This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json) Hash identifier: dh3eUKrXOgKfkkBks9sHjsuWv7F3I88VJ2VCwIyvB5Q= Subject key identifier: D9:A0:1A:14:EF:85:38:7F:DA:8A:86:01:C7:35:41:C4:62:CA:A6:D9 Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61 Certificate serial: 019AF0BF0B8AF0D95FD6847292800AD1B025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft Manifest number: 05A7 Signing time: Fri 05 Dec 2025 23:00:43 +0000 Manifest this update: Fri 05 Dec 2025 23:00:43 +0000 Manifest next update: Sat 06 Dec 2025 23:00:43 +0000 Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=) 2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: raHcNilUTHdjNEjNjL2uKwjvf0deoMDRFDspHS3IT2Y=) 3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:0b:8a:f0:d9:5f:d6:84:72:92:80:0a:d1:b0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61 Validity Not Before: Dec 5 23:00:43 2025 GMT Not After : Dec 6 23:00:43 2025 GMT Subject: CN=d9a01a14ef85387fda8a8601c73541c462caa6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:1e:1b:a0:fe:3c:fb:dd:fc:61:55:4f:2a: bb:9b:98:2a:6a:8c:1c:f6:c8:24:67:bb:c4:93:0a: 0b:d2:70:a0:36:59:12:06:5e:84:47:fd:cd:69:57: 76:2f:ff:34:a1:a5:5c:54:ed:c4:27:fe:d4:dd:43: af:17:24:c5:4e:f2:86:27:26:f5:bd:4c:c4:b4:fb: 83:60:fd:76:27:7f:c7:13:65:7f:24:52:3b:52:4b: 54:0d:07:4f:9d:ec:46:82:ed:e2:88:f5:48:47:c9: bc:05:f7:5e:ac:28:8f:b5:ed:58:45:0d:63:02:1f: d6:31:9a:4c:c6:0b:6c:6d:dc:c3:14:9a:7f:0b:2f: 96:c4:64:24:2b:8e:d7:1d:ec:b3:19:49:18:30:cc: 11:0d:95:fa:8c:d7:99:4a:73:fe:e9:d3:63:72:be: 66:1f:30:56:22:15:48:18:c8:e2:2c:d5:04:20:ba: 56:a6:ab:57:95:ec:8a:74:06:dc:a8:0c:e7:17:19: d3:4c:9d:dd:57:00:0d:d9:29:cd:c6:9b:dd:94:7a: 0b:5b:49:71:9f:58:ec:4b:01:0f:b2:42:c7:35:e6: 56:9b:6f:21:f4:67:05:13:80:71:52:78:1c:20:5d: 50:f0:83:3d:30:af:9a:da:ea:a6:d2:8f:e2:19:64: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A0:1A:14:EF:85:38:7F:DA:8A:86:01:C7:35:41:C4:62:CA:A6:D9 X509v3 Authority Key Identifier: keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:76:c8:78:92:67:2f:b3:09:fe:84:5c:dc:1e:1e:2b:07:af: 6b:fa:27:b6:5f:99:cb:ba:d4:dd:49:9d:0d:8d:5e:88:cf:3f: 08:9a:51:2e:bd:05:f8:be:74:3f:65:03:4b:48:c5:97:3e:12: a3:00:24:47:48:66:51:57:03:32:ff:ce:ba:b0:12:a4:92:59: 32:3d:db:47:8f:5c:6e:de:b5:d6:28:de:92:40:5d:c5:e2:81: cb:5c:35:12:97:dc:f2:68:24:fa:22:19:15:df:d4:dc:9a:e0: b5:b8:ce:60:80:6b:e8:3c:40:78:64:03:d4:05:36:18:f5:98: e4:93:11:0f:9c:24:0e:b9:db:53:e9:52:72:11:cd:7b:3c:4f: 11:3e:17:54:22:2c:f8:9c:15:49:ed:68:61:c8:7e:47:76:8e: 9e:27:9e:81:36:01:9d:dd:b4:f2:e0:67:d9:ee:01:1d:c3:cd: a7:c4:cb:55:3d:f4:27:c4:62:89:8f:60:c3:e6:e3:44:f0:41: 0f:b1:af:a8:70:7c:e3:05:91:54:21:6d:7e:02:92:48:34:e3: 30:bb:64:4f:8c:6d:12:2d:f1:d8:f7:02:4b:21:28:42:9f:64: ac:c5:52:f0:58:a5:f6:ac:84:14:9e:6e:37:15:35:f2:54:f9: 67:33:4d:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwuK8Nlf1oRykoAK0bAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk MWZjNjEwHhcNMjUxMjA1MjMwMDQzWhcNMjUxMjA2MjMwMDQzWjAzMTEwLwYDVQQD EyhkOWEwMWExNGVmODUzODdmZGE4YTg2MDFjNzM1NDFjNDYyY2FhNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIceG6D+PPvd/GFVTyq7m5gqaowc 9sgkZ7vEkwoL0nCgNlkSBl6ER/3NaVd2L/80oaVcVO3EJ/7U3UOvFyTFTvKGJyb1 vUzEtPuDYP12J3/HE2V/JFI7UktUDQdPnexGgu3iiPVIR8m8BfderCiPte1YRQ1j Ah/WMZpMxgtsbdzDFJp/Cy+WxGQkK47XHeyzGUkYMMwRDZX6jNeZSnP+6dNjcr5m HzBWIhVIGMjiLNUEILpWpqtXleyKdAbcqAznFxnTTJ3dVwAN2SnNxpvdlHoLW0lx n1jsSwEPskLHNeZWm28h9GcFE4BxUngcIF1Q8IM9MK+a2uqm0o/iGWRGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmgGhTvhTh/2oqGAcc1QcRiyqbZMB8GA1UdIwQY MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5 LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunbIeJJn L7MJ/oRc3B4eKweva/ontl+Zy7rU3UmdDY1eiM8/CJpRLr0F+L50P2UDS0jFlz4S owAkR0hmUVcDMv/OurASpJJZMj3bR49cbt611ijekkBdxeKBy1w1Epfc8mgk+iIZ Fd/U3JrgtbjOYIBr6DxAeGQD1AU2GPWY5JMRD5wkDrnbU+lSchHNezxPET4XVCIs +JwVSe1oYch+R3aOnieegTYBnd208uBn2e4BHcPNp8TLVT30J8RiiY9gw+bjRPBB D7GvqHB84wWRVCFtfgKSSDTjMLtkT4xtEi3x2PcCSyEoQp9krMVS8Fil9qyEFJ5u NxU18lT5ZzNNEg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:35 2025 by rpki-client