This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json) Hash identifier: rB3J4aoUcR0izM6CIQP0b4xnIki/fmB5+W6LDp3J568= Subject key identifier: A5:27:AF:8B:5D:CB:4D:A8:6E:D9:1B:8A:8D:FF:62:FC:3F:06:54:4B Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34 Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034 Certificate serial: 019B507293914C918E9D706B8A1B121035FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft Manifest number: 16B4 Signing time: Wed 24 Dec 2025 13:00:44 +0000 Manifest this update: Wed 24 Dec 2025 13:00:44 +0000 Manifest next update: Thu 25 Dec 2025 13:00:44 +0000 Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=) 2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: sE0I+Wg3e8+fbduwARdQeVqWSvyYmI7cU4kEb28fca4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:93:91:4c:91:8e:9d:70:6b:8a:1b:12:10:35:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034 Validity Not Before: Dec 24 13:00:44 2025 GMT Not After : Dec 25 13:00:44 2025 GMT Subject: CN=a527af8b5dcb4da86ed91b8a8dff62fc3f06544b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:f0:ed:1e:a7:29:ad:04:f1:13:9d:32:8e: cd:bc:bc:68:74:ac:df:c7:02:cc:de:82:a4:2b:84: 47:00:f1:4b:8a:28:94:31:fb:43:5a:67:cf:0c:36: 56:63:16:a7:51:e0:5e:79:53:e7:1b:ed:62:1d:53: 67:59:9f:3d:e3:c6:f8:d4:da:bf:f8:28:5d:bc:20: 60:80:06:83:2e:0b:f5:9f:3f:45:81:ca:e1:c2:84: ab:b4:7e:be:a3:61:f5:83:13:f8:ba:b8:ea:a4:b8: 22:31:d4:ee:aa:4f:64:42:5b:65:cb:78:dc:32:5e: 60:86:cd:61:ee:89:15:30:a9:c6:87:09:17:e0:5c: fa:00:a0:ae:09:f4:56:de:f9:36:fe:df:8d:bd:75: 88:b3:b6:7a:49:43:ea:fe:e5:a4:8d:e5:e6:eb:24: ac:0d:33:34:9d:a7:03:bb:f8:20:f1:4e:00:e3:c5: ae:bb:29:42:5e:4a:a5:ef:88:22:f1:9d:a4:b0:b7: 37:c3:4d:93:98:fd:0b:40:86:30:de:5c:86:bc:8f: ee:5c:ab:70:48:95:44:6a:b0:df:7b:be:ed:d9:04: 5c:ca:ea:f5:5c:3f:04:65:55:55:69:03:46:ca:b6: 20:53:97:ac:a7:24:f6:ac:1e:34:e7:25:2a:e6:c9: 27:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:27:AF:8B:5D:CB:4D:A8:6E:D9:1B:8A:8D:FF:62:FC:3F:06:54:4B X509v3 Authority Key Identifier: keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bf:82:e7:8a:83:07:99:9a:48:93:0a:ef:c0:18:a6:80:5f: 02:dc:eb:46:0a:4b:4f:ac:46:e5:97:be:03:aa:85:1b:14:c9: 0c:8c:3e:d7:ac:aa:ad:62:6d:de:97:26:3b:59:b7:9f:a3:ef: 54:bb:88:2e:0b:22:f1:3e:da:33:85:42:61:f3:ad:c9:7e:57: 73:67:5d:3a:02:e0:f0:17:d2:82:17:a6:ab:a4:ba:14:86:27: 96:1b:2e:c7:d5:db:a7:06:89:e2:dd:8b:ea:35:a8:e1:25:89: 23:19:ad:13:3e:0b:eb:96:78:79:c1:b2:c3:3d:c3:cd:fe:9f: e1:3a:47:7c:fe:9a:a8:25:05:df:e9:f2:87:fe:81:40:e6:c4: 91:70:4e:41:cb:c9:62:de:f2:63:f7:d1:28:1a:58:7d:50:48: f5:ec:dc:bf:a4:d5:ce:8d:3b:99:11:67:2b:55:fa:c8:0a:22: 90:59:b2:cd:6f:ca:bc:1e:23:e5:b1:80:d8:72:f0:92:63:58: ed:32:d5:5e:d3:81:91:95:c6:d7:b2:ae:c7:ef:da:96:9b:5e: 02:f2:1a:61:34:f8:ca:7f:8b:1b:c7:3c:a2:4b:89:f6:8c:05: 74:56:44:05:e4:d0:f8:12:26:7d:6c:48:69:32:1b:05:45:12: 3d:29:7f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcpORTJGOnXBrihsSEDX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWVkYzU3NmJkZjU2MDBiZmU0YzQ3OTAzODVmYWNlZGM0 NmYwMzQwHhcNMjUxMjI0MTMwMDQ0WhcNMjUxMjI1MTMwMDQ0WjAzMTEwLwYDVQQD EyhhNTI3YWY4YjVkY2I0ZGE4NmVkOTFiOGE4ZGZmNjJmYzNmMDY1NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprjw7R6nKa0E8ROdMo7NvLxodKzf xwLM3oKkK4RHAPFLiiiUMftDWmfPDDZWYxanUeBeeVPnG+1iHVNnWZ8948b41Nq/ +ChdvCBggAaDLgv1nz9FgcrhwoSrtH6+o2H1gxP4urjqpLgiMdTuqk9kQltly3jc Ml5ghs1h7okVMKnGhwkX4Fz6AKCuCfRW3vk2/t+NvXWIs7Z6SUPq/uWkjeXm6ySs DTM0nacDu/gg8U4A48WuuylCXkql74gi8Z2ksLc3w02TmP0LQIYw3lyGvI/uXKtw SJVEarDfe77t2QRcyur1XD8EZVVVaQNGyrYgU5espyT2rB405yUq5sknWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUnr4tdy02obtkbio3/Yvw/BlRLMB8GA1UdIwQY MBaAFFGu3Fdr31YAv+TEeQOF+s7cRvA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQt YjE0ZTU5OWMwY2MyLzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQtYjE0ZTU5OWMwY2My LzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7+C54qD B5maSJMK78AYpoBfAtzrRgpLT6xG5Ze+A6qFGxTJDIw+16yqrWJt3pcmO1m3n6Pv VLuILgsi8T7aM4VCYfOtyX5Xc2ddOgLg8BfSghemq6S6FIYnlhsux9XbpwaJ4t2L 6jWo4SWJIxmtEz4L65Z4ecGywz3Dzf6f4TpHfP6aqCUF3+nyh/6BQObEkXBOQcvJ Yt7yY/fRKBpYfVBI9ezcv6TVzo07mRFnK1X6yAoikFmyzW/KvB4j5bGA2HLwkmNY 7TLVXtOBkZXG17Kux+/alpteAvIaYTT4yn+LG8c8okuJ9owFdFZEBeTQ+BImfWxI aTIbBUUSPSl/Bw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:11:29 2025 by rpki-client