This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json) Hash identifier: nKoZAuG9nHXDxsfULrSf3TwcIc6MkcbhYsF6JMJLskc= Subject key identifier: 31:9E:A5:1B:91:F4:F8:97:D1:80:14:0F:B7:B4:A0:EB:42:BF:E1:DE Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580 Certificate serial: 019B3C7DC5F4D3E8A379E71BB6BBA1FEF236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft Manifest number: 0C00 Signing time: Sat 20 Dec 2025 16:00:34 +0000 Manifest this update: Sat 20 Dec 2025 16:00:34 +0000 Manifest next update: Sun 21 Dec 2025 16:00:34 +0000 Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=) 2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: U/xrftplguUwl7nm/ut9XLEiHHxFr0Bmt7UByUSA4Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c5:f4:d3:e8:a3:79:e7:1b:b6:bb:a1:fe:f2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580 Validity Not Before: Dec 20 16:00:34 2025 GMT Not After : Dec 21 16:00:34 2025 GMT Subject: CN=319ea51b91f4f897d180140fb7b4a0eb42bfe1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:32:43:7c:e5:54:1d:ac:28:25:04:0c:02: 18:1a:18:e1:92:35:67:ff:07:1d:7e:eb:9d:5b:6d: 43:77:b5:bc:03:d1:21:d8:86:d0:f3:84:91:88:bf: e8:95:39:ab:93:8d:55:43:e2:d1:17:fe:ba:d1:63: 83:2b:f7:c2:65:f3:e3:8b:ab:8f:98:41:d8:25:03: 06:2d:03:ba:61:28:e3:59:fa:9f:92:b7:40:a7:19: ae:53:c5:aa:33:13:16:95:d9:1f:76:8d:4c:ee:b4: 92:32:66:0f:0b:85:20:ca:ba:14:53:62:0b:76:93: 2a:d0:d0:12:22:c3:55:59:7b:11:8e:c7:5b:ee:66: c4:cc:12:71:4c:4b:16:28:f2:56:bd:a8:0a:3a:c5: ab:ac:26:c7:a0:f8:01:cc:35:0a:4e:83:5d:6f:a6: 4e:0f:dd:15:35:07:af:8f:86:82:39:f5:1a:02:b3: 12:b3:15:f7:5e:ad:17:f4:f9:27:39:91:86:a7:7a: f5:ec:f7:e5:6a:4e:c1:85:d2:d3:7a:3d:b1:e8:94: b7:6b:76:27:75:4c:d5:29:a8:23:e3:50:b0:85:6b: 6d:ab:1b:b1:de:d2:4e:dc:59:30:e0:5c:90:48:50: 6e:af:d1:0a:73:4a:1e:63:72:2c:94:de:2a:87:92: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9E:A5:1B:91:F4:F8:97:D1:80:14:0F:B7:B4:A0:EB:42:BF:E1:DE X509v3 Authority Key Identifier: keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e8:91:15:0f:67:23:ce:27:01:94:14:3f:5b:40:c7:3f:67: 82:30:11:0e:67:9f:48:97:74:b3:f8:8a:64:7e:2e:f4:30:0f: 39:e8:2a:d2:49:a0:9a:82:8e:d9:97:8e:08:82:20:f4:50:2b: 4e:bf:39:78:e5:a1:ad:94:c3:89:ad:d8:75:e5:b8:19:bf:32: 44:f8:2a:ef:b7:00:ac:dc:82:a7:c4:a1:e7:7b:0f:fe:81:80: eb:e1:3f:7c:e7:8d:10:2c:b2:db:b0:61:78:94:ed:6c:7f:84: 21:b0:60:18:19:e2:24:5e:db:56:7b:85:47:22:14:4d:f7:d0: 7c:91:54:c7:97:f6:49:0b:ec:66:d6:5b:fa:da:cc:97:27:60: d1:6c:10:b3:65:94:70:68:af:cd:cd:72:ef:9b:80:52:de:d9: 41:d6:b3:b4:c3:71:c3:fc:e4:39:1d:d3:ce:7f:03:c1:20:5b: c7:72:4f:42:25:bd:60:f4:a3:ff:ef:8a:93:ab:f8:56:bd:f2: c9:73:4e:fa:5d:31:93:62:d4:6c:7e:ee:ad:68:dc:36:8e:65: 0f:da:0e:d6:4d:b6:62:d8:3d:95:5b:8e:39:9e:0f:31:5a:4b: ea:af:2e:3c:45:14:dc:ee:1b:a5:48:53:3a:a4:47:c5:5f:cf: e5:cc:05:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcX00+ijeecbtruh/vI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTIzZjc0MGFkNTY0YzU2OTNiNzcwOTFjNzFiM2MwMzEz NmE1ODAwHhcNMjUxMjIwMTYwMDM0WhcNMjUxMjIxMTYwMDM0WjAzMTEwLwYDVQQD EygzMTllYTUxYjkxZjRmODk3ZDE4MDE0MGZiN2I0YTBlYjQyYmZlMWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+0yQ3zlVB2sKCUEDAIYGhjhkjVn /wcdfuudW21Dd7W8A9Eh2IbQ84SRiL/olTmrk41VQ+LRF/660WODK/fCZfPji6uP mEHYJQMGLQO6YSjjWfqfkrdApxmuU8WqMxMWldkfdo1M7rSSMmYPC4UgyroUU2IL dpMq0NASIsNVWXsRjsdb7mbEzBJxTEsWKPJWvagKOsWrrCbHoPgBzDUKToNdb6ZO D90VNQevj4aCOfUaArMSsxX3Xq0X9PknOZGGp3r17Pflak7BhdLTej2x6JS3a3Yn dUzVKagj41CwhWttqxux3tJO3Fkw4FyQSFBur9EKc0oeY3IslN4qh5LniwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGepRuR9PiX0YAUD7e0oOtCv+HeMB8GA1UdIwQY MBaAFLqiP3QK1WTFaTt3CRxxs8AxNqWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMt ODUyN2M5YjNlNzVmLzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMtODUyN2M5YjNlNzVm LzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuiRFQ9n I84nAZQUP1tAxz9ngjARDmefSJd0s/iKZH4u9DAPOegq0kmgmoKO2ZeOCIIg9FAr Tr85eOWhrZTDia3YdeW4Gb8yRPgq77cArNyCp8Sh53sP/oGA6+E/fOeNECyy27Bh eJTtbH+EIbBgGBniJF7bVnuFRyIUTffQfJFUx5f2SQvsZtZb+trMlydg0WwQs2WU cGivzc1y75uAUt7ZQdaztMNxw/zkOR3Tzn8DwSBbx3JPQiW9YPSj/++Kk6v4Vr3y yXNO+l0xk2LUbH7urWjcNo5lD9oO1k22Ytg9lVuOOZ4PMVpL6q8uPEUU3O4bpUhT OqRHxV/P5cwFYg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:31:34 2025 by rpki-client