This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft File: UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json) Hash identifier: cRVlMRP6JRZnK+MA3LIS6kHqbv7cgX8WohwminAoulY= Subject key identifier: 73:75:86:AE:90:D6:08:49:06:72:9E:E7:0A:D9:7C:A1:FC:F4:6A:DF Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811 Certificate serial: 019AF12EDDF0A5F0623DFCA7252C5C84E7AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft Manifest number: 0808 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: onfkrVCGkuk7FZvgIcm3T+wBBiD8O4HbK76BcD5mJBw=) 2: pPr-RfjQ8TKLflLIUQw5yKTIFpY.roa (hash: oEBThZTfbjTX75q4IqjgPgOk7OlUAtwvGwGIzijgHts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:dd:f0:a5:f0:62:3d:fc:a7:25:2c:5c:84:e7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811 Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=737586ae90d6084906729ee70ad97ca1fcf46adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:74:37:da:ac:92:0e:0f:84:08:c3:e2:14: 37:a4:da:31:aa:14:b2:76:d7:e7:3c:23:70:66:11: 9e:e6:1e:22:7b:71:0c:62:f5:f3:94:e7:6c:98:62: 03:ce:15:56:94:63:5c:18:35:b0:01:0c:fa:27:94: e3:3d:b2:1d:6f:8e:0c:03:aa:aa:04:db:cb:2e:e6: 96:5f:5b:8c:f9:ad:f1:31:3f:34:59:5c:5a:b7:dc: 70:5f:c7:37:c0:c6:a7:74:ef:51:42:d1:c8:d0:5c: b9:86:f3:f7:81:22:cd:5e:da:6c:42:48:bc:41:d6: 1e:ad:22:d6:88:be:36:48:ce:56:19:40:63:26:7c: b9:55:fe:bb:11:1d:b3:fe:e7:d7:d2:00:66:1e:54: f6:f3:de:0f:8c:c3:1d:ea:3e:14:b1:2b:f7:ad:65: 98:22:af:53:75:26:b9:3d:43:e8:f7:71:ae:31:84: bb:17:00:76:f6:ef:57:7c:ed:c5:23:c4:8e:75:94: af:6e:13:b0:06:c7:8c:4b:7f:a1:1b:9b:64:aa:84: df:d5:7d:73:da:0b:5c:69:ae:4f:b4:ad:6c:77:f9: 84:5a:49:ef:e2:c3:19:74:b2:42:68:24:34:cd:f8: 6c:69:7e:3f:54:c9:c1:86:9f:76:66:e4:1c:58:5a: c8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:75:86:AE:90:D6:08:49:06:72:9E:E7:0A:D9:7C:A1:FC:F4:6A:DF X509v3 Authority Key Identifier: keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e1:82:12:1e:0d:7e:d1:f8:94:25:81:1a:ce:0d:08:db:f6: 25:cd:19:7a:df:72:92:10:6d:91:31:09:41:7f:4c:6d:f0:b1: 5c:72:5a:78:47:12:6e:e4:c8:1a:56:80:24:1e:7d:73:d3:7a: ac:0b:3e:af:d9:9f:0a:66:13:af:d8:bd:12:34:2b:85:2a:02: ee:f0:1c:3e:20:02:07:40:5f:88:74:45:c0:64:a6:e1:e1:b1: 48:02:96:22:49:fe:3d:73:57:dc:31:6e:29:60:b3:66:6a:1b: 4c:49:3d:97:9f:c6:5e:b8:d3:de:b4:69:1a:66:cd:b2:b8:a5: 0d:f0:e9:b7:24:13:65:77:91:4c:8e:72:5f:75:31:cb:a7:80: f2:93:f5:40:93:af:84:47:19:91:ec:18:30:c1:06:ca:d8:1b: 37:95:33:29:85:d2:d1:28:7c:b5:7f:e2:01:55:8a:8a:0f:cd: 60:0e:1e:f1:bf:4c:7e:0c:35:cb:66:fc:68:53:55:1b:d5:a1: 3d:54:3f:12:4c:e4:b9:a1:2e:4d:d4:8f:ea:7f:27:1d:2b:a7: eb:3a:2a:97:c7:bd:71:55:9e:25:56:1e:dc:03:25:88:30:a7: c7:27:d6:31:ef:de:ac:ae:70:03:86:da:d9:79:38:2a:8b:80: 54:70:d4:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLt3wpfBiPfynJSxchOetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDEzZjJlNTU5MDcwMDRjNWFiNjk4OWRlN2VlZDE1NDM1 MzU4MTEwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD Eyg3Mzc1ODZhZTkwZDYwODQ5MDY3MjllZTcwYWQ5N2NhMWZjZjQ2YWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2F0N9qskg4PhAjD4hQ3pNoxqhSy dtfnPCNwZhGe5h4ie3EMYvXzlOdsmGIDzhVWlGNcGDWwAQz6J5TjPbIdb44MA6qq BNvLLuaWX1uM+a3xMT80WVxat9xwX8c3wMandO9RQtHI0Fy5hvP3gSLNXtpsQki8 QdYerSLWiL42SM5WGUBjJny5Vf67ER2z/ufX0gBmHlT2894PjMMd6j4UsSv3rWWY Iq9TdSa5PUPo93GuMYS7FwB29u9XfO3FI8SOdZSvbhOwBseMS3+hG5tkqoTf1X1z 2gtcaa5PtK1sd/mEWknv4sMZdLJCaCQ0zfhsaX4/VMnBhp92ZuQcWFrIFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN1hq6Q1ghJBnKe5wrZfKH89GrfMB8GA1UdIwQY MBaAFFJBPy5VkHAExatpid5+7RVDU1gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQt OGJmZGI5Njk4NTljLzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQtOGJmZGI5Njk4NTlj LzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeGCEh4N ftH4lCWBGs4NCNv2Jc0Zet9ykhBtkTEJQX9MbfCxXHJaeEcSbuTIGlaAJB59c9N6 rAs+r9mfCmYTr9i9EjQrhSoC7vAcPiACB0BfiHRFwGSm4eGxSAKWIkn+PXNX3DFu KWCzZmobTEk9l5/GXrjT3rRpGmbNsrilDfDptyQTZXeRTI5yX3Uxy6eA8pP1QJOv hEcZkewYMMEGytgbN5UzKYXS0Sh8tX/iAVWKig/NYA4e8b9Mfgw1y2b8aFNVG9Wh PVQ/EkzkuaEuTdSP6n8nHSun6zoql8e9cVWeJVYe3AMliDCnxyfWMe/erK5wA4ba 2Xk4KouAVHDUzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:17 2025 by rpki-client