This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: ArnqhC5grzEbyVW5jgA1ZIMQs679VI43OxffpxO4NZk= Subject key identifier: F3:C6:2B:23:22:50:EF:F8:EF:3B:F6:0A:B6:71:22:81:D2:12:10:4B Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B37C5F05217C86B587DDD2C07BD4722E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 1338 Signing time: Fri 19 Dec 2025 18:01:17 +0000 Manifest this update: Fri 19 Dec 2025 18:01:17 +0000 Manifest next update: Sat 20 Dec 2025 18:01:17 +0000 Files and hashes: 1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=) 2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=) 3: 1o33mTVp-sLzAkicxLikSA75wg4.roa (hash: ed6GlmsVsZfCNGu9N0GdJBDRnv8UTZkZYrtU19ndjKI=) 4: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=) 5: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=) 6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=) 7: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=) 8: XvsimD_vMwygE8r08SZyeuZ8Q70.roa (hash: ythpc5lZMC9teyOxod0+e00DuCJN7i/hGKSi655eunw=) 9: YqK1nXW8w2q_X2z3lSICRsWfjFw.roa (hash: l725tDRDqMSX597l+gr9+lU8fQNlGlVTOUy4mlZEjNw=) 10: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=) 11: eDLnlibMvqHABUnf0cTnTXfzjsQ.roa (hash: 23lsZWpFbgTvvmDoDor5ePX92IS7k3nIwuBhFjzfmm4=) 12: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: m1xEyXdN9rkAESFSR4qmMPcCNo9p4HWpR+4bGI8kq6Y=) 13: yhwwpxJ3TQv7n4TMvIeaFV-ZDMU.roa (hash: Cx12upzLFR9R49twlwP6YThfGCdOHNc6BXhnNgg550Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:f0:52:17:c8:6b:58:7d:dd:2c:07:bd:47:22:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Dec 19 18:01:17 2025 GMT Not After : Dec 20 18:01:17 2025 GMT Subject: CN=f3c62b232250eff8ef3bf60ab6712281d212104b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:fb:d4:06:bc:9f:cc:5b:3b:63:29:98:60: 41:f9:0d:02:6a:5b:28:57:2b:14:f4:9a:d1:c2:62: be:3a:b6:f6:84:98:8e:67:41:92:53:0f:d3:c1:4b: b7:87:2b:6e:7b:74:1f:31:1c:76:f7:e3:ea:16:7e: 12:33:9e:90:c9:17:38:77:1f:b8:fb:83:0c:83:26: 24:ac:f0:a0:36:a6:57:ea:45:a8:e7:d7:4f:bf:bc: 43:57:3c:f3:79:16:b5:a5:70:d0:e8:a1:6a:b7:7f: 17:66:48:0f:7c:a0:d7:3f:a8:47:79:4c:1e:ab:f9: 90:e2:97:69:a1:a8:82:08:6a:82:de:f9:91:69:a1: 35:4b:f3:10:33:e1:77:86:6d:55:47:cb:56:ef:4a: 13:b3:fe:1d:11:05:2d:2f:48:44:fd:9c:7a:e9:5b: af:95:a7:9f:08:26:c9:94:57:17:b3:a7:87:6d:7f: 89:77:61:e3:51:49:df:82:aa:bd:f8:ff:cc:e3:2b: f8:d0:e6:90:3d:d0:1b:9d:4e:0e:7e:49:80:53:8b: d7:4b:a7:60:9f:81:c9:13:b4:5c:ed:71:95:68:2b: ed:ae:32:be:ae:6b:37:83:57:cc:b9:c3:4b:70:af: 0a:d6:df:83:f1:e4:f9:f6:27:41:e5:15:53:26:f8: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:2B:23:22:50:EF:F8:EF:3B:F6:0A:B6:71:22:81:D2:12:10:4B X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:02:64:4d:08:bf:5a:9d:0b:15:d2:88:6a:64:3d:20:f2:60: 6c:84:36:7b:fe:00:be:fd:73:8e:b5:05:92:31:a6:9c:1f:41: 60:bb:64:79:38:9f:ea:93:11:d8:cc:b8:71:84:fc:e4:60:9d: af:3e:ce:dd:05:76:3f:5e:7b:ba:27:63:b2:0e:96:91:41:6d: 48:f5:b5:82:f6:18:65:38:55:77:df:51:9b:8d:26:a9:29:4e: 3e:68:0f:1f:e5:aa:50:0c:3a:0c:78:53:07:7c:76:34:26:b8: e1:8d:2a:b4:d8:c1:20:90:73:3e:54:b8:66:b7:99:d9:90:2b: f9:99:f9:3b:1d:9f:81:46:56:63:f1:c9:15:47:89:9a:90:e7: 1b:5e:98:2d:f9:8e:97:31:02:47:d2:65:db:3f:a1:9d:ca:5d: 13:08:74:2b:5e:4c:26:8c:21:f6:6f:d6:d9:e1:ea:e5:32:47: 9f:bb:d3:44:7a:d5:10:f6:5e:7f:46:19:9d:ff:e7:08:e1:a1: 5e:44:19:69:ab:96:4e:93:6c:b8:a8:e9:ee:b1:b0:12:fb:db: 3b:96:2a:85:45:b8:c0:e6:03:40:e9:e6:fd:ee:43:44:95:1f: f1:3a:c9:91:24:48:f2:46:4a:bd:49:17:b6:a8:4b:21:43:b2: ba:af:41:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xfBSF8hrWH3dLAe9RyLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjUxMjE5MTgwMTE3WhcNMjUxMjIwMTgwMTE3WjAzMTEwLwYDVQQD EyhmM2M2MmIyMzIyNTBlZmY4ZWYzYmY2MGFiNjcxMjI4MWQyMTIxMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EX71Aa8n8xbO2MpmGBB+Q0Calso VysU9JrRwmK+Orb2hJiOZ0GSUw/TwUu3hytue3QfMRx29+PqFn4SM56QyRc4dx+4 +4MMgyYkrPCgNqZX6kWo59dPv7xDVzzzeRa1pXDQ6KFqt38XZkgPfKDXP6hHeUwe q/mQ4pdpoaiCCGqC3vmRaaE1S/MQM+F3hm1VR8tW70oTs/4dEQUtL0hE/Zx66Vuv laefCCbJlFcXs6eHbX+Jd2HjUUnfgqq9+P/M4yv40OaQPdAbnU4OfkmAU4vXS6dg n4HJE7Rc7XGVaCvtrjK+rms3g1fMucNLcK8K1t+D8eT59idB5RVTJvg+dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPGKyMiUO/47zv2CrZxIoHSEhBLMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgJkTQi/ Wp0LFdKIamQ9IPJgbIQ2e/4Avv1zjrUFkjGmnB9BYLtkeTif6pMR2My4cYT85GCd rz7O3QV2P157uidjsg6WkUFtSPW1gvYYZThVd99Rm40mqSlOPmgPH+WqUAw6DHhT B3x2NCa44Y0qtNjBIJBzPlS4ZreZ2ZAr+Zn5Ox2fgUZWY/HJFUeJmpDnG16YLfmO lzECR9Jl2z+hncpdEwh0K15MJowh9m/W2eHq5TJHn7vTRHrVEPZef0YZnf/nCOGh XkQZaauWTpNsuKjp7rGwEvvbO5YqhUW4wOYDQOnm/e5DRJUf8TrJkSRI8kZKvUkX tqhLIUOyuq9BLg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:49 2025 by rpki-client