This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json) Hash identifier: cMRPvGbzj7VoLLw7tNtPk33kg0+Xqe7wiQrAZoP50CA= Subject key identifier: 87:19:8B:91:6A:3F:58:0D:5D:15:40:68:C5:2A:0B:48:11:B6:12:64 Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64 Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64 Certificate serial: 019B4EBAEA7720F0D94A43D86C1A65B698CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft Manifest number: 1694 Signing time: Wed 24 Dec 2025 05:00:31 +0000 Manifest this update: Wed 24 Dec 2025 05:00:31 +0000 Manifest next update: Thu 25 Dec 2025 05:00:31 +0000 Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=) 2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: neC5vmnUoxxJyxp/tvWJDNyhPyzxJ3IpVYk+LcAHBP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:ba:ea:77:20:f0:d9:4a:43:d8:6c:1a:65:b6:98:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64 Validity Not Before: Dec 24 05:00:31 2025 GMT Not After : Dec 25 05:00:31 2025 GMT Subject: CN=87198b916a3f580d5d154068c52a0b4811b61264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:ca:92:eb:ca:c7:36:ff:25:a3:e8:9d:7d: 62:a1:c2:54:87:0f:4c:7b:cb:5b:8a:3f:18:b0:79: 47:e4:d1:cb:96:5e:b8:d7:42:8b:1d:53:22:a9:83: 3d:c8:41:95:b8:be:83:29:69:64:77:73:0c:f2:27: f7:64:75:80:78:a2:a5:60:9a:09:f7:cb:69:5d:3c: 07:49:7b:52:20:55:18:67:67:16:31:a9:44:33:1d: 03:de:a3:cc:32:5a:4a:5e:25:f6:18:03:46:59:3d: 0d:b3:77:4f:40:e3:4a:a6:b4:ac:16:05:5d:13:e1: a6:6f:b6:6a:f8:0d:1e:15:52:f2:cd:1f:85:26:5f: a8:1f:6e:8a:b3:e9:39:36:c9:d2:94:0b:f3:18:0c: a1:0d:1f:3b:10:a0:e7:76:71:93:a5:9f:4b:91:b0: 26:d0:0b:1e:af:80:5a:d1:34:a8:67:08:98:95:23: fd:8e:89:08:ab:70:cb:b3:59:82:e7:b1:d7:89:bf: 0d:1a:1e:29:af:e5:0f:23:fc:df:b1:31:35:7e:f6: a7:f5:08:b7:f9:4c:fa:20:d0:84:20:19:f6:fd:ba: 3e:e8:44:9c:12:fb:51:52:65:1f:81:54:b4:6a:0a: a3:01:21:11:6c:75:2c:4c:9a:04:98:d7:a4:f0:eb: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:19:8B:91:6A:3F:58:0D:5D:15:40:68:C5:2A:0B:48:11:B6:12:64 X509v3 Authority Key Identifier: keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:21:a8:dd:a2:89:c1:9d:a3:f1:57:94:03:f3:a9:a1:31:11: 95:14:94:cd:4e:a5:c6:5b:e7:48:f2:d9:45:22:4f:08:95:5b: a6:7d:27:f5:d8:63:00:19:ea:7c:8e:bc:d7:88:68:82:56:b4: 36:2a:20:c3:4d:a0:05:1c:03:8b:78:1f:8b:a2:ee:96:ce:0b: 2a:fb:25:e1:4b:56:c6:c4:c7:dd:5b:61:f9:00:01:51:fe:1b: 88:4a:27:c9:31:2a:5e:95:fd:80:d4:a5:e0:3d:1f:05:88:08: 75:3c:31:ee:a5:6b:18:20:40:9d:68:00:1c:ee:8a:4e:d1:b5: 01:ee:ce:1c:2a:f2:da:1c:7e:ba:ff:d6:87:e8:92:0d:eb:e5: 35:84:2a:62:94:03:5f:0e:40:49:4f:ff:2d:42:e1:69:c4:88: 24:9c:b8:8b:8d:af:3f:f6:31:bc:81:3a:b4:96:12:7a:55:17: cb:ad:bc:e8:c5:82:bc:ee:a7:af:81:52:94:10:36:37:1b:27: c2:40:82:ac:29:ce:09:dc:82:0c:ab:8e:f8:92:a3:f4:ac:c1: ee:84:96:c5:66:81:14:e3:b2:cc:65:0b:4e:63:90:ab:4f:58: 0b:e3:22:46:50:24:21:3d:ad:9b:2d:ff:a6:bf:94:f9:0f:2c: 09:9f:4c:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuup3IPDZSkPYbBpltpjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWUxYTY3NzI1ZWI0YTc2NGE1ODdiYzM3MDc5ZGViYmU4 MWZiNjQwHhcNMjUxMjI0MDUwMDMxWhcNMjUxMjI1MDUwMDMxWjAzMTEwLwYDVQQD Eyg4NzE5OGI5MTZhM2Y1ODBkNWQxNTQwNjhjNTJhMGI0ODExYjYxMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeXKkuvKxzb/JaPonX1iocJUhw9M e8tbij8YsHlH5NHLll6410KLHVMiqYM9yEGVuL6DKWlkd3MM8if3ZHWAeKKlYJoJ 98tpXTwHSXtSIFUYZ2cWMalEMx0D3qPMMlpKXiX2GANGWT0Ns3dPQONKprSsFgVd E+Gmb7Zq+A0eFVLyzR+FJl+oH26Ks+k5NsnSlAvzGAyhDR87EKDndnGTpZ9LkbAm 0Aser4Ba0TSoZwiYlSP9jokIq3DLs1mC57HXib8NGh4pr+UPI/zfsTE1fvan9Qi3 +Uz6INCEIBn2/bo+6EScEvtRUmUfgVS0agqjASERbHUsTJoEmNek8OvR+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcZi5FqP1gNXRVAaMUqC0gRthJkMB8GA1UdIwQY MBaAFFHuGmdyXrSnZKWHvDcHneu+gftkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5Mjkt M2Q3ZjkyYzIzYThiLzEvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5MjktM2Q3ZjkyYzIzYThi LzEvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSGo3aKJ wZ2j8VeUA/OpoTERlRSUzU6lxlvnSPLZRSJPCJVbpn0n9dhjABnqfI6814hogla0 Niogw02gBRwDi3gfi6Luls4LKvsl4UtWxsTH3Vth+QABUf4biEonyTEqXpX9gNSl 4D0fBYgIdTwx7qVrGCBAnWgAHO6KTtG1Ae7OHCry2hx+uv/Wh+iSDevlNYQqYpQD Xw5ASU//LULhacSIJJy4i42vP/YxvIE6tJYSelUXy6286MWCvO6nr4FSlBA2Nxsn wkCCrCnOCdyCDKuO+JKj9KzB7oSWxWaBFOOyzGULTmOQq09YC+MiRlAkIT2tmy3/ pr+U+Q8sCZ9MzA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:25:54 2025 by rpki-client