This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft File: uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json) Hash identifier: eWnGkVhYokqiD3dUFX22nZsUx7outLsS0PMyDD9XDXE= Subject key identifier: AD:6E:10:0D:0B:C6:06:99:24:EE:C2:A5:6D:20:F4:DD:4F:1B:59:B1 Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5 Certificate issuer: /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5 Certificate serial: 019AF19B49FF9AAD36C7F88E6F7A8E064E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft Manifest number: 12C8 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: Brko5nMKSPwBgCgkjjg5igCr-DI.roa (hash: 3fOnCI08ItaZVpBsarkgTQcdgGi7HK10nR8m2pkLLWI=) 2: RdMb9DZXvill1bIjga0E0ALFTSE.roa (hash: glVlBHXB1p3fuc6KcN7QeAF0s4whdubmLa4lXiIAO04=) 3: bGID9MISfapCQvxtnoK2mwgER1c.roa (hash: 48jEs1SYz7H/DF1j6XjhPt2MSQotOuG8cV4gNdbAuRU=) 4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: M5DgLmiCFLYmGsuedlicSu5P0JQ2OdWBYlGOIkHDx7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:49:ff:9a:ad:36:c7:f8:8e:6f:7a:8e:06:4e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=ad6e100d0bc6069924eec2a56d20f4dd4f1b59b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:06:ba:cb:15:82:b7:47:2f:58:dd:19:60: b0:24:28:50:52:f8:a4:b6:2f:b7:f3:70:75:d2:f6: b0:61:2e:6b:2c:a1:cf:2a:f9:de:5e:5d:43:50:27: 81:f4:22:d5:e5:13:85:a9:c4:12:a0:34:44:9d:78: e1:3e:6f:41:5c:f6:a9:53:1b:6e:4e:90:dc:04:82: 07:2f:96:1d:af:9b:dc:f6:11:52:48:52:90:90:c6: de:ce:32:af:84:24:55:da:68:3c:60:50:58:1a:48: 39:dd:9a:12:a5:79:0d:e0:59:6b:0d:f7:ff:3f:da: 0c:5f:54:91:94:26:54:b6:62:f1:91:ef:f9:0a:69: 4e:b9:70:d6:bf:6b:ac:eb:92:ed:a8:5b:d5:49:d0: 28:4d:b3:16:cb:10:dd:83:71:1c:4d:c7:84:d2:8a: e9:31:31:85:2d:a4:f0:76:ea:54:98:22:75:33:29: 13:83:52:4b:0e:45:b2:46:69:a5:db:ab:ea:73:9e: d0:c0:4d:09:1b:b7:00:40:c4:5a:bd:cb:6d:58:fb: f4:48:7e:17:6a:e6:bc:f9:9f:5f:a0:d7:7e:ca:7c: 06:eb:a2:bb:53:10:b9:26:d4:98:65:52:3a:07:e4: 50:0c:28:20:b7:ad:1e:de:df:76:6d:12:a2:bb:63: fc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:10:0D:0B:C6:06:99:24:EE:C2:A5:6D:20:F4:DD:4F:1B:59:B1 X509v3 Authority Key Identifier: keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a3:93:65:8f:b1:e0:75:ad:8a:8a:49:41:dc:f6:b8:72:3f: 00:48:01:de:2b:32:74:c8:a3:42:83:dd:22:f2:74:c5:d1:b4: 50:e8:0a:b9:d4:10:de:ee:06:29:ba:ae:78:eb:68:94:67:40: a4:63:f1:16:5b:40:9d:e3:64:12:6d:2c:c2:a2:40:5f:02:fc: 99:1f:cd:55:7e:a4:88:ff:17:45:aa:3f:76:83:6f:65:e9:d1: 02:4d:86:80:25:25:cf:de:65:9c:8a:5b:8e:3f:72:2c:41:c9: c8:63:67:a2:97:a5:4f:25:ba:a2:93:fe:c3:46:3b:60:22:3d: 39:7c:36:a6:70:bf:20:ac:1b:45:43:ac:06:0b:af:1e:7b:36: 66:51:d0:9d:53:72:09:2c:d5:65:71:40:1a:44:ba:31:88:25: 12:ec:9d:2c:7c:41:19:c6:1d:b4:25:57:8f:60:6f:e9:d9:ba: 20:f3:e2:65:c6:71:5b:b8:93:93:0a:97:90:df:2b:44:dd:9d: 1a:b8:4d:88:41:21:4c:1f:e1:42:8a:b8:60:b8:80:e1:2f:d6: 7e:40:fa:01:48:cd:67:8a:44:d9:97:d1:35:61:59:ec:98:da: 78:62:df:ba:21:c2:a4:09:9a:0a:12:e7:97:f4:dd:ef:a3:9b: 16:24:6c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0n/mq02x/iOb3qOBk46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZWQzZWJjZDIxNTVmOWExNzhhMTAzYWRhYjQ4ZmRhOGIy Mjc1YTUwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD EyhhZDZlMTAwZDBiYzYwNjk5MjRlZWMyYTU2ZDIwZjRkZDRmMWI1OWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscAGussVgrdHL1jdGWCwJChQUvik ti+383B10vawYS5rLKHPKvneXl1DUCeB9CLV5ROFqcQSoDREnXjhPm9BXPapUxtu TpDcBIIHL5Ydr5vc9hFSSFKQkMbezjKvhCRV2mg8YFBYGkg53ZoSpXkN4FlrDff/ P9oMX1SRlCZUtmLxke/5CmlOuXDWv2us65LtqFvVSdAoTbMWyxDdg3EcTceE0orp MTGFLaTwdupUmCJ1MykTg1JLDkWyRmml26vqc57QwE0JG7cAQMRavcttWPv0SH4X aua8+Z9foNd+ynwG66K7UxC5JtSYZVI6B+RQDCggt60e3t92bRKiu2P8KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1uEA0LxgaZJO7CpW0g9N1PG1mxMB8GA1UdIwQY MBaAFLjtPrzSFV+aF4oQOtq0j9qLInWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMt ZGVhMTJkZDhjN2Y0LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMtZGVhMTJkZDhjN2Y0 LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKOTZY+x 4HWtiopJQdz2uHI/AEgB3isydMijQoPdIvJ0xdG0UOgKudQQ3u4GKbqueOtolGdA pGPxFltAneNkEm0swqJAXwL8mR/NVX6kiP8XRao/doNvZenRAk2GgCUlz95lnIpb jj9yLEHJyGNnopelTyW6opP+w0Y7YCI9OXw2pnC/IKwbRUOsBguvHns2ZlHQnVNy CSzVZXFAGkS6MYglEuydLHxBGcYdtCVXj2Bv6dm6IPPiZcZxW7iTkwqXkN8rRN2d GrhNiEEhTB/hQoq4YLiA4S/WfkD6AUjNZ4pE2ZfRNWFZ7JjaeGLfuiHCpAmaChLn l/Td76ObFiRsAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:02 2025 by rpki-client