This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json) Hash identifier: TrpRd1LIhuZtlknN8TCClFcWGDFj414ybWdBoxlIfZ4= Subject key identifier: 55:8C:CC:31:F1:D5:D0:09:37:2A:D7:77:FB:4E:BD:15:16:D0:01:CE Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64 Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64 Certificate serial: 019AF3F82EBD1F875090983844ED8F7EE3D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft Manifest number: 1665 Signing time: Sat 06 Dec 2025 14:01:59 +0000 Manifest this update: Sat 06 Dec 2025 14:01:59 +0000 Manifest next update: Sun 07 Dec 2025 14:01:59 +0000 Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=) 2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: p1HIHKQI8zrrxKKRT6VWZPxw2xwUVmPMkLSuttBjQ6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:2e:bd:1f:87:50:90:98:38:44:ed:8f:7e:e3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64 Validity Not Before: Dec 6 14:01:59 2025 GMT Not After : Dec 7 14:01:59 2025 GMT Subject: CN=558ccc31f1d5d009372ad777fb4ebd1516d001ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:6e:75:ea:31:e2:a1:b0:cd:fe:3b:c9:87: a1:39:79:a1:4c:1d:6f:4d:39:84:de:7c:0f:ab:01: df:52:93:b9:f9:63:b7:1a:c7:6d:c9:8a:66:3b:bb: 83:69:6f:f4:8c:74:14:8e:30:14:3c:b5:42:e3:c7: 04:45:b4:62:f4:f3:39:b5:25:88:43:df:d3:80:56: 0d:a6:bd:95:e5:d5:ad:f4:3f:dd:9c:1a:db:ac:d3: ad:27:88:90:33:02:9e:de:8d:26:d7:7d:5d:c4:37: b9:b4:78:1a:08:b3:d8:d3:e7:52:49:e9:36:c7:54: 87:53:e5:7e:0b:37:5f:2f:be:e1:0c:d7:8c:74:4b: d1:d7:4a:b4:9a:a9:8d:dc:14:e1:ef:62:75:4d:0f: 19:81:39:30:40:f1:5d:15:43:cf:d8:44:e9:ee:04: dc:4d:5b:64:4b:0d:69:05:92:4d:6d:59:48:2b:41: 33:fb:98:77:02:e7:b6:71:71:c8:06:76:7e:36:8e: 58:e8:61:c4:a2:9c:23:53:4b:39:e8:87:b8:86:6b: d6:e3:08:42:4b:f2:6d:88:c8:26:d5:3d:dc:af:7b: 1b:e6:86:2d:93:7e:35:57:01:3f:da:ba:a7:b1:e6: 44:2d:45:aa:39:af:e9:5d:18:7f:6b:1f:65:48:f1: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8C:CC:31:F1:D5:D0:09:37:2A:D7:77:FB:4E:BD:15:16:D0:01:CE X509v3 Authority Key Identifier: keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5e:23:3f:0f:20:72:f6:83:cb:21:79:64:20:f4:4e:60:11: 83:9b:09:e6:a8:06:bc:64:a5:94:9d:f9:e8:ff:8e:61:98:68: 17:88:a2:9f:bb:a0:21:b9:64:8e:24:0f:c1:d5:18:cd:f1:3d: 23:8f:84:c4:4c:8b:f3:52:2c:38:8e:28:d3:b4:fd:cb:9c:01: 84:2b:7e:1e:d1:c0:b2:28:7c:a0:eb:29:e2:ba:b7:6b:7f:ec: 0e:30:a2:2a:f0:05:f0:1e:f7:88:18:3d:33:9e:6b:39:3e:fe: 78:8f:05:37:9f:57:ce:82:3b:a3:79:83:21:e9:76:27:39:d9: 7e:3f:88:f5:18:9e:94:e3:4d:6f:ee:e7:bf:68:23:85:af:c3: 23:f9:f0:23:30:03:b9:15:8c:42:7f:9f:f4:c9:7a:49:3e:50: c3:20:79:41:9b:f4:52:05:16:de:53:4f:38:1a:9a:7f:24:6f: dc:04:35:15:14:db:62:f8:2d:67:37:41:64:87:8a:ec:fc:f6: 44:0d:c5:42:b9:9e:f8:a3:41:11:c3:dc:28:2d:b2:7b:8e:4a: a8:4a:76:e3:ae:3d:5d:22:d1:46:ec:23:07:ef:d4:fa:33:14: e9:dd:1b:b5:be:02:cc:01:18:ff:4e:94:a2:c2:c6:53:46:c2: 5a:95:af:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+C69H4dQkJg4RO2PfuPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWUxYTY3NzI1ZWI0YTc2NGE1ODdiYzM3MDc5ZGViYmU4 MWZiNjQwHhcNMjUxMjA2MTQwMTU5WhcNMjUxMjA3MTQwMTU5WjAzMTEwLwYDVQQD Eyg1NThjY2MzMWYxZDVkMDA5MzcyYWQ3NzdmYjRlYmQxNTE2ZDAwMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQxudeox4qGwzf47yYehOXmhTB1v TTmE3nwPqwHfUpO5+WO3GsdtyYpmO7uDaW/0jHQUjjAUPLVC48cERbRi9PM5tSWI Q9/TgFYNpr2V5dWt9D/dnBrbrNOtJ4iQMwKe3o0m131dxDe5tHgaCLPY0+dSSek2 x1SHU+V+CzdfL77hDNeMdEvR10q0mqmN3BTh72J1TQ8ZgTkwQPFdFUPP2ETp7gTc TVtkSw1pBZJNbVlIK0Ez+5h3Aue2cXHIBnZ+No5Y6GHEopwjU0s56Ie4hmvW4whC S/JtiMgm1T3cr3sb5oYtk341VwE/2rqnseZELUWqOa/pXRh/ax9lSPEDRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWMzDHx1dAJNyrXd/tOvRUW0AHOMB8GA1UdIwQY MBaAFFHuGmdyXrSnZKWHvDcHneu+gftkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5Mjkt M2Q3ZjkyYzIzYThiLzEvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5MjktM2Q3ZjkyYzIzYThi LzEvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM14jPw8g cvaDyyF5ZCD0TmARg5sJ5qgGvGSllJ356P+OYZhoF4iin7ugIblkjiQPwdUYzfE9 I4+ExEyL81IsOI4o07T9y5wBhCt+HtHAsih8oOsp4rq3a3/sDjCiKvAF8B73iBg9 M55rOT7+eI8FN59XzoI7o3mDIel2JznZfj+I9RielONNb+7nv2gjha/DI/nwIzAD uRWMQn+f9Ml6ST5QwyB5QZv0UgUW3lNPOBqafyRv3AQ1FRTbYvgtZzdBZIeK7Pz2 RA3FQrme+KNBEcPcKC2ye45KqEp24649XSLRRuwjB+/U+jMU6d0btb4CzAEY/06U osLGU0bCWpWvpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:16:55 2025 by rpki-client