This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json) Hash identifier: 85jrKy5pofCj4oh0rqXoodl/i43AsNYAMAUgYcbUdaY= Subject key identifier: FA:00:9C:5F:86:C3:D0:57:27:EF:30:68:6E:46:B2:0B:6D:4E:C7:AC Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Certificate serial: 019B3C1009DAEB9F8BB8F43E7E79BF406D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft Manifest number: 0A68 Signing time: Sat 20 Dec 2025 14:00:42 +0000 Manifest this update: Sat 20 Dec 2025 14:00:42 +0000 Manifest next update: Sun 21 Dec 2025 14:00:42 +0000 Files and hashes: 1: DYFmv5SEYYlddrISWWXVdY1hSCw.roa (hash: TKf7tOlhVLq0cOqQ0nNkYPFgdP68RF3GWaqOQkMnAHw=) 2: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: x8j9hFWWL0c0TEBQzz4fJ8GDkBR6rTVRM3CLOCJExqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:09:da:eb:9f:8b:b8:f4:3e:7e:79:bf:40:6d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Validity Not Before: Dec 20 14:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=fa009c5f86c3d05727ef30686e46b20b6d4ec7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:22:65:e4:f7:be:f8:97:93:c8:a7:52:37: f3:ac:02:be:c9:4b:43:6b:d9:1f:5c:d7:0d:48:25: ba:bd:c8:fa:2f:18:55:ea:53:81:fd:9f:c7:72:e9: f1:2d:89:02:e0:ba:65:d8:bd:cb:47:75:71:72:18: 8e:51:03:a4:3c:fd:28:92:3a:20:6b:4a:6a:b3:a0: 70:67:17:a2:bc:6f:4b:28:cf:e1:f9:83:ab:b5:aa: 62:61:95:eb:46:ff:b8:19:c4:f6:ba:71:35:40:31: ce:ac:38:71:5f:39:d4:7c:88:df:dc:6a:50:aa:2a: 94:3e:91:d8:09:bd:db:96:de:d3:9f:1c:60:86:1c: 93:f3:e2:5b:ba:22:11:16:01:05:d2:c8:6b:5b:7d: 1a:af:53:65:60:fa:aa:a7:69:40:14:66:ee:a8:c5: 40:e0:12:9c:6c:9e:45:92:9a:0b:e7:36:3e:5c:dd: 44:21:7d:28:04:25:10:ef:48:9a:9a:82:ac:94:52: a3:b9:43:8e:d4:42:57:44:15:24:6d:28:a2:6d:4b: f1:d3:ef:b2:b3:fd:a9:39:f9:e3:91:cc:51:0a:3e: 2f:97:90:a4:23:98:c2:8e:9f:d8:1a:c5:e0:1d:71: 36:cc:5e:b2:0e:d4:23:b9:36:99:85:2b:fb:8a:4f: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:00:9C:5F:86:C3:D0:57:27:EF:30:68:6E:46:B2:0B:6D:4E:C7:AC X509v3 Authority Key Identifier: keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ad:06:88:35:01:d2:ae:93:da:bc:88:bc:70:49:7c:08:bb: 84:a1:f7:0a:e3:f7:6d:c7:0a:04:56:8d:dd:88:ed:a4:e0:0f: ad:86:c9:ed:e0:48:b1:c6:1f:e3:27:a0:08:5f:0b:fb:9d:47: 30:46:df:0d:30:75:c1:ca:ba:a6:41:6c:fc:4c:05:b1:8a:05: 91:e8:46:3f:2b:bf:f7:84:89:97:e3:0d:e3:01:e0:51:c3:5a: c2:20:e7:23:45:d8:ba:d2:1e:09:ab:e1:39:b6:ea:ee:36:90: 68:25:e2:73:79:8e:85:38:3a:f2:a9:53:f7:ed:28:57:37:9a: 4a:e0:58:81:10:78:5e:05:57:a6:f9:3e:c1:3f:33:ff:59:e4: 49:d3:b6:96:f4:c2:5c:df:cf:86:f9:f7:0a:e2:54:69:01:e3: 5d:25:2c:a9:f5:79:e9:7d:e8:a4:b4:1e:2d:2a:df:1f:e4:26: e5:89:30:32:c1:91:a7:bf:e6:d3:6d:da:82:0b:02:82:21:0b: bb:ff:d3:f2:84:49:6d:7f:8c:9c:d0:3b:8e:00:4e:8c:86:3e: ce:49:e8:5b:48:c3:83:2f:78:51:09:85:11:3a:c2:eb:97:8a: b9:fb:b5:bc:a3:5e:a5:7c:14:5f:b7:73:d9:22:6d:6d:0a:d8: 8e:e1:4a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAna65+LuPQ+fnm/QG2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx MWE2ODEwHhcNMjUxMjIwMTQwMDQyWhcNMjUxMjIxMTQwMDQyWjAzMTEwLwYDVQQD EyhmYTAwOWM1Zjg2YzNkMDU3MjdlZjMwNjg2ZTQ2YjIwYjZkNGVjN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVciZeT3vviXk8inUjfzrAK+yUtD a9kfXNcNSCW6vcj6LxhV6lOB/Z/HcunxLYkC4Lpl2L3LR3VxchiOUQOkPP0okjog a0pqs6BwZxeivG9LKM/h+YOrtapiYZXrRv+4GcT2unE1QDHOrDhxXznUfIjf3GpQ qiqUPpHYCb3blt7TnxxghhyT8+JbuiIRFgEF0shrW30ar1NlYPqqp2lAFGbuqMVA 4BKcbJ5FkpoL5zY+XN1EIX0oBCUQ70iamoKslFKjuUOO1EJXRBUkbSiibUvx0++y s/2pOfnjkcxRCj4vl5CkI5jCjp/YGsXgHXE2zF6yDtQjuTaZhSv7ik/DLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoAnF+Gw9BXJ+8waG5GsgttTsesMB8GA1UdIwQY MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1 LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG60GiDUB 0q6T2ryIvHBJfAi7hKH3CuP3bccKBFaN3YjtpOAPrYbJ7eBIscYf4yegCF8L+51H MEbfDTB1wcq6pkFs/EwFsYoFkehGPyu/94SJl+MN4wHgUcNawiDnI0XYutIeCavh Obbq7jaQaCXic3mOhTg68qlT9+0oVzeaSuBYgRB4XgVXpvk+wT8z/1nkSdO2lvTC XN/Phvn3CuJUaQHjXSUsqfV56X3opLQeLSrfH+Qm5YkwMsGRp7/m023aggsCgiEL u//T8oRJbX+MnNA7jgBOjIY+zknoW0jDgy94UQmFETrC65eKufu1vKNepXwUX7dz 2SJtbQrYjuFKvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:56:30 2025 by rpki-client