This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft File: uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft (raw, json) Hash identifier: q6I0PHX6sWQoXPbTDdfHlYJYzGIqveG+ISZdD9nconA= Subject key identifier: 8C:F3:A8:CD:A6:83:40:93:F9:60:61:BF:8C:E2:4F:97:5A:0F:63:5D Authority key identifier: B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02 Certificate issuer: /CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02 Certificate serial: 019AF509CA5C678DE44B87A5E4AB02B1D75F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft Manifest number: 11B4 Signing time: Sat 06 Dec 2025 19:00:50 +0000 Manifest this update: Sat 06 Dec 2025 19:00:50 +0000 Manifest next update: Sun 07 Dec 2025 19:00:50 +0000 Files and hashes: 1: uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl (hash: oJsHiX//0VrUz92vTT5wkmA0FPef3lsAjZHPqzFSKys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ca:5c:67:8d:e4:4b:87:a5:e4:ab:02:b1:d7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02 Validity Not Before: Dec 6 19:00:50 2025 GMT Not After : Dec 7 19:00:50 2025 GMT Subject: CN=8cf3a8cda6834093f96061bf8ce24f975a0f635d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:79:09:14:64:2b:ee:6d:5f:b9:90:b0:8c: f3:fd:b7:d2:fc:2e:e3:29:19:e4:ee:8e:40:29:4f: 83:93:8c:6a:57:ce:cb:e2:c1:36:d0:06:fb:e4:a2: 54:36:eb:32:08:83:d1:74:5d:cf:d8:ca:bc:a2:3c: 7e:0d:65:99:ea:f8:dc:5c:29:32:61:ea:43:92:f2: b2:fe:f7:8f:1c:0e:c9:1e:02:c4:5e:ae:7d:bb:f5: 00:e7:a4:cc:b0:6b:27:a3:42:c0:75:21:e8:e5:ca: 10:21:79:8a:9e:10:09:ae:ed:9c:97:d5:a8:3e:af: 04:58:9b:bd:51:06:e2:d8:3e:14:0d:fb:80:6d:84: 32:7d:d9:27:a0:ed:54:0e:85:b8:3e:94:ea:a0:2c: b9:81:af:ae:e3:b6:b5:2f:59:09:e1:68:ed:fe:2c: d9:de:33:a9:79:83:60:0f:10:17:e3:0f:b5:50:da: 31:0a:e5:f2:a7:ee:ac:23:33:e3:1c:78:da:6c:60: 31:07:c7:95:66:85:ae:fb:e7:1c:98:7f:7b:0d:d4: 96:f0:8c:e1:9a:08:40:6f:3a:7a:73:6f:4c:91:6e: 43:4d:31:2a:54:79:58:97:7f:d3:55:e8:01:53:a5: 99:ba:9a:15:74:9e:49:10:82:95:98:73:49:f9:9a: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:A8:CD:A6:83:40:93:F9:60:61:BF:8C:E2:4F:97:5A:0F:63:5D X509v3 Authority Key Identifier: keyid:B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0d:f4:55:9a:0b:db:c3:6a:ff:ed:3f:89:c4:f1:87:e8:2e: 88:0b:59:8d:5d:6f:db:5f:1c:3e:14:20:5b:51:29:ad:cf:ae: 08:76:2c:67:76:d9:0b:f3:63:db:7b:88:15:d5:59:7c:5d:8f: 6b:a1:96:dd:45:a5:10:e5:46:a0:df:32:1e:1e:43:e4:03:f8: 36:89:46:d4:84:08:26:3b:38:d4:c4:f0:6f:da:18:83:3b:2d: 88:7e:94:7a:d9:54:c8:60:e1:31:5c:f1:29:85:e3:d4:37:32: 04:f1:ac:48:6d:3f:0b:e0:7f:88:80:6c:29:27:10:a2:30:23: ca:8a:0b:ca:1d:bc:eb:85:49:fe:13:5f:e2:b1:7b:68:bc:10: 71:1e:d4:ff:4b:3e:6d:1b:a2:73:73:06:ca:d8:74:f0:09:f5: 71:02:32:1f:41:42:35:14:ab:6d:af:ef:20:2d:11:7c:96:79: e5:c4:42:77:13:42:91:69:22:8b:89:90:57:63:47:08:35:a4: a1:fe:1a:e0:22:50:f0:89:e0:c0:75:17:a6:8a:3f:b4:52:d3: d5:94:41:1f:7a:b7:5d:7e:ba:5a:c3:f8:35:8d:a2:0c:b3:3b: a4:bb:74:7e:ed:72:87:53:d7:7c:df:8f:6e:25:71:61:8c:6a: fa:df:4d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcpcZ43kS4el5KsCsddfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWUwYmU2YjcyNzljZGVjZjc4YmRkNjQxMDVmODQ0M2Qw YzBjMDIwHhcNMjUxMjA2MTkwMDUwWhcNMjUxMjA3MTkwMDUwWjAzMTEwLwYDVQQD Eyg4Y2YzYThjZGE2ODM0MDkzZjk2MDYxYmY4Y2UyNGY5NzVhMGY2MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjet5CRRkK+5tX7mQsIzz/bfS/C7j KRnk7o5AKU+Dk4xqV87L4sE20Ab75KJUNusyCIPRdF3P2Mq8ojx+DWWZ6vjcXCky YepDkvKy/vePHA7JHgLEXq59u/UA56TMsGsno0LAdSHo5coQIXmKnhAJru2cl9Wo Pq8EWJu9UQbi2D4UDfuAbYQyfdknoO1UDoW4PpTqoCy5ga+u47a1L1kJ4Wjt/izZ 3jOpeYNgDxAX4w+1UNoxCuXyp+6sIzPjHHjabGAxB8eVZoWu++ccmH97DdSW8Izh mghAbzp6c29MkW5DTTEqVHlYl3/TVegBU6WZupoVdJ5JEIKVmHNJ+ZqdCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzzqM2mg0CT+WBhv4ziT5daD2NdMB8GA1UdIwQY MBaAFLheC+a3J5zez3i91kEF+EQ9DAwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY0TDVyY25uTjdQZUwzV1FRWDRSRDBNREFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82ZTFmMzgtNjgwNy00ODY2LWE5ZWQt NDNiZjFjNDNlYzBmLzEvdUY0TDVyY25uTjdQZUwzV1FRWDRSRDBNREFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC82ZTFmMzgtNjgwNy00ODY2LWE5ZWQtNDNiZjFjNDNlYzBm LzEvdUY0TDVyY25uTjdQZUwzV1FRWDRSRDBNREFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVg30VZoL 28Nq/+0/icTxh+guiAtZjV1v218cPhQgW1Eprc+uCHYsZ3bZC/Nj23uIFdVZfF2P a6GW3UWlEOVGoN8yHh5D5AP4NolG1IQIJjs41MTwb9oYgzstiH6UetlUyGDhMVzx KYXj1DcyBPGsSG0/C+B/iIBsKScQojAjyooLyh2864VJ/hNf4rF7aLwQcR7U/0s+ bRuic3MGyth08An1cQIyH0FCNRSrba/vIC0RfJZ55cRCdxNCkWkii4mQV2NHCDWk of4a4CJQ8IngwHUXpoo/tFLT1ZRBH3q3XX66WsP4NY2iDLM7pLt0fu1yh1PXfN+P biVxYYxq+t9NFw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:24 2025 by rpki-client