This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json) Hash identifier: MHwbazFclIBWs7kHOzJsRJmXj8DK66+ILfmQbj98qzM= Subject key identifier: F6:69:11:6F:86:56:A2:75:12:83:1B:08:F7:4D:BC:85:3A:B1:4A:24 Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94 Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94 Certificate serial: 019AF5AEF26746F02EF705CFEC108708416C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 22:01:14 +0000 Manifest this update: Sat 06 Dec 2025 22:01:14 +0000 Manifest next update: Sun 07 Dec 2025 22:01:14 +0000 Files and hashes: 1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=) 2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: 3Km8RKC6m7chM059d8rREfYjhyo0TmeXJVYPXVwSAOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:f2:67:46:f0:2e:f7:05:cf:ec:10:87:08:41:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94 Validity Not Before: Dec 6 22:01:14 2025 GMT Not After : Dec 7 22:01:14 2025 GMT Subject: CN=f669116f8656a27512831b08f74dbc853ab14a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:66:7f:b6:b5:cd:eb:54:78:eb:bc:c8:69: 2b:06:e7:1d:36:11:f7:15:98:7f:46:ae:cc:32:0c: 51:7a:21:5c:c9:0e:d3:f2:b8:72:3d:65:9c:5c:d9: d5:63:24:1b:b9:4a:6e:f8:74:e4:54:e9:b4:f9:75: 2d:b5:9d:93:54:8c:f3:97:71:8e:06:fe:09:c8:84: 72:3c:7a:a8:49:f2:96:ed:5d:0d:d7:0e:49:14:eb: 51:df:f5:4a:f5:85:85:be:d0:8d:c4:10:17:c6:db: 6a:0d:4d:23:de:6a:4d:1b:3e:97:35:37:7e:ec:67: 87:ca:f0:53:6a:c3:ce:38:5f:28:a3:3f:19:2c:0f: 2b:dd:d8:1c:b2:b0:b4:0c:e2:13:1d:56:f3:9a:1c: 36:3a:6d:95:79:5d:15:2f:7f:ea:d5:a0:2b:00:64: 04:dc:df:f5:7d:5b:02:87:97:46:ca:cd:2f:a7:9d: 1a:cc:69:45:52:ed:e5:28:d9:ca:54:87:03:1b:b0: 63:d5:d8:1e:4a:b7:94:09:5f:bf:18:d5:c6:ee:5b: e7:92:32:45:ef:19:5a:ee:24:36:28:16:5b:7f:0c: 93:90:21:bc:b7:fb:02:75:bf:82:e0:14:9a:a4:51: c6:04:b6:8b:a2:38:c5:38:90:8a:66:4e:76:41:86: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:69:11:6F:86:56:A2:75:12:83:1B:08:F7:4D:BC:85:3A:B1:4A:24 X509v3 Authority Key Identifier: keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:89:f0:bd:d0:2a:18:7e:1a:61:39:07:01:1a:c3:23:1d:17: 8b:80:6f:4e:c3:9c:f1:cb:1b:bb:e9:8a:fc:2c:fc:96:4c:ef: 88:33:cf:ff:30:bc:9d:32:f5:a8:6d:8f:01:0d:95:3a:86:dd: 55:d4:d4:3d:19:8a:9a:4a:34:b0:d9:fd:d6:c7:5e:2b:cc:0d: 7a:07:6e:d8:24:a7:61:41:ce:e1:8a:5c:e0:2e:aa:8d:e0:48: 01:99:4e:ec:02:60:24:e4:d2:61:e5:28:69:99:31:da:5a:5a: f5:d2:0b:c2:cd:b1:d9:64:79:9b:7f:70:42:76:d4:21:81:54: 13:c0:c0:05:43:dd:28:b3:b4:bd:9a:d8:22:70:b8:42:74:30: 2a:d4:a5:77:6c:f5:cd:a2:18:f4:87:5e:1a:25:18:93:46:51: 10:e8:fd:35:75:a1:7e:2d:f5:9b:ad:92:15:a8:5e:40:77:8e: 97:54:91:4f:ea:51:82:db:d2:71:cc:41:4a:36:13:65:80:1e: a1:4b:5e:c8:48:e1:2c:dd:62:38:73:b1:76:27:ef:6e:1d:9f: 70:ae:c0:36:f9:6a:e6:15:fd:48:3a:f0:31:05:a3:77:48:63: f8:6b:35:6d:82:6b:67:4f:5a:d1:02:f3:ac:38:ed:8c:df:1e: a3:62:5d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rvJnRvAu9wXP7BCHCEFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGExM2ExYzllMWRkODRlZGU0MzI4MzQ5MGJlNzgzODc3 NTRhOTQwHhcNMjUxMjA2MjIwMTE0WhcNMjUxMjA3MjIwMTE0WjAzMTEwLwYDVQQD EyhmNjY5MTE2Zjg2NTZhMjc1MTI4MzFiMDhmNzRkYmM4NTNhYjE0YTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEtmf7a1zetUeOu8yGkrBucdNhH3 FZh/Rq7MMgxReiFcyQ7T8rhyPWWcXNnVYyQbuUpu+HTkVOm0+XUttZ2TVIzzl3GO Bv4JyIRyPHqoSfKW7V0N1w5JFOtR3/VK9YWFvtCNxBAXxttqDU0j3mpNGz6XNTd+ 7GeHyvBTasPOOF8ooz8ZLA8r3dgcsrC0DOITHVbzmhw2Om2VeV0VL3/q1aArAGQE 3N/1fVsCh5dGys0vp50azGlFUu3lKNnKVIcDG7Bj1dgeSreUCV+/GNXG7lvnkjJF 7xla7iQ2KBZbfwyTkCG8t/sCdb+C4BSapFHGBLaLojjFOJCKZk52QYbtkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZpEW+GVqJ1EoMbCPdNvIU6sUokMB8GA1UdIwQY MBaAFLsKE6HJ4d2E7eQyg0kL54OHdUqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjhjY2EtNmIxZC00YWU2LWJjMmEt ZjQyZTdjNDU5MzVhLzEvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjhjY2EtNmIxZC00YWU2LWJjMmEtZjQyZTdjNDU5MzVh LzEvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZonwvdAq GH4aYTkHARrDIx0Xi4BvTsOc8csbu+mK/Cz8lkzviDPP/zC8nTL1qG2PAQ2VOobd VdTUPRmKmko0sNn91sdeK8wNegdu2CSnYUHO4Ypc4C6qjeBIAZlO7AJgJOTSYeUo aZkx2lpa9dILws2x2WR5m39wQnbUIYFUE8DABUPdKLO0vZrYInC4QnQwKtSld2z1 zaIY9IdeGiUYk0ZREOj9NXWhfi31m62SFaheQHeOl1SRT+pRgtvSccxBSjYTZYAe oUteyEjhLN1iOHOxdifvbh2fcK7ANvlq5hX9SDrwMQWjd0hj+Gs1bYJrZ09a0QLz rDjtjN8eo2JdSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:43 2025 by rpki-client