This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json) Hash identifier: 5Jmc9pTWaUaxBbpljvOMmbUzdA8keR+TTt6pykfM5+8= Subject key identifier: 18:B4:7A:60:F3:FB:1A:E0:AE:21:5B:85:57:9A:DA:E1:47:24:75:EB Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec Certificate serial: 019AF164416D6705B21E5F1E121F82EF1116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft Manifest number: 0EBC Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: KrWaj3PmGUr__R-XWPo-LvjSSzE.roa (hash: D32/8FWqAF1z0NVQywtDopSVNiH+dneRDeaovNlaE+U=) 2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: UoWL2kAxd3hG9kPn4AZSdr7xKOmO4CEi5I4gPWMjmLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:41:6d:67:05:b2:1e:5f:1e:12:1f:82:ef:11:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=18b47a60f3fb1ae0ae215b85579adae1472475eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c5:1b:06:31:c0:37:e1:68:a0:50:06:25:6d: 0e:70:64:06:43:cc:3d:97:ab:02:70:f5:fe:81:c2: 8a:3d:c3:ab:05:05:58:3f:9b:6e:1e:80:e4:84:e7: 24:44:a6:6a:69:ab:31:94:9c:23:25:12:d2:42:ea: bc:ed:36:b4:dd:88:f8:c0:7c:cc:1a:7d:ae:bd:ed: 7b:9e:8e:3e:52:d4:55:8a:a1:9c:82:a9:d4:50:04: 9c:a0:af:7e:2c:db:a3:0f:42:2b:86:67:6d:1e:51: 83:10:4c:15:90:14:a1:bb:93:a5:2d:7a:e0:38:b9: cd:ee:29:55:32:7f:55:3d:a5:cb:26:f9:7f:b7:a7: 95:26:a8:eb:d7:e5:99:33:9e:ba:fd:eb:6b:cc:53: b4:69:0d:a8:29:cb:ce:4b:2a:70:8a:6f:b7:0f:2d: c2:64:d4:14:3f:91:21:7c:8b:54:3d:a6:40:37:b5: 3a:eb:63:92:80:1e:b2:65:34:05:5c:95:58:ae:16: 5a:60:b6:57:c5:6f:dc:cc:7e:cf:4e:ff:d5:ef:61: 04:a2:dd:c8:3a:76:96:d1:61:ff:e8:a7:c6:03:6a: 4b:d3:d0:b5:c0:51:5f:b0:4c:22:84:4c:f5:ba:96: c4:dd:e2:fb:0b:62:76:88:75:3c:51:e2:a2:c1:42: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B4:7A:60:F3:FB:1A:E0:AE:21:5B:85:57:9A:DA:E1:47:24:75:EB X509v3 Authority Key Identifier: keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a4:c5:5e:1c:a1:79:01:45:64:3e:6b:eb:34:93:a1:99:63: 66:74:98:b7:ff:7f:95:2c:6d:a9:da:93:0a:73:7f:10:d1:70: 5d:3d:98:e9:c5:fe:56:47:e4:53:d6:04:da:56:b3:2b:96:bc: 18:1f:8b:96:3a:7d:96:a8:69:5f:48:0b:48:72:eb:6c:47:42: 8c:77:b0:9c:81:8a:04:51:07:bf:7b:c4:0a:3e:2f:c1:0c:1c: 13:e4:98:1d:9f:89:9e:a5:c7:da:53:a7:d2:ca:69:ac:04:d6: 6c:42:b8:0f:fd:cb:b8:75:3b:f5:aa:35:d7:4a:ff:81:53:6e: fd:fa:c2:f9:04:82:47:dc:36:38:f1:94:b2:b0:5d:66:6a:79: 80:66:3f:4e:7b:7a:33:f7:95:6f:20:c8:45:77:42:3e:03:22: 4c:ae:23:de:51:55:22:b1:21:44:3b:91:bc:28:d7:2f:2e:2f: b6:8c:61:8e:bd:84:60:97:4e:90:6f:bc:96:e2:88:26:b0:c8: 0a:c7:30:a7:eb:f0:b6:68:90:e5:2a:5b:b9:96:16:50:1a:ad: 06:26:76:3c:86:23:9b:b9:74:61:cb:f3:14:72:92:5f:ef:f0: 4a:bc:2d:8e:5a:9f:82:63:6d:f8:c7:55:be:42:3d:4e:5c:a2: fc:5b:77:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEFtZwWyHl8eEh+C7xEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTlkYjdmMmMyZTNiM2FiZDhiZjQxNWYwY2UxZmZmMzM0 MzI5ZWMwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EygxOGI0N2E2MGYzZmIxYWUwYWUyMTViODU1NzlhZGFlMTQ3MjQ3NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsUbBjHAN+FooFAGJW0OcGQGQ8w9 l6sCcPX+gcKKPcOrBQVYP5tuHoDkhOckRKZqaasxlJwjJRLSQuq87Ta03Yj4wHzM Gn2uve17no4+UtRViqGcgqnUUAScoK9+LNujD0IrhmdtHlGDEEwVkBShu5OlLXrg OLnN7ilVMn9VPaXLJvl/t6eVJqjr1+WZM566/etrzFO0aQ2oKcvOSypwim+3Dy3C ZNQUP5EhfItUPaZAN7U662OSgB6yZTQFXJVYrhZaYLZXxW/czH7PTv/V72EEot3I OnaW0WH/6KfGA2pL09C1wFFfsEwihEz1upbE3eL7C2J2iHU8UeKiwUJMJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi0emDz+xrgriFbhVea2uFHJHXrMB8GA1UdIwQY MBaAFLhZ238sLjs6vYv0FfDOH/8zQynsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzIt NGMxYzU3YTgxZmZkLzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzItNGMxYzU3YTgxZmZk LzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6TFXhyh eQFFZD5r6zSToZljZnSYt/9/lSxtqdqTCnN/ENFwXT2Y6cX+VkfkU9YE2lazK5a8 GB+Lljp9lqhpX0gLSHLrbEdCjHewnIGKBFEHv3vECj4vwQwcE+SYHZ+JnqXH2lOn 0spprATWbEK4D/3LuHU79ao110r/gVNu/frC+QSCR9w2OPGUsrBdZmp5gGY/Tnt6 M/eVbyDIRXdCPgMiTK4j3lFVIrEhRDuRvCjXLy4vtoxhjr2EYJdOkG+8luKIJrDI Cscwp+vwtmiQ5SpbuZYWUBqtBiZ2PIYjm7l0YcvzFHKSX+/wSrwtjlqfgmNt+MdV vkI9Tlyi/Ft3+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:07 2025 by rpki-client