This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json) Hash identifier: bC5h/jO37NdhPLe/B0o1aScd9avp88ZR3ii3VWFpk5U= Subject key identifier: 34:77:F7:AD:4D:D1:DB:99:CB:B6:1B:85:57:96:C8:7C:14:21:2C:29 Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6 Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6 Certificate serial: 019AF20956981ED84701CD9DC2F07CCC0BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=) 2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=) 3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: 9BXqXvI15rglkTyfccXA+5wNaTVgqNzVsvi+uvdA9jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:56:98:1e:d8:47:01:cd:9d:c2:f0:7c:cc:0b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6 Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=3477f7ad4dd1db99cbb61b855796c87c14212c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:9e:5a:ae:0b:d6:97:bf:22:ba:c1:66:17: 42:34:65:bf:74:f2:79:06:a4:bd:cb:e5:56:f2:3f: 92:38:88:49:70:8e:c8:ae:bf:d2:da:42:6c:0c:a1: 8c:72:4c:04:82:93:e0:4d:c7:98:ca:8a:49:28:9a: 5a:4e:5e:9f:cf:5d:f1:30:a3:b2:d0:6a:9c:a5:4f: 5a:03:62:a4:f9:98:ba:30:4a:69:32:12:84:81:55: a4:f3:7c:b7:49:f3:49:7a:8f:23:97:a6:9e:7c:4f: 86:b9:4b:43:e5:1b:01:de:d1:4f:54:ca:15:3a:7e: 1b:0e:52:52:47:83:98:93:b2:2f:4c:3b:2a:c7:80: e7:5a:d4:a0:cb:8b:68:3a:b9:a1:3b:fc:ef:c9:3c: 38:0a:eb:6f:29:78:27:05:72:5a:bd:62:b1:63:ad: 77:e4:ac:24:88:02:a7:ca:f6:1e:ed:a6:84:3c:4d: b9:e6:00:bb:1f:c0:16:8c:7c:f5:76:3c:f3:8b:8c: e4:28:60:2c:cb:0e:88:02:f6:0c:30:c5:96:a5:ec: 15:49:bb:7a:74:71:01:a7:e3:a0:fd:8d:66:d0:d5: 55:cf:a5:87:89:9b:d6:41:ab:9f:31:da:8f:ea:f8: b9:bb:9b:7d:07:df:37:5f:e8:62:ae:54:74:20:85: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:77:F7:AD:4D:D1:DB:99:CB:B6:1B:85:57:96:C8:7C:14:21:2C:29 X509v3 Authority Key Identifier: keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:01:0d:1a:66:db:95:2d:27:51:cf:ba:31:dd:d0:ef:34:fe: 7d:5a:f3:88:d2:cf:9c:13:01:80:73:a9:ba:50:c5:80:1e:c7: 68:f4:bb:83:69:47:3d:57:ce:d0:81:2f:18:fd:80:78:02:6a: fa:7f:22:50:98:ba:31:57:2d:b2:8c:fa:05:20:1f:04:fb:6d: 61:1a:4c:b8:ff:85:82:6a:f8:3c:24:4f:2c:b8:3b:0e:1f:76: d6:92:74:23:cd:c7:b8:9e:3d:78:76:bc:d5:1d:93:50:de:96: 27:a4:a9:68:5b:67:95:05:8c:b5:55:60:7c:92:36:1f:91:31: 24:2b:71:06:31:af:d5:58:dd:f2:f3:fc:61:0b:a6:c7:ea:b7: 1a:4d:6c:a8:71:8c:a3:42:b8:4c:62:48:38:18:51:5c:49:d6: 93:2c:78:a7:53:46:45:f6:49:cc:ac:0f:f9:29:3b:94:26:35: 62:59:db:8b:e3:9a:ef:fa:7e:13:1b:1d:cf:7c:dd:48:34:25: 3f:7d:a5:f5:c4:e6:7e:d2:4e:6d:6b:c4:cb:89:64:ec:d6:80: 37:7e:da:a9:fc:55:f8:71:d3:65:c3:b1:ee:97:23:8e:ca:c7: d7:b4:76:60:39:d7:cb:d1:c3:38:83:be:d5:dd:68:f0:c7:cd: 1c:4e:7f:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVaYHthHAc2dwvB8zAvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MjMyZDE5ZGQ4MWQ0NWMyNTkyM2FlYjRkOWE5Njg1ODc5 YWVmYTYwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EygzNDc3ZjdhZDRkZDFkYjk5Y2JiNjFiODU1Nzk2Yzg3YzE0MjEyYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoGeWq4L1pe/IrrBZhdCNGW/dPJ5 BqS9y+VW8j+SOIhJcI7Irr/S2kJsDKGMckwEgpPgTceYyopJKJpaTl6fz13xMKOy 0GqcpU9aA2Kk+Zi6MEppMhKEgVWk83y3SfNJeo8jl6aefE+GuUtD5RsB3tFPVMoV On4bDlJSR4OYk7IvTDsqx4DnWtSgy4toOrmhO/zvyTw4CutvKXgnBXJavWKxY613 5KwkiAKnyvYe7aaEPE255gC7H8AWjHz1djzzi4zkKGAsyw6IAvYMMMWWpewVSbt6 dHEBp+Og/Y1m0NVVz6WHiZvWQaufMdqP6vi5u5t9B983X+hirlR0IIU4nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDR3961N0duZy7YbhVeWyHwUISwpMB8GA1UdIwQY MBaAFLgjLRndgdRcJZI6602aloWHmu+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYt MWRmMDllNzAxNDM0LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYtMWRmMDllNzAxNDM0 LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQENGmbb lS0nUc+6Md3Q7zT+fVrziNLPnBMBgHOpulDFgB7HaPS7g2lHPVfO0IEvGP2AeAJq +n8iUJi6MVctsoz6BSAfBPttYRpMuP+Fgmr4PCRPLLg7Dh921pJ0I83HuJ49eHa8 1R2TUN6WJ6SpaFtnlQWMtVVgfJI2H5ExJCtxBjGv1Vjd8vP8YQumx+q3Gk1sqHGM o0K4TGJIOBhRXEnWkyx4p1NGRfZJzKwP+Sk7lCY1Ylnbi+Oa7/p+Exsdz3zdSDQl P32l9cTmftJObWvEy4lk7NaAN37aqfxV+HHTZcOx7pcjjsrH17R2YDnXy9HDOIO+ 1d1o8MfNHE5/eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:49 2025 by rpki-client