This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json) Hash identifier: VeYpu80LvS38FFGqMFVVZvh08kx87niXfSqVFHcQdNY= Subject key identifier: C8:0E:24:0C:C6:DA:92:02:9D:E9:37:07:D3:AA:25:59:DA:7E:B3:31 Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b Certificate serial: 019AF50B9B26ADFEE928B596CE4A0D73E36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft Manifest number: 0E99 Signing time: Sat 06 Dec 2025 19:02:49 +0000 Manifest this update: Sat 06 Dec 2025 19:02:49 +0000 Manifest next update: Sun 07 Dec 2025 19:02:49 +0000 Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=) 2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: WNGls/JqpavUBfMjZWJnk3rgGQTZhh3lAZUZUOLsP9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9b:26:ad:fe:e9:28:b5:96:ce:4a:0d:73:e3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b Validity Not Before: Dec 6 19:02:49 2025 GMT Not After : Dec 7 19:02:49 2025 GMT Subject: CN=c80e240cc6da92029de93707d3aa2559da7eb331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:b1:33:3d:52:f9:de:28:54:47:26:d5:9d: dd:dc:04:6d:c3:43:5e:3e:ac:03:5a:b0:1b:6c:96: 58:8e:1e:7a:e5:ba:15:2c:c8:6f:e4:aa:6e:32:89: 2c:ed:a3:77:44:05:70:9b:38:fc:52:2d:6f:1d:1d: e1:f9:c6:55:eb:fa:47:bc:af:a2:51:12:51:b4:5f: dd:eb:bb:03:9b:39:6d:bd:55:fe:27:1c:13:ee:f2: 73:8b:a7:37:9c:bc:84:c4:75:f4:ea:8a:72:59:14: 2f:5e:c9:c8:58:2c:dd:8f:30:52:9f:f8:22:0c:72: 0f:cb:88:62:48:88:8a:04:15:3f:ef:3a:fb:e5:f5: b6:12:6a:b6:96:f1:88:f9:71:75:fe:df:fb:8c:db: 6f:f1:2e:6e:e2:26:01:5f:b1:c0:6c:e3:ed:d4:75: 31:5e:23:d2:3d:6e:f7:30:dd:6b:40:4b:4f:ae:80: f2:67:62:80:fe:fb:bf:ab:5e:0c:23:96:48:86:68: 9a:08:ae:77:17:c7:11:97:f3:54:5d:21:f4:eb:8d: e5:ac:bd:7d:2a:0f:3a:15:df:0e:1a:6b:9a:43:00: a4:6b:27:4c:d1:0f:51:62:90:c7:cc:20:11:6b:f7: 3b:a2:be:f1:03:62:90:09:2c:fe:b1:02:2e:13:b2: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:24:0C:C6:DA:92:02:9D:E9:37:07:D3:AA:25:59:DA:7E:B3:31 X509v3 Authority Key Identifier: keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:20:50:b2:7f:2a:65:ed:d6:d8:19:d7:18:78:f1:84:3f:1a: 0d:6d:48:b1:ab:0a:0b:86:98:11:c4:4d:fa:5c:ff:cb:1b:90: f2:81:09:ec:c9:6a:b1:d0:23:da:e0:df:02:a1:7e:c4:a8:de: 82:b7:73:04:f3:23:2a:c0:e4:3e:27:af:f6:57:aa:99:d8:86: af:84:c4:eb:60:89:83:8e:6d:7d:0d:3d:17:69:d9:68:8b:a0: bf:a3:b9:b5:32:e6:65:ed:39:96:1c:2c:29:50:d6:25:4e:71: db:e3:2d:5b:62:ec:ff:de:c7:1e:50:76:0c:0a:67:9a:d6:4d: 94:19:fd:e4:d2:25:f0:65:b5:52:9b:d1:ae:8c:66:41:ce:da: 13:31:7c:dd:87:4b:f8:2b:4a:8e:53:d5:75:f5:b2:35:43:f4: a6:62:79:e6:61:24:69:3c:40:80:9d:46:d2:bf:63:26:ce:29: a2:a2:9d:e0:f6:34:83:e4:f2:d9:f2:b2:7e:d1:03:f2:5e:bc: 64:8f:54:63:4c:d1:0f:e1:2d:cb:5e:1f:33:bf:97:7e:aa:4e: 38:f0:a4:24:f7:dd:02:e5:2f:72:10:fd:64:fc:61:37:95:a5: c5:6f:f7:d9:40:3e:28:ff:69:a7:cd:09:30:31:4a:0d:0b:98: b9:e6:0a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5smrf7pKLWWzkoNc+NuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTkwODhiYjQyMDFjZTQ2ZDhlYjgzZGM5ZjM4Yzc4Yjhm M2JlMWIwHhcNMjUxMjA2MTkwMjQ5WhcNMjUxMjA3MTkwMjQ5WjAzMTEwLwYDVQQD EyhjODBlMjQwY2M2ZGE5MjAyOWRlOTM3MDdkM2FhMjU1OWRhN2ViMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskyxMz1S+d4oVEcm1Z3d3ARtw0Ne PqwDWrAbbJZYjh565boVLMhv5KpuMoks7aN3RAVwmzj8Ui1vHR3h+cZV6/pHvK+i URJRtF/d67sDmzltvVX+JxwT7vJzi6c3nLyExHX06opyWRQvXsnIWCzdjzBSn/gi DHIPy4hiSIiKBBU/7zr75fW2Emq2lvGI+XF1/t/7jNtv8S5u4iYBX7HAbOPt1HUx XiPSPW73MN1rQEtProDyZ2KA/vu/q14MI5ZIhmiaCK53F8cRl/NUXSH0643lrL19 Kg86Fd8OGmuaQwCkaydM0Q9RYpDHzCARa/c7or7xA2KQCSz+sQIuE7IAfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgOJAzG2pICnek3B9OqJVnafrMxMB8GA1UdIwQY MBaAFLmpCIu0IBzkbY64PcnzjHi4874bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMt OGRkNDUzYWI0MjNkLzEvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMtOGRkNDUzYWI0MjNk LzEvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCBQsn8q Ze3W2BnXGHjxhD8aDW1IsasKC4aYEcRN+lz/yxuQ8oEJ7MlqsdAj2uDfAqF+xKje grdzBPMjKsDkPiev9leqmdiGr4TE62CJg45tfQ09F2nZaIugv6O5tTLmZe05lhws KVDWJU5x2+MtW2Ls/97HHlB2DApnmtZNlBn95NIl8GW1UpvRroxmQc7aEzF83YdL +CtKjlPVdfWyNUP0pmJ55mEkaTxAgJ1G0r9jJs4poqKd4PY0g+Ty2fKyftED8l68 ZI9UY0zRD+Ety14fM7+XfqpOOPCkJPfdAuUvchD9ZPxhN5WlxW/32UA+KP9pp80J MDFKDQuYueYKQA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:16 2025 by rpki-client