32:c0:2a:6f:4b:55:8b:68:b5:3f:52:8c:51:ed:6f:18: 4c:46:b5:9e:25:35:94:76:82:21:bf:b2:ff:f8:fe:54:a9:a6: 03:94:97:47:61:d0:b5:1e:03:1b:d1:bf:17:af:65:ea:68:16: c2:a0:63:41:b5:36:f2:24:58:4f:73:49:4f:2a:59:f6:7b:5c: a9:0c:f7:b5:67:6a:58:90:51:ad:09:db:d9:a7:91:08:c9:83: b1:29:be:c9:82:ce:a0:8a:fe:a1:9b:d4:cf:21:12:a7:0d:de: 0a:de:7c:c1:34:6c:4d:a4:0f:49:13:c0:f0:01:44:18:ee:6f: 97:dd:1f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a6xZjL4UQ2gNLldVIbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWJjY2Q5MGM4YTBmYzExZTlhOThmODU2NjZlODE4M2I1 ZWZhNmMwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhlN2M1OGJhOTdjYjNjZGMzMTRkNjc1NjQwNTBiMmNhNGY5YmYxMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu01XU9IPqw1fnKL0kohEYEyz+Dou MQ1u4FznIrK0EbaPDu3BsfGFmfrtPEGFrh3bukq/Q0OKEwSeWL3j3lbFsMNLxeM+ RTIWD7rJmddqCdQyDdsxV/MRZKf/e3BB2xDb3VpfWnX6GOuvacLgGOttYqB/NOG5 t+jIezifOD1Z0h1ffYxOqek9I6myw9Vhv9c3ziq4ubMHeZDsFBAtEeOcgjvO88FV 5R1m04xsxvc4SwiMhXSI20NvM/FyagOwk2JjbrX+N6hC45d+ELj6eHaaDUeH6YU+ LOtzak1Toe/I28QowYC5V4AHQfYLy6+tsXGyQ87IkhjQzgVPXOjI3ML5awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfFi6l8s83DFNZ1ZAULLKT5vxOCMB8GA1UdIwQY MBaAFFLrzNkMig/BHpqY+FZm6Bg7XvpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXV2TTJReUtEOEVlbXBqNFZtYm9HRHRlLW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xY2M4NWEtYWY3Ny00NWVkLWI2Y2It ZDk3YzhiNTZhZTI1LzEvVXV2TTJReUtEOEVlbXBqNFZtYm9HRHRlLW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xY2M4NWEtYWY3Ny00NWVkLWI2Y2ItZDk3YzhiNTZhZTI1 LzEvVXV2TTJReUtEOEVlbXBqNFZtYm9HRHRlLW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfrOrtaQ IY/Ewje8dFA1UuGuRxA3o/sEGR4KeA9LvfW5HfAl5cq9hrfXj+Obw3wASkz5gyE/ vZlOO1M8s1gysUM/OScOKlD1YDbAZnVgKuu7tOE53VfmzIlb1IV00WTnPLTty0Ou 0VC7lShx+/Wbt4AchImuPbqQoolH/XyHow8ywCpvS1WLaLU/UoxR7W8YTEa1niU1 lHaCIb+y//j+VKmmA5SXR2HQtR4DG9G/F69l6mgWwqBjQbU28iRYT3NJTypZ9ntc qQz3tWdqWJBRrQnb2aeRCMmDsSm+yYLOoIr+oZvUzyESpw3eCt58wTRsTaQPSRPA 8AFEGO5vl90fdw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:16 2025 by rpki-client