This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft File: UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json) Hash identifier: DFqf7dTdlLiAmDTbw8eO8hRUh2ukzfHYhBkKeoyClkw= Subject key identifier: C6:B9:E0:0B:DF:01:0C:80:47:37:97:E0:D7:03:DA:03:5B:CA:E8:D3 Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6 Certificate issuer: /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6 Certificate serial: 019B3EDADEFFEEF947E27909DDFDA1C5823D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:01:29 +0000 Manifest this update: Sun 21 Dec 2025 03:01:29 +0000 Manifest next update: Mon 22 Dec 2025 03:01:29 +0000 Files and hashes: 1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=) 2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: 4p7ELmvlMRS/a5LMuDnJv/s4MTamtdzM/5RBaWXyNNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:de:ff:ee:f9:47:e2:79:09:dd:fd:a1:c5:82:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6 Validity Not Before: Dec 21 03:01:29 2025 GMT Not After : Dec 22 03:01:29 2025 GMT Subject: CN=c6b9e00bdf010c80473797e0d703da035bcae8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:8f:a2:19:eb:2e:19:37:e4:af:03:37:ba: c8:6c:aa:c5:f5:60:ea:3f:29:53:f1:22:8f:d6:bb: 3a:54:c0:54:2e:18:1f:f1:8b:fc:4f:67:f2:8a:a6: 6b:8b:f9:41:05:3e:e6:ca:9d:42:03:3e:94:b7:65: 6a:64:ba:2e:68:7f:2f:81:a9:99:cd:59:3f:c0:bf: 0e:43:74:bf:b7:96:27:1d:79:6a:f1:c9:6c:7a:59: 06:bb:06:37:70:9c:79:ef:bf:5c:15:2a:b5:a8:15: 39:f7:33:b0:87:98:9b:7e:55:ad:2f:fc:89:70:45: ca:ea:77:d0:14:e8:0b:67:2d:6e:d5:9f:5c:95:86: 19:67:84:31:fb:15:94:3c:23:21:75:73:fd:af:ab: cc:85:44:b5:d8:83:a9:ee:89:80:36:86:bd:01:00: 61:12:c5:53:87:81:34:56:01:32:46:d6:f9:9a:58: f2:94:62:59:58:6d:f5:31:4b:57:4c:2a:1b:b3:bf: bd:4d:e6:03:ca:cc:dc:0e:ba:c5:ba:ab:4f:69:e6: 09:44:ab:b1:6a:e4:c4:21:df:3f:84:21:c5:be:e7: e4:f1:00:00:1a:ba:0b:9e:db:fe:76:37:58:80:55: 6d:36:af:28:f1:19:95:10:9b:6e:d8:57:a2:fc:5a: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B9:E0:0B:DF:01:0C:80:47:37:97:E0:D7:03:DA:03:5B:CA:E8:D3 X509v3 Authority Key Identifier: keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:76:7a:04:ac:8a:0e:bf:09:3a:b1:33:ec:38:63:f9:37:9e: b4:a7:19:4e:08:3b:83:2b:d3:4d:79:79:ba:37:a4:b4:3a:66: 5b:51:1b:bb:46:eb:67:41:49:fd:67:a8:8d:9d:93:18:52:17: 28:4b:db:95:22:66:3d:4b:00:49:21:17:27:8a:c5:42:65:0d: c4:db:54:ca:b7:78:3c:04:a1:de:06:78:99:ae:00:c4:7c:cc: e5:1e:f1:62:a8:ed:42:13:26:6b:d5:82:8f:5d:b5:0d:7a:be: e5:3d:82:2f:39:a8:0f:a1:f3:3b:f9:8d:bc:e1:24:65:0c:12: 36:b6:5a:a7:2f:76:45:14:15:33:2e:1c:c3:fe:6d:b0:51:f9: fe:0b:f1:c5:84:ab:0c:18:40:13:44:bf:24:3a:b8:4e:27:66: 39:77:7d:ee:0c:cd:fd:36:49:f8:af:5f:c3:65:ec:d5:39:7c: 46:e6:6a:f7:63:3c:be:d4:c3:46:d4:dc:a0:2e:34:6a:2c:3e: a9:52:79:01:a0:86:92:f0:68:5e:15:3b:cb:cb:21:3b:e8:35: 37:b6:2b:28:4a:af:b4:ca:c0:8c:4d:2f:c4:1e:7e:dc:ae:15: dd:27:9f:31:37:3a:e5:01:74:35:48:c8:6e:42:33:bf:5e:da: 70:e0:3f:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2t7/7vlH4nkJ3f2hxYI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDU1ZWJjM2QxYzUyZjE3YWU2NWFjMjkyZWJlMDk5MzEw MDljZjYwHhcNMjUxMjIxMDMwMTI5WhcNMjUxMjIyMDMwMTI5WjAzMTEwLwYDVQQD EyhjNmI5ZTAwYmRmMDEwYzgwNDczNzk3ZTBkNzAzZGEwMzViY2FlOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1yPohnrLhk35K8DN7rIbKrF9WDq PylT8SKP1rs6VMBULhgf8Yv8T2fyiqZri/lBBT7myp1CAz6Ut2VqZLouaH8vgamZ zVk/wL8OQ3S/t5YnHXlq8clselkGuwY3cJx5779cFSq1qBU59zOwh5ibflWtL/yJ cEXK6nfQFOgLZy1u1Z9clYYZZ4Qx+xWUPCMhdXP9r6vMhUS12IOp7omANoa9AQBh EsVTh4E0VgEyRtb5mljylGJZWG31MUtXTCobs7+9TeYDyszcDrrFuqtPaeYJRKux auTEId8/hCHFvufk8QAAGroLntv+djdYgFVtNq8o8RmVEJtu2Fei/FppfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa54AvfAQyARzeX4NcD2gNbyujTMB8GA1UdIwQY MBaAFFAFXrw9HFLxeuZawpLr4JkxAJz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQt Yzc4MTMyNGI3OTc5LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQtYzc4MTMyNGI3OTc5 LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3Z6BKyK Dr8JOrEz7Dhj+TeetKcZTgg7gyvTTXl5ujektDpmW1Ebu0brZ0FJ/WeojZ2TGFIX KEvblSJmPUsASSEXJ4rFQmUNxNtUyrd4PASh3gZ4ma4AxHzM5R7xYqjtQhMma9WC j121DXq+5T2CLzmoD6HzO/mNvOEkZQwSNrZapy92RRQVMy4cw/5tsFH5/gvxxYSr DBhAE0S/JDq4TidmOXd97gzN/TZJ+K9fw2Xs1Tl8RuZq92M8vtTDRtTcoC40aiw+ qVJ5AaCGkvBoXhU7y8shO+g1N7YrKEqvtMrAjE0vxB5+3K4V3SefMTc65QF0NUjI bkIzv17acOA/ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:41:53 2025 by rpki-client