This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json) Hash identifier: CnVg3lQwLT85Q/alZNTQCjfgvor8v7SLHMiXF1t0FHs= Subject key identifier: 3D:73:CD:96:6D:B3:8F:CF:DC:D8:FA:3C:12:F4:8E:C2:1D:0E:B3:E0 Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Certificate serial: 019AF2AD5BA32B51D05B030C3A95D934D08E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft Manifest number: B0 Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: M9ok_oEA-Cq66PnPmgpXlFaH8Sc.roa (hash: Bj68sqknRNEMUK6hrMTUuevwXIra7kusoFg9lZhmyJM=) 2: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: Pmkrb2nDBAxnBsiAlK6EDRQwDXQjuEZaLmzv8ITBDgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5b:a3:2b:51:d0:5b:03:0c:3a:95:d9:34:d0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=3d73cd966db38fcfdcd8fa3c12f48ec21d0eb3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:35:40:ff:0d:fe:d7:5f:b3:4a:70:b0:b7: ca:94:62:14:f3:68:80:0c:1f:7d:e1:62:57:cb:fa: 8e:54:d1:4d:73:b8:ea:fd:cc:d2:56:43:d5:4e:35: 19:0d:69:12:c4:40:d0:54:16:41:58:6c:73:2a:14: 52:cc:cc:93:e9:f5:f6:29:07:70:b4:03:47:62:dc: b2:89:df:72:96:18:83:ba:98:e7:54:69:09:6c:44: e2:6c:97:6f:fd:00:8d:79:08:eb:35:4a:ff:3a:22: 3e:48:19:01:1a:a9:62:d9:dd:d1:ba:9f:d3:db:39: ae:a5:d7:68:69:1e:02:a4:1a:92:0d:8d:e5:49:6c: 6e:97:c7:46:e7:00:2d:14:91:80:ee:80:d0:7a:5e: c9:ee:bb:88:65:06:32:8a:34:d1:32:94:8e:d6:2a: 3a:79:3e:cc:1e:ca:81:b8:29:46:01:c0:d6:92:aa: 4d:f5:1c:0d:c7:03:d4:ff:26:7f:ce:70:c9:d2:15: e3:23:9f:33:41:db:54:59:d7:bd:c7:a7:3b:93:dc: 4e:72:c2:20:2c:72:80:b9:4d:75:ee:88:1b:2b:8b: 65:83:0a:fb:3a:b8:6a:cc:f3:5e:99:c8:96:25:e7: 28:ce:55:13:31:9c:af:e8:e7:05:06:f8:21:c5:10: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:73:CD:96:6D:B3:8F:CF:DC:D8:FA:3C:12:F4:8E:C2:1D:0E:B3:E0 X509v3 Authority Key Identifier: keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:cd:99:59:11:37:bb:fb:80:eb:5b:ad:40:55:5b:5d:16:a4: b2:1e:3b:b1:2b:fa:db:3e:b5:74:f0:62:b5:e0:c7:77:31:44: a3:d4:e0:67:ce:f0:cb:1c:c9:ea:74:d6:df:56:4e:27:32:3a: 89:27:2e:07:aa:d8:25:8f:99:45:06:ee:0f:89:be:9f:96:6d: b7:67:91:0f:a5:99:6b:95:fa:1a:61:0f:97:0a:b2:93:49:10: f8:01:ee:1d:13:35:c8:3c:05:84:32:c3:13:52:81:0f:72:43: 3d:58:0d:0c:13:30:9d:d1:56:ab:09:89:5d:cb:b3:35:8a:1e: 6a:3c:b4:ab:b0:7d:27:35:23:46:63:38:05:36:ed:c2:f8:59: 47:9b:73:fe:bb:ed:f8:4a:78:27:1e:ce:c3:72:5b:c7:9e:fb: ab:e7:96:77:3e:dc:a7:a2:b1:9f:f2:68:91:62:89:4d:f2:2f: bb:3d:33:49:8e:56:db:84:45:26:fa:91:bb:7a:f9:b1:d3:1f: 5f:5e:21:dd:c8:2c:aa:ee:2a:49:3e:4b:5a:f1:d3:b2:b4:e1: 8b:26:6f:03:d0:1f:69:b9:f9:43:51:06:94:f7:4a:78:f5:f3: d4:c4:1c:84:84:57:53:fe:60:a1:82:95:48:51:a9:22:c5:a4: 04:7c:23:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVujK1HQWwMMOpXZNNCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDQyN2Q4Yjc5NjY0NWY3NjRiNGU2NmJmMTlhZDM4ZTRh YmVlMWMwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD EygzZDczY2Q5NjZkYjM4ZmNmZGNkOGZhM2MxMmY0OGVjMjFkMGViM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+01QP8N/tdfs0pwsLfKlGIU82iA DB994WJXy/qOVNFNc7jq/czSVkPVTjUZDWkSxEDQVBZBWGxzKhRSzMyT6fX2KQdw tANHYtyyid9ylhiDupjnVGkJbETibJdv/QCNeQjrNUr/OiI+SBkBGqli2d3Rup/T 2zmupddoaR4CpBqSDY3lSWxul8dG5wAtFJGA7oDQel7J7ruIZQYyijTRMpSO1io6 eT7MHsqBuClGAcDWkqpN9RwNxwPU/yZ/znDJ0hXjI58zQdtUWde9x6c7k9xOcsIg LHKAuU117ogbK4tlgwr7OrhqzPNemciWJecozlUTMZyv6OcFBvghxRDVLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1zzZZts4/P3Nj6PBL0jsIdDrPgMB8GA1UdIwQY MBaAFLlEJ9i3lmRfdktOZr8ZrTjkq+4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5Zjkt NDdmNWMxYzUyY2UyLzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5ZjktNDdmNWMxYzUyY2Uy LzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1s2ZWRE3 u/uA61utQFVbXRaksh47sSv62z61dPBiteDHdzFEo9TgZ87wyxzJ6nTW31ZOJzI6 iScuB6rYJY+ZRQbuD4m+n5Ztt2eRD6WZa5X6GmEPlwqyk0kQ+AHuHRM1yDwFhDLD E1KBD3JDPVgNDBMwndFWqwmJXcuzNYoeajy0q7B9JzUjRmM4BTbtwvhZR5tz/rvt +Ep4Jx7Ow3Jbx577q+eWdz7cp6Kxn/JokWKJTfIvuz0zSY5W24RFJvqRu3r5sdMf X14h3cgsqu4qST5LWvHTsrThiyZvA9Afabn5Q1EGlPdKePXz1MQchIRXU/5goYKV SFGpIsWkBHwj+A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:18 2025 by rpki-client