This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft File: uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json) Hash identifier: 7bwkZzJm/YEM7zHOR3JVBVOIbxpTnTCGXcZoqrF4INk= Subject key identifier: 63:21:C6:00:68:DC:43:05:5C:5B:E3:8F:8F:D7:F7:91:85:BC:4B:01 Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245 Certificate serial: 019B3D59B5E28C1294E661153D24609CE191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft Manifest number: 0EBE Signing time: Sat 20 Dec 2025 20:00:47 +0000 Manifest this update: Sat 20 Dec 2025 20:00:47 +0000 Manifest next update: Sun 21 Dec 2025 20:00:47 +0000 Files and hashes: 1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=) 2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=) 3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=) 4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: 1kv/HMTan0IExsc9z13XZ9wVqoMHeCs/nJiIN8+Ei3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b5:e2:8c:12:94:e6:61:15:3d:24:60:9c:e1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245 Validity Not Before: Dec 20 20:00:47 2025 GMT Not After : Dec 21 20:00:47 2025 GMT Subject: CN=6321c60068dc43055c5be38f8fd7f79185bc4b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:f1:ff:2b:7c:69:b0:53:f8:4d:20:27:24: a8:0a:59:2e:f4:fc:d8:f7:d6:2e:a0:01:6f:ce:b9: 68:25:b8:ab:12:f9:ed:e2:08:36:6b:84:a9:64:aa: 02:00:db:e2:bf:1b:c7:b7:79:7b:3c:b2:5b:75:a9: 3c:7f:76:a8:3c:e5:f5:b7:1e:bc:d4:2d:69:07:96: 6f:37:5b:f1:6d:ce:b0:95:c7:59:25:aa:a5:26:e5: ba:34:ce:7e:09:db:27:5e:a3:5a:78:c6:65:2c:70: 49:bd:f9:a9:28:fb:05:40:b6:97:99:48:ec:41:a1: da:33:55:56:0f:b1:8f:72:cb:e3:02:20:c8:e5:1b: aa:85:7c:1e:35:42:b9:98:d2:c2:ae:73:53:91:f6: da:66:84:59:69:7f:c2:61:67:d3:4e:b2:63:4f:44: ed:0c:1b:b5:79:43:ad:38:5d:c9:30:89:e8:c9:b3: f4:1e:a4:ee:e4:68:a2:84:ad:5f:f9:40:1e:e1:09: 71:72:fd:11:9b:7c:05:e9:3c:f1:79:31:67:75:c5: b5:3c:55:17:13:cb:ee:e2:84:88:ba:00:32:c3:4c: 0a:0f:1b:df:fc:2b:e6:4c:50:01:c0:a3:66:c3:42: 33:d8:c2:2b:fd:44:47:af:59:f5:a1:37:ff:2b:bb: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:21:C6:00:68:DC:43:05:5C:5B:E3:8F:8F:D7:F7:91:85:BC:4B:01 X509v3 Authority Key Identifier: keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ce:a2:83:4f:c0:58:7f:de:1d:2f:51:20:20:2e:51:4d:1a: 7b:53:75:ca:c7:b1:64:65:25:37:da:be:f2:68:3f:a2:c0:2f: 98:ab:51:9b:21:7f:73:05:17:fd:de:9f:fa:65:66:88:af:b3: 5d:a3:79:43:c9:cc:e6:03:e8:b6:96:c9:52:f7:cf:c8:34:68: 8d:64:1f:cc:6d:56:08:01:18:b4:48:2f:5f:93:82:e5:3e:f7: 3f:5e:d7:00:95:b4:64:1b:e2:bc:83:a7:b0:c6:16:38:07:1d: 54:3a:58:01:e8:8a:5e:88:f5:8f:8e:59:ce:70:d8:27:d8:1a: c8:4d:ec:24:2a:f0:df:96:97:c1:37:73:d8:0f:34:00:5b:43: 8e:58:19:7c:f7:f2:64:a7:9c:f4:19:ea:06:1c:1c:be:b7:c8: fb:1f:82:04:22:42:b5:76:a4:38:aa:e1:6f:29:2a:c9:0b:43: 22:cd:f1:ad:f3:d8:f5:c1:19:c9:f2:de:d2:4d:52:d2:86:81: 57:3c:38:8f:13:f6:63:33:ee:c0:a3:d8:57:75:13:fb:02:b1: d5:fa:48:6b:21:ae:f4:c3:90:ae:0e:83:6b:64:a9:c3:b8:ea: ae:e3:65:af:1b:08:7c:dc:6c:16:ec:82:a3:f7:00:e3:cc:06: 7d:14:c7:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbXijBKU5mEVPSRgnOGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDViM2QzNzlkMjExNjJlMmI1MjJjNDM4MDFmYjk2MDM5 ODgyNDUwHhcNMjUxMjIwMjAwMDQ3WhcNMjUxMjIxMjAwMDQ3WjAzMTEwLwYDVQQD Eyg2MzIxYzYwMDY4ZGM0MzA1NWM1YmUzOGY4ZmQ3Zjc5MTg1YmM0YjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YPx/yt8abBT+E0gJySoClku9PzY 99YuoAFvzrloJbirEvnt4gg2a4SpZKoCANvivxvHt3l7PLJbdak8f3aoPOX1tx68 1C1pB5ZvN1vxbc6wlcdZJaqlJuW6NM5+CdsnXqNaeMZlLHBJvfmpKPsFQLaXmUjs QaHaM1VWD7GPcsvjAiDI5RuqhXweNUK5mNLCrnNTkfbaZoRZaX/CYWfTTrJjT0Tt DBu1eUOtOF3JMInoybP0HqTu5GiihK1f+UAe4Qlxcv0Rm3wF6TzxeTFndcW1PFUX E8vu4oSIugAyw0wKDxvf/CvmTFABwKNmw0Iz2MIr/URHr1n1oTf/K7t2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMhxgBo3EMFXFvjj4/X95GFvEsBMB8GA1UdIwQY MBaAFLjVs9N50hFi4rUixDgB+5YDmIJFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMt YjNlOTI1NWQyYjNlLzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMtYjNlOTI1NWQyYjNl LzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc6ig0/A WH/eHS9RICAuUU0ae1N1ysexZGUlN9q+8mg/osAvmKtRmyF/cwUX/d6f+mVmiK+z XaN5Q8nM5gPotpbJUvfPyDRojWQfzG1WCAEYtEgvX5OC5T73P17XAJW0ZBvivIOn sMYWOAcdVDpYAeiKXoj1j45ZznDYJ9gayE3sJCrw35aXwTdz2A80AFtDjlgZfPfy ZKec9BnqBhwcvrfI+x+CBCJCtXakOKrhbykqyQtDIs3xrfPY9cEZyfLe0k1S0oaB Vzw4jxP2YzPuwKPYV3UT+wKx1fpIayGu9MOQrg6Da2Spw7jqruNlrxsIfNxsFuyC o/cA48wGfRTH8g== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:25 2025 by rpki-client