This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json) Hash identifier: lIMfOnXcjMAK/xHrwZ04FzoZkT22Yqf3bva3178pYWA= Subject key identifier: 20:23:68:70:10:8E:24:C7:D2:CD:C7:26:FE:14:E9:E7:6E:8C:16:B3 Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94 Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94 Certificate serial: 019AF31BDB3389F70FB5F002ECA579DC8603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft Manifest number: 0F62 Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=) 2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: /rLQGmhzcTp5wShvjfXI9e5i0mjxg77Fezpvkds0zQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:db:33:89:f7:0f:b5:f0:02:ec:a5:79:dc:86:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94 Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=20236870108e24c7d2cdc726fe14e9e76e8c16b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:da:a5:e5:7a:41:22:96:c3:80:1c:2e:71:ee: 52:e2:44:fc:e8:35:0f:38:82:25:2f:6f:29:74:ed: c5:fe:8d:94:f8:db:d4:96:f8:9d:44:d8:de:7a:82: 74:f9:53:bd:80:11:f7:bf:85:5a:04:c8:67:1a:7e: ae:26:8b:9f:c7:d8:11:4a:54:79:25:28:ed:c5:f8: 0b:84:09:ce:18:8e:05:d1:50:57:0c:4d:af:56:a4: 6f:f5:7a:19:a5:f6:0d:08:61:46:43:c3:ab:88:86: a8:88:8e:81:c3:e4:6d:8e:38:75:6f:3d:b0:03:60: dc:27:66:30:a1:95:0d:cc:3d:4c:28:40:2a:0c:0b: aa:c3:af:e3:2b:86:19:f8:79:7a:c6:b0:c9:91:53: 04:ba:65:79:2c:79:c6:2c:2c:40:e2:06:95:20:d5: fa:7e:49:57:be:3a:d4:f6:0c:57:2b:0d:52:16:fe: e0:e3:22:66:66:11:0b:0e:86:05:65:f1:93:76:9b: ea:68:5c:fd:0e:55:bb:8a:21:7b:53:58:a6:4c:6d: d5:7e:c6:31:ae:08:de:3f:40:39:48:47:aa:30:7f: 22:40:6e:d9:d8:6c:66:b8:ac:d6:6d:64:86:92:ca: 2f:89:38:ab:61:1f:a0:81:33:34:a8:2e:9f:37:61: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:23:68:70:10:8E:24:C7:D2:CD:C7:26:FE:14:E9:E7:6E:8C:16:B3 X509v3 Authority Key Identifier: keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:51:1d:99:fc:d6:62:c0:80:0f:9c:ee:ad:61:56:20:10:02: 3d:81:86:95:d9:62:bc:85:7f:be:85:00:88:cc:74:a0:4a:bf: ce:e9:da:fa:cf:dc:7d:c1:96:2c:09:6c:1b:88:ad:45:59:37: 77:b4:6e:75:0e:b3:15:d9:73:11:34:fc:d1:e3:36:ec:5d:ce: 19:24:d6:09:5f:04:e6:3b:fd:43:b5:8d:29:d4:e9:d7:4e:71: c8:3e:19:26:84:eb:bb:79:51:f7:ea:76:6a:26:38:ed:64:9d: 39:74:b4:71:2a:b6:a8:6a:8a:04:30:16:3c:01:60:a6:8e:23: 60:d1:12:e9:91:4f:7a:b1:8e:3e:50:f9:67:8a:67:06:1a:07: 95:d2:5e:8c:3d:5a:3e:4d:97:b1:47:ea:f7:ec:de:a8:01:03: c0:37:46:a3:5c:1a:81:42:66:cf:e5:c7:c9:74:9a:35:c3:fd: e3:02:e7:99:e7:0c:31:80:4c:96:90:69:35:16:3b:1c:15:c3: 06:ab:0c:d5:5c:b3:55:fc:d2:4a:2d:d0:2e:4b:3d:05:a7:bc: 7f:48:34:6c:cc:b7:d9:04:bd:c5:9d:5c:ad:14:a6:f8:e4:55: 08:85:ff:79:9b:74:b7:1f:98:bc:04:5a:90:53:ee:c4:db:76: 32:8c:90:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9szifcPtfAC7KV53IYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDFjMzMwOTRhMDk5MjJjMGExMDQ4NmQyMWRmNTU4OTY3 NWJjOTQwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EygyMDIzNjg3MDEwOGUyNGM3ZDJjZGM3MjZmZTE0ZTllNzZlOGMxNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtql5XpBIpbDgBwuce5S4kT86DUP OIIlL28pdO3F/o2U+NvUlvidRNjeeoJ0+VO9gBH3v4VaBMhnGn6uJoufx9gRSlR5 JSjtxfgLhAnOGI4F0VBXDE2vVqRv9XoZpfYNCGFGQ8OriIaoiI6Bw+Rtjjh1bz2w A2DcJ2YwoZUNzD1MKEAqDAuqw6/jK4YZ+Hl6xrDJkVMEumV5LHnGLCxA4gaVINX6 fklXvjrU9gxXKw1SFv7g4yJmZhELDoYFZfGTdpvqaFz9DlW7iiF7U1imTG3VfsYx rgjeP0A5SEeqMH8iQG7Z2GxmuKzWbWSGksoviTirYR+ggTM0qC6fN2EnCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAjaHAQjiTH0s3HJv4U6edujBazMB8GA1UdIwQY MBaAFLgBwzCUoJkiwKEEhtId9ViWdbyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEt M2M4NjI3ZDk3ODhkLzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEtM2M4NjI3ZDk3ODhk LzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFEdmfzW YsCAD5zurWFWIBACPYGGldlivIV/voUAiMx0oEq/zuna+s/cfcGWLAlsG4itRVk3 d7RudQ6zFdlzETT80eM27F3OGSTWCV8E5jv9Q7WNKdTp105xyD4ZJoTru3lR9+p2 aiY47WSdOXS0cSq2qGqKBDAWPAFgpo4jYNES6ZFPerGOPlD5Z4pnBhoHldJejD1a Pk2XsUfq9+zeqAEDwDdGo1wagUJmz+XHyXSaNcP94wLnmecMMYBMlpBpNRY7HBXD BqsM1VyzVfzSSi3QLks9Bae8f0g0bMy32QS9xZ1crRSm+ORVCIX/eZt0tx+YvARa kFPuxNt2MoyQIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:32 2025 by rpki-client