This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft File: uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft (raw, json) Hash identifier: UZet9wWjNg+loeVzCgBr+ocrFFxlV2qQq5Hb74g//xI= Subject key identifier: B7:F7:C3:72:83:E4:8C:3F:B8:6B:84:D5:FB:B3:45:1F:B0:B6:C7:E4 Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4 Certificate issuer: /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4 Certificate serial: 019AF2ADE2EFFE205C535AB3A7EB9104BE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 08:01:13 +0000 Manifest this update: Sat 06 Dec 2025 08:01:13 +0000 Manifest next update: Sun 07 Dec 2025 08:01:13 +0000 Files and hashes: 1: dx1DsNdC0zzf80gFyxTg9VFR8p8.roa (hash: wJSJefvy6pAquwxe0d0SzcWI3aTdl65uj7QEQlUElKE=) 2: uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl (hash: eND5I5qOguYGzfCIuv0fcMeJHN+gNnqXbEwJkgRwXZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e2:ef:fe:20:5c:53:5a:b3:a7:eb:91:04:be:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4 Validity Not Before: Dec 6 08:01:13 2025 GMT Not After : Dec 7 08:01:13 2025 GMT Subject: CN=b7f7c37283e48c3fb86b84d5fbb3451fb0b6c7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:a8:95:f3:e1:7e:9b:23:d8:49:2c:5e:5d: 54:c8:3c:9c:0a:83:33:fd:b7:d4:db:1c:36:42:74: 6d:e8:4f:e0:56:00:c7:d0:19:d3:cf:0f:a0:45:35: b1:c2:13:4c:9c:63:12:3f:d7:f2:35:83:e8:b3:f6: 8f:64:9d:45:7c:43:12:37:bc:fc:12:f9:c6:de:6f: 37:e0:54:ab:36:35:2e:34:14:1c:5a:33:28:06:b6: e8:c5:c2:ba:c3:58:8b:8c:4d:3a:75:81:c9:7c:5a: ea:50:58:e2:92:59:1c:0b:f2:28:fb:8f:13:a8:1e: 2b:27:7a:94:96:c3:4f:fd:87:e4:a7:89:51:b5:e6: c5:e6:d9:7b:2c:bc:42:4a:dd:b4:31:56:0b:c9:62: 61:41:77:b3:56:d8:ce:1b:71:d1:f1:ad:6a:5d:90: f6:e4:9b:65:65:1a:ae:49:b6:0a:f5:91:71:1e:45: eb:03:bf:af:3f:46:12:62:1c:4e:bf:91:3f:94:a6: 94:aa:70:f6:f1:cf:52:b0:03:bf:ee:bf:62:cc:c8: d7:57:7a:f7:5f:47:a9:ba:32:5a:48:c3:7d:b1:4a: 9d:61:06:fa:81:42:da:2b:4e:3f:8f:c3:c0:47:6b: 9c:aa:9b:55:09:97:42:3c:ac:3e:df:84:9b:89:cf: 8a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F7:C3:72:83:E4:8C:3F:B8:6B:84:D5:FB:B3:45:1F:B0:B6:C7:E4 X509v3 Authority Key Identifier: keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:89:05:0b:34:2f:92:67:4e:df:f6:ba:9d:4d:7b:6b:80:9e: 2c:23:ab:83:84:b9:29:84:24:9e:ea:17:c7:2c:1e:f1:12:c2: ac:07:dc:82:25:02:f4:7a:8d:17:08:7d:a6:6a:7a:3f:87:6b: 56:d4:df:2c:16:a8:2d:99:4a:63:3c:41:ad:2f:a7:00:e7:ae: 4a:a5:e1:ef:d9:0f:00:0a:a6:60:f7:1b:a4:5f:17:d2:b1:d7: 94:ba:49:b4:a2:4f:04:73:3e:8e:96:6c:6b:75:94:7c:e8:89: 24:2a:1c:4f:fa:0b:ac:27:b8:14:20:2f:06:d7:de:74:79:29: 4d:5b:eb:21:c1:61:ee:fc:87:24:43:cf:79:9f:43:c1:b7:ae: 49:39:07:fc:6e:48:bc:39:82:49:56:ee:ef:37:f2:be:f5:0b: 7c:a2:99:3c:a5:3b:b3:22:e6:1e:20:57:99:bf:12:15:3f:1c: 7b:ba:4f:ed:48:31:d3:f1:cd:fd:d0:e3:d7:bb:69:bd:25:db: 3c:a9:bd:30:a2:ff:59:ef:11:9e:94:de:f5:dd:94:d8:05:e2: d6:e5:75:04:6f:75:76:8a:a3:e8:5b:36:67:97:91:67:f9:2c: aa:16:3f:ba:87:78:c7:55:61:79:be:e2:30:c1:29:3e:29:e0: 62:0d:5c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreLv/iBcU1qzp+uRBL5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzllN2IxODk3YWZiMDA4ZjNiMWRmOGJmMDRmOWI1Njc3 MDNkZTQwHhcNMjUxMjA2MDgwMTEzWhcNMjUxMjA3MDgwMTEzWjAzMTEwLwYDVQQD EyhiN2Y3YzM3MjgzZTQ4YzNmYjg2Yjg0ZDVmYmIzNDUxZmIwYjZjN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8WolfPhfpsj2EksXl1UyDycCoMz /bfU2xw2QnRt6E/gVgDH0BnTzw+gRTWxwhNMnGMSP9fyNYPos/aPZJ1FfEMSN7z8 EvnG3m834FSrNjUuNBQcWjMoBrboxcK6w1iLjE06dYHJfFrqUFjiklkcC/Io+48T qB4rJ3qUlsNP/Yfkp4lRtebF5tl7LLxCSt20MVYLyWJhQXezVtjOG3HR8a1qXZD2 5JtlZRquSbYK9ZFxHkXrA7+vP0YSYhxOv5E/lKaUqnD28c9SsAO/7r9izMjXV3r3 X0epujJaSMN9sUqdYQb6gULaK04/j8PAR2ucqptVCZdCPKw+34Sbic+KXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf3w3KD5Iw/uGuE1fuzRR+wtsfkMB8GA1UdIwQY MBaAFLjJ57GJevsAjzsd+L8E+bVncD3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1ubnNZbDYtd0NQT3gzNHZ3VDV0V2R3UGVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82YTUzMmItMzMxNS00NmFlLTg2ZGUt ZThlNjk1YjE4NTgzLzEvdU1ubnNZbDYtd0NQT3gzNHZ3VDV0V2R3UGVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82YTUzMmItMzMxNS00NmFlLTg2ZGUtZThlNjk1YjE4NTgz LzEvdU1ubnNZbDYtd0NQT3gzNHZ3VDV0V2R3UGVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4kFCzQv kmdO3/a6nU17a4CeLCOrg4S5KYQknuoXxywe8RLCrAfcgiUC9HqNFwh9pmp6P4dr VtTfLBaoLZlKYzxBrS+nAOeuSqXh79kPAAqmYPcbpF8X0rHXlLpJtKJPBHM+jpZs a3WUfOiJJCocT/oLrCe4FCAvBtfedHkpTVvrIcFh7vyHJEPPeZ9DwbeuSTkH/G5I vDmCSVbu7zfyvvULfKKZPKU7syLmHiBXmb8SFT8ce7pP7Ugx0/HN/dDj17tpvSXb PKm9MKL/We8RnpTe9d2U2AXi1uV1BG91doqj6Fs2Z5eRZ/ksqhY/uod4x1Vheb7i MMEpPingYg1c5w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:32 2025 by rpki-client