This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json) Hash identifier: Y6KWFzEV51363qeUVH1GyBklyK7DpnJIoU0o+OXmCiU= Subject key identifier: C5:5D:18:34:54:A0:C8:0E:C9:3D:B9:F4:45:AF:9E:16:AB:0C:7F:A6 Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2 Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2 Certificate serial: 019B21AB9C0546BC73A54CD450D741D495BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft Manifest number: 0B93 Signing time: Mon 15 Dec 2025 11:00:53 +0000 Manifest this update: Mon 15 Dec 2025 11:00:53 +0000 Manifest next update: Tue 16 Dec 2025 11:00:53 +0000 Files and hashes: 1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=) 2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: /nVwHBTAIWEXUjGvtr/2mKkwPhBjk5g2p0SLOxBxfgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:9c:05:46:bc:73:a5:4c:d4:50:d7:41:d4:95:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2 Validity Not Before: Dec 15 11:00:53 2025 GMT Not After : Dec 16 11:00:53 2025 GMT Subject: CN=c55d183454a0c80ec93db9f445af9e16ab0c7fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:83:79:b9:fc:e4:26:ca:ea:49:9a:34:ad: c1:d1:92:55:7d:98:f9:1e:e4:01:ce:39:bd:07:a6: 0e:18:fb:7d:bf:84:8c:b7:87:89:c2:0b:87:09:9d: 79:9f:18:36:32:09:8e:3e:cf:bc:02:14:69:db:c9: 94:a9:91:8a:32:fb:17:a5:18:e2:d5:18:98:f4:b5: d0:63:94:64:fc:33:87:17:f7:6e:3a:b3:13:e2:af: 8d:43:02:33:04:0b:13:08:3d:4a:e4:4b:43:e5:38: a5:fb:e3:5d:db:b2:ed:38:4d:63:1d:58:0b:b3:5a: d5:9c:0d:e4:c0:a0:b8:b6:a3:07:ed:6b:72:00:f7: b0:9b:77:1b:f9:bf:79:29:a4:f8:98:6a:8a:d4:94: eb:f3:2e:be:1d:05:30:8b:5b:c3:2e:15:79:de:1f: fd:be:ee:e4:1b:a5:a8:06:4b:c4:6b:89:e6:67:ea: 6a:95:32:e8:4c:9e:82:65:85:06:77:71:8e:0b:95: d8:e3:e9:78:7c:ba:6d:be:4f:67:28:20:34:6e:da: 0b:17:b7:6c:7c:be:e7:4b:bc:1f:23:78:73:5d:77: a6:ac:db:74:1d:a8:ab:64:67:d1:37:a4:53:d8:9e: 1b:c5:c0:21:2a:32:77:de:70:1b:63:17:cc:e7:d7: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:18:34:54:A0:C8:0E:C9:3D:B9:F4:45:AF:9E:16:AB:0C:7F:A6 X509v3 Authority Key Identifier: keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fa:d3:15:92:05:93:fe:ad:dd:68:6e:bc:ab:a3:99:58:d9: 2a:f0:b8:9a:d6:8b:d2:1b:49:b5:0a:04:5f:e5:da:57:1d:d3: 54:77:d3:1a:12:51:84:92:8e:f4:db:03:bb:01:40:05:df:1b: 8a:fe:a7:b8:71:9c:93:6e:b1:eb:e2:9b:78:e7:10:2e:66:43: d3:56:b5:91:5e:ed:6e:fd:17:e7:44:20:82:f4:1b:97:24:85: 03:89:9c:a1:ca:b7:32:c8:4d:7d:2a:d6:3e:56:34:e7:1d:d9: 9e:6b:56:4d:8a:94:8f:85:ad:f2:d2:99:8c:00:4b:f5:07:ec: 17:06:b0:37:f7:eb:86:7f:93:4e:71:e7:70:9f:96:07:7b:f4: 12:ff:10:f9:52:3b:60:cc:ca:cd:b9:10:9a:c1:af:d2:c6:4d: c6:d2:3e:a9:f2:58:ae:fa:f7:3a:aa:bf:5f:b8:fc:b0:33:a5: 2b:ce:62:d7:0a:51:40:1b:6e:cb:b7:60:0d:53:8e:28:c6:b5: b3:d6:5d:68:db:2b:74:9b:65:32:85:66:7f:3a:ad:48:53:b4: 01:68:43:d3:73:c9:20:cc:79:5a:04:a0:ca:7b:d1:c2:f5:98: 60:0b:30:8c:bc:79:ea:60:25:ad:3c:c8:79:ea:a8:14:f4:4d: 23:82:a9:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq5wFRrxzpUzUUNdB1JW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZjc5MTI3ZWUzNGEzYWVlOTA3OWM4ZTk3OTljNDBmMGRj OGRjYTIwHhcNMjUxMjE1MTEwMDUzWhcNMjUxMjE2MTEwMDUzWjAzMTEwLwYDVQQD EyhjNTVkMTgzNDU0YTBjODBlYzkzZGI5ZjQ0NWFmOWUxNmFiMGM3ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlCDebn85CbK6kmaNK3B0ZJVfZj5 HuQBzjm9B6YOGPt9v4SMt4eJwguHCZ15nxg2MgmOPs+8AhRp28mUqZGKMvsXpRji 1RiY9LXQY5Rk/DOHF/duOrMT4q+NQwIzBAsTCD1K5EtD5Til++Nd27LtOE1jHVgL s1rVnA3kwKC4tqMH7WtyAPewm3cb+b95KaT4mGqK1JTr8y6+HQUwi1vDLhV53h/9 vu7kG6WoBkvEa4nmZ+pqlTLoTJ6CZYUGd3GOC5XY4+l4fLptvk9nKCA0btoLF7ds fL7nS7wfI3hzXXemrNt0HairZGfRN6RT2J4bxcAhKjJ33nAbYxfM59dakQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVdGDRUoMgOyT259EWvnharDH+mMB8GA1UdIwQY MBaAFLr3kSfuNKOu6QecjpeZxA8NyNyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNWZjMTEtNzJiNC00ZjlkLWFhNDUt YTJhNWE4ZDk5ZGI4LzEvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hNWZjMTEtNzJiNC00ZjlkLWFhNDUtYTJhNWE4ZDk5ZGI4 LzEvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPrTFZIF k/6t3WhuvKujmVjZKvC4mtaL0htJtQoEX+XaVx3TVHfTGhJRhJKO9NsDuwFABd8b iv6nuHGck26x6+KbeOcQLmZD01a1kV7tbv0X50QggvQblySFA4mcocq3MshNfSrW PlY05x3ZnmtWTYqUj4Wt8tKZjABL9QfsFwawN/frhn+TTnHncJ+WB3v0Ev8Q+VI7 YMzKzbkQmsGv0sZNxtI+qfJYrvr3Oqq/X7j8sDOlK85i1wpRQBtuy7dgDVOOKMa1 s9ZdaNsrdJtlMoVmfzqtSFO0AWhD03PJIMx5WgSgynvRwvWYYAswjLx56mAlrTzI eeqoFPRNI4KpDg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:11:22 2025 by rpki-client