This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json) Hash identifier: HSSNv9lc+biOzeJrqp8uD6R3WSAcPIrnJD1WGQf+V3o= Subject key identifier: 88:F7:99:B8:73:41:A2:32:A7:29:3B:F6:B5:95:07:FC:9E:F6:E1:3E Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9 Certificate serial: 019B27E4855A4BD9FA38F86BD67CDEFDEC58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft Manifest number: 14F6 Signing time: Tue 16 Dec 2025 16:00:46 +0000 Manifest this update: Tue 16 Dec 2025 16:00:46 +0000 Manifest next update: Wed 17 Dec 2025 16:00:46 +0000 Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=) 2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: ttlG/4j0YqRAPnGmW9s5T7y4I+tYeX8t8Xq29mELFys=) 3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:85:5a:4b:d9:fa:38:f8:6b:d6:7c:de:fd:ec:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9 Validity Not Before: Dec 16 16:00:46 2025 GMT Not After : Dec 17 16:00:46 2025 GMT Subject: CN=88f799b87341a232a7293bf6b59507fc9ef6e13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9b:dc:5e:78:84:da:61:1c:ab:38:80:dd:fa: d3:46:3a:54:dd:93:3f:45:ae:ce:78:76:bf:fd:ad: b0:a7:35:f4:09:33:70:d1:a6:c7:7f:57:93:9a:a8: 37:4f:3e:45:0c:ec:a0:55:c4:3f:de:e6:85:07:01: 7e:e3:bd:21:fb:fe:4a:a4:12:c9:1a:2c:26:60:e2: 3e:3f:d0:a0:68:30:89:d1:fe:18:5b:e2:ad:fb:44: cb:b4:97:d1:11:de:ac:11:18:93:26:90:14:96:ce: 0a:7b:6e:44:52:a7:cd:e6:70:28:38:b6:f9:2b:ae: aa:82:62:6f:8a:77:d0:8b:06:2a:29:e2:c9:c1:b2: 46:5d:9c:50:fa:8a:60:41:63:dd:b1:7b:f4:32:53: c5:98:8f:b5:ae:2c:15:f8:fa:9b:4e:bf:e0:4d:69: 73:2f:48:88:26:a1:7c:e2:f8:65:47:b6:0a:24:f6: ed:ba:5e:69:25:19:80:8f:87:aa:c1:72:3c:97:01: a5:02:bf:da:df:dc:0c:48:74:8c:02:f7:f6:04:c9: 57:04:e0:de:a6:02:34:a3:48:75:0d:36:ed:9e:c9: 76:14:08:0b:f3:d5:f2:cc:74:ae:cc:a0:70:4f:b1: 80:4b:6e:bd:0c:9a:11:00:c9:86:13:34:3d:65:bf: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:99:B8:73:41:A2:32:A7:29:3B:F6:B5:95:07:FC:9E:F6:E1:3E X509v3 Authority Key Identifier: keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ee:d1:cf:ab:1d:d3:8e:10:e5:dd:99:d8:c8:f4:df:f5:22: 87:f7:dc:0c:ae:76:9d:ed:01:62:c8:a0:e0:45:a0:95:e2:55: d6:5c:89:f2:ee:40:82:17:7e:bc:fc:4f:d1:fd:01:51:f2:11: 43:b4:e9:83:8d:cf:59:f9:8d:e0:c7:64:ae:0d:5e:2a:bd:a9: 82:98:a7:65:94:b8:20:53:8c:90:b0:29:87:9e:6e:bd:65:6b: 03:61:cc:ef:57:d5:1d:b1:bc:c4:07:cc:f5:1d:66:dc:bc:e5: e6:10:43:76:c3:c7:57:6f:f7:01:81:af:48:01:37:13:3b:aa: d8:35:0a:67:c9:a5:dd:24:22:c8:4e:1a:dc:2e:74:96:3b:cd: 48:b6:e1:23:17:c1:3d:65:95:69:aa:9f:5a:73:73:9a:15:3f: a6:fb:f7:d5:fa:06:51:1d:c3:57:ae:4f:cd:36:8f:18:46:32: b4:61:3d:eb:80:3c:91:6c:0b:7f:c6:0e:df:e2:84:c9:5c:c3: 40:ba:01:f3:51:47:f1:25:93:5b:f6:9b:85:bf:ca:14:fc:27: 56:37:84:33:75:4a:b4:28:d0:ab:f9:e0:8d:49:ab:81:e4:2e: aa:57:55:29:a4:53:bb:0a:4f:a6:d8:e8:e2:c5:b2:86:01:c4: b3:be:8a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5IVaS9n6OPhr1nze/exYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQ3Nzk1NzVjYjliZjA1ODI0MzI4N2U5ODIzNGRlY2E5 MTFmYzkwHhcNMjUxMjE2MTYwMDQ2WhcNMjUxMjE3MTYwMDQ2WjAzMTEwLwYDVQQD Eyg4OGY3OTliODczNDFhMjMyYTcyOTNiZjZiNTk1MDdmYzllZjZlMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZvcXniE2mEcqziA3frTRjpU3ZM/ Ra7OeHa//a2wpzX0CTNw0abHf1eTmqg3Tz5FDOygVcQ/3uaFBwF+470h+/5KpBLJ GiwmYOI+P9CgaDCJ0f4YW+Kt+0TLtJfREd6sERiTJpAUls4Ke25EUqfN5nAoOLb5 K66qgmJvinfQiwYqKeLJwbJGXZxQ+opgQWPdsXv0MlPFmI+1riwV+PqbTr/gTWlz L0iIJqF84vhlR7YKJPbtul5pJRmAj4eqwXI8lwGlAr/a39wMSHSMAvf2BMlXBODe pgI0o0h1DTbtnsl2FAgL89XyzHSuzKBwT7GAS269DJoRAMmGEzQ9Zb/bZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIj3mbhzQaIypyk79rWVB/ye9uE+MB8GA1UdIwQY MBaAFLn0d5V1y5vwWCQyh+mCNN7KkR/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAt Y2Q5ZmYwNTUyZjkyLzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAtY2Q5ZmYwNTUyZjky LzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+7Rz6sd 044Q5d2Z2Mj03/Uih/fcDK52ne0BYsig4EWgleJV1lyJ8u5Aghd+vPxP0f0BUfIR Q7Tpg43PWfmN4Mdkrg1eKr2pgpinZZS4IFOMkLAph55uvWVrA2HM71fVHbG8xAfM 9R1m3Lzl5hBDdsPHV2/3AYGvSAE3Ezuq2DUKZ8ml3SQiyE4a3C50ljvNSLbhIxfB PWWVaaqfWnNzmhU/pvv31foGUR3DV65PzTaPGEYytGE964A8kWwLf8YO3+KEyVzD QLoB81FH8SWTW/abhb/KFPwnVjeEM3VKtCjQq/ngjUmrgeQuqldVKaRTuwpPptjo 4sWyhgHEs76KrA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:59:23 2025 by rpki-client