This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft File: UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json) Hash identifier: PGXpZgm1QD30x+GaQCVdURxDbwrbgCTeEskMsmzRaIg= Subject key identifier: 55:D2:7E:09:2E:2D:CB:DA:11:40:E0:14:BC:94:42:36:84:B2:E1:45 Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5 Certificate issuer: /CN=500596ce6073e8ededc5105f814ec97191b5e1d5 Certificate serial: 019B3E6CDB7D186062191984159BBCD81EB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft Manifest number: 10B3 Signing time: Sun 21 Dec 2025 01:01:19 +0000 Manifest this update: Sun 21 Dec 2025 01:01:19 +0000 Manifest next update: Mon 22 Dec 2025 01:01:19 +0000 Files and hashes: 1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=) 2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: nHNjPT542skbJ5ASt66C1INs9q3W3eDmUnH841JBPPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:db:7d:18:60:62:19:19:84:15:9b:bc:d8:1e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5 Validity Not Before: Dec 21 01:01:19 2025 GMT Not After : Dec 22 01:01:19 2025 GMT Subject: CN=55d27e092e2dcbda1140e014bc94423684b2e145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:d3:5a:3f:d1:a5:d2:1f:d9:2c:55:a7:23: d1:2f:54:58:bd:d5:dd:d5:2a:e0:4a:7c:cc:bd:29: a9:17:23:c2:c8:2a:2a:7c:b7:a2:73:02:4d:ff:62: f4:53:aa:d7:f9:70:97:c9:35:cf:32:33:80:5e:56: e0:c6:89:e8:68:ab:6a:a9:bf:2d:07:08:1c:59:47: 53:49:1e:d7:3c:6e:4c:de:c8:89:3f:66:48:5f:4f: f2:34:ed:50:c7:a8:55:64:9f:52:cb:7e:3a:0a:e4: 25:19:f9:25:aa:95:de:6d:68:83:03:be:87:97:08: 08:7b:dd:fb:b4:dc:af:f2:88:0b:2f:1c:c1:f1:38: 2a:e1:57:49:69:49:a7:47:71:c3:75:4f:8f:e4:c5: 7a:f1:95:55:64:9c:1d:ae:a0:a8:74:d4:98:5c:dd: 0d:b2:1b:6d:62:74:79:12:03:30:94:53:20:af:7b: 3f:90:f5:0c:6b:21:e0:e1:93:db:ed:03:40:f9:62: 5d:29:f2:5d:04:22:04:c9:bb:97:f7:64:82:0a:07: b8:6d:fe:a6:d1:24:e2:91:31:c4:d1:d2:a5:9a:a4: 39:49:c7:ef:3b:d8:44:05:34:41:59:9c:46:15:a3: c4:1b:74:bc:88:b3:12:eb:5d:b6:0f:18:c4:1f:ec: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D2:7E:09:2E:2D:CB:DA:11:40:E0:14:BC:94:42:36:84:B2:E1:45 X509v3 Authority Key Identifier: keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9d:17:c7:b5:bd:1e:5a:f0:f1:6b:88:a8:a2:be:d1:43:bd: 2a:e0:3e:1f:1c:af:19:4e:d9:07:b2:2a:01:3b:1d:58:51:52: c9:71:64:d9:39:ff:a8:b4:c6:3b:e8:b9:8b:83:8a:0e:1a:74: 58:73:33:e9:c1:2a:ef:9f:bf:d6:a2:0b:6f:8c:3b:17:77:57: 08:b6:ba:3a:00:fd:6b:0a:6c:5b:f2:b5:af:b8:63:cd:c6:4d: 65:98:67:57:a8:90:e1:1e:96:12:ff:b9:b6:0d:9c:a5:46:8c: d1:2b:ef:cc:c5:d7:02:41:ae:f3:ef:65:c7:ff:41:0f:fb:b6: 19:fd:89:bf:e7:e1:56:00:ec:fe:1f:89:a2:66:c1:ca:81:3a: 57:74:20:c3:38:fc:ed:34:90:4d:c7:8d:68:f9:72:12:4a:19: 44:93:16:d1:77:b7:a7:22:af:80:54:2d:f1:73:3e:e4:4a:a1: ed:75:e5:83:5c:39:35:2f:18:79:f3:81:b0:5f:5a:48:e7:28: 1a:e9:d3:44:f4:4c:68:73:06:ed:11:3e:83:b5:8d:5e:e4:dd: 7f:1d:71:2d:42:40:31:e1:30:9e:0b:30:b1:7e:0d:a8:02:12: 76:52:45:e3:6c:d4:e8:a8:2f:75:39:c4:30:55:74:8e:96:5f: e4:01:0e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bNt9GGBiGRmEFZu82B60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDU5NmNlNjA3M2U4ZWRlZGM1MTA1ZjgxNGVjOTcxOTFi NWUxZDUwHhcNMjUxMjIxMDEwMTE5WhcNMjUxMjIyMDEwMTE5WjAzMTEwLwYDVQQD Eyg1NWQyN2UwOTJlMmRjYmRhMTE0MGUwMTRiYzk0NDIzNjg0YjJlMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw67TWj/RpdIf2SxVpyPRL1RYvdXd 1SrgSnzMvSmpFyPCyCoqfLeicwJN/2L0U6rX+XCXyTXPMjOAXlbgxonoaKtqqb8t BwgcWUdTSR7XPG5M3siJP2ZIX0/yNO1Qx6hVZJ9Sy346CuQlGfklqpXebWiDA76H lwgIe937tNyv8ogLLxzB8Tgq4VdJaUmnR3HDdU+P5MV68ZVVZJwdrqCodNSYXN0N shttYnR5EgMwlFMgr3s/kPUMayHg4ZPb7QNA+WJdKfJdBCIEybuX92SCCge4bf6m 0STikTHE0dKlmqQ5ScfvO9hEBTRBWZxGFaPEG3S8iLMS6122DxjEH+yogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXSfgkuLcvaEUDgFLyUQjaEsuFFMB8GA1UdIwQY MBaAFFAFls5gc+jt7cUQX4FOyXGRteHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUt MWUxNjdmYTExM2IyLzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUtMWUxNjdmYTExM2Iy LzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ0Xx7W9 Hlrw8WuIqKK+0UO9KuA+HxyvGU7ZB7IqATsdWFFSyXFk2Tn/qLTGO+i5i4OKDhp0 WHMz6cEq75+/1qILb4w7F3dXCLa6OgD9awpsW/K1r7hjzcZNZZhnV6iQ4R6WEv+5 tg2cpUaM0SvvzMXXAkGu8+9lx/9BD/u2Gf2Jv+fhVgDs/h+JombByoE6V3Qgwzj8 7TSQTceNaPlyEkoZRJMW0Xe3pyKvgFQt8XM+5Eqh7XXlg1w5NS8YefOBsF9aSOco GunTRPRMaHMG7RE+g7WNXuTdfx1xLUJAMeEwngswsX4NqAISdlJF42zU6KgvdTnE MFV0jpZf5AEOyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:39 2025 by rpki-client