This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft File: UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json) Hash identifier: o5t41/nX4wDs4lhI9YI6gWwiFdpqe1Stcw1h/uMrDNQ= Subject key identifier: 79:6E:81:0D:06:1F:FC:E5:B6:9B:9E:9E:1A:B6:98:4C:8C:F6:F9:85 Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71 Certificate issuer: /CN=51f2045386969d11c741c3b545e02a00c1252f71 Certificate serial: 019AF19B4181AE6899F51AEF2AB8DE6D061D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft Manifest number: 0E44 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=) 2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: LQDUogaEWH8JOrz5/M2WEyTUJ9YSL0g8q8xnsNwJOP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:41:81:ae:68:99:f5:1a:ef:2a:b8:de:6d:06:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=796e810d061ffce5b69b9e9e1ab6984c8cf6f985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:58:cc:eb:89:76:26:50:3a:6e:67:9e:57: 7f:2b:b3:b3:31:7a:41:fb:7c:ed:f1:e5:d4:12:32: a8:39:54:fe:0c:d0:97:ab:30:d2:87:bd:3d:75:5b: 11:4b:e8:6d:a7:9e:a3:b9:f1:4d:60:57:e1:29:b4: e6:e6:4b:a6:28:43:05:98:05:af:6d:cf:8a:a5:12: a2:20:25:78:0c:09:8c:86:2b:89:e8:7f:df:5b:6c: f1:c3:53:85:61:29:01:aa:99:6c:e3:c4:b4:36:2f: 64:61:b8:ab:12:96:40:34:37:7c:99:8d:a2:f1:c4: 11:79:42:fc:14:71:5b:38:7e:7c:e2:49:78:cc:3c: bf:0c:a5:b7:29:f2:b7:20:85:ea:8f:1e:49:af:19: b9:ec:a5:2d:74:44:e6:55:31:ac:c1:14:c8:35:a9: 50:7d:8f:69:df:ee:7b:79:0a:5d:d4:e2:ea:60:4c: 9f:38:3d:2d:25:ab:32:7d:b2:ec:6b:e6:3d:8c:a7: 7e:95:80:90:30:4b:be:20:46:1d:5d:8a:a7:65:93: ee:a1:16:b8:d0:a5:cc:3f:ba:1b:d4:2f:86:40:5c: 1c:c6:54:5e:40:ae:e0:68:c5:b5:b3:46:3d:66:b2: ab:0c:7b:46:3c:ae:ae:4e:f0:0c:c0:3a:97:8b:df: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6E:81:0D:06:1F:FC:E5:B6:9B:9E:9E:1A:B6:98:4C:8C:F6:F9:85 X509v3 Authority Key Identifier: keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:45:da:53:a0:b7:34:40:c3:dd:65:22:54:73:a9:f9:63:69: 23:25:ad:58:76:91:8d:8c:8f:f6:83:c3:25:7f:d3:0c:46:7d: 59:43:0e:16:01:12:57:69:85:d2:f8:38:4a:32:36:5d:cd:87: 99:30:31:a2:50:8c:96:78:a8:58:75:0c:c2:3e:8e:a0:c7:c7: 98:b2:10:b3:65:68:c5:63:49:87:a4:f3:3b:a8:b1:b5:f8:96: b2:1b:f2:4a:1d:7d:47:74:9b:e8:a3:ab:89:d9:e7:45:72:55: 83:5e:e4:6d:ea:7f:61:1b:96:2e:17:3d:f9:9c:ff:65:de:9a: 96:9b:d0:a9:0a:b2:0f:5a:fb:74:50:84:b0:2a:e0:66:12:db: 78:b0:3a:96:0a:ce:13:ee:42:77:ea:a1:92:16:30:f3:89:42: 5e:57:2d:71:5c:9b:1d:e1:c2:c0:0f:24:d4:fb:37:f4:2f:46: cc:2c:ea:e8:3a:c2:3e:3c:00:1c:71:82:ee:f1:62:8a:a6:46: ca:47:4e:d9:9c:74:a4:60:6e:08:dc:8a:85:de:ab:84:9f:a2: 8a:a8:ab:fd:ca:88:4f:f5:28:7b:f8:e0:87:7a:c2:a1:6d:d0: c8:87:8f:33:2c:73:4b:48:56:5a:e6:a4:50:59:95:f3:e1:d8: 7a:c2:1e:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0GBrmiZ9RrvKrjebQYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjIwNDUzODY5NjlkMTFjNzQxYzNiNTQ1ZTAyYTAwYzEy NTJmNzEwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD Eyg3OTZlODEwZDA2MWZmY2U1YjY5YjllOWUxYWI2OTg0YzhjZjZmOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqydYzOuJdiZQOm5nnld/K7OzMXpB +3zt8eXUEjKoOVT+DNCXqzDSh709dVsRS+htp56jufFNYFfhKbTm5kumKEMFmAWv bc+KpRKiICV4DAmMhiuJ6H/fW2zxw1OFYSkBqpls48S0Ni9kYbirEpZANDd8mY2i 8cQReUL8FHFbOH584kl4zDy/DKW3KfK3IIXqjx5Jrxm57KUtdETmVTGswRTINalQ fY9p3+57eQpd1OLqYEyfOD0tJasyfbLsa+Y9jKd+lYCQMEu+IEYdXYqnZZPuoRa4 0KXMP7ob1C+GQFwcxlReQK7gaMW1s0Y9ZrKrDHtGPK6uTvAMwDqXi99Y4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlugQ0GH/zltpuenhq2mEyM9vmFMB8GA1UdIwQY MBaAFFHyBFOGlp0Rx0HDtUXgKgDBJS9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEt M2I4MmU0M2NmMjkzLzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEtM2I4MmU0M2NmMjkz LzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUXaU6C3 NEDD3WUiVHOp+WNpIyWtWHaRjYyP9oPDJX/TDEZ9WUMOFgESV2mF0vg4SjI2Xc2H mTAxolCMlnioWHUMwj6OoMfHmLIQs2VoxWNJh6TzO6ixtfiWshvySh19R3Sb6KOr idnnRXJVg17kbep/YRuWLhc9+Zz/Zd6alpvQqQqyD1r7dFCEsCrgZhLbeLA6lgrO E+5Cd+qhkhYw84lCXlctcVybHeHCwA8k1Ps39C9GzCzq6DrCPjwAHHGC7vFiiqZG ykdO2Zx0pGBuCNyKhd6rhJ+iiqir/cqIT/Uoe/jgh3rCoW3QyIePMyxzS0hWWuak UFmV8+HYesIeZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:34 2025 by rpki-client