This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json) Hash identifier: SzF7UKyjITMn+5od4bJKvR+967+SvR/UYImuADSsOr4= Subject key identifier: A0:5B:8A:3F:5B:28:A9:F7:1C:72:67:08:D4:68:A3:AB:77:65:78:77 Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Certificate serial: 019AF3F710CD9764AEB6381307FB6C597A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft Manifest number: 06AE Signing time: Sat 06 Dec 2025 14:00:46 +0000 Manifest this update: Sat 06 Dec 2025 14:00:46 +0000 Manifest next update: Sun 07 Dec 2025 14:00:46 +0000 Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=) 2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=) 3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: FjrCjWeZkaZK3HV+8R9wtUgUKIblUA70YrcmOFqVEZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:10:cd:97:64:ae:b6:38:13:07:fb:6c:59:7a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Validity Not Before: Dec 6 14:00:46 2025 GMT Not After : Dec 7 14:00:46 2025 GMT Subject: CN=a05b8a3f5b28a9f71c726708d468a3ab77657877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:ef:d3:8f:30:b3:da:5d:f6:9f:a3:bd:6d: 59:22:03:fb:ec:89:70:4c:a6:78:3e:55:5c:d7:04: 68:2f:96:35:d9:25:95:e8:21:99:f6:4f:ea:83:52: 01:93:6d:ea:b5:19:4c:ee:0e:23:00:b2:81:2f:e6: ad:d7:df:18:dd:3a:cb:df:d4:73:c9:2f:3f:a3:e9: da:15:37:34:a1:5c:2d:57:ce:ca:af:ac:88:1c:f6: 40:65:37:96:bc:0a:ca:c9:42:5f:5a:a9:da:8a:29: 86:4e:60:a6:f5:4c:6a:3e:39:9e:0a:5f:67:14:7b: 4b:ae:c0:34:eb:f7:d6:fa:ab:e4:71:d8:8a:3e:38: 2d:c8:41:7e:73:01:04:02:d0:9c:6b:f2:fe:c8:f6: d1:40:a3:0f:68:84:f4:33:cb:99:4c:d8:b8:1c:02: 77:c7:0f:33:ee:c0:25:8b:2b:99:60:6b:95:e1:ec: 9a:49:f8:36:d8:2f:98:69:86:2f:fb:be:c7:80:b2: e3:5c:36:79:e4:1d:1c:cd:cb:70:70:1e:c9:41:54: 30:73:f4:d6:41:88:da:12:dd:96:72:0d:61:8d:6d: 7a:9f:98:f5:78:b2:81:0b:c1:56:ce:57:c8:ad:db: c8:35:5d:22:dc:6d:2c:dd:98:74:72:d3:25:09:f1: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5B:8A:3F:5B:28:A9:F7:1C:72:67:08:D4:68:A3:AB:77:65:78:77 X509v3 Authority Key Identifier: keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:26:7a:70:eb:c5:f2:20:70:4b:e5:8d:bd:e6:56:39:c9:cc: 62:83:a7:df:f1:3a:13:0e:26:40:31:57:07:70:00:81:f6:d7: 9e:61:80:6a:b6:7d:48:ea:d7:2b:80:26:2b:74:9a:a2:12:ad: 1c:1d:0e:eb:20:ea:f9:e8:49:90:46:e3:19:2a:b4:a8:94:b2: 3a:a7:8d:90:ed:46:f2:69:60:cf:af:c6:9e:df:e5:0d:bf:ff: f0:79:00:86:51:f6:19:3d:4c:36:ea:77:85:26:eb:bd:54:0f: ed:53:f5:35:85:47:ab:fb:9f:1d:d4:1d:eb:95:1a:9e:30:6b: bc:5d:cf:68:59:33:59:a4:1f:e0:35:59:30:40:ca:6b:c5:4c: 4a:e7:d6:84:a0:da:b1:f8:f4:96:6d:cd:04:a8:15:9b:fe:69: 05:26:11:af:77:24:cb:9c:7c:e7:69:79:b7:17:96:9f:2e:af: 57:2f:b0:45:38:57:e3:5e:53:53:f3:a2:f7:9b:13:48:a8:a3: 21:61:d2:f2:d1:91:e6:08:a7:b9:3f:cc:12:41:b9:96:28:96: e3:64:7b:ac:6f:96:3a:a6:15:72:62:37:2a:ec:a2:fe:d0:b5: 60:e2:d8:79:c9:c7:76:66:47:1c:40:0b:8f:b9:a7:ad:3d:97: 1c:66:d1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xDNl2SutjgTB/tsWXo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl OWQ3MDkwHhcNMjUxMjA2MTQwMDQ2WhcNMjUxMjA3MTQwMDQ2WjAzMTEwLwYDVQQD EyhhMDViOGEzZjViMjhhOWY3MWM3MjY3MDhkNDY4YTNhYjc3NjU3ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjrv048ws9pd9p+jvW1ZIgP77Ilw TKZ4PlVc1wRoL5Y12SWV6CGZ9k/qg1IBk23qtRlM7g4jALKBL+at198Y3TrL39Rz yS8/o+naFTc0oVwtV87Kr6yIHPZAZTeWvArKyUJfWqnaiimGTmCm9UxqPjmeCl9n FHtLrsA06/fW+qvkcdiKPjgtyEF+cwEEAtCca/L+yPbRQKMPaIT0M8uZTNi4HAJ3 xw8z7sAliyuZYGuV4eyaSfg22C+YaYYv+77HgLLjXDZ55B0czctwcB7JQVQwc/TW QYjaEt2Wcg1hjW16n5j1eLKBC8FWzlfIrdvINV0i3G0s3Zh0ctMlCfH60QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBbij9bKKn3HHJnCNRoo6t3ZXh3MB8GA1UdIwQY MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiZ6cOvF 8iBwS+WNveZWOcnMYoOn3/E6Ew4mQDFXB3AAgfbXnmGAarZ9SOrXK4AmK3SaohKt HB0O6yDq+ehJkEbjGSq0qJSyOqeNkO1G8mlgz6/Gnt/lDb//8HkAhlH2GT1MNup3 hSbrvVQP7VP1NYVHq/ufHdQd65UanjBrvF3PaFkzWaQf4DVZMEDKa8VMSufWhKDa sfj0lm3NBKgVm/5pBSYRr3cky5x852l5txeWny6vVy+wRThX415TU/Oi95sTSKij IWHS8tGR5ginuT/MEkG5liiW42R7rG+WOqYVcmI3Kuyi/tC1YOLYecnHdmZHHEAL j7mnrT2XHGbRrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:29:36 2025 by rpki-client