This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json) Hash identifier: SjsCELVMb2hhsfb6iOkz3XpAovpDXl6Z1ed/oEsOSuA= Subject key identifier: F4:0E:4A:57:BD:F7:4C:85:27:D1:C6:31:DB:28:CC:D1:47:2F:4A:52 Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Certificate serial: 019AF2773519476ABC2CE6B60CA0A79437A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft Manifest number: 0E8A Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: 3eC8nP2y0M7Dk50w-cz0uqTipws.roa (hash: oL1pIlz/bhILnljMZOEBWQ6dy5AQHNGyWJuSJLm2sWA=) 2: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=) 3: mj78j7-0AeevMahy3Oa3oEUR37o.roa (hash: GV37V8PynELJMOdG95g3RGrNY37XlDLhQkTKeFw+n+A=) 4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: lbdVur3sDheeJEepPHO4WuFCeSVnfhDCmAaxgHG9QU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:35:19:47:6a:bc:2c:e6:b6:0c:a0:a7:94:37:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=f40e4a57bdf74c8527d1c631db28ccd1472f4a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:02:46:eb:e3:fd:77:42:85:b7:3c:63:61: 76:51:26:75:32:e2:d7:52:87:9a:09:8a:20:a6:6c: 5f:c6:88:05:0c:91:a5:75:01:a4:66:94:75:29:47: d5:d0:37:79:fa:fb:8a:6e:3a:88:3c:97:98:f0:ef: 88:6d:df:f2:26:2a:26:dc:f4:4e:77:4d:1a:58:26: ea:10:a8:f8:b7:00:10:95:7e:45:b2:d3:d9:8d:31: a0:84:0c:96:6a:d8:4b:c9:0a:db:ae:ef:ea:fb:ae: 63:26:59:d4:36:9b:0c:0f:49:06:5c:07:dd:8b:2d: d7:0c:97:78:55:0e:69:b9:25:db:bb:26:6b:0c:a3: d5:6b:41:f6:25:6e:e2:fe:66:26:c7:75:ea:c5:04: fc:7d:26:35:c5:48:2c:ce:dc:89:a4:82:d1:d6:cc: 51:76:25:ba:05:3a:e9:48:c6:73:f7:a8:fa:5e:98: 76:40:2e:f9:90:df:ee:b4:c8:11:49:0e:14:bb:b9: d2:19:55:2e:bd:d6:05:1a:98:13:d1:c1:be:a2:15: 56:a1:04:82:7b:ae:13:1b:f2:02:51:e8:c5:ca:f5: 05:ef:f3:e7:c4:2c:86:82:71:2b:5d:d0:04:df:4a: 79:77:bd:9a:34:10:07:03:6b:52:34:c5:20:42:27: 7d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0E:4A:57:BD:F7:4C:85:27:D1:C6:31:DB:28:CC:D1:47:2F:4A:52 X509v3 Authority Key Identifier: keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e9:fa:3b:cf:ce:0a:47:56:c5:84:eb:b3:bf:a1:ac:1a:3c: 55:9e:e6:c6:2e:d6:21:55:25:18:9d:ed:87:e4:84:87:19:a6: c9:5f:d3:25:f1:98:80:50:ed:d9:a9:1f:f6:45:1a:0e:8b:c8: e1:9f:28:51:b8:46:a5:42:22:e4:d6:b1:3e:0f:e8:af:a5:a9: 48:2a:25:c0:02:2b:8e:38:2d:0b:b2:64:b2:61:50:f7:54:af: 8b:7c:c0:9e:11:ac:5d:2e:dc:a9:25:82:4f:bb:bf:40:f9:a2: 3b:43:59:b6:16:45:20:2c:6c:dc:ae:f0:2b:f8:9c:90:a8:8e: 82:48:fa:05:de:ee:72:fb:5f:f0:51:66:e4:a4:c9:af:2c:50: 50:27:63:81:b2:bf:d9:1e:f6:0d:4a:ea:74:cc:92:fe:92:fd: 65:f7:5e:5f:9f:13:82:3b:27:7a:aa:24:be:09:88:9e:57:e1: 9b:fb:64:8f:15:7c:49:6e:3d:0f:59:42:ff:cf:87:99:14:f3: dc:ac:39:89:26:77:5d:7b:0e:54:e1:67:4a:3b:c6:ed:ce:7c: 65:7b:6b:3a:2b:ff:b3:f0:7b:75:66:46:09:79:61:53:e0:b8: b5:75:8a:04:9f:07:11:39:19:fa:3b:14:74:f3:69:af:7d:c5: fd:a9:93:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzUZR2q8LOa2DKCnlDelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx M2RiZTQwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhmNDBlNGE1N2JkZjc0Yzg1MjdkMWM2MzFkYjI4Y2NkMTQ3MmY0YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQYCRuvj/XdChbc8Y2F2USZ1MuLX UoeaCYogpmxfxogFDJGldQGkZpR1KUfV0Dd5+vuKbjqIPJeY8O+Ibd/yJiom3PRO d00aWCbqEKj4twAQlX5FstPZjTGghAyWathLyQrbru/q+65jJlnUNpsMD0kGXAfd iy3XDJd4VQ5puSXbuyZrDKPVa0H2JW7i/mYmx3XqxQT8fSY1xUgsztyJpILR1sxR diW6BTrpSMZz96j6Xph2QC75kN/utMgRSQ4Uu7nSGVUuvdYFGpgT0cG+ohVWoQSC e64TG/ICUejFyvUF7/PnxCyGgnErXdAE30p5d72aNBAHA2tSNMUgQid9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQOSle990yFJ9HGMdsozNFHL0pSMB8GA1UdIwQY MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0 LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOn6O8/O CkdWxYTrs7+hrBo8VZ7mxi7WIVUlGJ3th+SEhxmmyV/TJfGYgFDt2akf9kUaDovI 4Z8oUbhGpUIi5NaxPg/or6WpSColwAIrjjgtC7JksmFQ91Svi3zAnhGsXS7cqSWC T7u/QPmiO0NZthZFICxs3K7wK/ickKiOgkj6Bd7ucvtf8FFm5KTJryxQUCdjgbK/ 2R72DUrqdMyS/pL9ZfdeX58TgjsneqokvgmInlfhm/tkjxV8SW49D1lC/8+HmRTz 3Kw5iSZ3XXsOVOFnSjvG7c58ZXtrOiv/s/B7dWZGCXlhU+C4tXWKBJ8HETkZ+jsU dPNpr33F/amTGA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:39 2025 by rpki-client