This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft File: uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft (raw, json) Hash identifier: M6oWU49IRE/VrQdh2jtJO/DBy1wtLOJxfzlCEWfjf4Y= Subject key identifier: 44:4B:9A:1B:AB:E7:67:AA:D3:7F:69:67:4D:F4:8F:2B:BC:2B:C3:AC Authority key identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6 Certificate issuer: /CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6 Certificate serial: 019AF163DD73EF06F3DF0A1BBC3098AB0B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft Manifest number: F9 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: UssRM0mPdyIItDZpJc0-R-nRMQk.roa (hash: +PLBHSP6JBeTIBc6ShqrJkAhfrEQDf8RilFXNDdoLBc=) 2: uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl (hash: ChiZa5VlbTMLcXBq7WZdltip91u76QJzq44YjRZRalI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dd:73:ef:06:f3:df:0a:1b:bc:30:98:ab:0b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=444b9a1babe767aad37f69674df48f2bbc2bc3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:c1:09:5a:29:9c:32:d8:64:02:08:22:8b: dd:3a:fe:5f:65:86:62:3e:d4:2f:26:ab:7f:2b:28: 40:b0:88:fa:42:ba:26:59:7f:84:e2:ca:7f:d1:12: e0:9f:45:97:b8:cd:b4:e4:4c:03:c0:f6:6b:f5:31: 79:9b:a2:84:c8:1d:ca:55:f7:32:45:93:bb:0e:e0: 0b:d3:bf:22:fc:6d:8f:9c:8a:2b:e5:8d:d7:e9:2a: 97:22:e3:df:20:0e:54:ff:eb:28:5a:05:a5:02:36: 63:60:d1:26:67:16:09:4a:57:58:03:eb:a8:7f:f6: 57:19:1a:94:bd:70:9c:a1:80:18:91:2f:b3:70:8b: 02:93:28:8a:57:05:0b:8c:38:83:5b:5b:ec:e5:97: d7:1f:6b:4e:1c:9c:9a:96:f1:d9:13:3f:40:56:a8: 7c:56:4c:9c:ce:cb:55:77:4e:a8:ed:7d:cf:e2:db: fb:50:11:c5:50:29:93:26:4d:a3:43:58:e5:02:61: 69:6b:4a:8b:7d:08:cc:b5:80:47:7c:a3:21:55:8b: 05:e4:32:c1:3f:fc:7e:98:5c:6b:52:b3:5b:bf:9a: cc:0c:ea:0e:24:26:eb:ea:33:16:b0:16:08:b7:2f: d9:aa:d6:9d:8d:e9:34:d7:68:e6:ac:df:4f:fd:c8: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4B:9A:1B:AB:E7:67:AA:D3:7F:69:67:4D:F4:8F:2B:BC:2B:C3:AC X509v3 Authority Key Identifier: keyid:BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:46:f6:98:45:07:4c:03:e6:a5:a4:5c:52:c0:91:df:0f:e8: 5f:fd:b2:aa:e9:c9:f7:a3:22:1e:91:53:8c:7f:fd:79:28:df: 03:3f:83:ab:d2:80:0d:bb:39:9a:fc:d6:17:73:e1:73:2f:3b: c6:bf:11:84:a9:2c:91:0e:fd:b4:c0:fb:25:25:61:ac:c1:c1: dc:2a:ee:d8:b4:70:66:28:0c:db:bd:03:d1:2f:cc:d7:4e:f1: 42:24:c1:4c:97:28:14:0c:a3:03:ec:b5:1a:c3:80:54:27:e4: df:64:a0:d3:26:c9:16:3c:06:f4:16:33:01:43:ea:85:4b:8d: bb:30:90:40:7a:eb:26:cf:43:01:f2:2f:44:59:97:96:39:f9: 34:13:82:26:d4:8d:a2:25:18:49:83:d1:7a:4a:00:d6:3c:8d: d7:f0:91:7d:59:46:cb:5a:9e:63:d5:31:25:a4:f9:39:e2:79: df:68:20:79:ed:c4:68:c3:dd:7d:a0:c0:37:c8:95:53:66:52: 47:0a:fa:81:33:6b:8b:33:92:7a:a8:17:cb:ab:f4:39:58:03: 50:7d:5e:b9:a1:19:c2:48:bd:86:a8:98:26:75:d5:a6:89:d5: cc:6e:7b:4c:b1:de:8f:65:43:34:88:45:35:db:72:c0:ec:d1: 59:2d:b9:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY91z7wbz3wobvDCYqwuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjY3YjhlMjE1M2ZiZmM5OTAzODQ3YjQ1MDJhMmJlZjQ0 YjU2ZTYwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD Eyg0NDRiOWExYmFiZTc2N2FhZDM3ZjY5Njc0ZGY0OGYyYmJjMmJjM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fbBCVopnDLYZAIIIovdOv5fZYZi PtQvJqt/KyhAsIj6QromWX+E4sp/0RLgn0WXuM205EwDwPZr9TF5m6KEyB3KVfcy RZO7DuAL078i/G2PnIor5Y3X6SqXIuPfIA5U/+soWgWlAjZjYNEmZxYJSldYA+uo f/ZXGRqUvXCcoYAYkS+zcIsCkyiKVwULjDiDW1vs5ZfXH2tOHJyalvHZEz9AVqh8 VkyczstVd06o7X3P4tv7UBHFUCmTJk2jQ1jlAmFpa0qLfQjMtYBHfKMhVYsF5DLB P/x+mFxrUrNbv5rMDOoOJCbr6jMWsBYIty/Zqtadjek012jmrN9P/cghVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERLmhur52eq039pZ030jyu8K8OsMB8GA1UdIwQY MBaAFLome44hU/v8mQOEe0UCor70S1bmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUt ODg1NGIwMTlkYjlhLzEvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUtODg1NGIwMTlkYjlh LzEvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUb2mEUH TAPmpaRcUsCR3w/oX/2yqunJ96MiHpFTjH/9eSjfAz+Dq9KADbs5mvzWF3Phcy87 xr8RhKkskQ79tMD7JSVhrMHB3Cru2LRwZigM270D0S/M107xQiTBTJcoFAyjA+y1 GsOAVCfk32Sg0ybJFjwG9BYzAUPqhUuNuzCQQHrrJs9DAfIvRFmXljn5NBOCJtSN oiUYSYPRekoA1jyN1/CRfVlGy1qeY9UxJaT5OeJ532ggee3EaMPdfaDAN8iVU2ZS Rwr6gTNrizOSeqgXy6v0OVgDUH1euaEZwki9hqiYJnXVponVzG57TLHej2VDNIhF NdtywOzRWS253w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:08 2025 by rpki-client