This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft File: UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json) Hash identifier: Zuo2qmFfEfu1g3/oIecPxf7ZY4Nc6i7BVQVIQmeybSs= Subject key identifier: B7:B7:BA:AE:09:AA:24:19:B4:36:28:44:38:05:CF:CD:B3:4F:24:50 Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71 Certificate issuer: /CN=51f2045386969d11c741c3b545e02a00c1252f71 Certificate serial: 019B2D794FFE03FF187C5747CCA75F4F2F79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft Manifest number: 0E63 Signing time: Wed 17 Dec 2025 18:01:23 +0000 Manifest this update: Wed 17 Dec 2025 18:01:23 +0000 Manifest next update: Thu 18 Dec 2025 18:01:23 +0000 Files and hashes: 1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=) 2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: Q/Q+BDZiVxok/C8Ux14EcUG2o3xhgs4FUIFY3MJRbJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:4f:fe:03:ff:18:7c:57:47:cc:a7:5f:4f:2f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71 Validity Not Before: Dec 17 18:01:23 2025 GMT Not After : Dec 18 18:01:23 2025 GMT Subject: CN=b7b7baae09aa2419b43628443805cfcdb34f2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:b8:99:7f:4c:7d:52:62:4b:0d:ea:2c:d8: bd:eb:9e:5c:d3:c9:4a:24:29:8e:a6:bf:d3:a0:74: 54:f1:bf:32:98:9a:ac:b4:f6:ba:a1:f7:8e:fe:c8: 64:ea:fe:b2:6f:82:47:fb:45:d9:82:5d:71:bf:59: 7e:63:17:7c:e5:b3:de:57:13:5d:3c:06:26:92:9f: 27:cd:c5:12:9d:4a:51:60:63:f6:2a:21:52:1b:2c: 34:c7:d3:a6:1d:4a:62:5a:5a:39:7a:66:c0:1e:dd: 86:61:8b:83:1a:4a:38:14:9d:2e:55:35:45:96:78: d3:34:42:07:c4:74:bd:32:53:e5:25:02:37:b2:c0: 47:8c:07:a5:47:c0:81:4e:1e:34:52:65:18:93:18: 61:f0:36:3c:43:22:24:e5:cc:20:fd:0c:fc:dc:42: 22:9e:ea:49:11:1c:9e:39:14:5e:66:3b:48:6b:34: 5d:aa:c6:43:7d:b0:c4:a6:9e:30:35:77:89:5a:7a: fd:a2:dc:e7:66:90:0b:f1:06:b0:0a:e7:52:26:bb: 80:c1:ea:8c:0c:24:1a:5a:a7:f4:a8:8c:68:88:b6: 8d:68:95:0e:60:fa:fd:a8:50:f8:37:94:05:94:ad: 91:37:66:06:37:6d:65:1f:56:45:5a:67:9b:92:01: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B7:BA:AE:09:AA:24:19:B4:36:28:44:38:05:CF:CD:B3:4F:24:50 X509v3 Authority Key Identifier: keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:db:f1:15:04:e4:82:08:f9:9b:2d:28:27:fd:b3:a0:24:8f: 9f:8d:56:7e:b9:15:83:22:ed:48:b2:d7:32:85:90:0a:a8:60: 17:15:3d:ea:1c:8e:49:6b:f6:04:ba:16:e6:77:23:c9:47:d5: 77:44:4a:e7:12:3c:4d:74:fa:f1:ac:b2:6b:bf:c1:91:08:a4: 6f:68:41:1d:13:db:04:53:36:20:d3:4f:36:f3:e4:8e:1a:7f: 2c:ce:e3:7b:44:00:b5:6a:5e:7c:fe:5c:28:db:ef:71:13:46: b6:a6:50:ad:53:01:09:71:da:07:20:9a:38:fe:f8:3d:d4:f3: 1f:08:6d:4e:d5:92:33:92:f7:db:2d:04:bb:10:9e:be:68:6d: 9a:a4:5c:a7:50:b1:d0:7c:3d:f8:19:38:e0:05:d7:89:92:15: 66:6f:75:54:0f:9b:b9:e5:5f:24:ff:42:19:a1:7b:f1:b3:6e: 06:c4:09:08:0f:39:b0:bb:56:4e:9c:2d:43:6c:61:1e:6c:dc: 22:f3:5b:a1:9e:24:a4:e9:2a:17:52:29:9b:23:17:64:91:84: 43:97:c1:92:59:bb:98:d3:cc:d4:8f:93:a5:e6:eb:e4:5f:7d: 99:09:ae:3a:7b:74:39:0d:81:91:f6:17:28:85:25:9e:af:1f: 0e:db:93:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteU/+A/8YfFdHzKdfTy95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjIwNDUzODY5NjlkMTFjNzQxYzNiNTQ1ZTAyYTAwYzEy NTJmNzEwHhcNMjUxMjE3MTgwMTIzWhcNMjUxMjE4MTgwMTIzWjAzMTEwLwYDVQQD EyhiN2I3YmFhZTA5YWEyNDE5YjQzNjI4NDQzODA1Y2ZjZGIzNGYyNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozy4mX9MfVJiSw3qLNi9655c08lK JCmOpr/ToHRU8b8ymJqstPa6ofeO/shk6v6yb4JH+0XZgl1xv1l+Yxd85bPeVxNd PAYmkp8nzcUSnUpRYGP2KiFSGyw0x9OmHUpiWlo5embAHt2GYYuDGko4FJ0uVTVF lnjTNEIHxHS9MlPlJQI3ssBHjAelR8CBTh40UmUYkxhh8DY8QyIk5cwg/Qz83EIi nupJERyeORReZjtIazRdqsZDfbDEpp4wNXeJWnr9otznZpAL8QawCudSJruAweqM DCQaWqf0qIxoiLaNaJUOYPr9qFD4N5QFlK2RN2YGN21lH1ZFWmebkgG6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe3uq4JqiQZtDYoRDgFz82zTyRQMB8GA1UdIwQY MBaAFFHyBFOGlp0Rx0HDtUXgKgDBJS9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEt M2I4MmU0M2NmMjkzLzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEtM2I4MmU0M2NmMjkz LzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9vxFQTk ggj5my0oJ/2zoCSPn41WfrkVgyLtSLLXMoWQCqhgFxU96hyOSWv2BLoW5ncjyUfV d0RK5xI8TXT68ayya7/BkQikb2hBHRPbBFM2INNPNvPkjhp/LM7je0QAtWpefP5c KNvvcRNGtqZQrVMBCXHaByCaOP74PdTzHwhtTtWSM5L32y0EuxCevmhtmqRcp1Cx 0Hw9+Bk44AXXiZIVZm91VA+bueVfJP9CGaF78bNuBsQJCA85sLtWTpwtQ2xhHmzc IvNboZ4kpOkqF1IpmyMXZJGEQ5fBklm7mNPM1I+Tpebr5F99mQmuOnt0OQ2BkfYX KIUlnq8fDtuTvQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:12:39 2025 by rpki-client