This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft File: ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json) Hash identifier: sRVsYYAD7vnOUE9z6rwRdRntopJmq0SJVMyFDAowGuU= Subject key identifier: 70:65:E6:CC:62:ED:5E:8E:2B:FC:D1:50:60:B0:76:87:53:EA:96:77 Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97 Certificate issuer: /CN=b9e273c8ba0b0afb205d00b3170e69b816743397 Certificate serial: 019B3AC6406F4E4051D022399BC96745E5E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft Manifest number: 1474 Signing time: Sat 20 Dec 2025 08:00:29 +0000 Manifest this update: Sat 20 Dec 2025 08:00:29 +0000 Manifest next update: Sun 21 Dec 2025 08:00:29 +0000 Files and hashes: 1: 9ESyzHY3tDwoLy0qTdzIIz35dKQ.roa (hash: jqOOKsXrn7t0ZH3AYn6ArJKblZkGHsI4rkiKFVYX+aw=) 2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: 58+NASuAYSwS12l4GQeERhHnuajcZcewv3sUYzsv5sY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:40:6f:4e:40:51:d0:22:39:9b:c9:67:45:e5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397 Validity Not Before: Dec 20 08:00:29 2025 GMT Not After : Dec 21 08:00:29 2025 GMT Subject: CN=7065e6cc62ed5e8e2bfcd15060b0768753ea9677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:f2:7d:c5:7f:64:67:0f:8c:6d:ef:c2:34: 6f:e1:e1:b8:a2:de:1e:f4:09:6e:60:aa:f1:a5:b6: 28:a1:33:34:35:18:49:01:37:31:bb:d9:e5:cc:7b: cc:c2:33:6d:8c:e0:3b:4c:85:bb:ca:e1:44:f8:59: 69:95:0a:19:48:4e:47:e9:36:fd:e3:55:77:e9:36: f1:b5:0d:d7:84:4c:70:4b:e1:6b:1e:b2:99:e9:85: b8:a4:40:16:b1:8e:56:85:21:eb:36:df:e6:77:10: ce:56:40:b1:a8:33:7b:b8:1e:27:43:1b:52:a9:21: 17:7c:de:b5:8c:80:80:90:1f:44:ac:15:b2:1f:c3: 98:9f:01:4f:d0:6f:08:28:97:8b:8a:ef:9e:37:66: 3e:8b:d7:d3:06:9b:bf:1c:d7:77:fe:2b:4f:47:88: 42:d2:eb:c0:86:ec:ed:f7:2a:f9:a8:e0:6e:68:73: e0:27:ab:7c:71:f2:13:66:a0:0d:49:7b:c1:40:34: 42:10:48:e8:fa:e0:5a:ec:56:69:e8:73:c1:d4:87: f3:b6:61:78:cc:6e:a6:58:87:b0:c0:fb:42:42:57: 9e:de:3b:ad:02:72:d8:df:8f:77:64:81:43:12:8e: 3c:dc:b0:3d:39:f9:55:55:93:19:d6:9e:c3:3e:b0: e9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:E6:CC:62:ED:5E:8E:2B:FC:D1:50:60:B0:76:87:53:EA:96:77 X509v3 Authority Key Identifier: keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a6:58:70:f7:18:b9:99:62:15:f5:ce:75:56:62:ed:45:d3: 6d:54:39:41:90:9e:4e:ff:c0:e9:f3:51:d8:2b:d6:ad:af:60: 48:b7:76:eb:8b:66:60:f2:d3:3c:1c:b5:66:2d:47:91:01:b9: 98:fc:97:ab:0d:ab:fc:80:b1:d8:6c:eb:d3:50:4c:4d:e0:d5: 55:27:cd:8b:14:bc:01:8e:23:04:b7:01:9f:55:08:bf:b6:9a: eb:18:2f:2a:fc:07:e2:7e:00:3c:c3:50:11:71:c0:ca:40:c5: 6f:5a:f6:79:c0:88:d4:4c:87:a1:e6:6e:8c:fc:23:67:09:90: 1f:71:44:ec:95:b2:8e:f1:7c:19:3e:62:4d:24:77:aa:80:b6: 11:33:81:08:d3:d9:08:99:8f:84:03:4a:a4:e3:3b:c6:18:52: a2:a8:60:50:98:e7:03:3f:a1:8b:b2:97:47:20:d2:31:7e:53: 2d:0a:48:10:e4:32:5b:f8:14:5c:e0:08:f3:f6:23:45:46:f9: 51:2d:2a:05:27:16:a1:42:07:41:2a:f6:35:99:98:28:e7:78: af:5a:53:74:16:c2:36:4b:5e:88:be:67:6c:db:61:bb:d2:cc: ef:39:0a:fe:db:71:c7:52:4e:17:6f:03:e6:4a:5e:fa:e4:71: a2:56:cc:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xkBvTkBR0CI5m8lnReXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZTI3M2M4YmEwYjBhZmIyMDVkMDBiMzE3MGU2OWI4MTY3 NDMzOTcwHhcNMjUxMjIwMDgwMDI5WhcNMjUxMjIxMDgwMDI5WjAzMTEwLwYDVQQD Eyg3MDY1ZTZjYzYyZWQ1ZThlMmJmY2QxNTA2MGIwNzY4NzUzZWE5Njc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOfyfcV/ZGcPjG3vwjRv4eG4ot4e 9AluYKrxpbYooTM0NRhJATcxu9nlzHvMwjNtjOA7TIW7yuFE+FlplQoZSE5H6Tb9 41V36TbxtQ3XhExwS+FrHrKZ6YW4pEAWsY5WhSHrNt/mdxDOVkCxqDN7uB4nQxtS qSEXfN61jICAkB9ErBWyH8OYnwFP0G8IKJeLiu+eN2Y+i9fTBpu/HNd3/itPR4hC 0uvAhuzt9yr5qOBuaHPgJ6t8cfITZqANSXvBQDRCEEjo+uBa7FZp6HPB1IfztmF4 zG6mWIewwPtCQlee3jutAnLY3493ZIFDEo483LA9OflVVZMZ1p7DPrDpuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBl5sxi7V6OK/zRUGCwdodT6pZ3MB8GA1UdIwQY MBaAFLnic8i6Cwr7IF0AsxcOabgWdDOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83NzgxZmUtMTMwNC00M2Y4LWI3N2Mt M2Q5NmJkM2U3ODUzLzEvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83NzgxZmUtMTMwNC00M2Y4LWI3N2MtM2Q5NmJkM2U3ODUz LzEvdWVKenlMb0xDdnNnWFFDekZ3NXB1QlowTTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6ZYcPcY uZliFfXOdVZi7UXTbVQ5QZCeTv/A6fNR2CvWra9gSLd264tmYPLTPBy1Zi1HkQG5 mPyXqw2r/ICx2Gzr01BMTeDVVSfNixS8AY4jBLcBn1UIv7aa6xgvKvwH4n4APMNQ EXHAykDFb1r2ecCI1EyHoeZujPwjZwmQH3FE7JWyjvF8GT5iTSR3qoC2ETOBCNPZ CJmPhANKpOM7xhhSoqhgUJjnAz+hi7KXRyDSMX5TLQpIEOQyW/gUXOAI8/YjRUb5 US0qBScWoUIHQSr2NZmYKOd4r1pTdBbCNkteiL5nbNthu9LM7zkK/ttxx1JOF28D 5kpe+uRxolbMMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:44:13 2025 by rpki-client