This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json) Hash identifier: GZCY2z4IOQzrkTEzA3NngVSkzUH8XtZe5L0AC0w5l/o= Subject key identifier: A9:BC:23:A3:6A:18:E0:96:89:6D:55:6D:FC:16:F7:81:89:7C:97:3A Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708 Certificate serial: 019AF1D21EA7E1CF024A7F984ACAD45510CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft Manifest number: 156C Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=) 2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: yLCHpRjnT4K9lX8Iq3v5Qr34a9+59sohTTvfMunlw3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1e:a7:e1:cf:02:4a:7f:98:4a:ca:d4:55:10:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708 Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=a9bc23a36a18e096896d556dfc16f781897c973a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:1e:10:5a:f8:8f:a6:30:d1:a8:3b:c3:25: e8:d8:61:5f:6d:1d:1c:e4:bd:56:bc:63:2c:1a:52: 2f:c1:c7:68:5c:74:ec:5b:c5:f7:ad:3b:c2:6b:1f: 1d:43:16:15:16:2b:cb:14:f2:c9:01:29:ef:8d:17: c6:eb:53:20:06:ee:8a:cd:0d:2b:7b:d3:e9:8d:21: ca:13:a0:37:f2:1f:7a:19:99:8b:9c:90:31:6a:35: d6:62:dc:3e:87:fc:cb:35:9d:4b:03:6b:9d:55:da: cc:4f:ba:16:c6:e1:14:b0:84:db:df:23:af:9d:c7: 5e:06:db:0c:14:9a:87:a3:29:52:fe:44:3b:60:0f: 4a:ff:45:b5:61:91:7b:55:3c:2b:02:bd:6e:28:3d: 76:e4:e6:b7:4b:32:d5:f7:2b:13:54:81:61:b0:17: 70:71:0d:a4:c8:09:25:ed:30:5b:d9:b4:05:f5:a6: 6a:fe:4c:55:b2:10:c6:e2:e5:57:64:52:53:24:b3: 23:e2:2f:d7:a7:15:61:b6:09:07:fc:af:ab:c5:73: 98:6b:89:9e:64:f2:44:51:e2:3a:d4:b0:c2:83:87: ee:1a:4a:7b:1b:3a:52:b5:3b:4e:ca:ae:ec:50:22: ea:3e:c9:1e:8c:3a:bd:ca:2e:53:42:b7:90:01:d7: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BC:23:A3:6A:18:E0:96:89:6D:55:6D:FC:16:F7:81:89:7C:97:3A X509v3 Authority Key Identifier: keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b3:4b:c3:f3:62:91:c3:3c:dc:c7:23:45:a7:15:0b:11:1f: e1:ad:76:f1:0b:08:7f:1c:e6:b1:1e:90:bb:db:8e:1d:56:3d: da:9a:e4:32:8a:8b:1b:39:31:c3:9f:e9:c5:83:92:3b:3e:09: d5:0a:72:a3:d9:07:ee:52:49:08:94:9c:01:7d:12:7b:49:c9: 9d:83:b3:1b:fa:3b:07:a1:19:65:6c:48:62:d7:8d:df:d7:44: 4e:71:c6:a2:f9:66:53:d1:5a:b8:c7:03:19:8f:77:61:54:e5: 85:4c:9f:8c:89:a8:64:4f:e5:5b:2b:a9:e4:34:65:2d:ca:0d: e1:55:85:2a:0f:80:5f:e1:3f:9d:b9:0a:6a:ab:43:d5:af:4a: 6c:75:f9:cf:fe:3d:e6:d9:74:6a:60:23:b5:43:76:0c:88:e1: 18:e1:0d:ef:bb:fe:45:f8:24:8c:6c:31:62:b0:6e:61:63:81: b9:dc:46:73:26:12:bc:e8:bd:db:c4:bf:ed:71:f8:56:62:27: 7e:a6:82:8e:0a:3a:cc:60:d8:93:0c:84:f4:0b:6c:75:c8:5f: 72:fc:d5:9d:62:86:75:ad:40:be:92:05:fd:5b:26:32:be:5e: c6:63:c2:0d:05:ed:59:13:ea:07:64:78:0f:74:40:3f:f2:02: 28:d8:28:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0h6n4c8CSn+YSsrUVRDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw OTY3MDgwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD EyhhOWJjMjNhMzZhMThlMDk2ODk2ZDU1NmRmYzE2Zjc4MTg5N2M5NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11QeEFr4j6Yw0ag7wyXo2GFfbR0c 5L1WvGMsGlIvwcdoXHTsW8X3rTvCax8dQxYVFivLFPLJASnvjRfG61MgBu6KzQ0r e9PpjSHKE6A38h96GZmLnJAxajXWYtw+h/zLNZ1LA2udVdrMT7oWxuEUsITb3yOv ncdeBtsMFJqHoylS/kQ7YA9K/0W1YZF7VTwrAr1uKD125Oa3SzLV9ysTVIFhsBdw cQ2kyAkl7TBb2bQF9aZq/kxVshDG4uVXZFJTJLMj4i/XpxVhtgkH/K+rxXOYa4me ZPJEUeI61LDCg4fuGkp7GzpStTtOyq7sUCLqPskejDq9yi5TQreQAdd6VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm8I6NqGOCWiW1VbfwW94GJfJc6MB8GA1UdIwQY MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt ZmNhYWYyZWYzNjAxLzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLNLw/Ni kcM83McjRacVCxEf4a128QsIfxzmsR6Qu9uOHVY92prkMoqLGzkxw5/pxYOSOz4J 1Qpyo9kH7lJJCJScAX0Se0nJnYOzG/o7B6EZZWxIYteN39dETnHGovlmU9FauMcD GY93YVTlhUyfjImoZE/lWyup5DRlLcoN4VWFKg+AX+E/nbkKaqtD1a9KbHX5z/49 5tl0amAjtUN2DIjhGOEN77v+RfgkjGwxYrBuYWOBudxGcyYSvOi928S/7XH4VmIn fqaCjgo6zGDYkwyE9AtsdchfcvzVnWKGda1AvpIF/VsmMr5exmPCDQXtWRPqB2R4 D3RAP/ICKNgo5w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:26 2025 by rpki-client