This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json) Hash identifier: 1yj0mQkAwg7KkCzMDfQ4ETmN3q9WlQhQxj1sJE5gT7o= Subject key identifier: 2A:45:65:38:E3:0F:EF:78:B0:A3:4E:ED:33:37:0F:CC:24:28:1D:CB Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc Certificate serial: 019AF27705F30E01016150A9CFA19D46C83D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft Manifest number: 031B Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: HvK4ohFoyAQMMQbsZ1g1uv8Db6ss7Oc+W4siEZUIAMs=) 2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:05:f3:0e:01:01:61:50:a9:cf:a1:9d:46:c8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=2a456538e30fef78b0a34eed33370fcc24281dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:c8:3d:1f:bc:c1:11:e5:73:d3:3b:38:76: 80:da:00:61:41:24:e9:e7:9e:02:34:a9:a9:72:39: bc:ab:2c:92:84:04:44:7b:c5:05:e0:9f:df:58:80: 49:10:2c:b0:1d:bd:e4:65:d7:2d:86:aa:f7:32:bf: 52:86:63:bb:76:06:08:97:6a:af:b7:53:6a:dd:d7: 9e:e9:bd:17:1e:4e:e1:bf:65:52:28:7e:fb:d6:60: 07:86:ab:5f:7d:0f:8d:57:23:0f:97:5d:ca:80:f8: 81:eb:a3:91:f4:dd:70:a6:ae:c3:ac:d3:d5:4d:33: c8:90:1f:a3:5c:8e:fa:e7:6f:4a:72:e1:a2:3e:41: 66:03:f8:66:50:33:a3:37:da:02:d0:c5:cd:f0:e5: 6a:54:95:53:cc:e4:4d:bb:ad:09:99:55:79:12:16: b3:69:37:5f:ac:dd:70:a2:03:2d:4d:ec:27:ad:74: ba:12:24:a0:e7:ba:d2:2e:80:f5:49:65:1a:50:86: 56:e0:23:ee:a2:dd:41:d7:a5:04:48:40:d0:b0:87: 35:23:6d:a8:5e:e4:87:11:6b:45:3c:fa:9d:bf:80: ac:db:7e:32:ae:f2:a8:f1:6c:d8:fc:18:af:c4:b4: f0:4f:b4:e7:c4:ad:fd:f3:ce:ec:0e:72:04:e8:6b: 68:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:45:65:38:E3:0F:EF:78:B0:A3:4E:ED:33:37:0F:CC:24:28:1D:CB X509v3 Authority Key Identifier: keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:df:d9:e4:97:c5:94:03:b0:77:4a:39:29:f6:05:c2:d7:ec: 46:ad:f5:08:ef:ab:8e:af:d0:d6:11:fb:6b:bf:b0:05:d4:44: a3:0c:f4:fe:62:cc:5f:34:19:9a:59:fb:d6:c5:36:a8:04:4b: b7:b2:22:d6:58:bd:b4:a4:1d:55:2b:14:c8:7b:a9:24:8d:64: 1a:78:ea:73:dc:ba:e0:48:54:e7:51:36:fe:e7:78:44:90:3d: f9:70:02:f5:39:b2:17:8b:14:1b:fc:a8:ef:74:e6:0f:fe:ec: c8:ed:3e:98:79:8a:41:3a:08:bb:99:7d:f0:03:e8:e2:2d:9a: fc:8a:17:c9:6b:10:43:c6:85:c6:06:6d:75:e4:ab:53:1e:fd: 8a:9a:8a:60:29:84:65:23:57:5f:12:14:40:e6:80:ff:47:68: 39:24:f2:a8:12:6e:a6:3e:85:a0:c2:d0:e2:9d:14:95:9f:76: 4c:e8:01:eb:41:86:b2:6e:76:10:ee:20:10:59:35:44:48:84: df:a6:d8:a1:37:af:f9:ea:df:d1:c9:34:6e:3c:2e:b5:01:48: 9d:63:bc:fa:8a:3c:85:25:21:57:30:12:06:4a:b3:c2:9d:db: 8c:95:8b:d2:05:4a:66:c1:c5:27:58:60:b7:5b:51:9f:d5:cd: d7:e1:0e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwXzDgEBYVCpz6GdRsg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk OWVkZGMwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD EygyYTQ1NjUzOGUzMGZlZjc4YjBhMzRlZWQzMzM3MGZjYzI0MjgxZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7jIPR+8wRHlc9M7OHaA2gBhQSTp 554CNKmpcjm8qyyShAREe8UF4J/fWIBJECywHb3kZdcthqr3Mr9ShmO7dgYIl2qv t1Nq3dee6b0XHk7hv2VSKH771mAHhqtffQ+NVyMPl13KgPiB66OR9N1wpq7DrNPV TTPIkB+jXI76529KcuGiPkFmA/hmUDOjN9oC0MXN8OVqVJVTzORNu60JmVV5Ehaz aTdfrN1wogMtTewnrXS6EiSg57rSLoD1SWUaUIZW4CPuot1B16UESEDQsIc1I22o XuSHEWtFPPqdv4Cs234yrvKo8WzY/BivxLTwT7TnxK39887sDnIE6GtoMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpFZTjjD+94sKNO7TM3D8wkKB3LMB8GA1UdIwQY MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt NmFjMzUzNzBmZDczLzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmd/Z5JfF lAOwd0o5KfYFwtfsRq31CO+rjq/Q1hH7a7+wBdREowz0/mLMXzQZmln71sU2qARL t7Ii1li9tKQdVSsUyHupJI1kGnjqc9y64EhU51E2/ud4RJA9+XAC9TmyF4sUG/yo 73TmD/7syO0+mHmKQToIu5l98APo4i2a/IoXyWsQQ8aFxgZtdeSrUx79ipqKYCmE ZSNXXxIUQOaA/0doOSTyqBJupj6FoMLQ4p0UlZ92TOgB60GGsm52EO4gEFk1REiE 36bYoTev+erf0ck0bjwutQFInWO8+oo8hSUhVzASBkqzwp3bjJWL0gVKZsHFJ1hg t1tRn9XN1+EObg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:29 2025 by rpki-client