This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json) Hash identifier: RFZLl+IeirBwgZ6Ezh+jFzP+6ZnWBDlCST4aWv/Oqns= Subject key identifier: 68:78:21:C4:EE:12:03:4A:9C:73:60:2B:AE:D4:9C:E0:8F:EB:E4:5E Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Certificate serial: 019AF0BF482F8EF69E79A967E355E6D54B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft Manifest number: 0EC2 Signing time: Fri 05 Dec 2025 23:00:58 +0000 Manifest this update: Fri 05 Dec 2025 23:00:58 +0000 Manifest next update: Sat 06 Dec 2025 23:00:58 +0000 Files and hashes: 1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=) 2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: ydA2if0rEK4Vn1kjN4NgrRwEf8ChanRcmudWiISxJ6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:48:2f:8e:f6:9e:79:a9:67:e3:55:e6:d5:4b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Validity Not Before: Dec 5 23:00:58 2025 GMT Not After : Dec 6 23:00:58 2025 GMT Subject: CN=687821c4ee12034a9c73602baed49ce08febe45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:8b:20:8c:6e:af:a7:15:d6:a2:02:c2:68: d1:fe:47:77:e3:1f:c8:5e:1d:5a:1e:42:cd:73:45: 50:f2:c7:49:61:73:0f:84:d8:24:74:e6:51:86:82: 21:7b:e2:71:98:78:70:d7:cf:dd:3e:95:21:5c:59: 07:92:5b:64:03:1e:75:96:89:22:ab:03:19:44:e6: da:bb:35:69:a9:5f:bb:63:38:a0:47:dd:18:75:7f: 19:20:89:66:54:76:48:7a:b4:4d:b6:f3:ca:4d:4c: b4:84:67:0b:07:bd:0e:74:f8:97:fd:58:83:a1:31: 08:15:28:e4:46:d3:65:a8:80:9a:62:21:a6:8e:fb: 9c:eb:64:4d:80:ac:6a:22:3d:b9:af:4d:06:ac:bf: 14:95:3b:59:0f:6a:7a:91:74:50:5c:8d:4f:4d:81: 28:6d:5a:5c:2d:ea:ee:42:d8:91:dd:fa:8a:48:ec: 9e:b7:72:3e:77:59:28:11:26:9e:a5:f1:f9:34:d3: e6:0a:eb:92:d5:bb:18:f2:da:48:bc:71:b7:26:57: bd:23:d2:ea:69:60:91:10:cb:01:5d:94:ef:ba:c9: 3a:e7:8a:d2:f7:ce:c9:d1:76:1c:a5:bb:59:1b:f5: dd:da:d4:e9:53:16:0b:36:23:80:5e:3d:b6:c7:a5: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:78:21:C4:EE:12:03:4A:9C:73:60:2B:AE:D4:9C:E0:8F:EB:E4:5E X509v3 Authority Key Identifier: keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:05:d2:d8:ff:92:b6:b5:67:6f:88:4a:d1:ff:4b:21:c4:90: 8a:8f:ff:1f:74:be:7d:b2:1d:6f:f6:b0:a0:d8:ed:a5:f1:45: 0c:d1:9a:a1:31:66:10:26:06:dc:43:22:d9:8c:dd:9f:86:31: 19:78:cb:a9:eb:55:b5:66:96:6d:a1:ce:e8:54:e6:57:3e:fe: bc:be:58:e6:53:20:70:cf:ff:fc:78:3f:96:7e:6b:31:0a:8d: a3:c3:16:0b:d2:3b:ec:86:0c:4a:f4:cc:77:a1:12:ae:1b:ba: 15:2c:b7:20:06:6d:94:74:e2:6b:29:12:94:55:13:d4:8b:ca: 73:94:77:0f:a6:72:0e:d4:ae:1e:ef:3e:25:da:de:0c:43:27: cc:0b:d7:3a:f8:fc:ab:b8:3e:15:0d:95:66:4d:7c:54:84:6c: f5:d6:a2:2e:4c:b0:5d:0a:50:bf:f5:18:14:4b:ac:da:8a:6d: c9:77:b8:58:ad:aa:9a:fe:c8:d8:07:8c:42:22:6a:98:20:d8: f4:74:4c:14:94:74:36:4b:f1:8c:9a:4c:7c:70:6a:70:af:a8: 38:d8:31:60:0d:d7:00:1c:78:40:bb:e2:14:1c:53:05:cd:5a: d9:af:37:d5:ef:02:c7:08:3b:ee:86:d6:1f:d3:08:18:f9:cf: 75:40:c5:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0gvjvaeealn41Xm1UuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWFkMDhmMzZjZmJjMDAwNTNhNWVlM2Q1YWJiN2EzMTE3 YzNmOGEwHhcNMjUxMjA1MjMwMDU4WhcNMjUxMjA2MjMwMDU4WjAzMTEwLwYDVQQD Eyg2ODc4MjFjNGVlMTIwMzRhOWM3MzYwMmJhZWQ0OWNlMDhmZWJlNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCuLIIxur6cV1qICwmjR/kd34x/I Xh1aHkLNc0VQ8sdJYXMPhNgkdOZRhoIhe+JxmHhw18/dPpUhXFkHkltkAx51loki qwMZRObauzVpqV+7YzigR90YdX8ZIIlmVHZIerRNtvPKTUy0hGcLB70OdPiX/ViD oTEIFSjkRtNlqICaYiGmjvuc62RNgKxqIj25r00GrL8UlTtZD2p6kXRQXI1PTYEo bVpcLeruQtiR3fqKSOyet3I+d1koESaepfH5NNPmCuuS1bsY8tpIvHG3Jle9I9Lq aWCREMsBXZTvusk654rS987J0XYcpbtZG/Xd2tTpUxYLNiOAXj22x6WM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh4IcTuEgNKnHNgK67UnOCP6+ReMB8GA1UdIwQY MBaAFLqq0I82z7wABTpe49Wrt6MRfD+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAt M2Q0OGRhOWIwNmEyLzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAtM2Q0OGRhOWIwNmEy LzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAXS2P+S trVnb4hK0f9LIcSQio//H3S+fbIdb/awoNjtpfFFDNGaoTFmECYG3EMi2Yzdn4Yx GXjLqetVtWaWbaHO6FTmVz7+vL5Y5lMgcM///Hg/ln5rMQqNo8MWC9I77IYMSvTM d6ESrhu6FSy3IAZtlHTiaykSlFUT1IvKc5R3D6ZyDtSuHu8+JdreDEMnzAvXOvj8 q7g+FQ2VZk18VIRs9daiLkywXQpQv/UYFEus2optyXe4WK2qmv7I2AeMQiJqmCDY 9HRMFJR0NkvxjJpMfHBqcK+oONgxYA3XABx4QLviFBxTBc1a2a831e8Cxwg77obW H9MIGPnPdUDFsw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:09 2025 by rpki-client