This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft File: uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json) Hash identifier: rfy8S6IVM6HzUpnET+LX1l7QMUBTeDYh3IDnZEUC/aU= Subject key identifier: 7C:0F:AE:D9:93:D6:DD:EC:5C:B2:30:FC:5F:D6:68:10:45:6C:86:2B Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Certificate serial: 019B3B3507D8813AD023462DFC694F7E6DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft Manifest number: 0EBB Signing time: Sat 20 Dec 2025 10:01:29 +0000 Manifest this update: Sat 20 Dec 2025 10:01:29 +0000 Manifest next update: Sun 21 Dec 2025 10:01:29 +0000 Files and hashes: 1: PTr_xLhLcnvTFVipGw3CUMEPXjY.roa (hash: JBHsIcKHiwsHSBwzyO5y4DSKBgdwzbxJQ0ol4khS4A0=) 2: Wyw6f7z9XFhQdDF9UwLgPYFT6_Q.roa (hash: 1RzZ4RihPLYHjPztE9UylSZaMNlezfJjIV9fNaanWRg=) 3: X9RNdUxkmLFNiFpUP9LHqq5hH5Q.roa (hash: sO05RjG57ukJeOdbo7TbIC4ef+lfKmg1XE7a20jQ0B4=) 4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=) 5: d28wWwBXF7wZOaWJd6qwT3PVrxQ.roa (hash: KkRypZGbs6Pg3NFKFlWtxFDByCJE0sYuwQPwJi599do=) 6: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: t4ViQQIa8sKnxTk54DvdtkmWv5I9Kr75YbkF3JkNOU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:07:d8:81:3a:d0:23:46:2d:fc:69:4f:7e:6d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Validity Not Before: Dec 20 10:01:29 2025 GMT Not After : Dec 21 10:01:29 2025 GMT Subject: CN=7c0faed993d6ddec5cb230fc5fd66810456c862b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:7a:c1:61:02:07:e4:92:a2:68:8f:f0:ba: 89:f5:fd:85:3d:d7:94:f7:36:f4:0b:51:28:64:ec: 2b:b6:1e:35:18:f1:c0:1e:df:9c:84:05:49:cc:6a: 45:30:09:b6:bd:40:99:d7:b1:8c:a5:f7:c6:55:d7: 6b:79:17:1e:f0:00:0b:1c:9f:38:35:26:bc:2c:0f: 14:60:de:7a:43:3d:39:b0:12:b9:5f:fb:f1:eb:08: 62:63:8e:e5:4a:d5:35:eb:75:0a:7b:d8:80:e6:7f: 18:39:49:73:7c:b8:b7:d2:42:9f:b5:b0:00:ee:72: f5:ac:95:ea:a3:50:7a:8f:df:81:31:55:a5:5d:7c: 91:f7:a4:a5:b3:40:c7:42:a8:d7:d0:16:a6:52:7d: 2f:d5:7f:b4:4b:15:cc:f5:d3:27:96:28:34:f2:94: fe:87:d5:71:be:1c:f2:3e:c2:85:da:85:b8:13:07: 4d:1f:41:a1:48:ea:e2:68:6f:98:db:fc:60:eb:26: f0:b5:14:dd:e5:93:b1:26:46:81:d9:1b:bb:f0:ee: 32:b4:ca:46:ae:d3:fc:41:24:e9:b9:3d:d1:31:45: 5f:30:fd:92:a0:a9:67:31:f5:05:1b:16:6f:32:71: 45:2b:6e:8a:67:02:d6:02:87:f7:b2:13:6a:fd:ee: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0F:AE:D9:93:D6:DD:EC:5C:B2:30:FC:5F:D6:68:10:45:6C:86:2B X509v3 Authority Key Identifier: keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:50:26:01:ac:62:04:3d:0f:7e:33:53:60:70:0a:3d:6f:e9: 20:44:30:38:26:c2:26:c1:f7:29:67:f7:6b:56:9b:c1:4b:5f: 43:17:0f:a7:5c:58:f9:59:e6:6a:33:0b:60:c3:9b:3e:f5:60: ae:df:8a:c2:94:95:7e:bb:e8:19:59:a9:31:58:97:52:fd:fc: d8:22:ca:ea:f9:7b:50:9d:ac:5b:df:e3:e7:2c:27:56:57:db: 45:1a:94:b4:18:d6:2f:df:28:ba:9f:2d:2b:74:ed:7a:bc:3d: 5a:13:65:41:5e:d9:e9:f8:74:3f:80:e7:98:0b:14:91:98:be: b4:ac:a2:eb:5f:d5:a8:80:5b:0c:5e:d8:de:7e:60:50:6f:4b: 41:7e:0d:a7:0a:34:e5:60:db:75:eb:9a:5d:bc:fd:be:3d:81: 4a:2d:1c:36:8c:d9:f7:20:58:10:12:d1:e7:6b:c9:21:be:5b: b8:58:d0:64:00:7e:90:1a:e4:ab:6c:7d:1f:61:d9:33:4c:09: 6a:bb:54:54:76:24:f5:32:8c:65:b5:9a:05:85:5a:3f:4c:b7: 57:61:8e:37:6b:d3:f4:bb:b3:ab:d7:4f:2e:03:22:5e:a0:6b: e7:1f:51:10:02:28:a0:d7:23:8a:e4:ac:71:9c:89:43:2b:b2: 4d:26:e0:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQfYgTrQI0Yt/GlPfm34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk YzExMTIwHhcNMjUxMjIwMTAwMTI5WhcNMjUxMjIxMTAwMTI5WjAzMTEwLwYDVQQD Eyg3YzBmYWVkOTkzZDZkZGVjNWNiMjMwZmM1ZmQ2NjgxMDQ1NmM4NjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc56wWECB+SSomiP8LqJ9f2FPdeU 9zb0C1EoZOwrth41GPHAHt+chAVJzGpFMAm2vUCZ17GMpffGVddreRce8AALHJ84 NSa8LA8UYN56Qz05sBK5X/vx6whiY47lStU163UKe9iA5n8YOUlzfLi30kKftbAA 7nL1rJXqo1B6j9+BMVWlXXyR96Sls0DHQqjX0BamUn0v1X+0SxXM9dMnlig08pT+ h9VxvhzyPsKF2oW4EwdNH0GhSOriaG+Y2/xg6ybwtRTd5ZOxJkaB2Ru78O4ytMpG rtP8QSTpuT3RMUVfMP2SoKlnMfUFGxZvMnFFK26KZwLWAof3shNq/e7jIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwPrtmT1t3sXLIw/F/WaBBFbIYrMB8GA1UdIwQY MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt ZmZlNDNhNTJkM2Y2LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2 LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1AmAaxi BD0PfjNTYHAKPW/pIEQwOCbCJsH3KWf3a1abwUtfQxcPp1xY+VnmajMLYMObPvVg rt+KwpSVfrvoGVmpMViXUv382CLK6vl7UJ2sW9/j5ywnVlfbRRqUtBjWL98oup8t K3Tterw9WhNlQV7Z6fh0P4DnmAsUkZi+tKyi61/VqIBbDF7Y3n5gUG9LQX4Npwo0 5WDbdeuaXbz9vj2BSi0cNozZ9yBYEBLR52vJIb5buFjQZAB+kBrkq2x9H2HZM0wJ artUVHYk9TKMZbWaBYVaP0y3V2GON2vT9Luzq9dPLgMiXqBr5x9REAIooNcjiuSs cZyJQyuyTSbgMw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:18 2025 by rpki-client