This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json) Hash identifier: /D34DQolFkKzSOTJCgfQW/V7AfSyPFaQS2rxBTTuYPk= Subject key identifier: BE:06:65:FD:41:CB:C1:8B:79:98:D2:55:8A:97:D7:9A:3B:68:EC:81 Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Certificate serial: 019B5CE48D7CA3BE5795F9DC9CBF80001893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft Manifest number: 0DE8 Signing time: Fri 26 Dec 2025 23:00:40 +0000 Manifest this update: Fri 26 Dec 2025 23:00:40 +0000 Manifest next update: Sat 27 Dec 2025 23:00:40 +0000 Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=) 2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=) 3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: YpReqPgZ7IXvFiAJlxQiwhiJM3emFf1f3YYBZWGm0o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:8d:7c:a3:be:57:95:f9:dc:9c:bf:80:00:18:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Validity Not Before: Dec 26 23:00:40 2025 GMT Not After : Dec 27 23:00:40 2025 GMT Subject: CN=be0665fd41cbc18b7998d2558a97d79a3b68ec81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:14:b8:83:ca:41:22:89:85:6c:9f:45:20: 55:8a:99:eb:89:41:30:66:1d:00:ab:9c:81:7f:f7: 2b:8e:34:04:cc:45:b5:fd:50:1c:56:99:f8:a1:e7: f7:36:da:f7:f3:ac:f9:a5:3d:95:53:8e:98:13:ed: ef:1d:7d:c2:89:ec:51:44:0e:14:90:b5:35:38:1c: 1f:ab:d3:6a:da:60:22:34:46:db:be:87:5a:f9:ec: c1:b2:fb:46:40:16:53:92:5e:a7:fd:5a:d7:0b:9d: 55:3a:50:90:50:26:75:d1:cf:72:4b:f9:89:5a:9d: f1:98:ed:d5:a8:8b:6b:81:b4:5e:24:d9:49:60:e0: 38:45:36:af:84:ce:d2:0c:5f:63:38:93:58:31:24: 83:e6:86:fa:3f:9d:ed:07:e0:ed:ba:91:4b:b4:d4: 5d:82:3c:5f:36:41:a0:cb:fc:26:6a:99:ff:8a:39: b4:bb:cb:9d:be:de:3b:c1:7a:4f:9d:c7:7d:e4:73: 64:53:11:16:46:d8:10:29:04:7d:66:0e:86:4c:19: fe:22:2b:6a:94:db:c9:4a:31:92:93:00:5e:66:f2: 14:af:53:28:a8:8e:40:12:59:e8:5f:b9:99:8c:ee: 45:5a:3e:0d:a8:ea:b4:9c:32:48:32:38:08:22:96: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:06:65:FD:41:CB:C1:8B:79:98:D2:55:8A:97:D7:9A:3B:68:EC:81 X509v3 Authority Key Identifier: keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e1:fd:2e:50:62:93:56:da:a2:d6:73:6c:28:56:fa:15:a9: e4:5f:cd:73:e1:2f:87:c6:e7:6b:2f:78:08:40:a0:02:47:30: a6:08:6b:01:d1:33:33:56:ce:3d:e3:d8:c6:a6:c3:88:d7:0a: bc:e5:74:71:47:04:1a:70:ae:be:23:7d:1f:93:2e:96:4e:7b: 19:ce:40:8d:1c:12:65:96:e7:fd:fb:db:d1:e6:74:96:45:46: 73:d9:19:0d:2b:ee:9c:c9:7f:19:fb:89:66:52:e0:4e:a4:3d: 88:ee:86:21:56:22:4d:dc:db:8a:c5:15:0a:3f:17:cf:b2:e7: 44:93:64:79:76:78:23:49:45:12:77:55:a4:61:8a:43:73:f0: ce:46:d6:58:31:81:10:88:c0:48:64:ac:2d:50:3d:db:80:e8: 00:43:da:c1:ba:ba:03:05:ba:41:3b:f9:ee:de:b7:78:3b:2c: e6:b5:4c:12:0f:16:2b:97:95:0c:1b:be:dd:70:32:ed:56:6a: 41:e0:fe:4a:0e:16:0b:9e:2e:6a:fa:35:3c:e7:a3:16:18:d1: 59:de:bc:e9:90:74:7e:1d:f1:73:9c:ca:cf:00:4f:0d:39:4c: 2a:db:7e:65:e6:a3:47:f1:d5:87:fa:20:14:70:d7:7e:a7:d5: fa:84:b8:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5I18o75XlfncnL+AABiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4 MjhkZWEwHhcNMjUxMjI2MjMwMDQwWhcNMjUxMjI3MjMwMDQwWjAzMTEwLwYDVQQD EyhiZTA2NjVmZDQxY2JjMThiNzk5OGQyNTU4YTk3ZDc5YTNiNjhlYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXQUuIPKQSKJhWyfRSBVipnriUEw Zh0Aq5yBf/crjjQEzEW1/VAcVpn4oef3Ntr386z5pT2VU46YE+3vHX3CiexRRA4U kLU1OBwfq9Nq2mAiNEbbvoda+ezBsvtGQBZTkl6n/VrXC51VOlCQUCZ10c9yS/mJ Wp3xmO3VqItrgbReJNlJYOA4RTavhM7SDF9jOJNYMSSD5ob6P53tB+DtupFLtNRd gjxfNkGgy/wmapn/ijm0u8udvt47wXpPncd95HNkUxEWRtgQKQR9Zg6GTBn+Iitq lNvJSjGSkwBeZvIUr1MoqI5AElnoX7mZjO5FWj4NqOq0nDJIMjgIIpaKPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4GZf1By8GLeZjSVYqX15o7aOyBMB8GA1UdIwQY MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1 LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeH9LlBi k1baotZzbChW+hWp5F/Nc+Evh8bnay94CECgAkcwpghrAdEzM1bOPePYxqbDiNcK vOV0cUcEGnCuviN9H5Mulk57Gc5AjRwSZZbn/fvb0eZ0lkVGc9kZDSvunMl/GfuJ ZlLgTqQ9iO6GIVYiTdzbisUVCj8Xz7LnRJNkeXZ4I0lFEndVpGGKQ3PwzkbWWDGB EIjASGSsLVA924DoAEPawbq6AwW6QTv57t63eDss5rVMEg8WK5eVDBu+3XAy7VZq QeD+Sg4WC54uavo1POejFhjRWd686ZB0fh3xc5zKzwBPDTlMKtt+ZeajR/HVh/og FHDXfqfV+oS4Aw== -----END CERTIFICATE-----Generated at Sat Dec 27 00:42:03 2025 by rpki-client