This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json) Hash identifier: 97tqeHkiHSLXca+ozCWsJ82GJaslzHwj/5C6VMGW4GY= Subject key identifier: 07:95:B1:29:C2:9C:41:6B:C7:68:48:E3:FB:E8:7E:6E:35:99:28:E3 Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66 Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766 Certificate serial: 019B367BCB550537BAA1EB8C6FBC9B5A53B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft Manifest number: 05E4 Signing time: Fri 19 Dec 2025 12:00:41 +0000 Manifest this update: Fri 19 Dec 2025 12:00:41 +0000 Manifest next update: Sat 20 Dec 2025 12:00:41 +0000 Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: fiU5mTYxuWfJ63TufEVUBWkOUtlRve4WPPhXelO3r98=) 2: mQRNvpgGDTxl1ClE8lP4fBCE_zY.roa (hash: Y4EjZw1j54zSv6D2ykaYLyeNan8XUPzgXS8YGYvdiOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:cb:55:05:37:ba:a1:eb:8c:6f:bc:9b:5a:53:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766 Validity Not Before: Dec 19 12:00:41 2025 GMT Not After : Dec 20 12:00:41 2025 GMT Subject: CN=0795b129c29c416bc76848e3fbe87e6e359928e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:d4:2c:a0:71:ed:87:ee:7e:a8:c0:dd:b4: b1:5b:9a:dc:6e:b7:b0:a7:8f:9f:2f:90:66:1b:08: 08:7b:59:e7:91:b2:08:2c:90:3a:c6:11:28:36:0f: f5:4e:fa:79:04:f1:bd:fc:30:1d:19:60:fc:1b:2e: aa:d6:e2:cd:e0:a8:18:06:eb:ed:08:f7:3f:90:65: 1f:e8:28:8b:f5:e4:3c:ad:81:11:80:cb:61:11:b6: df:6c:d7:50:c4:bc:4c:a5:1d:53:d0:8f:e2:d4:aa: 7d:13:a0:5d:8d:1c:57:a5:41:aa:1b:65:3d:66:3a: 80:7a:79:00:c9:19:68:1a:59:2f:d0:c5:9a:16:25: c9:6f:fc:5d:95:1b:b6:11:27:18:0c:b0:43:cd:5b: 0a:ca:c4:1e:71:66:11:47:a6:2a:03:ce:f4:e8:0d: 9c:eb:b3:3f:57:24:a9:09:1b:cf:c6:38:a4:3f:34: 28:73:85:3a:f9:61:fa:4a:68:c5:52:b3:da:fe:fa: 7f:ca:7a:8c:a6:f3:c8:b3:58:ed:4f:af:74:7c:c2: 02:a0:32:75:76:d5:5f:00:ee:90:76:82:8f:43:05: ac:bf:2f:b4:d5:d6:a2:e3:d8:77:d5:88:0b:3f:0c: d6:78:ca:1e:8a:75:c0:6a:ad:16:e6:eb:3a:8b:9e: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:95:B1:29:C2:9C:41:6B:C7:68:48:E3:FB:E8:7E:6E:35:99:28:E3 X509v3 Authority Key Identifier: keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a3:a3:a4:be:ed:be:1a:8a:1c:77:89:d8:69:0e:8e:08:03: 04:5b:3c:c3:75:e3:fa:eb:a4:42:db:b5:4a:36:98:4f:d3:0d: 14:0b:fb:f2:53:d8:e7:da:cb:8a:5e:70:43:a9:4c:cb:22:8a: f9:da:99:6f:a0:b1:b4:dd:46:94:1f:26:0b:d8:bd:29:bb:de: 17:37:4c:48:2d:f4:3b:2b:18:28:46:c6:e8:ce:cf:d7:34:07: 54:21:5d:06:2a:0c:0c:a1:89:b2:18:85:5f:13:48:35:d8:41: cc:8a:b2:0c:ae:44:95:ed:79:50:3f:74:57:d4:5a:b4:6a:f6: c0:00:ba:8c:a3:e5:ec:c8:7b:52:e3:1e:7d:03:79:c2:c9:c0: e7:af:a7:6a:21:14:ec:c2:c7:6c:c4:f1:84:98:0b:10:b2:3c: 32:8f:51:3b:1d:2a:89:29:18:5a:67:55:61:59:7f:78:6f:71: e5:2d:68:8b:bb:27:55:a8:8a:ff:f1:c5:42:6b:6e:9d:09:6e: 60:93:d5:80:97:65:e4:6f:81:e3:93:d1:21:a7:f9:98:37:fa: 7c:57:2c:ba:23:57:5d:1a:61:df:fe:1a:6e:44:a0:77:f2:52: 72:20:5c:7b:c2:6d:45:9b:54:b4:4c:9f:e7:9c:4a:21:22:4b: 04:84:fb:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e8tVBTe6oeuMb7ybWlOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYTJjMmMwNmRkYjg0NjY5YTg5YTk5ZmI4NzU2MDk1MTM0 Yzg3NjYwHhcNMjUxMjE5MTIwMDQxWhcNMjUxMjIwMTIwMDQxWjAzMTEwLwYDVQQD EygwNzk1YjEyOWMyOWM0MTZiYzc2ODQ4ZTNmYmU4N2U2ZTM1OTkyOGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj3ULKBx7YfufqjA3bSxW5rcbrew p4+fL5BmGwgIe1nnkbIILJA6xhEoNg/1Tvp5BPG9/DAdGWD8Gy6q1uLN4KgYBuvt CPc/kGUf6CiL9eQ8rYERgMthEbbfbNdQxLxMpR1T0I/i1Kp9E6BdjRxXpUGqG2U9 ZjqAenkAyRloGlkv0MWaFiXJb/xdlRu2EScYDLBDzVsKysQecWYRR6YqA8706A2c 67M/VySpCRvPxjikPzQoc4U6+WH6SmjFUrPa/vp/ynqMpvPIs1jtT690fMICoDJ1 dtVfAO6QdoKPQwWsvy+01dai49h31YgLPwzWeMoeinXAaq0W5us6i55j4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeVsSnCnEFrx2hI4/vofm41mSjjMB8GA1UdIwQY MBaAFFGiwsBt24Rmmompn7h1YJUTTIdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjct NzA1NGVhNmE2MGQ2LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjctNzA1NGVhNmE2MGQ2 LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6OjpL7t vhqKHHeJ2GkOjggDBFs8w3Xj+uukQtu1SjaYT9MNFAv78lPY59rLil5wQ6lMyyKK +dqZb6CxtN1GlB8mC9i9KbveFzdMSC30OysYKEbG6M7P1zQHVCFdBioMDKGJshiF XxNINdhBzIqyDK5Ele15UD90V9RatGr2wAC6jKPl7Mh7UuMefQN5wsnA56+naiEU 7MLHbMTxhJgLELI8Mo9ROx0qiSkYWmdVYVl/eG9x5S1oi7snVaiK//HFQmtunQlu YJPVgJdl5G+B45PRIaf5mDf6fFcsuiNXXRph3/4abkSgd/JSciBce8JtRZtUtEyf 55xKISJLBIT79A== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:17 2025 by rpki-client