This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json) Hash identifier: Nxum0+tJhFznFn/piVUWsvQyU2OUzI3Dbdb/viYd0ao= Subject key identifier: 17:E7:42:C9:86:F4:6E:39:B3:07:D3:C0:DD:1C:E4:E8:88:A1:F2:38 Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1 Certificate serial: 019B2D0B6BFF87BBC149CBFEC6ABD3A85CA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft Manifest number: 0F8B Signing time: Wed 17 Dec 2025 16:01:21 +0000 Manifest this update: Wed 17 Dec 2025 16:01:21 +0000 Manifest next update: Thu 18 Dec 2025 16:01:21 +0000 Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=) 2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=) 3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: 1QQWSkW+QpppOdZ48AVnJ2Qy7Qvhe9Ont5Z7ZdJ+9Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:6b:ff:87:bb:c1:49:cb:fe:c6:ab:d3:a8:5c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1 Validity Not Before: Dec 17 16:01:21 2025 GMT Not After : Dec 18 16:01:21 2025 GMT Subject: CN=17e742c986f46e39b307d3c0dd1ce4e888a1f238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:5e:ce:35:74:46:d4:df:2d:02:1c:18:06: d1:91:79:d6:53:18:06:69:b8:ee:84:a8:67:a0:e7: 0f:c6:b8:a0:67:49:09:96:20:cf:6f:4f:4e:73:33: 00:9e:ba:c7:ab:ba:4a:8e:69:94:b5:e6:da:68:75: 82:35:7d:6e:56:14:10:8b:8a:ee:a3:7d:b0:27:d9: db:7f:49:13:0c:d5:9a:0e:c5:f1:68:cf:c3:99:14: 22:87:3c:96:d0:3b:0d:cb:6c:e9:d1:29:eb:62:86: 53:25:e2:08:4a:02:ff:4b:73:4a:92:61:ed:64:24: bb:82:6d:42:06:d1:7b:9b:76:44:78:c7:db:9a:3a: f1:ef:e7:87:12:c7:2c:bb:ef:1f:37:d8:b0:86:5d: cd:53:1e:2e:39:d3:87:0b:d1:61:87:8e:37:04:e3: 86:ce:61:c3:f0:4f:d1:8a:07:ea:46:e8:6b:d8:37: 2b:81:7d:bf:df:74:49:e7:e0:70:ad:78:88:30:cb: ad:99:f4:a0:31:cc:34:f8:f9:84:f3:bf:df:fd:bc: 5e:4d:0b:79:8e:79:3e:d9:fc:b4:f0:51:bb:5d:85: 31:45:5a:7f:17:aa:29:25:90:30:f7:e6:11:d5:f8: 99:bb:47:5e:01:9d:4c:f2:e5:d0:9a:e5:c6:2a:59: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E7:42:C9:86:F4:6E:39:B3:07:D3:C0:DD:1C:E4:E8:88:A1:F2:38 X509v3 Authority Key Identifier: keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a7:69:75:10:2b:93:bd:85:b3:d9:46:12:93:ee:2b:1d:88: 4c:43:e0:00:2a:c0:dc:c0:c1:a2:f9:df:7c:0a:6c:83:b6:60: 70:28:7c:ec:85:77:0e:79:80:98:27:c6:8f:1b:ed:5d:38:b3: 15:64:b1:cc:87:76:de:79:c7:0c:e6:57:7b:c3:e7:7f:ef:0b: 44:5a:3d:16:f3:1e:2e:28:20:d8:11:ca:b0:3e:d7:d8:73:da: 1f:b6:c3:61:47:56:67:61:58:9a:e2:22:6a:77:95:db:25:f4: 5c:41:f0:40:e4:22:81:17:b3:ae:29:3f:18:04:ae:17:b7:f4: 3d:9e:ea:ae:0f:37:c1:f6:63:8e:b3:68:e2:0e:a8:b1:e9:51: ec:57:0a:2b:b4:e3:61:94:07:47:8f:52:b0:f5:fc:66:5b:ea: 65:1b:4a:27:c5:74:c9:73:2a:9b:7d:04:25:8a:df:1f:5b:0c: 2a:19:5a:b1:dd:a5:5d:79:32:59:dd:41:94:7f:73:08:e5:2e: ea:13:73:56:37:d7:99:12:d4:bf:5f:09:91:18:c0:e5:fe:56: d9:58:25:1f:fe:65:6b:c5:a6:65:05:ac:6f:c1:d2:a4:a2:e2: 14:5b:3f:43:19:f4:fa:65:9d:40:5a:4e:cc:51:9a:2c:4f:d6: 95:74:21:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC2v/h7vBScv+xqvTqFykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTIxM2RmOTczMjk1NTZkNjA4YjE1MGYwM2M0ZWU3NWZi ZDk4YzEwHhcNMjUxMjE3MTYwMTIxWhcNMjUxMjE4MTYwMTIxWjAzMTEwLwYDVQQD EygxN2U3NDJjOTg2ZjQ2ZTM5YjMwN2QzYzBkZDFjZTRlODg4YTFmMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU1ezjV0RtTfLQIcGAbRkXnWUxgG abjuhKhnoOcPxrigZ0kJliDPb09OczMAnrrHq7pKjmmUtebaaHWCNX1uVhQQi4ru o32wJ9nbf0kTDNWaDsXxaM/DmRQihzyW0DsNy2zp0SnrYoZTJeIISgL/S3NKkmHt ZCS7gm1CBtF7m3ZEeMfbmjrx7+eHEscsu+8fN9iwhl3NUx4uOdOHC9Fhh443BOOG zmHD8E/RigfqRuhr2DcrgX2/33RJ5+BwrXiIMMutmfSgMcw0+PmE87/f/bxeTQt5 jnk+2fy08FG7XYUxRVp/F6opJZAw9+YR1fiZu0deAZ1M8uXQmuXGKlkYeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfnQsmG9G45swfTwN0c5OiIofI4MB8GA1UdIwQY MBaAFLhSE9+XMpVW1gixUPA8TudfvZjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTkt MWZiMWU5Yzg2YjUzLzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTktMWZiMWU5Yzg2YjUz LzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqdpdRAr k72Fs9lGEpPuKx2ITEPgACrA3MDBovnffApsg7ZgcCh87IV3DnmAmCfGjxvtXTiz FWSxzId23nnHDOZXe8Pnf+8LRFo9FvMeLigg2BHKsD7X2HPaH7bDYUdWZ2FYmuIi aneV2yX0XEHwQOQigRezrik/GASuF7f0PZ7qrg83wfZjjrNo4g6oselR7FcKK7Tj YZQHR49SsPX8ZlvqZRtKJ8V0yXMqm30EJYrfH1sMKhlasd2lXXkyWd1BlH9zCOUu 6hNzVjfXmRLUv18JkRjA5f5W2VglH/5la8WmZQWsb8HSpKLiFFs/Qxn0+mWdQFpO zFGaLE/WlXQhwg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:35:14 2025 by rpki-client