This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json) Hash identifier: Onw/+upkv0YznukOowmGCpNUKc67n2/iSobqS+cozcI= Subject key identifier: BB:54:10:E6:F4:09:88:D8:64:CF:6B:68:E1:3F:5F:E1:70:5B:28:BC Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Certificate serial: 019B281BF8EF4CA3A308380206FD7F89327C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft Manifest number: 028A Signing time: Tue 16 Dec 2025 17:01:20 +0000 Manifest this update: Tue 16 Dec 2025 17:01:20 +0000 Manifest next update: Wed 17 Dec 2025 17:01:20 +0000 Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=) 2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: 2+J6wwos1y2p4JuEquriW+4W2FsIYetb+1zXgAY8e1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:f8:ef:4c:a3:a3:08:38:02:06:fd:7f:89:32:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Validity Not Before: Dec 16 17:01:20 2025 GMT Not After : Dec 17 17:01:20 2025 GMT Subject: CN=bb5410e6f40988d864cf6b68e13f5fe1705b28bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:67:a8:3f:ee:d0:03:32:7b:9e:ca:2c:fa: 2a:38:a2:7b:cf:54:5b:8f:4d:be:fe:35:17:64:c3: ab:65:12:49:aa:8a:6c:61:5b:17:11:79:8b:bd:1d: b9:26:db:1f:6e:df:d3:8b:b6:ff:1a:bb:72:eb:3e: fb:98:6f:a8:86:4b:63:44:58:eb:32:0d:3f:f6:b5: 2b:59:6d:83:6b:72:fb:fb:30:0b:c1:e0:e2:73:f8: 35:d5:a6:89:1b:59:bc:ea:b8:91:83:09:e0:25:d2: 01:30:77:f2:0a:04:7a:bf:b1:50:39:ef:72:b4:46: e5:6a:c2:5c:62:0c:65:03:97:c1:66:9e:20:d1:1d: 53:c0:f4:15:6c:d3:22:45:9b:1c:0e:7c:fe:f4:b2: 26:1c:03:39:ad:d1:dc:91:d0:69:8a:5c:23:9a:32: 3b:37:d6:1f:70:f4:c9:1e:3e:bb:15:cc:f2:19:4a: ec:9f:b4:73:5a:a6:2e:e0:d6:63:ec:6e:6b:7a:79: f3:54:bf:b1:12:d1:7e:21:55:2d:36:77:75:af:9c: 3f:da:07:2a:4a:c3:97:39:36:eb:78:5b:00:48:7a: 26:9b:fe:35:78:7e:a9:7f:dc:75:31:06:7f:3b:57: ac:27:ca:a3:9e:27:4b:b8:b3:b4:05:14:0f:97:20: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:54:10:E6:F4:09:88:D8:64:CF:6B:68:E1:3F:5F:E1:70:5B:28:BC X509v3 Authority Key Identifier: keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4f:8f:6b:3c:45:b3:2d:a4:4c:aa:81:74:c5:f1:44:9e:7c: 7b:4d:a9:b4:e4:f2:fa:27:c4:35:68:1b:11:f5:60:83:25:51: 43:ab:e9:b7:8b:3f:62:79:48:31:fa:29:51:1f:0e:63:f5:90: c3:66:51:60:4c:79:fa:42:5e:49:de:67:4d:a6:b0:02:de:66: d0:51:72:c4:25:c6:7c:76:00:f7:1f:28:24:58:9f:ca:9f:e4: 93:fa:98:65:b8:34:db:cd:1d:fd:bd:36:6a:40:1a:3e:a0:4d: 3f:77:d3:86:27:b8:66:00:8e:83:f6:9e:1f:ff:db:fe:c0:ce: d3:c6:89:cd:44:6d:7a:c0:69:77:30:e7:a9:fc:ef:02:da:97: bc:75:8d:10:b4:e9:6a:23:b0:d2:83:f1:f7:45:29:e9:b6:ea: 0a:f7:ac:48:b8:49:c9:23:16:e3:ed:35:16:14:88:6d:c2:e1: 18:78:ae:93:82:e8:8b:e7:89:da:91:d3:e8:91:d9:27:0a:6e: b0:91:69:e1:ff:9c:52:57:2e:c2:c0:ef:8f:82:62:fd:5a:0f: 46:01:99:5c:c3:17:d6:9f:39:53:f1:4f:30:55:b0:ff:6e:0c: 8e:60:60:85:5c:83:07:a8:65:19:49:5e:8c:fd:c7:0a:01:64: c2:f4:eb:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG/jvTKOjCDgCBv1/iTJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi OTEzOTgwHhcNMjUxMjE2MTcwMTIwWhcNMjUxMjE3MTcwMTIwWjAzMTEwLwYDVQQD EyhiYjU0MTBlNmY0MDk4OGQ4NjRjZjZiNjhlMTNmNWZlMTcwNWIyOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVhnqD/u0AMye57KLPoqOKJ7z1Rb j02+/jUXZMOrZRJJqopsYVsXEXmLvR25Jtsfbt/Ti7b/Grty6z77mG+ohktjRFjr Mg0/9rUrWW2Da3L7+zALweDic/g11aaJG1m86riRgwngJdIBMHfyCgR6v7FQOe9y tEblasJcYgxlA5fBZp4g0R1TwPQVbNMiRZscDnz+9LImHAM5rdHckdBpilwjmjI7 N9YfcPTJHj67FczyGUrsn7RzWqYu4NZj7G5rennzVL+xEtF+IVUtNnd1r5w/2gcq SsOXOTbreFsASHomm/41eH6pf9x1MQZ/O1esJ8qjnidLuLO0BRQPlyAt0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtUEOb0CYjYZM9raOE/X+FwWyi8MB8GA1UdIwQY MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAak+PazxF sy2kTKqBdMXxRJ58e02ptOTy+ifENWgbEfVggyVRQ6vpt4s/YnlIMfopUR8OY/WQ w2ZRYEx5+kJeSd5nTaawAt5m0FFyxCXGfHYA9x8oJFifyp/kk/qYZbg0280d/b02 akAaPqBNP3fThie4ZgCOg/aeH//b/sDO08aJzURtesBpdzDnqfzvAtqXvHWNELTp aiOw0oPx90Up6bbqCvesSLhJySMW4+01FhSIbcLhGHiuk4Loi+eJ2pHT6JHZJwpu sJFp4f+cUlcuwsDvj4Ji/VoPRgGZXMMX1p85U/FPMFWw/24MjmBghVyDB6hlGUle jP3HCgFkwvTrdg== -----END CERTIFICATE-----Generated at Tue Dec 16 22:30:49 2025 by rpki-client