This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json) Hash identifier: gi4rfCOlpvSlHoEEiz+ner+aV4WmPeYuez1nOXvltJM= Subject key identifier: EA:15:7D:5B:38:05:22:15:89:95:00:FA:83:DA:0F:69:FE:63:9F:55 Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3 Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3 Certificate serial: 019B24E3CB589068811603FCA70835028455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft Manifest number: 0FFF Signing time: Tue 16 Dec 2025 02:01:07 +0000 Manifest this update: Tue 16 Dec 2025 02:01:07 +0000 Manifest next update: Wed 17 Dec 2025 02:01:07 +0000 Files and hashes: 1: LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa (hash: mQpu5Z0eDQkFYVXPC9Ju2CwxJctFEU3LSWItHzUvqPk=) 2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: rvrUrbWUSPixARB0/Uk9IXPgwtJ8pYYYiSXqnPk517Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:cb:58:90:68:81:16:03:fc:a7:08:35:02:84:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3 Validity Not Before: Dec 16 02:01:07 2025 GMT Not After : Dec 17 02:01:07 2025 GMT Subject: CN=ea157d5b38052215899500fa83da0f69fe639f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:5d:56:e8:76:b6:4a:42:55:0c:08:0f:be: c8:ec:cc:1b:29:67:19:4c:e0:4a:12:8a:4f:c7:07: ce:72:85:67:28:66:17:93:aa:ba:98:e4:5d:7f:f8: 2a:7f:eb:57:6a:cd:ca:30:58:18:3e:6c:36:98:4a: f0:86:7a:d9:0f:6a:8f:60:64:14:a9:23:c0:ba:07: df:a7:36:7f:ba:9f:38:44:03:94:03:80:99:a4:e2: 71:b5:4b:de:d7:9b:b0:4f:6f:1d:4a:71:d3:72:9d: 04:ce:1e:34:e3:a1:24:54:95:b0:d7:e6:65:85:61: d8:38:68:1d:7b:88:0e:bb:0d:6d:42:42:45:f0:e4: 82:18:52:79:e0:f6:22:ba:d4:36:97:44:01:c3:ae: 98:d6:98:bf:28:24:f5:7a:71:d5:23:50:d7:98:1b: 87:ee:5c:70:d9:dc:64:3a:bb:f3:3f:02:82:71:51: 37:cc:81:18:bd:02:60:86:8e:9b:1e:8d:51:53:8f: ef:05:b8:d3:46:f9:6a:d1:8f:eb:ba:ff:19:72:59: 25:05:72:d5:89:05:91:95:cf:1b:da:25:06:c5:a1: 52:38:cc:9d:5e:d8:ad:e9:e2:32:8e:51:fd:52:e9: 3b:60:72:4f:0a:80:28:19:4f:ab:fb:2d:43:35:d8: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:7D:5B:38:05:22:15:89:95:00:FA:83:DA:0F:69:FE:63:9F:55 X509v3 Authority Key Identifier: keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f3:69:66:73:a4:1e:a2:90:42:0f:f2:e8:21:63:32:01:6a: ed:3e:84:f5:30:a2:cb:4a:ed:bb:17:5e:47:30:9e:e6:e0:b7: 08:5d:70:c0:c7:89:e8:75:51:53:b6:99:e5:4b:d2:98:a3:13: bb:04:42:fb:d4:d4:06:de:3e:f3:84:26:52:6b:8a:8c:08:3c: 40:62:b7:01:94:82:44:0c:d5:7e:98:3f:c5:5d:21:6d:b3:74: 8d:59:f5:12:dd:4e:dc:a3:c8:b1:34:26:bc:ca:80:25:2a:f7: ca:f5:99:b6:ae:85:e2:75:2c:91:cc:2a:2b:e3:80:a9:bb:ad: 25:b9:65:58:cd:83:36:7a:52:ae:3f:b4:99:04:97:a2:a5:cc: 1a:6e:37:f1:e3:24:31:86:1c:19:29:eb:db:f7:2e:3c:08:ab: f5:0f:b4:40:a2:16:de:9f:27:e2:95:6d:85:d8:ac:8e:89:bc: a3:39:06:95:85:07:53:16:8e:98:92:d5:c3:c7:30:82:f1:93: 70:17:30:ae:1d:a0:54:31:4d:4b:be:54:a9:a9:ad:8f:e2:24: 19:2c:64:0e:67:d3:7a:51:7b:34:e4:25:13:fd:b2:99:a1:79: 40:08:7c:92:38:ef:d8:75:1f:b5:70:db:47:65:2d:9b:7c:28: cb:63:ab:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk48tYkGiBFgP8pwg1AoRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3 YWE2YzMwHhcNMjUxMjE2MDIwMTA3WhcNMjUxMjE3MDIwMTA3WjAzMTEwLwYDVQQD EyhlYTE1N2Q1YjM4MDUyMjE1ODk5NTAwZmE4M2RhMGY2OWZlNjM5ZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpddVuh2tkpCVQwID77I7MwbKWcZ TOBKEopPxwfOcoVnKGYXk6q6mORdf/gqf+tXas3KMFgYPmw2mErwhnrZD2qPYGQU qSPAugffpzZ/up84RAOUA4CZpOJxtUve15uwT28dSnHTcp0Ezh4046EkVJWw1+Zl hWHYOGgde4gOuw1tQkJF8OSCGFJ54PYiutQ2l0QBw66Y1pi/KCT1enHVI1DXmBuH 7lxw2dxkOrvzPwKCcVE3zIEYvQJgho6bHo1RU4/vBbjTRvlq0Y/ruv8ZclklBXLV iQWRlc8b2iUGxaFSOMydXtit6eIyjlH9Uuk7YHJPCoAoGU+r+y1DNdjGUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoVfVs4BSIViZUA+oPaD2n+Y59VMB8GA1UdIwQY MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPNpZnOk HqKQQg/y6CFjMgFq7T6E9TCiy0rtuxdeRzCe5uC3CF1wwMeJ6HVRU7aZ5UvSmKMT uwRC+9TUBt4+84QmUmuKjAg8QGK3AZSCRAzVfpg/xV0hbbN0jVn1Et1O3KPIsTQm vMqAJSr3yvWZtq6F4nUskcwqK+OAqbutJbllWM2DNnpSrj+0mQSXoqXMGm438eMk MYYcGSnr2/cuPAir9Q+0QKIW3p8n4pVthdisjom8ozkGlYUHUxaOmJLVw8cwgvGT cBcwrh2gVDFNS75Uqamtj+IkGSxkDmfTelF7NOQlE/2ymaF5QAh8kjjv2HUftXDb R2Utm3woy2OrNg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:18 2025 by rpki-client