This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft File: ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json) Hash identifier: nr8l/5qqR1LkFdyvtvySNhiajfLSvZAYrresePLzZ3Y= Subject key identifier: 92:DF:F1:94:AE:FC:9E:E0:B1:1A:C5:4E:E9:BB:FF:50:23:04:55:A9 Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97 Certificate issuer: /CN=b9e273c8ba0b0afb205d00b3170e69b816743397 Certificate serial: 019B330D26BE68D812217299C4628A0D538F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft Manifest number: 1470 Signing time: Thu 18 Dec 2025 20:00:58 +0000 Manifest this update: Thu 18 Dec 2025 20:00:58 +0000 Manifest next update: Fri 19 Dec 2025 20:00:58 +0000 Files and hashes: 1: 9ESyzHY3tDwoLy0qTdzIIz35dKQ.roa (hash: jqOOKsXrn7t0ZH3AYn6ArJKblZkGHsI4rkiKFVYX+aw=) 2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: 3j00sIE0fg/OcAtNK3gmfc6ekhvcqnPoeQPJnamMLsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:26:be:68:d8:12:21:72:99:c4:62:8a:0d:53:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397 Validity Not Before: Dec 18 20:00:58 2025 GMT Not After : Dec 19 20:00:58 2025 GMT Subject: CN=92dff194aefc9ee0b11ac54ee9bbff50230455a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d0:41:c3:bb:81:cd:93:f5:39:b5:2c:a9:df: 00:ab:45:7a:a2:fa:22:91:e9:11:19:e0:84:d5:73: e7:6c:0b:ff:be:f2:f8:5d:23:e3:57:9a:04:45:5e: 6e:b3:3b:ef:67:86:07:66:fe:13:74:5d:97:df:7e: 27:26:1f:d0:6b:74:c6:4d:d0:d7:cc:70:f4:97:cb: d7:6b:0e:c0:61:4b:5e:b1:a3:42:7f:ef:7c:f8:21: c2:da:95:a9:22:e1:ae:df:c4:fc:81:dd:6b:08:dc: a3:76:f0:87:d9:51:f7:e9:59:db:cf:da:bd:4b:3e: f4:99:6e:07:ee:2b:12:aa:e6:3c:41:bd:6b:33:04: f7:c5:a3:9f:15:08:ed:69:c0:16:3d:2b:9e:37:d4: 01:1b:4a:43:27:4f:9a:fb:cc:02:5d:db:0b:0f:02: 6f:d9:e2:1b:65:e8:e9:33:4c:40:6e:c5:5c:c2:f8: cf:7d:4e:e5:af:ae:8d:b4:b2:b8:69:a3:71:e0:35: 09:d7:58:3c:29:a9:b9:dc:ac:ca:c8:cc:da:ac:59: 71:fd:75:da:bb:89:22:85:d8:01:b6:1c:fd:18:37: 29:7c:e9:64:4a:8b:19:3e:ef:7b:c2:b7:cd:a4:d9: b7:ce:f4:41:d9:e5:ee:10:1e:21:72:38:67:9c:81: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DF:F1:94:AE:FC:9E:E0:B1:1A:C5:4E:E9:BB:FF:50:23:04:55:A9 X509v3 Authority Key Identifier: keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7d:dc:63:38:19:9a:70:b4:d2:a0:ad:8b:3c:3d:ae:0a:ee: c8:c5:97:fa:6e:37:85:85:14:e9:03:3f:89:8b:dc:b9:b4:66: db:0a:e1:bb:ce:83:28:dc:2d:06:ec:75:20:5e:2b:91:df:f1: 07:00:c1:11:b9:33:c6:16:31:f9:0c:27:05:23:ff:fe:27:2b: 24:9f:14:0f:0a:c3:c1:8e:53:fd:3b:51:bb:36:f4:9f:b0:9b: b1:68:86:63:ab:54:3b:a5:fb:65:7c:6b:91:18:6b:85:41:d9: 7d:7b:0e:0c:13:d2:29:cd:28:5c:89:5a:b9:94:70:dc:ab:31: c5:8c:bf:c3:f0:a5:4b:7a:d8:ab:d8:ab:99:7c:44:2a:a8:57: 5f:e7:a6:7d:50:94:5a:9f:4a:1e:3f:78:52:58:39:73:ce:91: fe:f6:72:ae:42:74:b4:de:29:59:57:6a:4b:54:d8:5e:b8:d4: 2d:d5:eb:67:b3:d7:49:9a:03:28:91:af:4a:97:59:90:c9:fe: 1e:fe:57:42:fa:b5:ec:fe:75:a8:bb:82:e5:0b:fb:2d:56:8f: 8e:2f:62:9c:46:71:fd:0d:9e:11:e1:58:d6:18:5e:2e:a3:d4: b2:bf:e6:15:fa:1f:dc:4c:af:05:7a:28:5a:fb:46:60:b0:40: 8c:b5:c5:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDSa+aNgSIXKZxGKKDVOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZTI3M2M4YmEwYjBhZmIyMDVkMDBiMzE3MGU2OWI4MTY3 NDMzOTcwHhcNMjUxMjE4MjAwMDU4WhcNMjUxMjE5MjAwMDU4WjAzMTEwLwYDVQQD Eyg5MmRmZjE5NGFlZmM5ZWUwYjExYWM1NGVlOWJiZmY1MDIzMDQ1NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tBBw7uBzZP1ObUsqd8Aq0V6ovoi kekRGeCE1XPnbAv/vvL4XSPjV5oERV5uszvvZ4YHZv4TdF2X334nJh/Qa3TGTdDX zHD0l8vXaw7AYUtesaNCf+98+CHC2pWpIuGu38T8gd1rCNyjdvCH2VH36Vnbz9q9 Sz70mW4H7isSquY8Qb1rMwT3xaOfFQjtacAWPSueN9QBG0pDJ0+a+8wCXdsLDwJv 2eIbZejpM0xAbsVcwvjPfU7lr66NtLK4aaNx4DUJ11g8Kam53KzKyMzarFlx/XXa u4kihdgBthz9GDcpfOlkSosZPu97wrfNpNm3zvRB2eXuEB4hcjhnnIF51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLf8ZSu/J7gsRrFTum7/1AjBFWpMB8GA1UdIwQY MBaAFLnic8i6Cwr7IF0AsxcOabgWdDOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83NzgxZmUtMTMwNC00M2Y4LWI3N2Mt M2Q5NmJkM2U3ODUzLzEvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83NzgxZmUtMTMwNC00M2Y4LWI3N2MtM2Q5NmJkM2U3ODUz LzEvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd33cYzgZ mnC00qCtizw9rgruyMWX+m43hYUU6QM/iYvcubRm2wrhu86DKNwtBux1IF4rkd/x BwDBEbkzxhYx+QwnBSP//icrJJ8UDwrDwY5T/TtRuzb0n7CbsWiGY6tUO6X7ZXxr kRhrhUHZfXsODBPSKc0oXIlauZRw3KsxxYy/w/ClS3rYq9irmXxEKqhXX+emfVCU Wp9KHj94Ulg5c86R/vZyrkJ0tN4pWVdqS1TYXrjULdXrZ7PXSZoDKJGvSpdZkMn+ Hv5XQvq17P51qLuC5Qv7LVaPji9inEZx/Q2eEeFY1hheLqPUsr/mFfof3EyvBXoo WvtGYLBAjLXFXQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:28:14 2025 by rpki-client