This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json) Hash identifier: wvWVYIWlngZ911/rlU9be25kn2eqoKc6t3y0mHVW+G0= Subject key identifier: 72:01:CA:82:39:64:7D:7B:AF:E8:D3:6B:47:33:B1:DD:5F:D6:39:BE Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1 Certificate serial: 019AF12D2C66A2CB3548D3ED09C2FAEA7929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft Manifest number: 0F6C Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=) 2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=) 3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: 6VKYvqRUObfI9qrAcHqyBQ7GBVRnIO2UAMapN5cB58M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2c:66:a2:cb:35:48:d3:ed:09:c2:fa:ea:79:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=7201ca8239647d7bafe8d36b4733b1dd5fd639be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:60:49:56:45:f5:0e:9e:41:2f:be:5f:37: 5b:8c:61:71:b6:5a:0a:70:52:25:f4:e4:d7:04:27: ba:b8:6f:ce:4f:cc:54:c3:21:06:48:5c:78:cb:7c: be:cb:a0:7a:6f:f1:ce:85:2d:54:9f:9d:23:9f:20: 43:6e:8a:05:bd:23:66:c9:b2:fb:7f:3e:d5:ed:07: e1:4b:33:95:f5:63:d9:4c:5d:fd:18:3e:67:05:24: 53:d9:a6:22:37:9a:a9:ec:43:6b:39:04:6c:58:96: 19:45:6a:6a:65:8f:7c:3a:80:6a:c2:99:a0:8d:6f: b2:48:6f:3d:a2:e2:1b:69:5f:90:ff:de:9e:3a:8f: 3c:2b:1f:77:70:1b:30:cd:eb:c8:a6:17:1b:c5:b7: 88:6c:1f:e2:27:16:59:37:11:6e:d1:39:1f:f0:8c: c9:40:7e:69:d9:44:21:8c:a0:34:64:dc:3b:6f:a8: 16:dc:52:ad:f3:f6:9d:4a:e6:f9:2f:17:0f:b7:2e: 3c:22:ef:a3:5c:6e:b6:56:f0:08:7d:b6:59:45:9e: d0:70:db:2c:63:26:fb:b1:77:fa:4f:f5:8d:b5:57: 06:9f:f8:d6:13:1f:d5:23:8f:a1:28:38:56:80:63: 63:01:c7:41:c3:b4:45:90:0d:52:51:1c:31:3f:04: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:01:CA:82:39:64:7D:7B:AF:E8:D3:6B:47:33:B1:DD:5F:D6:39:BE X509v3 Authority Key Identifier: keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:64:60:6a:d5:09:b4:ca:8b:93:1d:6f:b3:d8:f0:5e:72:54: 81:26:5c:d5:8d:0b:07:da:75:e1:d8:40:be:10:ae:27:85:36: 7e:8f:6b:e0:68:f0:c0:2c:57:28:f1:0f:f9:f4:69:25:b1:a4: e1:54:58:5d:6f:04:89:62:59:bf:a5:58:bc:90:d9:b1:fd:b9: ee:f2:f9:bb:82:d6:4e:29:10:82:a7:06:ef:ac:33:46:97:98: 41:7b:6c:55:f1:c8:09:98:17:e2:29:e1:e9:91:00:a7:c6:8a: ff:0c:9f:78:db:17:8c:26:78:5b:ab:66:d2:dd:79:0b:25:8a: e8:44:4f:da:35:b9:c9:df:7c:ad:cf:92:5f:5b:ef:bf:a2:0b: c0:ee:94:2d:9d:13:9a:8e:43:70:34:ce:91:38:a5:4b:6e:31: a5:91:95:eb:f1:1a:a4:86:31:d8:c4:44:6c:5e:a3:f8:c6:be: da:7c:57:b5:05:7d:c8:6c:fa:f7:75:9a:81:e6:96:ac:83:d8: aa:ac:d8:af:03:70:92:f1:69:14:29:b0:f2:7f:80:fc:37:cd: f8:41:69:8b:a9:7c:65:77:4d:6b:35:2a:25:c5:60:09:e6:fe: 7a:99:06:09:a8:52:72:12:8e:8b:bf:51:90:ba:a9:f7:f4:1f: 7f:87:14:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSxmoss1SNPtCcL66nkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTIxM2RmOTczMjk1NTZkNjA4YjE1MGYwM2M0ZWU3NWZi ZDk4YzEwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD Eyg3MjAxY2E4MjM5NjQ3ZDdiYWZlOGQzNmI0NzMzYjFkZDVmZDYzOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqpgSVZF9Q6eQS++XzdbjGFxtloK cFIl9OTXBCe6uG/OT8xUwyEGSFx4y3y+y6B6b/HOhS1Un50jnyBDbooFvSNmybL7 fz7V7QfhSzOV9WPZTF39GD5nBSRT2aYiN5qp7ENrOQRsWJYZRWpqZY98OoBqwpmg jW+ySG89ouIbaV+Q/96eOo88Kx93cBswzevIphcbxbeIbB/iJxZZNxFu0Tkf8IzJ QH5p2UQhjKA0ZNw7b6gW3FKt8/adSub5LxcPty48Iu+jXG62VvAIfbZZRZ7QcNss Yyb7sXf6T/WNtVcGn/jWEx/VI4+hKDhWgGNjAcdBw7RFkA1SURwxPwQ/KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIByoI5ZH17r+jTa0czsd1f1jm+MB8GA1UdIwQY MBaAFLhSE9+XMpVW1gixUPA8TudfvZjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTkt MWZiMWU5Yzg2YjUzLzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTktMWZiMWU5Yzg2YjUz LzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2RgatUJ tMqLkx1vs9jwXnJUgSZc1Y0LB9p14dhAvhCuJ4U2fo9r4GjwwCxXKPEP+fRpJbGk 4VRYXW8EiWJZv6VYvJDZsf257vL5u4LWTikQgqcG76wzRpeYQXtsVfHICZgX4inh 6ZEAp8aK/wyfeNsXjCZ4W6tm0t15CyWK6ERP2jW5yd98rc+SX1vvv6ILwO6ULZ0T mo5DcDTOkTilS24xpZGV6/EapIYx2MREbF6j+Ma+2nxXtQV9yGz693WageaWrIPY qqzYrwNwkvFpFCmw8n+A/DfN+EFpi6l8ZXdNazUqJcVgCeb+epkGCahSchKOi79R kLqp9/Qff4cUPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:26 2025 by rpki-client