This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json) Hash identifier: Id57f4NrfsJRT4fEbGE+AZn1KSOzXtJtbnUOIahulUQ= Subject key identifier: AD:2F:D9:90:A2:95:79:A5:C6:26:83:52:09:B4:6A:70:80:33:30:25 Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Certificate serial: 019AF20968FC34657A0ACCF7AF6151FE870F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft Manifest number: 026E Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=) 2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: QRnKYt2702zI/o5m9jCogRJVaRGfh39QmBXJth8DIFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:68:fc:34:65:7a:0a:cc:f7:af:61:51:fe:87:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=ad2fd990a29579a5c626835209b46a7080333025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:38:da:d2:bc:c1:4c:56:ce:a3:2d:86:ff: 30:fc:2a:25:53:63:3c:74:4b:38:7f:fb:00:e6:0f: c9:c5:22:0d:5a:dc:c9:0c:c6:98:da:5d:92:1d:84: 6f:09:8c:04:92:de:cd:81:9a:b0:34:57:52:c5:4f: 1e:c0:03:f7:ae:a5:77:87:75:81:fa:d3:e0:95:ef: ec:3b:f1:5b:9e:d6:f7:63:00:ce:ce:eb:d4:48:00: 46:22:b7:9d:7a:81:24:10:6b:16:95:cc:3b:3a:89: 51:ab:b5:8a:2a:0e:1d:c9:00:85:76:80:c6:01:02: 93:6c:cc:ed:c7:32:ae:5b:9d:f8:1d:ea:79:c3:c6: 7a:02:31:88:ec:f9:ae:65:b2:f9:8e:36:3d:c2:6e: 55:0d:95:14:b7:ce:e9:52:c9:a7:fc:cc:09:4b:bf: 0f:dd:89:0d:e1:e3:42:c4:e3:de:0d:78:ce:24:05: e9:af:a0:36:cb:a5:98:b7:af:c5:b4:ee:ca:9a:af: 35:62:3c:98:a0:a4:32:44:62:bf:68:a3:a3:9c:9b: c0:63:4c:33:62:b9:00:ef:74:35:69:ab:be:16:07: 7a:9b:a0:02:06:84:5c:53:00:c1:f2:61:4c:cb:a4: 11:1f:b2:85:a2:bf:12:56:e9:1b:ed:86:a9:fb:09: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2F:D9:90:A2:95:79:A5:C6:26:83:52:09:B4:6A:70:80:33:30:25 X509v3 Authority Key Identifier: keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:66:29:30:93:84:e0:c9:97:de:c4:8d:09:b4:75:f7:4b:a1: 24:b5:ea:84:a7:1f:bc:b2:89:dc:4a:cc:6c:bb:d4:16:0f:f9: fa:ac:92:c9:dd:dc:ec:e0:71:d4:be:c0:b1:6f:55:d7:e1:d7: 99:ab:b4:fd:db:3e:bc:86:75:15:4d:14:b2:ed:19:10:b5:50: 05:e1:ad:33:c1:41:bf:90:25:23:21:f3:22:2f:ad:58:c8:0b: 02:b0:61:30:af:a4:a3:ce:ff:a1:52:2e:fe:07:ca:92:5b:0f: a3:9e:44:4b:8e:11:4d:d8:b2:f8:97:13:dd:34:5a:65:c9:11: 06:12:35:d5:fe:86:16:33:f1:b6:a8:91:20:14:f6:e1:87:9d: 99:c6:54:d8:b0:ba:ee:90:2d:a2:91:d2:89:96:cc:15:c9:86: 17:36:9a:b2:b2:bc:6a:2f:99:6f:a4:bd:a2:8a:3b:57:1a:fb: 6d:42:61:ec:06:dc:63:8b:5b:8b:a1:79:1a:bf:8b:98:61:39: 32:84:48:cc:ba:44:27:a5:3c:42:73:c8:84:e6:38:a8:67:f1: 4c:d1:e0:68:84:71:67:3a:04:8d:05:48:3b:13:cd:65:72:74: db:f1:cb:5c:94:75:f8:22:3d:54:de:4b:d7:f0:ec:18:56:a4: 2a:4b:d2:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWj8NGV6Csz3r2FR/ocPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi OTEzOTgwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EyhhZDJmZDk5MGEyOTU3OWE1YzYyNjgzNTIwOWI0NmE3MDgwMzMzMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EM42tK8wUxWzqMthv8w/ColU2M8 dEs4f/sA5g/JxSINWtzJDMaY2l2SHYRvCYwEkt7NgZqwNFdSxU8ewAP3rqV3h3WB +tPgle/sO/Fbntb3YwDOzuvUSABGIredeoEkEGsWlcw7OolRq7WKKg4dyQCFdoDG AQKTbMztxzKuW534Hep5w8Z6AjGI7PmuZbL5jjY9wm5VDZUUt87pUsmn/MwJS78P 3YkN4eNCxOPeDXjOJAXpr6A2y6WYt6/FtO7Kmq81YjyYoKQyRGK/aKOjnJvAY0wz YrkA73Q1aau+Fgd6m6ACBoRcUwDB8mFMy6QRH7KFor8SVukb7Yap+wltsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0v2ZCilXmlxiaDUgm0anCAMzAlMB8GA1UdIwQY MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmYpMJOE 4MmX3sSNCbR190uhJLXqhKcfvLKJ3ErMbLvUFg/5+qySyd3c7OBx1L7AsW9V1+HX mau0/ds+vIZ1FU0Usu0ZELVQBeGtM8FBv5AlIyHzIi+tWMgLArBhMK+ko87/oVIu /gfKklsPo55ES44RTdiy+JcT3TRaZckRBhI11f6GFjPxtqiRIBT24YedmcZU2LC6 7pAtopHSiZbMFcmGFzaasrK8ai+Zb6S9ooo7Vxr7bUJh7AbcY4tbi6F5Gr+LmGE5 MoRIzLpEJ6U8QnPIhOY4qGfxTNHgaIRxZzoEjQVIOxPNZXJ02/HLXJR1+CI9VN5L 1/DsGFakKkvS2A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:57 2025 by rpki-client