This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json) Hash identifier: a8cDzfcXhHXVpYT9uzkWndR0VL5t24vKZKIKD0GU++A= Subject key identifier: 8B:81:4A:0C:AE:CE:50:2C:69:93:12:F4:08:B1:13:33:E8:58:7C:FD Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2 Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2 Certificate serial: 019B330CD08C39B58846FE7064959027C7E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft Manifest number: 14FC Signing time: Thu 18 Dec 2025 20:00:36 +0000 Manifest this update: Thu 18 Dec 2025 20:00:36 +0000 Manifest next update: Fri 19 Dec 2025 20:00:36 +0000 Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: /FjeRax1CrRdNSeQdc2/4IXeLaVN/EnfjL2yCr3Mj4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:d0:8c:39:b5:88:46:fe:70:64:95:90:27:c7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2 Validity Not Before: Dec 18 20:00:36 2025 GMT Not After : Dec 19 20:00:36 2025 GMT Subject: CN=8b814a0caece502c699312f408b11333e8587cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:b8:fb:e8:54:d7:59:42:3c:16:5c:cf:b8: 52:8f:f3:eb:b4:46:35:b5:c0:a1:f2:90:c1:45:5c: 40:6f:83:1f:ef:52:ef:f9:99:4b:b3:0a:e2:5c:5a: fa:5a:21:4e:83:8e:f1:d4:a0:f0:fd:48:6a:bb:58: 75:77:ef:26:09:98:64:51:8b:7a:be:24:1c:04:bc: 29:89:7e:96:68:e7:ea:aa:09:ce:93:43:29:27:b4: ac:b4:31:ac:cd:d8:81:34:89:d5:ce:c1:b9:fd:61: 73:6c:c7:b7:de:dd:0e:93:54:bb:75:6c:1d:62:4f: ec:f5:06:cc:f1:81:dc:b8:a7:ed:56:da:ba:2f:6b: ec:74:fc:7f:90:d3:8e:f8:8a:53:89:7e:cf:bf:dd: 87:86:41:e6:8c:24:89:89:f5:bb:2c:69:1d:2c:df: 30:e7:03:92:07:cd:da:d5:48:5a:62:21:92:de:52: 22:a7:a6:01:1d:7c:db:46:93:3b:d5:2e:59:35:61: 84:60:f1:ab:b6:cd:b6:c6:b4:a4:e0:0f:15:d6:5a: ae:b8:2f:26:f5:42:3b:eb:6e:dd:62:b4:86:b0:bf: e4:58:d0:8f:a9:ff:11:21:74:9d:99:08:a2:56:54: c1:61:ef:23:a4:1d:18:cb:02:e1:d7:0f:97:c5:eb: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:81:4A:0C:AE:CE:50:2C:69:93:12:F4:08:B1:13:33:E8:58:7C:FD X509v3 Authority Key Identifier: keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f6:e3:a7:af:c0:cb:4e:73:7c:e1:d4:38:d8:67:aa:2e:f0: 28:43:80:b9:fd:06:51:5f:4f:be:78:42:38:5e:17:a7:cf:fb: 73:c1:38:2e:13:56:02:1e:46:ee:e9:07:4e:54:ac:11:fe:65: 41:9a:fd:c8:50:ab:df:16:d8:a7:31:b6:0e:8a:3d:86:67:d7: a4:7f:d2:dd:e1:0a:5f:78:c4:79:de:40:a3:4c:f7:80:de:97: 93:2c:10:66:08:8b:98:78:f6:06:e6:0b:3a:af:f9:85:db:1f: 76:92:f6:a6:32:bf:c4:39:15:e9:8e:41:7a:ba:26:e1:c6:4a: 60:db:da:d7:37:6d:02:c7:b1:e5:6d:a6:01:18:fa:d4:ef:7e: e1:95:cb:ab:ef:b4:fa:89:23:87:29:3d:89:d5:f8:b9:00:ff: 3b:3b:a6:f1:a9:ca:be:01:27:c2:ad:11:a3:dc:bc:3b:7a:58: aa:b3:8f:78:ba:80:9e:e1:57:4a:fa:9c:c7:71:d6:7e:f4:0f: 4e:ac:55:96:5b:9d:22:93:8e:a6:63:58:94:d5:84:aa:d3:3b: 0c:11:2e:89:90:33:3b:90:9a:3f:0c:dc:33:f5:52:a3:85:33: 22:78:48:cb:c1:d1:84:45:7d:6e:7e:75:a5:a2:f8:74:72:84: 85:6b:38:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDNCMObWIRv5wZJWQJ8fkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWVmZTk3Njc4N2MyODc4ZTI2OWQ4MDdjYWI5OGFkNzM2 ZDYxZTIwHhcNMjUxMjE4MjAwMDM2WhcNMjUxMjE5MjAwMDM2WjAzMTEwLwYDVQQD Eyg4YjgxNGEwY2FlY2U1MDJjNjk5MzEyZjQwOGIxMTMzM2U4NTg3Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJW4++hU11lCPBZcz7hSj/PrtEY1 tcCh8pDBRVxAb4Mf71Lv+ZlLswriXFr6WiFOg47x1KDw/Uhqu1h1d+8mCZhkUYt6 viQcBLwpiX6WaOfqqgnOk0MpJ7SstDGszdiBNInVzsG5/WFzbMe33t0Ok1S7dWwd Yk/s9QbM8YHcuKftVtq6L2vsdPx/kNOO+IpTiX7Pv92HhkHmjCSJifW7LGkdLN8w 5wOSB83a1UhaYiGS3lIip6YBHXzbRpM71S5ZNWGEYPGrts22xrSk4A8V1lquuC8m 9UI7627dYrSGsL/kWNCPqf8RIXSdmQiiVlTBYe8jpB0YywLh1w+XxeuL7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuBSgyuzlAsaZMS9AixEzPoWHz9MB8GA1UdIwQY MBaAFLmu/pdnh8KHjiadgHyrmK1zbWHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWIt MTRiZDcxMzU2ZGFhLzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWItMTRiZDcxMzU2ZGFh LzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPbjp6/A y05zfOHUONhnqi7wKEOAuf0GUV9PvnhCOF4Xp8/7c8E4LhNWAh5G7ukHTlSsEf5l QZr9yFCr3xbYpzG2Doo9hmfXpH/S3eEKX3jEed5Ao0z3gN6XkywQZgiLmHj2BuYL Oq/5hdsfdpL2pjK/xDkV6Y5Berom4cZKYNva1zdtAsex5W2mARj61O9+4ZXLq++0 +okjhyk9idX4uQD/Ozum8anKvgEnwq0Ro9y8O3pYqrOPeLqAnuFXSvqcx3HWfvQP TqxVlludIpOOpmNYlNWEqtM7DBEuiZAzO5CaPwzcM/VSo4UzInhIy8HRhEV9bn51 paL4dHKEhWs4ew== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:31 2025 by rpki-client