This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json) Hash identifier: yaiu0kNypB7NXS1YL2Mu5M63jGHngDX0XjCa7VxppZg= Subject key identifier: A1:45:96:34:B2:82:43:3A:0F:2B:7E:88:CB:66:9F:B7:7A:6B:FE:07 Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019AF1D1D96A57CD5BF148A8DA9348DFD05B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft Manifest number: 0504 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: 4QBOhoFNUxak77byKINjZVmZ2fE.roa (hash: v5Sp6DRTjrIUknZcB2dDqhlDf9TOw4Vufs1sIAdSgTo=) 2: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 4sceZjUERey9XgTx/KOKtv6bMC5h63+z6o+IFI5FPlQ=) 3: e0bJRqMtYuh9ohw7_55dd6lUhaI.roa (hash: fUH0stkssrWBdiZb/F3KzscDpiWHvrKAjv681mirVo0=) 4: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=) 5: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=) 6: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d9:6a:57:cd:5b:f1:48:a8:da:93:48:df:d0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=a1459634b282433a0f2b7e88cb669fb77a6bfe07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:45:34:0a:57:59:8b:96:b7:8f:0b:25:86: 83:33:56:4b:c4:6f:c7:c3:6e:b6:6b:6a:60:9f:32: 9b:20:8d:94:7e:96:04:12:ff:1c:54:3a:56:f5:f5: f1:28:88:3f:ea:ab:c7:32:2e:ca:5d:3b:02:72:6e: e8:fd:96:17:82:4e:c5:6a:66:27:7c:3d:79:f8:91: 46:bf:96:27:97:fe:4e:1f:db:c0:cb:9d:a4:b6:fd: bf:8b:e4:0e:d3:28:e9:7f:9a:6f:77:c7:cf:53:af: 78:a4:53:d6:1b:76:18:67:0b:1a:b6:88:d4:f1:58: 6c:b4:b2:1b:94:54:ea:53:e4:eb:98:06:5a:af:bb: fd:e6:84:aa:a1:71:e1:eb:4c:6c:80:27:ad:b3:4e: 7e:1e:06:fc:6e:1d:45:70:52:5d:1a:0d:38:74:65: eb:dc:f7:ae:97:56:b7:a9:ad:59:20:65:ce:c8:b4: 95:53:02:65:67:ed:5f:70:27:ad:e0:94:4b:94:b7: 23:7f:ef:cc:5c:53:45:46:0b:11:b8:99:38:41:3d: 88:8d:75:bd:c9:aa:8d:fe:fd:a0:20:aa:17:e7:89: 8b:18:67:35:c8:d9:f3:c4:d3:4a:d4:34:43:be:46: f8:65:3f:4d:00:7a:26:97:b5:af:d0:80:19:65:47: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:45:96:34:B2:82:43:3A:0F:2B:7E:88:CB:66:9F:B7:7A:6B:FE:07 X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b9:b3:79:79:b9:d5:ac:ba:46:76:8b:67:46:bd:92:5e:9d: 39:3a:b9:70:be:5f:7c:ef:54:95:06:7c:37:5d:74:0c:a4:7e: 8b:c6:5d:2b:5d:df:a4:72:0f:71:43:db:a2:6f:09:8a:be:6a: ab:c8:fe:2a:85:4a:52:14:23:33:45:48:0a:c1:97:f0:ed:60: 52:50:ba:53:0d:0a:d8:5a:23:5b:cb:56:20:20:80:e2:b0:f3: 89:02:c6:b7:d9:ac:17:f8:42:06:1a:11:56:0d:89:86:90:2a: 02:b7:50:92:87:78:f1:1d:b8:9a:65:18:cf:14:2b:e7:bc:b0: 64:06:95:17:81:4c:52:df:d9:42:d4:53:fd:54:fc:3d:e4:cd: a4:32:30:75:1a:06:a9:70:5c:47:92:d3:69:85:fa:08:5a:c2: 58:b4:43:71:eb:76:96:88:3f:fc:66:54:f5:bb:dd:d2:59:9c: cb:1d:40:8a:e8:24:0d:0a:3c:5a:77:ab:00:d2:78:b9:1e:2d: bc:f2:14:45:e9:e0:76:d8:1f:c1:d8:bf:1e:39:ae:a5:93:b0: b2:f2:06:4a:c4:11:6e:b0:1a:c1:7d:a7:c4:88:c7:2a:3b:a6: 08:fc:5a:38:56:39:49:1c:f3:77:c6:ec:36:84:41:71:00:a4: 28:94:95:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dlqV81b8Uio2pNI39BbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhhMTQ1OTYzNGIyODI0MzNhMGYyYjdlODhjYjY2OWZiNzdhNmJmZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNZFNApXWYuWt48LJYaDM1ZLxG/H w262a2pgnzKbII2UfpYEEv8cVDpW9fXxKIg/6qvHMi7KXTsCcm7o/ZYXgk7FamYn fD15+JFGv5Ynl/5OH9vAy52ktv2/i+QO0yjpf5pvd8fPU694pFPWG3YYZwsatojU 8VhstLIblFTqU+TrmAZar7v95oSqoXHh60xsgCets05+Hgb8bh1FcFJdGg04dGXr 3Peul1a3qa1ZIGXOyLSVUwJlZ+1fcCet4JRLlLcjf+/MXFNFRgsRuJk4QT2IjXW9 yaqN/v2gIKoX54mLGGc1yNnzxNNK1DRDvkb4ZT9NAHoml7Wv0IAZZUdxmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFFljSygkM6Dyt+iMtmn7d6a/4HMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbmzeXm5 1ay6RnaLZ0a9kl6dOTq5cL5ffO9UlQZ8N110DKR+i8ZdK13fpHIPcUPbom8Jir5q q8j+KoVKUhQjM0VICsGX8O1gUlC6Uw0K2FojW8tWICCA4rDziQLGt9msF/hCBhoR Vg2JhpAqArdQkod48R24mmUYzxQr57ywZAaVF4FMUt/ZQtRT/VT8PeTNpDIwdRoG qXBcR5LTaYX6CFrCWLRDcet2log//GZU9bvd0lmcyx1AiugkDQo8WnerANJ4uR4t vPIURengdtgfwdi/HjmupZOwsvIGSsQRbrAawX2nxIjHKjumCPxaOFY5SRzzd8bs NoRBcQCkKJSV1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:59 2025 by rpki-client