This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json) Hash identifier: o9YPVIRuhCxJyW6dg84foNmuPOkW5BYrjL71E8STKR0= Subject key identifier: 65:80:3E:F5:23:D7:AD:42:94:79:D3:B5:09:9A:BB:77:6E:D3:26:72 Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db Certificate serial: 019AF35291164A103087A7643CBAFB3E909B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft Manifest number: 14A9 Signing time: Sat 06 Dec 2025 11:01:05 +0000 Manifest this update: Sat 06 Dec 2025 11:01:05 +0000 Manifest next update: Sun 07 Dec 2025 11:01:05 +0000 Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=) 2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: POvzzjdbkKhjNjdk0iZUcaD+rlSB2IaWJooWjSfMenk=) 3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:91:16:4a:10:30:87:a7:64:3c:ba:fb:3e:90:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db Validity Not Before: Dec 6 11:01:05 2025 GMT Not After : Dec 7 11:01:05 2025 GMT Subject: CN=65803ef523d7ad429479d3b5099abb776ed32672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:9b:9d:a2:e6:20:84:e7:d1:a1:a8:98:3e: ca:1c:1f:a7:f9:ad:31:fa:84:fc:e1:97:a2:6c:7b: ac:21:dc:87:30:f8:b6:4b:9b:0f:bd:e8:62:a0:dc: 73:99:db:fb:28:23:11:d6:09:b4:90:fe:00:35:34: ab:c5:20:88:cb:68:ce:09:6e:d9:21:f0:35:41:cb: b6:ef:bf:a0:52:1d:9b:d1:39:1f:af:d4:11:47:50: d6:b3:c8:92:14:32:29:9d:a0:83:99:64:86:b8:cf: e5:60:67:95:3b:58:97:48:6d:16:d4:52:fa:37:97: 9e:70:bc:d5:29:8f:2a:d6:a3:18:ba:cc:dd:82:37: e4:2c:6b:e4:c8:be:f5:12:35:2c:3f:bc:64:a2:22: ec:84:23:42:ad:42:06:ec:9e:82:05:00:87:8b:0c: ec:c4:1c:92:0f:f5:0c:07:a0:fa:59:e2:f3:32:f6: 95:58:f1:54:54:67:4d:cf:7d:e3:a7:2e:f0:20:24: ad:aa:e9:73:72:93:12:de:5b:d7:4b:06:e0:42:fb: 9e:17:60:3c:f6:14:84:48:12:2f:10:6d:78:f0:a3: bd:69:ea:28:d8:2c:af:98:15:88:d7:ff:34:8b:9e: b8:df:53:1b:c9:fc:9b:bd:f6:1c:09:5c:7d:43:90: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:80:3E:F5:23:D7:AD:42:94:79:D3:B5:09:9A:BB:77:6E:D3:26:72 X509v3 Authority Key Identifier: keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9c:b3:df:fc:9d:01:18:24:1a:22:43:2e:8e:63:be:f6:a2: 7b:f7:4b:17:80:01:78:66:00:72:88:3d:ca:0b:74:10:d3:3e: 66:33:dd:98:c8:ea:26:58:29:c4:c9:1a:e2:e3:71:8a:ad:de: 41:01:2f:5f:d4:88:d9:27:fb:8d:7c:69:0c:12:75:ff:4c:76: 77:b2:12:2d:76:79:c0:44:50:45:9f:fe:b7:9f:36:c1:ef:58: 03:40:d3:7e:1f:09:ad:50:a3:04:8c:d0:3f:60:c7:b4:d6:a2: 0b:86:c1:69:44:d9:01:55:ef:5e:ba:42:f2:d7:cd:db:7e:91: ad:3e:5c:78:c5:da:bd:2c:24:9a:33:e3:ea:ff:fa:bf:36:a1: 71:a2:31:19:6d:12:19:cc:c9:f9:78:a2:50:dc:fc:c1:ba:d0: dc:25:59:dc:ef:c1:47:3f:a8:5d:1a:8a:d3:5c:4f:78:f3:59: 5e:5f:99:0c:56:22:7f:f9:05:d4:ce:d8:75:7d:fb:39:cf:f9: e1:33:44:8f:9f:3d:b9:3e:68:29:b2:f5:97:d8:21:3b:56:25: 07:a9:02:00:09:92:7e:21:11:51:ba:9d:73:cb:dd:e1:ba:2c: 32:dc:da:3d:be:ec:6a:b9:93:ec:d0:37:73:32:31:7a:d7:5b: b3:f4:1b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpEWShAwh6dkPLr7PpCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OGQxZjZlMzM2YTdjODEzNTE5NDFiYzBiOWRlYTM5ZDdk NzY0ZGIwHhcNMjUxMjA2MTEwMTA1WhcNMjUxMjA3MTEwMTA1WjAzMTEwLwYDVQQD Eyg2NTgwM2VmNTIzZDdhZDQyOTQ3OWQzYjUwOTlhYmI3NzZlZDMyNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjybnaLmIITn0aGomD7KHB+n+a0x +oT84ZeibHusIdyHMPi2S5sPvehioNxzmdv7KCMR1gm0kP4ANTSrxSCIy2jOCW7Z IfA1Qcu277+gUh2b0Tkfr9QRR1DWs8iSFDIpnaCDmWSGuM/lYGeVO1iXSG0W1FL6 N5eecLzVKY8q1qMYuszdgjfkLGvkyL71EjUsP7xkoiLshCNCrUIG7J6CBQCHiwzs xBySD/UMB6D6WeLzMvaVWPFUVGdNz33jpy7wICStqulzcpMS3lvXSwbgQvueF2A8 9hSESBIvEG148KO9aeoo2CyvmBWI1/80i56431MbyfybvfYcCVx9Q5CxdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWAPvUj161ClHnTtQmau3du0yZyMB8GA1UdIwQY MBaAFLmNH24zanyBNRlBvAud6jnX12TbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAt MDM4NTdlZjViMzg3LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAtMDM4NTdlZjViMzg3 LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJyz3/yd ARgkGiJDLo5jvvaie/dLF4ABeGYAcog9ygt0ENM+ZjPdmMjqJlgpxMka4uNxiq3e QQEvX9SI2Sf7jXxpDBJ1/0x2d7ISLXZ5wERQRZ/+t582we9YA0DTfh8JrVCjBIzQ P2DHtNaiC4bBaUTZAVXvXrpC8tfN236RrT5ceMXavSwkmjPj6v/6vzahcaIxGW0S GczJ+XiiUNz8wbrQ3CVZ3O/BRz+oXRqK01xPePNZXl+ZDFYif/kF1M7YdX37Oc/5 4TNEj589uT5oKbL1l9ghO1YlB6kCAAmSfiERUbqdc8vd4bosMtzaPb7sarmT7NA3 czIxetdbs/QbDw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:26:39 2025 by rpki-client