This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft File: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json) Hash identifier: ILxcLvR/MTJMMQt6yPt9IAQOdgO3px9zlwLagp+S5O0= Subject key identifier: A0:B9:1D:38:DB:14:DA:DE:DA:74:55:01:90:A8:88:F7:6B:11:5C:91 Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Certificate serial: 019AF2095FB81D2A2BED55B0196B337B1A3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft Manifest number: 0869 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=) 2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: /M8PLtSb2YRy4iFstExQt3paNXtcO89iznxzrEhLkLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5f:b8:1d:2a:2b:ed:55:b0:19:6b:33:7b:1a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=a0b91d38db14dadeda74550190a888f76b115c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:0e:ab:66:66:12:78:a2:ec:79:0e:5b:22: 29:6e:1e:b6:bf:87:13:79:81:e0:d3:a1:00:c4:e3: 58:52:28:4a:b9:a0:29:32:86:4b:c6:71:22:bd:c3: ce:7d:01:e7:fb:a4:63:f3:58:f0:be:1c:26:af:09: f8:85:3f:72:c8:0c:31:8b:9d:ee:01:23:4a:6f:c5: 51:72:82:9a:6e:72:1d:9e:8f:f5:2d:b1:fa:ed:ef: c6:54:c9:b6:d8:8f:88:78:85:d4:d5:f2:fe:fb:26: 19:ae:ca:5c:74:fa:12:13:df:fc:c5:80:3a:f1:77: 6f:0b:cf:95:1c:46:f9:7e:c7:71:cf:cf:fd:a8:8e: 71:cb:55:30:d4:14:9a:8d:ea:8c:2b:d2:b5:95:8c: de:15:20:aa:f4:ff:ba:5e:2c:d5:e9:9f:1d:8e:ad: e7:d6:63:89:5e:d1:3a:c7:c3:9b:e6:fe:42:b5:34: 7f:25:82:86:de:f3:17:25:7a:3d:da:fe:da:1d:3a: 64:70:bd:bb:1a:2e:0f:99:e9:9d:05:6a:83:16:1c: 76:6c:44:a1:27:ff:52:56:33:81:10:6e:e0:2c:c9: 65:56:be:a9:b1:ee:7c:8a:f3:8a:a6:84:93:f8:04: 40:46:94:5b:a0:1e:28:42:06:c7:4d:23:ce:f7:c6: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:1D:38:DB:14:DA:DE:DA:74:55:01:90:A8:88:F7:6B:11:5C:91 X509v3 Authority Key Identifier: keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0c:f9:76:2b:98:cc:7b:9a:03:cd:45:3a:52:61:0f:b9:e8: 3e:55:4f:dd:13:a6:84:c4:b6:36:cb:07:a2:c6:32:14:2c:0d: 8d:c4:15:06:82:40:09:37:26:1a:a4:7f:47:42:1e:41:e1:42: bb:39:a5:b0:d5:18:9f:ab:91:88:a3:e0:e2:e3:75:82:11:6c: 48:11:a7:72:64:07:4f:5b:b3:44:39:d2:65:2c:11:e6:2c:c8: e8:f0:ef:1c:8c:f0:c6:78:68:8a:1c:54:27:3f:20:78:28:9d: e6:f5:04:de:59:85:4d:76:38:2b:78:80:96:4e:2a:09:97:44: 0d:64:2c:0a:d9:57:9c:83:87:87:19:5f:3a:cf:4b:c9:9a:30: c3:37:20:67:5c:6d:0f:bd:dd:e5:90:13:d0:53:80:d4:b2:36: 86:81:f7:1b:5c:8f:16:ee:22:c7:e9:07:2c:32:dc:60:de:ec: 49:96:55:1d:4d:85:83:50:c6:ed:30:a6:04:a0:b2:bc:e4:69: 44:bb:10:fb:57:95:80:67:e4:e4:e1:2d:6c:ba:ed:26:25:51: 4b:a6:0c:ba:05:c9:53:10:15:fc:bb:d7:ab:85:03:f6:be:d0: 5f:0c:23:30:80:bf:1a:93:e8:ac:d8:2d:97:2a:04:45:90:38: e4:0b:90:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV+4HSor7VWwGWszexo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1 NTQzZjYwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhhMGI5MWQzOGRiMTRkYWRlZGE3NDU1MDE5MGE4ODhmNzZiMTE1YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07sOq2ZmEnii7HkOWyIpbh62v4cT eYHg06EAxONYUihKuaApMoZLxnEivcPOfQHn+6Rj81jwvhwmrwn4hT9yyAwxi53u ASNKb8VRcoKabnIdno/1LbH67e/GVMm22I+IeIXU1fL++yYZrspcdPoSE9/8xYA6 8XdvC8+VHEb5fsdxz8/9qI5xy1Uw1BSajeqMK9K1lYzeFSCq9P+6XizV6Z8djq3n 1mOJXtE6x8Ob5v5CtTR/JYKG3vMXJXo92v7aHTpkcL27Gi4PmemdBWqDFhx2bESh J/9SVjOBEG7gLMllVr6pse58ivOKpoST+ARARpRboB4oQgbHTSPO98bt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC5HTjbFNre2nRVAZCoiPdrEVyRMB8GA1UdIwQY MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1 LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwz5diuY zHuaA81FOlJhD7noPlVP3ROmhMS2NssHosYyFCwNjcQVBoJACTcmGqR/R0IeQeFC uzmlsNUYn6uRiKPg4uN1ghFsSBGncmQHT1uzRDnSZSwR5izI6PDvHIzwxnhoihxU Jz8geCid5vUE3lmFTXY4K3iAlk4qCZdEDWQsCtlXnIOHhxlfOs9LyZowwzcgZ1xt D73d5ZAT0FOA1LI2hoH3G1yPFu4ix+kHLDLcYN7sSZZVHU2Fg1DG7TCmBKCyvORp RLsQ+1eVgGfk5OEtbLrtJiVRS6YMugXJUxAV/LvXq4UD9r7QXwwjMIC/GpPorNgt lyoERZA45AuQyw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:11 2025 by rpki-client