This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json) Hash identifier: s6TIogrLdFN5VM9w2yfXx39mwwOjiwIxWhhJ5nJvv3U= Subject key identifier: 5D:9F:1B:DB:52:3F:44:29:BA:78:CC:0C:FC:3F:7C:72:DA:F8:17:E4 Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb Certificate serial: 019AF2ADE1452946DC7958C12084B7A31BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft Manifest number: 0DDF Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=) 2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: kkBSVXtv4+KoLZHreBJNyujxzw2uVBzE5RNgK2ReA58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e1:45:29:46:dc:79:58:c1:20:84:b7:a3:1b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=5d9f1bdb523f4429ba78cc0cfc3f7c72daf817e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:fe:6e:e3:5e:5d:6a:29:53:ae:be:7c:80: 3e:f2:71:28:e9:bb:72:82:dc:db:3b:78:cc:50:b0: 8e:18:86:b9:35:52:94:1a:07:ee:f0:0a:4d:ad:ab: c9:6e:d3:40:29:ba:87:20:e7:29:80:83:4d:a1:2a: d1:6d:b1:e2:a9:4d:22:a2:be:02:43:9f:9d:e7:e8: c9:00:21:3b:df:61:65:80:0f:6f:8b:76:1e:7c:61: 30:4d:a4:c7:70:52:d4:13:12:f7:27:ac:8a:40:45: ae:2f:51:4e:80:2a:fd:8d:55:cf:40:47:8b:de:c0: 4b:0f:72:0f:5f:d9:14:04:89:af:1e:6f:e5:85:64: 24:4d:9a:9a:49:07:12:d8:f4:df:0e:a8:09:c7:1f: d3:9b:86:7a:d1:f6:c7:bb:14:6b:89:2f:fb:cc:33: c2:be:8e:b3:8a:10:d6:e1:4d:84:c9:7e:71:61:ca: b8:93:79:de:9a:f5:96:bb:47:1d:24:e6:bd:4f:d7: c2:83:8c:7d:9f:ba:ed:1a:2a:78:45:d7:e8:e6:69: 81:ba:de:dc:f6:bb:e4:4d:ed:6f:95:8e:88:17:7d: 42:fa:25:8c:16:b6:2b:46:c8:dc:34:53:1a:32:74: c2:59:a3:16:ae:9f:f3:ac:71:4b:e8:74:cf:77:d2: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9F:1B:DB:52:3F:44:29:BA:78:CC:0C:FC:3F:7C:72:DA:F8:17:E4 X509v3 Authority Key Identifier: keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9d:91:4f:59:9d:94:29:04:c7:4a:f4:99:f1:dc:67:8c:90: 67:7b:06:91:be:0d:24:cb:ca:88:54:97:1a:ec:56:bc:da:aa: f3:3b:0d:16:c6:6f:4a:e2:17:f4:b2:b3:46:1f:b1:73:dc:b5: 7a:dd:e7:c0:fb:2f:22:08:ae:34:96:ac:a6:a1:97:fa:ce:c0: bf:90:95:8e:0e:d2:c5:81:f1:1f:ed:dd:f8:33:6d:ca:71:ab: ea:4c:bb:3d:2b:0d:61:5f:94:2c:52:55:ee:a1:ed:21:70:8a: 64:89:fd:cd:2f:06:81:1c:a0:d6:91:49:dc:fd:7d:23:68:fd: aa:f0:50:89:a3:77:07:fe:56:da:31:23:42:b7:76:5b:d4:60: e5:1f:97:d5:47:2d:74:98:ff:7f:8a:af:17:da:f6:10:7b:57: ef:c4:4a:8f:2e:bc:25:c2:83:75:bf:f6:cd:9c:89:24:98:59: 13:40:f6:9f:ef:a0:88:31:d0:05:e6:0a:04:26:05:c2:9b:f8: 63:56:f1:2f:ce:ed:6b:1f:09:56:db:7d:a6:53:64:9e:75:8b: a7:cb:6f:08:c6:d1:57:fb:d5:8b:46:37:86:c8:ac:97:d6:69: 23:93:43:b4:ba:7e:65:0e:2e:26:48:17:9b:04:94:03:13:7f: 8e:e3:df:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreFFKUbceVjBIIS3oxvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMmYxYTExZGUxOTBjODFjMGI3NzUyY2Y1MmI1Njk0MjVk YzU0Y2IwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD Eyg1ZDlmMWJkYjUyM2Y0NDI5YmE3OGNjMGNmYzNmN2M3MmRhZjgxN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH3+buNeXWopU66+fIA+8nEo6bty gtzbO3jMULCOGIa5NVKUGgfu8ApNravJbtNAKbqHIOcpgINNoSrRbbHiqU0ior4C Q5+d5+jJACE732FlgA9vi3YefGEwTaTHcFLUExL3J6yKQEWuL1FOgCr9jVXPQEeL 3sBLD3IPX9kUBImvHm/lhWQkTZqaSQcS2PTfDqgJxx/Tm4Z60fbHuxRriS/7zDPC vo6zihDW4U2EyX5xYcq4k3nemvWWu0cdJOa9T9fCg4x9n7rtGip4Rdfo5mmBut7c 9rvkTe1vlY6IF31C+iWMFrYrRsjcNFMaMnTCWaMWrp/zrHFL6HTPd9JMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2fG9tSP0QpunjMDPw/fHLa+BfkMB8GA1UdIwQY MBaAFLovGhHeGQyBwLd1LPUrVpQl3FTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2Qt MmQzOGU3Nzc5MzQ4LzEvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2QtMmQzOGU3Nzc5MzQ4 LzEvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ2RT1md lCkEx0r0mfHcZ4yQZ3sGkb4NJMvKiFSXGuxWvNqq8zsNFsZvSuIX9LKzRh+xc9y1 et3nwPsvIgiuNJaspqGX+s7Av5CVjg7SxYHxH+3d+DNtynGr6ky7PSsNYV+ULFJV 7qHtIXCKZIn9zS8GgRyg1pFJ3P19I2j9qvBQiaN3B/5W2jEjQrd2W9Rg5R+X1Uct dJj/f4qvF9r2EHtX78RKjy68JcKDdb/2zZyJJJhZE0D2n++giDHQBeYKBCYFwpv4 Y1bxL87tax8JVtt9plNknnWLp8tvCMbRV/vVi0Y3hsisl9ZpI5NDtLp+ZQ4uJkgX mwSUAxN/juPfHw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:46 2025 by rpki-client