This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft File: UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json) Hash identifier: 5phcLbbnOgajHMpSkoz4qg1tbDJ7EaSGTbwmVa8ChrA= Subject key identifier: 71:D1:5D:B6:1B:6E:F4:29:DB:2B:44:E2:67:67:78:C9:2A:B3:0C:D1 Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6 Certificate serial: 019AF3C07CD0583A6EF285CAE300FB1F0142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft Manifest number: 10EE Signing time: Sat 06 Dec 2025 13:01:09 +0000 Manifest this update: Sat 06 Dec 2025 13:01:09 +0000 Manifest next update: Sun 07 Dec 2025 13:01:09 +0000 Files and hashes: 1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=) 2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=) 3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: bhwdRHGPJIGfTYeK7j83Kd3xHN4V0YPf5BR6+0QxMjc=) 4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=) 5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:7c:d0:58:3a:6e:f2:85:ca:e3:00:fb:1f:01:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6 Validity Not Before: Dec 6 13:01:09 2025 GMT Not After : Dec 7 13:01:09 2025 GMT Subject: CN=71d15db61b6ef429db2b44e2676778c92ab30cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:b9:15:42:d3:66:5c:c2:2d:f4:a6:23:69: 50:2d:b4:50:23:12:ae:13:22:05:fc:14:3e:42:67: 89:eb:c4:80:05:f1:81:c8:5c:7e:dc:0d:bf:1e:3c: d9:87:4f:00:af:b2:60:08:09:95:a9:28:7a:46:fd: 1c:42:84:1a:8b:94:7e:aa:41:72:75:3c:08:f9:dd: d2:52:8a:5d:c7:e2:a3:0d:20:2f:87:0e:42:5a:25: 27:d6:99:20:9b:c7:0c:d1:77:30:49:50:42:6f:6e: d5:7f:38:c5:5f:50:33:39:cc:98:ed:06:cd:71:9d: 50:e6:a5:26:e8:d4:42:b7:08:e1:4b:3e:03:f6:47: af:2a:b3:5a:91:80:6a:71:0e:ae:17:48:f9:65:24: f5:60:12:ea:4b:8f:a2:f6:34:14:d0:d5:3d:bb:37: 55:96:ad:48:11:bd:44:3d:e3:a7:84:7f:e5:3b:3a: 16:9a:cb:c0:62:40:f3:5e:4b:7b:f9:b4:bf:a0:39: 33:39:45:af:2f:43:10:25:b2:b2:cb:58:e7:d9:5b: 6a:97:5e:ef:1b:54:97:ac:45:9e:47:f6:e0:9a:c9: cc:a7:68:3c:36:fd:13:1f:b1:01:2f:cc:c2:d1:4d: 03:ce:7a:9f:20:57:a8:c4:f0:37:89:3d:c3:60:bc: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:5D:B6:1B:6E:F4:29:DB:2B:44:E2:67:67:78:C9:2A:B3:0C:D1 X509v3 Authority Key Identifier: keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:84:2f:f1:65:5e:3c:1c:e2:dd:88:65:52:46:f0:ed:db:e8: cc:02:61:a6:eb:f7:65:bc:f8:bd:f9:cc:8e:eb:f8:0c:7b:c7: 50:8e:9b:06:78:de:8b:33:9a:ff:37:7f:df:ff:00:01:ab:dc: 9b:d1:86:95:51:f4:b4:be:55:c3:90:3d:53:d4:b6:f4:cc:5d: 36:cd:47:9f:13:0d:61:08:b4:2d:f6:5d:37:30:3a:3e:59:71: 34:07:46:ce:f2:f1:fe:b2:7e:d1:22:4c:88:7c:a3:77:05:72: c1:f7:ea:98:ba:29:df:7d:f3:7a:3f:ce:d7:1d:3c:8f:49:eb: b9:72:db:64:1d:04:c4:71:4a:1f:18:ad:cd:78:ce:89:58:e2: 79:de:e6:32:c6:0e:98:54:7c:ea:2e:3d:3b:b8:b2:56:4d:46: f1:86:ff:7a:ec:8b:f2:bb:ee:77:da:fa:6c:40:d0:5b:b3:e4: c8:45:3e:61:b4:e3:37:2b:34:63:13:80:9c:72:85:29:ad:9b: 81:b9:a9:95:f4:4d:96:bd:9a:cb:a7:ae:7f:ff:45:9c:82:a3: aa:da:ad:a8:2a:8f:08:4f:8d:35:16:70:f4:a8:94:05:55:25: c3:f9:28:6d:cd:47:40:6d:25:0c:31:2b:93:4c:8e:0a:21:4c: ce:a7:f4:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHzQWDpu8oXK4wD7HwFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTAyMjI0ZmZiOTcxMTcyZTQ5MzVlZDdkZDk2NWQxMTU1 MDg5YjYwHhcNMjUxMjA2MTMwMTA5WhcNMjUxMjA3MTMwMTA5WjAzMTEwLwYDVQQD Eyg3MWQxNWRiNjFiNmVmNDI5ZGIyYjQ0ZTI2NzY3NzhjOTJhYjMwY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYO5FULTZlzCLfSmI2lQLbRQIxKu EyIF/BQ+QmeJ68SABfGByFx+3A2/HjzZh08Ar7JgCAmVqSh6Rv0cQoQai5R+qkFy dTwI+d3SUopdx+KjDSAvhw5CWiUn1pkgm8cM0XcwSVBCb27VfzjFX1AzOcyY7QbN cZ1Q5qUm6NRCtwjhSz4D9kevKrNakYBqcQ6uF0j5ZST1YBLqS4+i9jQU0NU9uzdV lq1IEb1EPeOnhH/lOzoWmsvAYkDzXkt7+bS/oDkzOUWvL0MQJbKyy1jn2Vtql17v G1SXrEWeR/bgmsnMp2g8Nv0TH7EBL8zC0U0DznqfIFeoxPA3iT3DYLyA4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHRXbYbbvQp2ytE4mdneMkqswzRMB8GA1UdIwQY MBaAFFLgIiT/uXEXLkk17X3ZZdEVUIm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUt YjhkYTg5NDA2YmVkLzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUtYjhkYTg5NDA2YmVk LzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoQv8WVe PBzi3YhlUkbw7dvozAJhpuv3Zbz4vfnMjuv4DHvHUI6bBnjeizOa/zd/3/8AAavc m9GGlVH0tL5Vw5A9U9S29MxdNs1HnxMNYQi0LfZdNzA6PllxNAdGzvLx/rJ+0SJM iHyjdwVywffqmLop333zej/O1x08j0nruXLbZB0ExHFKHxitzXjOiVjied7mMsYO mFR86i49O7iyVk1G8Yb/euyL8rvud9r6bEDQW7PkyEU+YbTjNys0YxOAnHKFKa2b gbmplfRNlr2ay6euf/9FnIKjqtqtqCqPCE+NNRZw9KiUBVUlw/kobc1HQG0lDDEr k0yOCiFMzqf08w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:44:04 2025 by rpki-client