This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json) Hash identifier: qtRGBUFqReywv8h4QGthYC2HseV3NRJWfUGnXg1Dql4= Subject key identifier: 5A:E6:66:8A:A5:09:A0:29:33:05:25:18:B2:B5:99:C6:68:ED:37:DE Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd Certificate serial: 019AF2096299BA3132783D1E4298D2BE6B1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft Manifest number: 1628 Signing time: Sat 06 Dec 2025 05:01:32 +0000 Manifest this update: Sat 06 Dec 2025 05:01:32 +0000 Manifest next update: Sun 07 Dec 2025 05:01:32 +0000 Files and hashes: 1: Sy9MkTO2BPRvKPMpsGDN-2TnmTk.roa (hash: Zvh1o0q4voreyVSKOLfHlxnIapN8G7OyPz3tE/wp4Tg=) 2: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: EV/e0FSPFGEh2lFVv3LCGu11/kRVYcyRlieRjCKEzkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:62:99:ba:31:32:78:3d:1e:42:98:d2:be:6b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd Validity Not Before: Dec 6 05:01:32 2025 GMT Not After : Dec 7 05:01:32 2025 GMT Subject: CN=5ae6668aa509a02933052518b2b599c668ed37de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:1c:b4:bd:7f:b0:a8:84:54:54:4f:7f:58: 95:bf:58:24:83:bc:51:7d:96:ae:93:b2:43:85:a2: 84:90:7d:b4:9e:c4:32:49:c9:46:47:ef:75:d7:b0: f4:73:42:0c:61:d2:b5:4a:52:81:6f:86:95:12:6d: 6a:6a:31:e7:67:73:eb:02:50:a3:42:c2:d9:e8:ba: f3:a7:d4:03:36:22:aa:23:ed:c9:87:a3:27:e6:8d: 52:a0:32:80:d4:e5:e9:d3:29:2e:86:7b:8e:fe:3f: 80:bc:c6:16:3c:c3:ec:0e:46:3c:36:82:ae:bd:de: e1:bc:e0:0e:37:89:78:ff:fb:9a:6b:3a:17:69:79: ad:82:c8:4a:7d:62:40:9f:d0:47:b5:91:65:92:f3: 6e:59:95:be:6e:de:07:9c:44:d5:af:3a:dc:14:fd: 68:70:7d:f0:d1:13:af:14:49:59:67:3d:d0:6c:99: 3a:90:47:c0:dc:e2:99:51:3a:95:99:3d:6c:8f:f7: 92:a7:d8:d3:1e:68:15:bb:b8:2b:7d:26:a3:78:2c: 85:1f:96:42:1b:18:7e:a4:62:70:ee:60:75:bd:05: b1:2e:da:ff:5c:09:e9:f8:d2:c8:c6:ac:7f:99:6e: 10:30:cc:93:09:bf:00:c7:37:4f:f6:5a:ed:3e:38: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E6:66:8A:A5:09:A0:29:33:05:25:18:B2:B5:99:C6:68:ED:37:DE X509v3 Authority Key Identifier: keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:67:43:4b:08:40:a2:7e:49:79:83:fd:01:13:72:fc:53:ac: ed:d3:2b:c9:c6:14:6e:d9:10:1b:54:82:91:1b:53:72:63:06: a2:b9:cb:ce:a6:c3:7e:2f:36:69:f9:f2:47:8b:23:64:f4:0c: 8e:68:aa:d2:0c:41:96:88:12:c2:6a:50:c9:89:29:49:c7:ba: 61:66:21:9d:7f:68:d0:62:d3:b6:a0:bb:e5:72:cf:7b:13:a2: bd:db:91:f0:2b:8e:ef:49:5e:15:0a:9a:24:b3:c3:96:e0:34: a3:17:24:e1:98:78:95:93:0d:ad:7d:bf:80:c2:c9:fc:2b:ac: 28:9c:9a:93:74:5e:77:5a:0b:a8:04:a4:a7:d6:85:bf:0f:52: a6:2c:7a:85:62:01:d4:bc:5d:fc:1b:1c:31:f3:f9:69:6e:48: d9:04:51:ee:04:1c:da:94:98:b0:16:c1:01:d2:18:fe:7a:99: 0f:39:de:38:78:33:78:48:ab:c6:e0:44:ca:3a:05:66:25:fd: 96:85:aa:91:95:70:bf:a9:7f:b7:5e:6f:e3:fd:31:b8:77:62: 67:0c:40:20:e5:44:59:ed:ff:fc:a8:6d:24:0b:a4:89:d6:35: 5d:ad:98:78:74:39:fb:51:82:f9:6d:92:a4:e0:5d:ec:f8:e5: d3:80:0e:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWKZujEyeD0eQpjSvmsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzc5Nzk5YTNiOGUwZjBmMWUzYzc0OThjMDVhMzNmODVm YmJiY2QwHhcNMjUxMjA2MDUwMTMyWhcNMjUxMjA3MDUwMTMyWjAzMTEwLwYDVQQD Eyg1YWU2NjY4YWE1MDlhMDI5MzMwNTI1MThiMmI1OTljNjY4ZWQzN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lsctL1/sKiEVFRPf1iVv1gkg7xR fZauk7JDhaKEkH20nsQySclGR+9117D0c0IMYdK1SlKBb4aVEm1qajHnZ3PrAlCj QsLZ6Lrzp9QDNiKqI+3Jh6Mn5o1SoDKA1OXp0ykuhnuO/j+AvMYWPMPsDkY8NoKu vd7hvOAON4l4//uaazoXaXmtgshKfWJAn9BHtZFlkvNuWZW+bt4HnETVrzrcFP1o cH3w0ROvFElZZz3QbJk6kEfA3OKZUTqVmT1sj/eSp9jTHmgVu7grfSajeCyFH5ZC Gxh+pGJw7mB1vQWxLtr/XAnp+NLIxqx/mW4QMMyTCb8AxzdP9lrtPjg4PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrmZoqlCaApMwUlGLK1mcZo7TfeMB8GA1UdIwQY MBaAFFB3l5mjuODw8ePHSYwFoz+F+7vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNDQ5NTgtYWEyZC00NzhjLWIwZmYt NjllZmFkNmMzYTgwLzEvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yNDQ5NTgtYWEyZC00NzhjLWIwZmYtNjllZmFkNmMzYTgw LzEvVUhlWG1hTzQ0UER4NDhkSmpBV2pQNFg3dTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGdDSwhA on5JeYP9ARNy/FOs7dMrycYUbtkQG1SCkRtTcmMGornLzqbDfi82afnyR4sjZPQM jmiq0gxBlogSwmpQyYkpSce6YWYhnX9o0GLTtqC75XLPexOivduR8CuO70leFQqa JLPDluA0oxck4Zh4lZMNrX2/gMLJ/CusKJyak3Red1oLqASkp9aFvw9Spix6hWIB 1Lxd/BscMfP5aW5I2QRR7gQc2pSYsBbBAdIY/nqZDzneOHgzeEirxuBEyjoFZiX9 loWqkZVwv6l/t15v4/0xuHdiZwxAIOVEWe3//KhtJAukidY1Xa2YeHQ5+1GC+W2S pOBd7Pjl04AOtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:40 2025 by rpki-client