This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft File: UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json) Hash identifier: BqKD9tw9FzkoVQYngcJfSyZHqd0OZ8wFl9DXA73D+nE= Subject key identifier: EB:F6:33:8D:5C:46:B0:0E:24:7F:6A:49:B7:AA:11:54:5D:02:3A:86 Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83 Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483 Certificate serial: 019AF5AE61956AD7CB07E4AE60F7DF11457A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft Manifest number: 0FCD Signing time: Sat 06 Dec 2025 22:00:37 +0000 Manifest this update: Sat 06 Dec 2025 22:00:37 +0000 Manifest next update: Sun 07 Dec 2025 22:00:37 +0000 Files and hashes: 1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=) 2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: VltZTv2pI18N33RDU8HvoKpQAip7adgh1g2Xl6wAn34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:61:95:6a:d7:cb:07:e4:ae:60:f7:df:11:45:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483 Validity Not Before: Dec 6 22:00:37 2025 GMT Not After : Dec 7 22:00:37 2025 GMT Subject: CN=ebf6338d5c46b00e247f6a49b7aa11545d023a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:e7:19:97:30:ef:80:23:31:80:20:9a:51: 3d:7e:c8:ad:8b:8c:d4:7d:68:7c:ca:d1:a3:78:4a: df:43:e0:4d:6c:c6:87:19:84:d8:72:e7:b3:4f:9c: 45:3d:e3:be:e1:ec:3d:d4:97:f0:75:dc:8e:7a:5b: c0:19:17:9d:c2:a3:da:23:bc:42:f5:86:34:88:2c: 54:5c:12:5e:99:0e:6c:f3:51:94:c3:18:fb:c1:fe: 42:5f:60:71:27:18:d3:f1:56:64:7c:e3:32:c5:a5: f2:00:51:de:65:9c:ee:8c:a8:d3:99:a3:19:a9:2a: 86:7d:5d:b3:f5:fb:c6:98:9e:0d:c4:b7:f5:97:91: 5a:b5:47:05:66:33:aa:bb:83:4c:bd:41:ad:68:27: ae:a4:f4:06:41:2a:04:22:dc:85:bc:77:9e:7f:ab: 12:4c:62:7e:4d:6a:a3:4e:09:17:cb:29:07:52:7d: 11:8c:ca:a3:d3:76:bf:8e:8b:30:0f:5a:b1:fc:ab: 7f:5f:49:1f:f6:9d:62:61:89:4b:7c:a4:11:86:42: 20:86:1f:66:34:39:53:15:21:f2:6c:a7:88:7d:4e: 69:b3:3b:2f:c3:40:aa:d1:90:a9:0b:0a:72:00:ec: 93:1b:00:77:3c:15:e8:18:98:ec:31:eb:e8:cc:72: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F6:33:8D:5C:46:B0:0E:24:7F:6A:49:B7:AA:11:54:5D:02:3A:86 X509v3 Authority Key Identifier: keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0c:46:4d:e7:51:2b:c0:75:77:36:91:0c:e3:64:6b:50:26: 35:3b:6c:5b:bb:a1:4a:74:4c:20:7f:3b:89:0c:9a:e3:4a:25: 41:ea:cc:1d:2f:6f:13:c4:92:27:3c:fb:5e:ac:9d:fb:ad:17: c8:5d:92:47:b9:f1:64:29:e0:4c:2a:67:e3:aa:8d:86:83:5f: b2:a6:fe:cb:b2:ed:3c:3c:b2:90:97:ce:63:73:f3:7a:86:17: eb:39:3e:ce:07:4d:44:f9:b7:bb:46:25:45:e4:b6:be:bc:89: cd:2d:c8:d7:84:01:aa:3f:0d:d5:8d:47:1a:fa:49:c1:6a:f0: 49:f7:6a:17:71:2a:f3:58:34:71:1c:e5:d0:78:2e:31:db:2d: c8:65:00:21:82:40:ca:e9:1f:40:be:b8:b7:f7:31:95:f7:a9: 15:cd:12:33:f6:06:70:e1:8a:1e:5b:07:04:23:6f:52:df:60: 02:96:53:48:62:5b:b2:2b:83:dc:40:b0:8b:a0:9b:0d:60:4d: d8:01:9d:4a:c9:9d:ef:2d:7c:0a:62:ab:99:a9:cc:33:94:05: c1:35:d9:f3:c4:b8:0e:42:7f:86:51:3d:3e:d9:c0:8e:b7:7c: 98:30:0f:68:02:c3:75:c6:1e:ca:ea:de:63:aa:9c:d2:a0:42: 59:c6:3c:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmGVatfLB+SuYPffEUV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTMxYjRhZWNjNjViMzEyNWE3YjQ3YWM5MDkwOGIwYTUx Nzg0ODMwHhcNMjUxMjA2MjIwMDM3WhcNMjUxMjA3MjIwMDM3WjAzMTEwLwYDVQQD EyhlYmY2MzM4ZDVjNDZiMDBlMjQ3ZjZhNDliN2FhMTE1NDVkMDIzYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3nGZcw74AjMYAgmlE9fsiti4zU fWh8ytGjeErfQ+BNbMaHGYTYcuezT5xFPeO+4ew91JfwddyOelvAGRedwqPaI7xC 9YY0iCxUXBJemQ5s81GUwxj7wf5CX2BxJxjT8VZkfOMyxaXyAFHeZZzujKjTmaMZ qSqGfV2z9fvGmJ4NxLf1l5FatUcFZjOqu4NMvUGtaCeupPQGQSoEItyFvHeef6sS TGJ+TWqjTgkXyykHUn0RjMqj03a/joswD1qx/Kt/X0kf9p1iYYlLfKQRhkIghh9m NDlTFSHybKeIfU5pszsvw0Cq0ZCpCwpyAOyTGwB3PBXoGJjsMevozHLvDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv2M41cRrAOJH9qSbeqEVRdAjqGMB8GA1UdIwQY MBaAFFHjG0rsxlsxJae0eskJCLClF4SDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEt ZmQ0YjJhMmFlZmE1LzEvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEtZmQ0YjJhMmFlZmE1 LzEvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQxGTedR K8B1dzaRDONka1AmNTtsW7uhSnRMIH87iQya40olQerMHS9vE8SSJzz7Xqyd+60X yF2SR7nxZCngTCpn46qNhoNfsqb+y7LtPDyykJfOY3PzeoYX6zk+zgdNRPm3u0Yl ReS2vryJzS3I14QBqj8N1Y1HGvpJwWrwSfdqF3Eq81g0cRzl0HguMdstyGUAIYJA yukfQL64t/cxlfepFc0SM/YGcOGKHlsHBCNvUt9gApZTSGJbsiuD3ECwi6CbDWBN 2AGdSsmd7y18CmKrmanMM5QFwTXZ88S4DkJ/hlE9PtnAjrd8mDAPaALDdcYeyure Y6qc0qBCWcY8+Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:37 2025 by rpki-client