This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft File: UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json) Hash identifier: XhYX+uRh9jGOGnHKVW8+LYxP64pU1QpJYOyrtZvYzkU= Subject key identifier: 31:07:A7:08:E5:87:11:D3:1C:96:D1:D4:E3:AD:97:6A:B2:8D:B9:D6 Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83 Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483 Certificate serial: 019B39466AD372C3A68F6251C806DD10EFBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft Manifest number: 0FF0 Signing time: Sat 20 Dec 2025 01:01:14 +0000 Manifest this update: Sat 20 Dec 2025 01:01:14 +0000 Manifest next update: Sun 21 Dec 2025 01:01:14 +0000 Files and hashes: 1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=) 2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: yS2EmTBmzP4lR0BKML/vEn2BiH6yK718hgYBRZ/+0T8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:6a:d3:72:c3:a6:8f:62:51:c8:06:dd:10:ef:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483 Validity Not Before: Dec 20 01:01:14 2025 GMT Not After : Dec 21 01:01:14 2025 GMT Subject: CN=3107a708e58711d31c96d1d4e3ad976ab28db9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:cd:9f:70:b6:41:d3:80:ee:e5:43:06:31: 4e:a3:89:9e:16:bc:f4:1c:0f:c6:f9:b6:df:85:76: 43:f4:3e:65:19:60:e9:6d:18:17:55:a3:c9:01:81: a9:60:53:1c:73:9b:fd:73:a2:fc:b6:64:8b:cd:96: f8:dd:da:6e:41:bf:2e:a9:60:35:80:64:dc:1a:7e: 03:51:d9:c4:61:2d:a8:7a:82:02:56:84:94:ac:12: ab:2f:43:bb:6c:51:cc:e0:f2:5a:33:48:6e:2f:67: a9:5c:f0:c9:0d:b5:c5:74:ea:fd:cf:4c:e5:d4:fd: ed:ab:95:2d:b7:b7:6b:57:9d:d3:04:26:f0:88:60: 1d:87:a2:7b:08:c6:34:6e:93:0d:e6:ad:b5:c1:55: 4c:98:7f:dc:bc:0e:67:49:7b:69:07:c8:79:90:c5: 39:56:49:cf:af:71:61:83:09:f2:5a:4f:9a:76:b4: 56:2d:40:a1:59:d8:95:74:ac:46:41:5c:96:7b:13: ab:f3:3e:a6:d4:64:ce:71:1c:71:7f:d8:ba:41:5b: 23:1e:8e:d0:b9:7b:99:30:87:e0:0a:45:f2:0f:1f: 59:d0:16:5d:10:8b:e0:e1:78:8a:97:f4:e7:eb:20: 6f:c8:60:89:90:2f:03:82:b7:d5:1a:de:96:c9:75: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:07:A7:08:E5:87:11:D3:1C:96:D1:D4:E3:AD:97:6A:B2:8D:B9:D6 X509v3 Authority Key Identifier: keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e9:8c:4b:47:f6:b0:48:51:55:1a:86:47:f9:26:12:28:b9: d4:2d:e5:57:fa:c6:18:b2:f1:2b:c2:7c:7c:70:dd:db:8f:59: 51:f0:d5:ae:10:0a:e5:0b:e5:88:5a:3e:99:ad:cb:cf:4c:48: b2:d9:3c:41:df:a9:aa:51:9a:0d:6e:55:ad:1d:f8:b1:7e:0c: 1a:7f:f2:6d:5b:f3:95:de:82:c6:2f:2d:df:27:48:fe:ad:7c: ab:8d:fc:ba:f6:dc:4b:b5:1f:22:3a:5b:09:51:ca:95:6a:93: f2:07:b4:4f:f2:ae:a0:72:cf:21:fa:0a:be:28:b6:80:79:ef: d3:97:62:1c:c9:4b:47:b9:79:85:67:2f:77:c3:10:0d:56:01: 20:43:60:c4:29:e8:b7:df:c3:c9:df:0b:8f:47:3e:e5:cb:6b: d8:a2:20:26:48:ae:2d:95:d0:ba:85:2a:dd:b3:27:19:0f:ce: 94:4a:81:2f:df:71:16:4e:98:4e:9c:d2:8c:b9:54:1e:ee:ed: e1:04:fb:f8:76:c2:b0:fa:08:7b:c3:d1:16:45:6e:33:36:5e: b6:15:4e:48:1f:a6:07:b0:53:57:72:27:83:ae:85:8b:28:31: 28:ee:a4:83:31:dc:ed:f1:68:c2:2f:b5:48:ba:24:9d:3b:ad: c7:af:ff:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RmrTcsOmj2JRyAbdEO+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTMxYjRhZWNjNjViMzEyNWE3YjQ3YWM5MDkwOGIwYTUx Nzg0ODMwHhcNMjUxMjIwMDEwMTE0WhcNMjUxMjIxMDEwMTE0WjAzMTEwLwYDVQQD EygzMTA3YTcwOGU1ODcxMWQzMWM5NmQxZDRlM2FkOTc2YWIyOGRiOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp3Nn3C2QdOA7uVDBjFOo4meFrz0 HA/G+bbfhXZD9D5lGWDpbRgXVaPJAYGpYFMcc5v9c6L8tmSLzZb43dpuQb8uqWA1 gGTcGn4DUdnEYS2oeoICVoSUrBKrL0O7bFHM4PJaM0huL2epXPDJDbXFdOr9z0zl 1P3tq5Utt7drV53TBCbwiGAdh6J7CMY0bpMN5q21wVVMmH/cvA5nSXtpB8h5kMU5 VknPr3FhgwnyWk+adrRWLUChWdiVdKxGQVyWexOr8z6m1GTOcRxxf9i6QVsjHo7Q uXuZMIfgCkXyDx9Z0BZdEIvg4XiKl/Tn6yBvyGCJkC8DgrfVGt6WyXXEcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEHpwjlhxHTHJbR1OOtl2qyjbnWMB8GA1UdIwQY MBaAFFHjG0rsxlsxJae0eskJCLClF4SDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEt ZmQ0YjJhMmFlZmE1LzEvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NzQ0ODEtYzY0Zi00MjljLTk5NjEtZmQ0YjJhMmFlZmE1 LzEvVWVNYlN1ekdXekVscDdSNnlRa0lzS1VYaElNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhumMS0f2 sEhRVRqGR/kmEii51C3lV/rGGLLxK8J8fHDd249ZUfDVrhAK5QvliFo+ma3Lz0xI stk8Qd+pqlGaDW5VrR34sX4MGn/ybVvzld6Cxi8t3ydI/q18q438uvbcS7UfIjpb CVHKlWqT8ge0T/KuoHLPIfoKvii2gHnv05diHMlLR7l5hWcvd8MQDVYBIENgxCno t9/Dyd8Lj0c+5ctr2KIgJkiuLZXQuoUq3bMnGQ/OlEqBL99xFk6YTpzSjLlUHu7t 4QT7+HbCsPoIe8PRFkVuMzZethVOSB+mB7BTV3Ing66FiygxKO6kgzHc7fFowi+1 SLoknTutx6//2g== -----END CERTIFICATE-----Generated at Sat Dec 20 10:21:36 2025 by rpki-client