This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json) Hash identifier: HB6X863pMjeZNVqZgIIClO97h5xjNYjsu58rvgwtWZE= Subject key identifier: 9A:7B:5A:12:DA:04:67:13:0E:BD:74:B2:EE:7A:2E:64:EC:EE:E0:0A Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Certificate serial: 019B4F5FC707C25B02E316C3F1DFD63F9C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft Manifest number: 0EF3 Signing time: Wed 24 Dec 2025 08:00:35 +0000 Manifest this update: Wed 24 Dec 2025 08:00:35 +0000 Manifest next update: Thu 25 Dec 2025 08:00:35 +0000 Files and hashes: 1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=) 2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: 2/TpjE9UN+RgBg4T8lgqIjeKDCWkkiLJAKjsZNuotFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:c7:07:c2:5b:02:e3:16:c3:f1:df:d6:3f:9c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Validity Not Before: Dec 24 08:00:35 2025 GMT Not After : Dec 25 08:00:35 2025 GMT Subject: CN=9a7b5a12da0467130ebd74b2ee7a2e64eceee00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:f6:7b:b0:eb:27:4e:61:d1:2e:68:9c:9b: 9e:4d:7f:f4:e3:43:16:de:87:90:9e:2d:c2:be:2e: a2:6f:42:4e:77:38:7c:bc:f9:05:f3:18:85:f2:c4: 38:a3:fd:1f:6b:6b:8b:3a:49:74:49:e9:be:3d:cd: 5a:f7:19:95:41:c5:67:d1:8f:7d:01:40:bd:19:1f: 5d:7c:a6:3e:ad:45:4e:4d:85:05:f2:5b:95:ff:86: b8:b9:60:47:98:73:04:4d:2b:f1:40:ab:76:79:ef: 37:af:4a:ea:0b:5c:7a:c5:b5:d7:a5:f8:cf:58:5c: 33:1d:84:7c:b5:7e:64:c4:08:45:f9:fc:2c:d5:6e: 74:c3:76:9e:f2:c8:e5:f4:20:5c:a1:c7:dd:e6:19: 66:00:fa:e3:d0:09:1e:86:75:9a:14:01:c8:f5:28: b6:7a:5e:02:42:e5:37:54:55:df:6f:02:4d:c8:60: 7e:b2:ab:f8:0b:e4:d9:d0:d0:5e:6b:71:70:0c:b0: 1b:d7:23:51:05:de:bd:f1:1d:7f:55:d5:43:32:12: 71:35:2d:fd:77:f2:5c:52:e4:3e:b1:22:3d:7d:56: 52:13:33:fe:ca:19:5b:bd:69:3c:f5:cf:5c:d5:c2: 69:51:1a:d9:61:9f:86:05:41:87:c2:e3:1a:21:4f: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:5A:12:DA:04:67:13:0E:BD:74:B2:EE:7A:2E:64:EC:EE:E0:0A X509v3 Authority Key Identifier: keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:08:8c:59:ce:56:dd:44:5c:53:1e:96:fd:db:04:05:ba:d8: f3:2c:53:3e:f3:9b:97:51:fe:42:1c:96:12:82:1d:80:b1:b3: 91:09:16:6b:86:39:c7:1b:08:90:0d:42:86:2d:67:12:51:9b: b8:81:36:c5:8b:dd:91:af:d2:b7:87:67:8a:73:95:e3:a1:88: ee:af:bc:b4:0e:da:85:f0:b4:c4:b9:5a:92:7b:91:de:3f:27: d3:8d:f2:41:b1:1e:54:59:4e:a1:60:46:3b:23:27:61:6b:8f: 84:73:06:7c:76:5f:eb:50:c6:26:78:1f:da:9a:c6:19:51:9f: d5:de:70:0d:14:22:cd:d8:22:ba:3c:ba:2b:09:f8:0e:49:9b: f5:af:76:b6:1b:cf:20:8f:63:f7:e2:63:1c:57:42:ae:fc:c4: ce:9d:72:12:f7:ad:6b:5a:0f:df:b1:af:80:cf:82:2b:f3:82: ab:d8:82:75:76:91:41:a0:03:0b:32:08:1b:ee:9e:57:92:f8: 9f:46:30:8c:58:96:5f:b1:81:09:c9:dd:dc:f5:a0:42:07:e4: 02:6a:e1:5c:16:14:b7:3c:cd:09:45:bf:c8:4f:e6:e1:dc:46: 14:f5:1f:8a:1b:69:2b:54:7a:6b:9a:1b:10:95:4e:e5:cb:53: 79:dc:61:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX8cHwlsC4xbD8d/WP5yTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWFkMDhmMzZjZmJjMDAwNTNhNWVlM2Q1YWJiN2EzMTE3 YzNmOGEwHhcNMjUxMjI0MDgwMDM1WhcNMjUxMjI1MDgwMDM1WjAzMTEwLwYDVQQD Eyg5YTdiNWExMmRhMDQ2NzEzMGViZDc0YjJlZTdhMmU2NGVjZWVlMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYH2e7DrJ05h0S5onJueTX/040MW 3oeQni3Cvi6ib0JOdzh8vPkF8xiF8sQ4o/0fa2uLOkl0Sem+Pc1a9xmVQcVn0Y99 AUC9GR9dfKY+rUVOTYUF8luV/4a4uWBHmHMETSvxQKt2ee83r0rqC1x6xbXXpfjP WFwzHYR8tX5kxAhF+fws1W50w3ae8sjl9CBcocfd5hlmAPrj0AkehnWaFAHI9Si2 el4CQuU3VFXfbwJNyGB+sqv4C+TZ0NBea3FwDLAb1yNRBd698R1/VdVDMhJxNS39 d/JcUuQ+sSI9fVZSEzP+yhlbvWk89c9c1cJpURrZYZ+GBUGHwuMaIU/f7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp7WhLaBGcTDr10su56LmTs7uAKMB8GA1UdIwQY MBaAFLqq0I82z7wABTpe49Wrt6MRfD+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAt M2Q0OGRhOWIwNmEyLzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAtM2Q0OGRhOWIwNmEy LzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagiMWc5W 3URcUx6W/dsEBbrY8yxTPvObl1H+QhyWEoIdgLGzkQkWa4Y5xxsIkA1Chi1nElGb uIE2xYvdka/St4dninOV46GI7q+8tA7ahfC0xLlaknuR3j8n043yQbEeVFlOoWBG OyMnYWuPhHMGfHZf61DGJngf2prGGVGf1d5wDRQizdgiujy6Kwn4Dkmb9a92thvP II9j9+JjHFdCrvzEzp1yEveta1oP37GvgM+CK/OCq9iCdXaRQaADCzIIG+6eV5L4 n0YwjFiWX7GBCcnd3PWgQgfkAmrhXBYUtzzNCUW/yE/m4dxGFPUfihtpK1R6a5ob EJVO5ctTedxh0A== -----END CERTIFICATE-----Generated at Wed Dec 24 13:27:23 2025 by rpki-client