This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json) Hash identifier: 0+79PMsrFUH0vqbgchIi/yl5Ekzg8oeUykhbneeCP6w= Subject key identifier: E2:F2:AC:E5:43:59:0A:EE:C0:C5:FD:E7:90:21:8B:57:42:F8:21:DB Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66 Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766 Certificate serial: 019B3C46E6FE74ECB085C5A848C97B847675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft Manifest number: 05E7 Signing time: Sat 20 Dec 2025 15:00:37 +0000 Manifest this update: Sat 20 Dec 2025 15:00:37 +0000 Manifest next update: Sun 21 Dec 2025 15:00:37 +0000 Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: zNl+NM2OgJlv3/v6BgWqQ2qdgeN2x8FhH/yCd2kvfvQ=) 2: mQRNvpgGDTxl1ClE8lP4fBCE_zY.roa (hash: Y4EjZw1j54zSv6D2ykaYLyeNan8XUPzgXS8YGYvdiOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:e6:fe:74:ec:b0:85:c5:a8:48:c9:7b:84:76:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766 Validity Not Before: Dec 20 15:00:37 2025 GMT Not After : Dec 21 15:00:37 2025 GMT Subject: CN=e2f2ace543590aeec0c5fde790218b5742f821db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:64:af:48:10:2d:ff:84:b0:c5:b6:33:32: 68:6d:d6:07:fb:d4:29:55:ac:15:9b:d7:13:26:ea: 23:74:24:72:0b:4b:4d:95:d3:6e:fd:d8:96:73:85: cf:13:cb:4d:96:f4:62:6c:1e:eb:1a:53:27:af:90: e7:b5:85:0c:04:34:1e:46:30:5b:ba:63:84:b4:32: 78:46:21:6e:04:b4:e4:d3:56:1e:2b:df:b8:30:33: b7:26:e5:ee:57:d4:3c:71:3c:55:e5:a6:16:09:bf: 54:bf:2e:df:b1:20:c4:15:dd:60:c7:e9:3e:1a:ca: 40:f8:0f:f1:83:46:34:7a:19:0f:a0:71:88:fc:64: a1:b9:62:82:b7:13:42:ef:fe:63:2f:81:64:06:0e: 70:d8:8d:19:3c:bd:e1:f3:21:3a:4b:38:82:f4:cb: 0d:0e:ce:b4:cc:f8:bd:36:5b:38:47:31:01:52:94: d7:17:1a:a0:61:2a:09:b9:bb:29:fc:65:f3:39:a7: e4:99:ae:71:26:b7:db:54:0a:7a:0a:14:30:02:5a: b4:6c:e2:89:d7:fc:6f:69:de:69:a9:49:0d:db:c4: a2:10:e4:35:ab:e2:c7:75:9f:82:a3:a1:dc:e5:8d: f0:f1:03:2c:ac:7c:51:0e:3f:0f:dd:f3:03:25:61: 73:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F2:AC:E5:43:59:0A:EE:C0:C5:FD:E7:90:21:8B:57:42:F8:21:DB X509v3 Authority Key Identifier: keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1e:3d:06:3c:6a:54:c0:d5:60:ef:c4:fb:59:4c:72:c8:a6: a8:e4:d9:cb:e5:8e:bd:c0:ee:48:15:d9:1f:d6:e9:93:dc:32: 81:3d:1f:52:de:09:69:68:8b:3c:b1:0c:6e:ec:63:ac:65:19: f0:f7:9e:8d:5f:c1:c6:ce:5e:22:ad:7d:1d:5a:91:3a:0a:96: 4b:93:42:ee:80:61:50:6f:0d:24:29:d9:a5:e7:e8:1c:04:a1: 98:52:32:5b:b8:59:d6:e0:dd:b4:c6:54:7a:ba:b9:55:78:93: 96:19:80:9a:88:9d:3d:c0:7e:06:7b:d8:f1:c4:bb:ed:59:7f: 0d:29:35:9f:93:a8:8c:b1:0b:c2:4e:47:68:31:19:27:44:93: 53:0f:94:6d:5f:72:d9:50:92:3d:fd:c7:82:19:7f:f2:a8:42: 88:db:9b:c9:e2:cd:3d:2c:20:48:77:bd:80:dc:ed:5b:ea:b6: 02:c4:41:a2:16:54:a1:f6:38:f0:cd:68:94:08:2d:3a:a1:4a: 49:54:8e:69:4b:36:dd:cc:78:36:76:6f:e6:35:70:2c:b7:05: f4:43:0f:26:c4:0b:af:a3:fc:22:a1:52:99:4e:45:72:fc:07: 41:ca:2e:a4:c5:88:c9:77:e9:91:45:93:f9:8a:24:e2:69:41: 04:99:a8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rub+dOywhcWoSMl7hHZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYTJjMmMwNmRkYjg0NjY5YTg5YTk5ZmI4NzU2MDk1MTM0 Yzg3NjYwHhcNMjUxMjIwMTUwMDM3WhcNMjUxMjIxMTUwMDM3WjAzMTEwLwYDVQQD EyhlMmYyYWNlNTQzNTkwYWVlYzBjNWZkZTc5MDIxOGI1NzQyZjgyMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/lkr0gQLf+EsMW2MzJobdYH+9Qp VawVm9cTJuojdCRyC0tNldNu/diWc4XPE8tNlvRibB7rGlMnr5DntYUMBDQeRjBb umOEtDJ4RiFuBLTk01YeK9+4MDO3JuXuV9Q8cTxV5aYWCb9Uvy7fsSDEFd1gx+k+ GspA+A/xg0Y0ehkPoHGI/GShuWKCtxNC7/5jL4FkBg5w2I0ZPL3h8yE6SziC9MsN Ds60zPi9Nls4RzEBUpTXFxqgYSoJubsp/GXzOafkma5xJrfbVAp6ChQwAlq0bOKJ 1/xvad5pqUkN28SiEOQ1q+LHdZ+Co6Hc5Y3w8QMsrHxRDj8P3fMDJWFzbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLyrOVDWQruwMX955Ahi1dC+CHbMB8GA1UdIwQY MBaAFFGiwsBt24Rmmompn7h1YJUTTIdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjct NzA1NGVhNmE2MGQ2LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YWYzMTktNWY5My00M2RiLThiMjctNzA1NGVhNmE2MGQ2 LzEvVWFMQ3dHM2JoR2FhaWFtZnVIVmdsUk5NaDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABR49Bjxq VMDVYO/E+1lMcsimqOTZy+WOvcDuSBXZH9bpk9wygT0fUt4JaWiLPLEMbuxjrGUZ 8PeejV/Bxs5eIq19HVqROgqWS5NC7oBhUG8NJCnZpefoHAShmFIyW7hZ1uDdtMZU erq5VXiTlhmAmoidPcB+BnvY8cS77Vl/DSk1n5OojLELwk5HaDEZJ0STUw+UbV9y 2VCSPf3Hghl/8qhCiNubyeLNPSwgSHe9gNztW+q2AsRBohZUofY48M1olAgtOqFK SVSOaUs23cx4NnZv5jVwLLcF9EMPJsQLr6P8IqFSmU5FcvwHQcoupMWIyXfpkUWT +Yok4mlBBJmo+g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:53 2025 by rpki-client