This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json) Hash identifier: jd8acK9YKX3q+R9vTptseryg4iEl7AmXE+5A7yObcCU= Subject key identifier: 79:7C:EF:A2:F4:C4:49:98:25:71:E9:A9:A9:69:AC:36:CF:ED:E8:0E Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61 Certificate serial: 019B43C97BC4265F1A932141DA967AF207F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft Manifest number: 05D2 Signing time: Mon 22 Dec 2025 02:00:36 +0000 Manifest this update: Mon 22 Dec 2025 02:00:36 +0000 Manifest next update: Tue 23 Dec 2025 02:00:36 +0000 Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=) 2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: 1Ab3iKi62vtmuoKHiNPVUNu8n7KVwTWP7hUXkrtC46U=) 3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:7b:c4:26:5f:1a:93:21:41:da:96:7a:f2:07:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61 Validity Not Before: Dec 22 02:00:36 2025 GMT Not After : Dec 23 02:00:36 2025 GMT Subject: CN=797cefa2f4c449982571e9a9a969ac36cfede80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:19:22:9b:30:e0:e0:da:e1:60:52:37:76: 32:c9:5b:37:23:26:8e:0f:a8:27:44:11:f0:ce:b1: 93:44:d2:11:de:15:c3:2a:09:31:0a:5f:4e:e0:96: b7:d5:b1:d0:29:7f:dc:13:ce:f9:f0:00:65:91:8d: 89:d5:7a:27:36:4e:08:d7:eb:53:88:fd:ff:22:1d: fa:a3:2e:4e:b2:89:e9:40:e8:e0:cf:57:d7:9a:0f: fb:2e:ba:32:ac:f2:07:c2:0c:2b:c1:3e:b2:fb:5f: e4:91:e2:0a:54:cb:13:72:26:6d:c1:51:be:40:61: b3:ab:97:29:f5:9e:ca:40:ba:d4:be:3d:1c:37:ce: 73:ed:7b:1a:6f:6c:45:4c:65:fa:0f:1c:60:d3:a8: 06:31:c0:4e:86:ae:6d:85:31:eb:05:98:56:8b:90: 12:39:06:09:6a:70:b0:42:11:1e:b1:ec:e7:99:5b: b6:18:9e:d1:00:ee:89:34:e1:68:11:61:46:7d:07: 68:94:40:4f:1e:c9:25:da:e0:7b:0c:06:d2:e2:c7: c3:e1:56:0c:e5:9a:0a:ea:34:b9:59:d2:8c:d7:c6: 31:7b:25:d5:9c:19:40:ed:d3:82:f2:65:e4:2f:91: 79:82:99:10:b1:00:39:2d:a5:32:3f:e6:db:be:05: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7C:EF:A2:F4:C4:49:98:25:71:E9:A9:A9:69:AC:36:CF:ED:E8:0E X509v3 Authority Key Identifier: keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6e:83:49:9f:97:7c:2a:04:bb:43:cf:c6:4f:8d:b1:81:5c: bc:56:60:04:8a:98:fc:e9:62:fb:17:09:64:13:c9:e4:ef:18: b6:70:93:1d:9e:65:13:53:12:4d:f3:44:a1:fc:a1:2c:68:39: 82:c4:35:bb:67:bf:fd:9d:35:44:0d:b7:a2:de:ae:9c:24:14: 97:26:93:c0:83:45:92:d1:2a:4e:84:27:d2:1f:0b:bf:f5:38: 7f:70:46:94:4a:c2:74:6d:ff:ce:01:60:f2:63:17:96:98:67: 22:93:1c:8b:19:d5:cb:04:0f:84:81:56:86:a0:9a:f2:eb:d8: 5f:65:ff:98:e4:ef:f7:3c:38:02:52:73:e1:5f:a0:ed:67:fd: 9b:72:63:3d:62:3e:e3:ef:ce:cd:6e:f5:83:54:84:4d:a8:7e: 58:8a:51:79:2b:a4:d8:4d:a8:41:bc:18:d4:70:36:b4:76:c5: 8c:a2:4a:f4:57:8c:ad:13:96:ff:e5:12:86:b0:d7:89:f3:1e: ed:fe:94:5d:ea:56:d6:27:7d:40:41:cf:89:df:62:c8:e5:92: d7:f4:b8:56:e2:16:69:f1:c3:dd:99:46:10:f9:eb:23:69:be: d1:3c:7b:20:53:28:f3:a5:9d:78:34:5a:62:36:73:6b:d6:4b: cc:11:10:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyXvEJl8akyFB2pZ68gf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk MWZjNjEwHhcNMjUxMjIyMDIwMDM2WhcNMjUxMjIzMDIwMDM2WjAzMTEwLwYDVQQD Eyg3OTdjZWZhMmY0YzQ0OTk4MjU3MWU5YTlhOTY5YWMzNmNmZWRlODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArakZIpsw4ODa4WBSN3YyyVs3IyaO D6gnRBHwzrGTRNIR3hXDKgkxCl9O4Ja31bHQKX/cE8758ABlkY2J1XonNk4I1+tT iP3/Ih36oy5OsonpQOjgz1fXmg/7LroyrPIHwgwrwT6y+1/kkeIKVMsTciZtwVG+ QGGzq5cp9Z7KQLrUvj0cN85z7Xsab2xFTGX6Dxxg06gGMcBOhq5thTHrBZhWi5AS OQYJanCwQhEeseznmVu2GJ7RAO6JNOFoEWFGfQdolEBPHskl2uB7DAbS4sfD4VYM 5ZoK6jS5WdKM18YxeyXVnBlA7dOC8mXkL5F5gpkQsQA5LaUyP+bbvgWNbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl876L0xEmYJXHpqalprDbP7egOMB8GA1UdIwQY MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5 LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG6DSZ+X fCoEu0PPxk+NsYFcvFZgBIqY/Oli+xcJZBPJ5O8YtnCTHZ5lE1MSTfNEofyhLGg5 gsQ1u2e//Z01RA23ot6unCQUlyaTwINFktEqToQn0h8Lv/U4f3BGlErCdG3/zgFg 8mMXlphnIpMcixnVywQPhIFWhqCa8uvYX2X/mOTv9zw4AlJz4V+g7Wf9m3JjPWI+ 4+/OzW71g1SETah+WIpReSuk2E2oQbwY1HA2tHbFjKJK9FeMrROW/+UShrDXifMe 7f6UXepW1id9QEHPid9iyOWS1/S4VuIWafHD3ZlGEPnrI2m+0Tx7IFMo86WdeDRa YjZza9ZLzBEQfA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:24:08 2025 by rpki-client