This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json) Hash identifier: D1v9eRJ2Rk8MaiHu7Iz69gJOKrmQTtcnVmOBu+DbLV4= Subject key identifier: 36:BF:6D:A9:33:F4:3C:A8:08:E1:CE:C8:13:A2:55:13:DE:02:81:AC Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1 Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1 Certificate serial: 019AF31C16D2C69DB0883EBB232A9F2CE59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft Manifest number: 13F4 Signing time: Sat 06 Dec 2025 10:01:35 +0000 Manifest this update: Sat 06 Dec 2025 10:01:35 +0000 Manifest next update: Sun 07 Dec 2025 10:01:35 +0000 Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: X8LJu1MG7jXMkyq1vb35PPSa9uRWjarsSO2T7ntr8LY=) 2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:16:d2:c6:9d:b0:88:3e:bb:23:2a:9f:2c:e5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1 Validity Not Before: Dec 6 10:01:35 2025 GMT Not After : Dec 7 10:01:35 2025 GMT Subject: CN=36bf6da933f43ca808e1cec813a25513de0281ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:be:ce:57:0f:41:92:59:ca:44:2d:6c:f3: 0a:da:4d:60:27:b3:01:32:0a:d3:e5:cc:0a:bd:cf: a3:1f:62:31:2d:7c:e8:4d:0d:93:88:1e:4f:97:1d: 1e:eb:e9:bc:ee:dd:bb:24:ee:fa:3c:d2:4a:c8:21: 6d:1a:51:b5:44:09:70:e8:37:fb:ca:63:2e:61:9f: 63:43:21:a9:ab:f6:e3:71:e9:8a:52:a6:13:1a:56: 23:f7:7b:71:f5:88:f1:c9:2b:92:14:c5:11:a8:76: 4d:6b:e0:82:62:5f:69:30:4a:60:5e:b0:c3:7c:ff: e0:c5:42:04:dc:cd:1f:ac:21:10:b5:64:6b:ad:26: 1f:23:dd:67:ed:28:5c:a4:c6:64:ff:4d:74:66:00: 2c:b0:9e:bd:ce:12:93:6b:8f:b6:a3:6a:bf:b5:df: 97:5a:5b:a8:d1:40:b6:70:ae:33:d7:83:98:a1:9a: 02:eb:70:c0:be:a2:4c:c7:4b:5d:96:8b:93:a5:cc: 52:7e:af:51:f5:d6:06:c6:a9:6d:19:d4:a0:ea:80: 06:b4:d3:64:7c:a6:1d:60:ab:5c:0e:83:53:49:08: 48:5a:6a:c3:48:c0:c8:8a:fa:54:59:3d:c2:5d:46: ac:37:a1:0f:07:b7:b2:e1:10:f1:77:4f:50:6e:a7: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BF:6D:A9:33:F4:3C:A8:08:E1:CE:C8:13:A2:55:13:DE:02:81:AC X509v3 Authority Key Identifier: keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:50:a4:94:32:cd:3c:d4:5c:b2:c5:ff:e2:45:1a:f3:7d: 20:dc:40:81:0d:ea:a9:f8:9b:25:40:1d:9e:5a:59:22:fc:65: 97:02:a7:da:37:7a:ae:3d:b6:ed:d9:b9:ae:d6:a8:cd:ea:c4: cc:79:c8:13:a3:6d:56:b5:a1:c3:b2:b3:67:d2:dd:f8:e3:32: 37:f6:2e:2e:c7:c0:ee:60:9f:09:ac:eb:4b:ea:73:66:25:fe: f0:8c:cb:e1:a6:20:da:38:3c:ad:5d:a7:ee:85:e4:ac:fd:fb: da:3e:e9:a4:fc:78:0f:38:74:61:86:38:e1:06:9d:ce:c2:9e: a3:87:08:b2:0e:be:8c:0e:83:cf:42:ec:b9:06:a9:86:3d:09: 26:e4:1f:9b:ac:15:40:8c:1a:3d:c3:ba:5a:31:a0:1a:64:d0: 20:93:dc:9f:a8:60:36:d5:0f:e6:3d:0f:11:fc:62:af:ec:0b: a4:05:ac:51:79:ea:ab:ac:5d:d9:23:4c:2b:23:ef:c0:77:1e: b0:4f:ad:48:5f:ef:53:24:47:19:a9:ed:ee:f0:fe:0e:10:6f: 22:07:a7:8d:0f:3e:2f:04:5c:95:8e:72:06:43:b0:bd:f5:cd: f5:75:95:36:69:1b:5e:71:62:ca:60:2e:90:44:5c:b2:18:8f: bc:8f:30:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBbSxp2wiD67IyqfLOWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTU5MWU1NDkwM2QyZjllYTg0MGExNDY5NTViYTM0NTll MzNlYTEwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD EygzNmJmNmRhOTMzZjQzY2E4MDhlMWNlYzgxM2EyNTUxM2RlMDI4MWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziq+zlcPQZJZykQtbPMK2k1gJ7MB MgrT5cwKvc+jH2IxLXzoTQ2TiB5Plx0e6+m87t27JO76PNJKyCFtGlG1RAlw6Df7 ymMuYZ9jQyGpq/bjcemKUqYTGlYj93tx9YjxySuSFMURqHZNa+CCYl9pMEpgXrDD fP/gxUIE3M0frCEQtWRrrSYfI91n7ShcpMZk/010ZgAssJ69zhKTa4+2o2q/td+X Wluo0UC2cK4z14OYoZoC63DAvqJMx0tdlouTpcxSfq9R9dYGxqltGdSg6oAGtNNk fKYdYKtcDoNTSQhIWmrDSMDIivpUWT3CXUasN6EPB7ey4RDxd09QbqeKbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa/bakz9DyoCOHOyBOiVRPeAoGsMB8GA1UdIwQY MBaAFFHlkeVJA9L56oQKFGlVujRZ4z6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAt YTY5Y2Q5ZDE1ZTMxLzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAtYTY5Y2Q5ZDE1ZTMx LzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoBQpJQy zTzUXLLF/+JFGvN9INxAgQ3qqfibJUAdnlpZIvxllwKn2jd6rj227dm5rtaozerE zHnIE6NtVrWhw7KzZ9Ld+OMyN/YuLsfA7mCfCazrS+pzZiX+8IzL4aYg2jg8rV2n 7oXkrP372j7ppPx4Dzh0YYY44QadzsKeo4cIsg6+jA6Dz0LsuQaphj0JJuQfm6wV QIwaPcO6WjGgGmTQIJPcn6hgNtUP5j0PEfxir+wLpAWsUXnqq6xd2SNMKyPvwHce sE+tSF/vUyRHGant7vD+DhBvIgenjQ8+LwRclY5yBkOwvfXN9XWVNmkbXnFiymAu kERcshiPvI8w7g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:15 2025 by rpki-client