This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json) Hash identifier: DQdR2R+FbMtjCss4UgO3DW2+niHPC/LKoh1Fwn8F8mE= Subject key identifier: 22:24:2E:76:A8:B0:82:2D:1A:4B:36:D5:E1:65:95:F2:2B:B2:0A:1E Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Certificate serial: 019B503C1B186A4A8C0CE6580A94611B2263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft Manifest number: 0763 Signing time: Wed 24 Dec 2025 12:01:14 +0000 Manifest this update: Wed 24 Dec 2025 12:01:14 +0000 Manifest next update: Thu 25 Dec 2025 12:01:14 +0000 Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=) 2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: z9uAcHv2GhvuxITtn71RplpQUUVzovkzLlDLzv6OrmE=) 3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:1b:18:6a:4a:8c:0c:e6:58:0a:94:61:1b:22:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Validity Not Before: Dec 24 12:01:14 2025 GMT Not After : Dec 25 12:01:14 2025 GMT Subject: CN=22242e76a8b0822d1a4b36d5e16595f22bb20a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:97:38:47:f4:fe:3e:27:b9:36:a8:7b:b8: a6:43:3f:de:ed:90:db:48:af:b1:f3:40:4f:12:04: 57:f0:dd:20:12:70:63:27:02:38:e1:22:26:b2:44: f1:c3:e0:ba:be:36:4d:db:5e:1f:c2:d9:57:c0:9c: b6:eb:0a:79:03:ea:c5:61:88:aa:ac:f3:a4:19:bb: 72:de:aa:29:3f:27:22:ad:7f:76:5b:72:58:40:64: 30:9a:2d:e8:56:e1:92:b7:48:c4:06:75:17:15:19: 5b:27:26:11:9a:42:64:97:11:f5:9c:20:f8:d3:6a: c8:71:33:cf:81:1e:69:13:14:86:ed:73:cb:cc:7d: e4:71:3b:72:d6:66:01:c5:e7:4f:85:88:06:3e:de: d0:2c:9c:20:d5:fc:de:c7:6d:54:fd:d1:d5:18:8b: ed:a4:2e:36:13:7e:38:82:d5:46:da:d8:ed:91:6c: b4:e5:43:35:69:71:e3:7a:88:40:86:7d:79:c7:be: 48:a1:a8:3d:f6:d0:08:99:62:04:9f:1e:6c:0c:2a: a4:c0:53:f5:27:16:4f:31:f5:ba:96:26:18:74:29: b3:a5:45:4f:87:de:5a:5b:43:0f:21:84:9f:2c:30: f6:90:bb:5b:12:f8:1d:dd:03:e9:44:2d:71:c4:d2: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:24:2E:76:A8:B0:82:2D:1A:4B:36:D5:E1:65:95:F2:2B:B2:0A:1E X509v3 Authority Key Identifier: keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:91:5f:98:8f:27:83:27:35:4a:74:42:64:b2:40:76:89: fe:f6:38:9b:b9:96:82:4d:fc:b6:35:4a:a6:4f:53:3f:6e:47: 33:f2:1e:8c:c9:33:47:22:6e:2c:42:04:a5:18:94:ee:f1:6c: ee:02:c7:ac:5b:44:d2:a3:8b:65:34:98:6e:b9:54:a9:e5:b0: ab:12:50:81:bf:65:2e:52:2c:d8:03:c7:09:91:c5:a3:7a:24: 11:01:a4:20:bc:0f:83:fb:83:46:7f:21:bc:c3:e0:28:46:c1: e9:45:00:a5:f2:e0:c6:45:ee:56:c5:d8:28:76:93:0a:52:56: ab:67:53:3d:2b:5b:76:e6:5a:a3:77:45:b6:c2:f6:8f:d0:0a: 46:ba:db:ff:75:29:e9:d2:08:63:0f:ad:8e:04:b5:0a:01:9c: e6:4c:94:85:fc:35:99:7e:b5:e6:b0:32:2b:7d:1b:eb:07:4b: 10:37:af:07:33:8a:6e:05:ce:14:53:68:d1:10:72:5d:a8:36: 2e:64:19:e1:80:f1:9c:c8:0a:a6:f5:86:19:8d:95:b4:79:5d: 7a:68:f0:6c:94:05:fc:cb:dd:f5:e9:56:75:3c:d5:fd:6c:8a: d2:ab:b9:6c:27:07:2c:74:84:61:1c:c6:b1:05:57:ee:89:34: ce:f4:9a:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPBsYakqMDOZYCpRhGyJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0 YjIxNzEwHhcNMjUxMjI0MTIwMTE0WhcNMjUxMjI1MTIwMTE0WjAzMTEwLwYDVQQD EygyMjI0MmU3NmE4YjA4MjJkMWE0YjM2ZDVlMTY1OTVmMjJiYjIwYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY+XOEf0/j4nuTaoe7imQz/e7ZDb SK+x80BPEgRX8N0gEnBjJwI44SImskTxw+C6vjZN214fwtlXwJy26wp5A+rFYYiq rPOkGbty3qopPycirX92W3JYQGQwmi3oVuGSt0jEBnUXFRlbJyYRmkJklxH1nCD4 02rIcTPPgR5pExSG7XPLzH3kcTty1mYBxedPhYgGPt7QLJwg1fzex21U/dHVGIvt pC42E344gtVG2tjtkWy05UM1aXHjeohAhn15x75Ioag99tAImWIEnx5sDCqkwFP1 JxZPMfW6liYYdCmzpUVPh95aW0MPIYSfLDD2kLtbEvgd3QPpRC1xxNLBuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIkLnaosIItGks21eFllfIrsgoeMB8GA1UdIwQY MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt MWE4OWZmMTE5NjVlLzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkeRX5iP J4MnNUp0QmSyQHaJ/vY4m7mWgk38tjVKpk9TP25HM/IejMkzRyJuLEIEpRiU7vFs 7gLHrFtE0qOLZTSYbrlUqeWwqxJQgb9lLlIs2APHCZHFo3okEQGkILwPg/uDRn8h vMPgKEbB6UUApfLgxkXuVsXYKHaTClJWq2dTPStbduZao3dFtsL2j9AKRrrb/3Up 6dIIYw+tjgS1CgGc5kyUhfw1mX615rAyK30b6wdLEDevBzOKbgXOFFNo0RByXag2 LmQZ4YDxnMgKpvWGGY2VtHldemjwbJQF/Mvd9elWdTzV/WyK0qu5bCcHLHSEYRzG sQVX7ok0zvSanQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:18:53 2025 by rpki-client