This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json) Hash identifier: kAvlRfBczseJ0x8zRR2p85Y4wFd21IfEV0aZOJo2rQ8= Subject key identifier: FC:1F:C5:9B:4B:57:F1:0D:49:F6:B8:45:D8:C5:F9:28:AE:44:25:3B Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e Certificate serial: 019AF49BACB213AD4568DC2B6BC5440002BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft Manifest number: 06FB Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=) 2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: hYFMxheRK5a1IIJ/OmjLOEL6x3krWniAwCdbCUUeOuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ac:b2:13:ad:45:68:dc:2b:6b:c5:44:00:02:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=fc1fc59b4b57f10d49f6b845d8c5f928ae44253b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:c3:63:18:6c:72:2d:9e:5a:cc:46:54:cd: bc:7b:3c:3f:22:58:46:33:89:be:fd:0a:09:fe:4c: ac:c2:96:8f:e7:ad:64:50:86:10:cd:d0:a6:36:ce: fd:a9:f2:a7:b4:6f:fa:c0:e2:a8:30:92:28:e4:59: 56:5d:84:b9:15:2f:1e:83:42:36:b8:5f:90:0b:a5: eb:3f:b3:b8:24:44:0a:fc:85:27:3c:77:58:b7:78: 53:8b:b1:3c:28:22:ee:3f:d0:35:2b:b0:73:dd:c2: c7:fd:5e:25:1a:b1:6d:df:9a:b7:52:e7:bc:78:5c: 3e:4b:20:97:2f:c3:14:2e:1b:6d:1b:fa:3c:a7:66: e1:ab:25:2b:7c:34:0e:36:b4:ed:bc:ab:8e:65:fe: a2:07:3e:63:04:f6:78:c6:f6:a4:74:6e:60:bd:03: 68:29:b6:9a:8f:f2:6c:d3:74:25:3a:1f:98:ef:70: c0:6e:08:0b:50:76:17:f7:23:46:6d:56:aa:df:da: 16:db:35:b7:c9:b8:c7:13:f7:df:fb:73:51:97:32: 0e:41:7d:d9:32:58:c0:f5:2b:21:62:2e:c1:14:15: 3a:ca:04:27:c4:78:6a:56:86:3a:ff:e7:a4:88:ad: e1:0b:08:d8:84:59:42:c2:b1:84:3a:fd:d2:9d:f3: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1F:C5:9B:4B:57:F1:0D:49:F6:B8:45:D8:C5:F9:28:AE:44:25:3B X509v3 Authority Key Identifier: keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c2:ea:8b:5c:b8:ec:93:1a:6b:fa:af:73:85:69:b4:6f:9e: c6:dc:ca:51:88:2c:3a:d2:d1:a2:28:10:05:57:e1:2f:bb:5f: 4f:df:a1:7c:aa:78:05:6c:f0:c7:84:33:5a:e6:fb:64:e8:54: 2d:08:ab:c4:3d:a9:0f:86:9d:c1:bd:3b:ef:ab:36:59:67:c1: de:5b:cf:5b:2b:b0:03:13:12:b4:0f:29:68:70:09:52:0d:83: 20:f9:e0:f1:a4:9e:6b:03:13:4c:82:4b:91:48:eb:4d:6a:1b: 9c:2e:89:c7:56:79:4d:bb:8f:99:3f:86:4c:15:dd:fa:a3:d5: 64:9d:91:ed:23:7e:30:da:e0:ab:ac:c4:1e:64:66:ec:89:f1: 19:4b:ac:d8:7a:16:c8:c8:17:03:68:1d:a4:96:22:5d:6d:3d: 19:92:12:a8:3b:c5:df:67:ed:9a:aa:7e:3d:f8:9f:32:38:77: 63:b7:22:99:8f:f9:82:d9:97:5f:54:f5:27:44:6c:62:f3:20: 3d:d3:b2:1d:94:65:41:bf:24:49:47:af:24:68:fb:8b:a9:c7: da:73:8f:58:d2:4f:e8:32:2b:b5:75:2c:8a:2a:44:5b:36:04: 7a:f6:0b:11:14:e6:3b:73:cc:54:f6:75:d5:3d:5d:64:7e:0d: bd:25:76:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6yyE61FaNwra8VEAAK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTg3NDA5NWM0Yzk0MjJiOTM1OTc1YTcxNTY0ZjA3NzFj ZDI5MmUwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD EyhmYzFmYzU5YjRiNTdmMTBkNDlmNmI4NDVkOGM1ZjkyOGFlNDQyNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa/DYxhsci2eWsxGVM28ezw/IlhG M4m+/QoJ/kyswpaP561kUIYQzdCmNs79qfKntG/6wOKoMJIo5FlWXYS5FS8eg0I2 uF+QC6XrP7O4JEQK/IUnPHdYt3hTi7E8KCLuP9A1K7Bz3cLH/V4lGrFt35q3Uue8 eFw+SyCXL8MULhttG/o8p2bhqyUrfDQONrTtvKuOZf6iBz5jBPZ4xvakdG5gvQNo Kbaaj/Js03QlOh+Y73DAbggLUHYX9yNGbVaq39oW2zW3ybjHE/ff+3NRlzIOQX3Z MljA9SshYi7BFBU6ygQnxHhqVoY6/+ekiK3hCwjYhFlCwrGEOv3SnfNIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwfxZtLV/ENSfa4RdjF+SiuRCU7MB8GA1UdIwQY MBaAFLhYdAlcTJQiuTWXWnFWTwdxzSkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTct MDcwYTFmNzE4ODVlLzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTctMDcwYTFmNzE4ODVl LzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMLqi1y4 7JMaa/qvc4VptG+extzKUYgsOtLRoigQBVfhL7tfT9+hfKp4BWzwx4QzWub7ZOhU LQirxD2pD4adwb0776s2WWfB3lvPWyuwAxMStA8paHAJUg2DIPng8aSeawMTTIJL kUjrTWobnC6Jx1Z5TbuPmT+GTBXd+qPVZJ2R7SN+MNrgq6zEHmRm7InxGUus2HoW yMgXA2gdpJYiXW09GZISqDvF32ftmqp+PfifMjh3Y7cimY/5gtmXX1T1J0RsYvMg PdOyHZRlQb8kSUevJGj7i6nH2nOPWNJP6DIrtXUsiipEWzYEevYLERTmO3PMVPZ1 1T1dZH4NvSV2HA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:40 2025 by rpki-client