This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json) Hash identifier: PCy7Qn3n5m2byegJFRALp73/dNvhROl5rgaQr7f3g/k= Subject key identifier: EF:1D:3C:4F:29:FE:F2:19:DC:61:3A:DD:AD:6E:20:10:56:2E:4B:EF Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6 Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6 Certificate serial: 019B35A042A6E171DFEB2AFAFBA30B8ADCFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 08:00:53 +0000 Manifest this update: Fri 19 Dec 2025 08:00:53 +0000 Manifest next update: Sat 20 Dec 2025 08:00:53 +0000 Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=) 2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=) 3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: H/cQD0Ocn38WAu1qBPqbzpiFX+kK4pVwoUBRM4+eTCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:42:a6:e1:71:df:eb:2a:fa:fb:a3:0b:8a:dc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6 Validity Not Before: Dec 19 08:00:53 2025 GMT Not After : Dec 20 08:00:53 2025 GMT Subject: CN=ef1d3c4f29fef219dc613addad6e2010562e4bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:66:86:2a:20:ee:ae:86:9f:26:38:de:f6: 13:8a:04:12:c0:ac:7c:cd:92:95:9f:fc:ec:fa:44: 12:f7:3a:fa:b6:99:3b:47:5d:9c:84:eb:b0:90:b6: 1e:60:9a:a9:3c:c6:9f:c0:f9:81:e5:94:78:77:75: c1:ed:22:8e:65:78:26:50:a4:bf:e2:66:cf:4c:fe: a4:d6:6a:a1:0a:88:e7:ab:96:a0:81:1b:c4:59:18: e9:4e:50:01:83:bb:a3:0c:7d:86:bb:7c:7e:b1:7b: ab:41:81:77:51:9e:46:d5:91:02:cf:d4:98:8b:80: 9c:d5:e0:5a:8d:3a:3d:8e:8f:e4:8c:a5:bb:1d:cf: 35:8b:00:0e:03:8c:55:7e:d4:7e:67:78:23:82:d9: 38:d7:7a:95:32:ac:35:45:2f:83:84:05:e2:65:7f: 87:6c:99:b7:8d:07:f3:52:71:b4:df:8c:58:06:7f: c6:1e:26:6b:10:76:1e:7a:b7:e2:92:bb:30:09:f6: 22:00:dd:35:46:54:e3:c5:fb:03:eb:09:e2:88:04: 5e:63:56:55:76:d0:ec:7e:f8:bf:97:20:67:9f:d6: 06:81:7d:fa:c6:46:84:81:b1:e0:22:91:a4:ed:a3: 14:e5:ba:dc:7a:44:67:d1:fa:e2:3f:04:5f:ce:11: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:3C:4F:29:FE:F2:19:DC:61:3A:DD:AD:6E:20:10:56:2E:4B:EF X509v3 Authority Key Identifier: keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6c:18:90:3e:94:3f:b4:d5:4d:db:d5:1a:56:48:41:1f:3a: 9f:4b:6e:69:55:d6:09:2e:93:3b:54:8e:d9:29:19:07:67:94: 91:4d:8b:61:51:0c:29:78:c2:7c:d9:45:8b:f5:05:4b:26:4c: 9c:b9:f7:d6:cc:e9:df:32:76:8a:e3:19:2c:28:59:7d:0b:bb: a2:73:d6:3a:da:b2:91:86:57:72:1e:f2:09:87:c6:cb:71:42: bc:0c:34:92:3d:77:94:79:66:f0:37:e1:31:55:bb:29:25:63: bd:6a:7b:37:c9:27:fb:17:5b:ee:a1:d8:76:df:3f:a6:b9:2a: 1e:13:8d:43:46:5a:73:6c:b9:2e:2e:62:d5:3b:f1:09:fd:8c: e8:5d:64:17:41:1f:55:f7:66:ac:26:02:1b:64:be:fb:59:a1: 10:77:bb:0b:bd:bb:85:d2:f0:cd:09:81:61:45:2e:bd:76:78: 5b:11:0f:08:17:27:29:93:1c:9d:dd:b5:d0:62:e8:8c:e2:3e: bf:7d:32:dd:d1:88:b8:d2:46:e2:fa:50:f0:11:4a:94:5f:a1: 74:57:55:b7:a4:fa:a6:30:89:5b:e9:b4:f9:ea:52:85:3f:c3: c2:56:83:a3:ad:93:85:89:ad:21:0e:c1:d1:fd:e0:2f:4a:00: c6:a7:7c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEKm4XHf6yr6+6MLitz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MjMyZDE5ZGQ4MWQ0NWMyNTkyM2FlYjRkOWE5Njg1ODc5 YWVmYTYwHhcNMjUxMjE5MDgwMDUzWhcNMjUxMjIwMDgwMDUzWjAzMTEwLwYDVQQD EyhlZjFkM2M0ZjI5ZmVmMjE5ZGM2MTNhZGRhZDZlMjAxMDU2MmU0YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdZmhiog7q6GnyY43vYTigQSwKx8 zZKVn/zs+kQS9zr6tpk7R12chOuwkLYeYJqpPMafwPmB5ZR4d3XB7SKOZXgmUKS/ 4mbPTP6k1mqhCojnq5aggRvEWRjpTlABg7ujDH2Gu3x+sXurQYF3UZ5G1ZECz9SY i4Cc1eBajTo9jo/kjKW7Hc81iwAOA4xVftR+Z3gjgtk413qVMqw1RS+DhAXiZX+H bJm3jQfzUnG034xYBn/GHiZrEHYeerfikrswCfYiAN01RlTjxfsD6wniiAReY1ZV dtDsfvi/lyBnn9YGgX36xkaEgbHgIpGk7aMU5brcekRn0friPwRfzhEXhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8dPE8p/vIZ3GE63a1uIBBWLkvvMB8GA1UdIwQY MBaAFLgjLRndgdRcJZI6602aloWHmu+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYt MWRmMDllNzAxNDM0LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYtMWRmMDllNzAxNDM0 LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWwYkD6U P7TVTdvVGlZIQR86n0tuaVXWCS6TO1SO2SkZB2eUkU2LYVEMKXjCfNlFi/UFSyZM nLn31szp3zJ2iuMZLChZfQu7onPWOtqykYZXch7yCYfGy3FCvAw0kj13lHlm8Dfh MVW7KSVjvWp7N8kn+xdb7qHYdt8/prkqHhONQ0Zac2y5Li5i1TvxCf2M6F1kF0Ef VfdmrCYCG2S++1mhEHe7C727hdLwzQmBYUUuvXZ4WxEPCBcnKZMcnd210GLojOI+ v30y3dGIuNJG4vpQ8BFKlF+hdFdVt6T6pjCJW+m0+epShT/DwlaDo62ThYmtIQ7B 0f3gL0oAxqd8VQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:53:31 2025 by rpki-client