This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json) Hash identifier: hUWcJu9x5hVCNDwEF6JUCQ1a8aoO4D8WfPj/bjC/M8M= Subject key identifier: A3:D7:90:E0:41:67:90:52:60:75:2E:EF:56:C7:09:E4:FC:75:0F:29 Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Certificate serial: 019AF42E554E53931882317684F0B36ED221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft Manifest number: 0EA7 Signing time: Sat 06 Dec 2025 15:01:08 +0000 Manifest this update: Sat 06 Dec 2025 15:01:08 +0000 Manifest next update: Sun 07 Dec 2025 15:01:08 +0000 Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=) 2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=) 3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: XdFKxio9SM2FlvdUuEgYOG/dW7CahWgFHcSk9B4ASPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:55:4e:53:93:18:82:31:76:84:f0:b3:6e:d2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Validity Not Before: Dec 6 15:01:08 2025 GMT Not After : Dec 7 15:01:08 2025 GMT Subject: CN=a3d790e04167905260752eef56c709e4fc750f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:17:b2:7a:3f:4c:ef:12:d8:e0:15:5b:d9: 47:4a:88:9d:33:57:f7:8a:c5:34:3b:96:85:8c:d7: 8f:5a:e8:16:f6:3c:e4:57:1c:13:45:5a:23:e4:a3: 18:c2:e4:3f:0c:e0:36:ed:66:33:28:fc:37:af:f8: 32:eb:60:9d:a0:60:89:e7:d7:84:45:84:4a:ea:e0: b0:a0:0d:0b:8b:ca:b3:da:85:fb:1f:f2:88:52:bd: 4d:1c:b1:b0:12:87:d1:61:bd:ea:84:6c:6d:df:02: 3a:7e:74:24:b5:92:8a:f2:dc:1a:6d:75:4e:4b:6a: 60:d6:eb:31:d4:e7:2d:f9:3f:2e:a4:7f:59:b5:f6: e0:f1:99:fa:e5:de:c4:45:fe:e3:76:cd:b2:b7:ea: 9c:88:3f:f7:2b:56:e6:d1:44:df:e9:59:81:a6:b1: 02:7d:d0:f7:45:44:9c:9f:da:bb:1d:4f:10:e5:0c: a6:24:82:42:da:44:01:35:1c:82:1d:35:2f:41:ef: 0f:26:a2:ff:d3:8d:0b:7a:c5:5f:9f:59:05:60:5e: a7:ac:d4:9e:8e:21:dd:c2:1b:94:ae:b1:e3:d6:b8: 52:07:fa:06:30:f0:9b:b2:a6:c0:0e:1a:68:9e:4a: 66:44:60:df:bb:60:c5:0b:6c:9d:5f:01:e1:80:39: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D7:90:E0:41:67:90:52:60:75:2E:EF:56:C7:09:E4:FC:75:0F:29 X509v3 Authority Key Identifier: keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:09:35:1f:c7:bc:73:a3:7d:13:c1:67:01:52:86:a6:52:1c: 9f:66:05:83:b8:c4:4c:d1:82:84:58:6b:0d:cc:45:53:bc:ce: 1d:5a:bf:8d:d5:8e:d8:aa:0f:b5:0d:46:4e:a1:35:9e:ab:dc: 9c:9e:14:78:d4:72:f9:fa:8d:31:7b:f6:e6:fb:d8:7d:61:92: f6:cb:8b:9f:cb:8b:b3:33:50:5a:b0:98:e7:3b:8b:1b:d0:46: 88:08:7e:14:0d:4c:98:3f:a1:e0:ae:e7:1b:7b:2b:c8:d1:39: 32:f1:8b:b3:d4:0e:d9:e0:86:b2:5c:b0:03:23:8a:55:5c:32: 4d:82:fe:64:65:42:04:0e:f4:3b:e8:93:ed:ce:31:9c:91:c1: 3d:07:57:66:e0:f7:80:d6:59:dd:3a:64:52:38:b6:57:a8:30: 7f:4f:5a:61:76:0a:ab:35:36:5d:f5:9a:6a:fb:a5:44:be:b6: 60:51:6b:fb:a3:be:e0:d0:da:23:17:70:6e:9e:35:26:60:1e: 0e:7a:2b:3b:e8:40:4d:68:99:c3:28:ce:33:79:5b:9e:dc:90: 80:9c:64:18:af:e8:19:d3:33:35:2e:91:04:16:15:1e:aa:19: f1:c6:c8:39:d0:15:35:64:c4:85:68:77:3d:33:bd:ef:a7:e9: 6a:b5:87:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LlVOU5MYgjF2hPCzbtIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1 MWIxMTEwHhcNMjUxMjA2MTUwMTA4WhcNMjUxMjA3MTUwMTA4WjAzMTEwLwYDVQQD EyhhM2Q3OTBlMDQxNjc5MDUyNjA3NTJlZWY1NmM3MDllNGZjNzUwZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyooXsno/TO8S2OAVW9lHSoidM1f3 isU0O5aFjNePWugW9jzkVxwTRVoj5KMYwuQ/DOA27WYzKPw3r/gy62CdoGCJ59eE RYRK6uCwoA0Li8qz2oX7H/KIUr1NHLGwEofRYb3qhGxt3wI6fnQktZKK8twabXVO S2pg1usx1Oct+T8upH9Ztfbg8Zn65d7ERf7jds2yt+qciD/3K1bm0UTf6VmBprEC fdD3RUScn9q7HU8Q5QymJIJC2kQBNRyCHTUvQe8PJqL/040LesVfn1kFYF6nrNSe jiHdwhuUrrHj1rhSB/oGMPCbsqbADhponkpmRGDfu2DFC2ydXwHhgDl/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPXkOBBZ5BSYHUu71bHCeT8dQ8pMB8GA1UdIwQY MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwk1H8e8 c6N9E8FnAVKGplIcn2YFg7jETNGChFhrDcxFU7zOHVq/jdWO2KoPtQ1GTqE1nqvc nJ4UeNRy+fqNMXv25vvYfWGS9suLn8uLszNQWrCY5zuLG9BGiAh+FA1MmD+h4K7n G3sryNE5MvGLs9QO2eCGslywAyOKVVwyTYL+ZGVCBA70O+iT7c4xnJHBPQdXZuD3 gNZZ3TpkUji2V6gwf09aYXYKqzU2XfWaavulRL62YFFr+6O+4NDaIxdwbp41JmAe DnorO+hATWiZwyjOM3lbntyQgJxkGK/oGdMzNS6RBBYVHqoZ8cbIOdAVNWTEhWh3 PTO976fparWHww== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:32 2025 by rpki-client