This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json) Hash identifier: Su/jg6Stc4bDhC6BIogm4lcUJqggSjSxlCmLSxTyJaM= Subject key identifier: D7:D2:63:65:3A:36:4C:75:21:19:B6:84:0E:EF:A9:42:FF:8B:04:EF Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8 Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8 Certificate serial: 019AF12D1E05D6F28DC3D1C79A42A4915CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft Manifest number: 145E Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=) 2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: 2NMrdLUn1BPDkfKMWfRy8TptIXFF1YGM0xrTuRD7IaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1e:05:d6:f2:8d:c3:d1:c7:9a:42:a4:91:5c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8 Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=d7d263653a364c752119b6840eefa942ff8b04ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:47:a0:64:3a:28:ac:ae:eb:de:dd:12:b4: dc:b7:b6:60:83:6d:d5:3f:97:51:a0:c3:5c:55:7a: 8a:49:7f:36:24:68:d2:46:ee:06:55:63:75:81:95: 25:f1:a0:69:2f:82:7d:7f:13:da:61:fd:7d:9c:03: 62:67:ae:0c:c4:6e:a0:45:2b:98:89:81:69:85:a1: 81:57:a2:50:2e:a0:e4:3b:ef:fe:98:00:db:28:84: 9f:19:50:6a:b3:f8:66:d9:ae:d7:2c:e0:1d:5a:c8: ac:b5:a7:e3:df:4f:bf:ed:c0:d9:b2:06:d1:d9:d4: b4:8f:2e:cc:f1:62:60:2a:0b:f7:ed:07:45:0c:3d: ac:fa:bd:1e:c7:a4:2c:ed:99:67:f9:33:98:b0:35: d1:53:be:a7:b5:39:f0:f1:0c:e4:76:1c:5c:79:81: bd:c9:f2:00:37:bf:a1:68:0e:9d:88:a5:f4:2a:7c: e0:a5:3b:6a:ea:9a:b6:78:0d:09:34:c5:d1:25:4c: 28:03:1a:7a:d5:6c:40:dd:ec:d8:98:2e:a2:a3:04: ff:51:95:0f:09:d4:1c:40:f8:a4:c2:b5:50:90:98: 18:24:e7:94:a9:0d:c6:71:5c:86:70:a7:d4:4c:a9: 57:b6:d2:3a:2c:1f:af:4d:5f:25:18:2f:6a:f4:55: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D2:63:65:3A:36:4C:75:21:19:B6:84:0E:EF:A9:42:FF:8B:04:EF X509v3 Authority Key Identifier: keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:34:80:e0:dc:2d:28:de:dd:89:e8:27:d3:9c:2c:b6:b8:1c: b5:87:1b:13:33:58:ea:72:06:c5:ab:fa:44:0e:c5:19:5a:11: 14:f8:7f:a8:26:88:69:cc:38:4c:be:e9:31:8e:47:25:07:7e: 9e:ee:e3:ee:0a:7c:75:8a:f7:a1:e9:64:ca:b1:b8:62:cf:45: 98:3b:12:b7:49:bf:00:c8:69:ea:c2:48:59:41:4a:57:fb:ad: 45:c2:e0:9a:52:0e:a0:bd:e2:64:81:7f:24:ee:91:96:34:13: c9:8b:d7:63:9a:1c:9e:e5:70:46:00:af:d2:eb:80:59:8e:f6: 40:0a:4f:0c:c6:85:ac:f3:9f:54:72:67:8c:6f:a0:77:ad:27: 14:61:55:3a:7f:f6:5b:a2:55:15:df:b9:79:f4:ca:de:ac:12: 0c:0f:71:00:50:f5:c4:de:54:63:f4:70:1f:b0:56:de:fe:52: 08:21:e8:7c:5f:42:01:e2:b3:c8:f8:6f:bc:51:0e:15:53:54: bc:fc:71:df:09:c1:43:70:8e:bc:d8:68:62:a8:aa:2e:72:f3: 53:b5:2e:a9:b0:8d:36:9c:2f:8c:70:88:e2:63:24:05:d1:60: f2:ac:b6:42:e8:18:51:66:bc:d0:49:7e:65:22:e1:ad:62:c9: 21:e8:17:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLR4F1vKNw9HHmkKkkVzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNWY2MWE2ZTA4ZGVkNmYxZmY1MDUxMWM2MjA4OTY5NmFi NTY0YTgwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD EyhkN2QyNjM2NTNhMzY0Yzc1MjExOWI2ODQwZWVmYTk0MmZmOGIwNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFVHoGQ6KKyu697dErTct7Zgg23V P5dRoMNcVXqKSX82JGjSRu4GVWN1gZUl8aBpL4J9fxPaYf19nANiZ64MxG6gRSuY iYFphaGBV6JQLqDkO+/+mADbKISfGVBqs/hm2a7XLOAdWsistafj30+/7cDZsgbR 2dS0jy7M8WJgKgv37QdFDD2s+r0ex6Qs7Zln+TOYsDXRU76ntTnw8QzkdhxceYG9 yfIAN7+haA6diKX0KnzgpTtq6pq2eA0JNMXRJUwoAxp61WxA3ezYmC6iowT/UZUP CdQcQPikwrVQkJgYJOeUqQ3GcVyGcKfUTKlXttI6LB+vTV8lGC9q9FW0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfSY2U6Nkx1IRm2hA7vqUL/iwTvMB8GA1UdIwQY MBaAFFFfYabgje1vH/UFEcYgiWlqtWSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zYTkwZjUtNjViNS00MGI1LThlZDkt OThjMDk1YzA3ZTI0LzEvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zYTkwZjUtNjViNS00MGI1LThlZDktOThjMDk1YzA3ZTI0 LzEvVVY5aHB1Q043VzhmOVFVUnhpQ0phV3ExWktnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzSA4Nwt KN7diegn05wstrgctYcbEzNY6nIGxav6RA7FGVoRFPh/qCaIacw4TL7pMY5HJQd+ nu7j7gp8dYr3oelkyrG4Ys9FmDsSt0m/AMhp6sJIWUFKV/utRcLgmlIOoL3iZIF/ JO6RljQTyYvXY5ocnuVwRgCv0uuAWY72QApPDMaFrPOfVHJnjG+gd60nFGFVOn/2 W6JVFd+5efTK3qwSDA9xAFD1xN5UY/RwH7BW3v5SCCHofF9CAeKzyPhvvFEOFVNU vPxx3wnBQ3COvNhoYqiqLnLzU7UuqbCNNpwvjHCI4mMkBdFg8qy2QugYUWa80El+ ZSLhrWLJIegXqA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:13 2025 by rpki-client