This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft File: uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json) Hash identifier: ygXAS4QCzJWgQ+0gxUs55bNl6NzvhMaHDy6CCtsbNkY= Subject key identifier: 17:70:74:2C:A4:A7:FA:AB:DD:FE:11:19:68:6B:46:CA:AF:57:59:88 Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c Certificate serial: 019AF1D257B8EE76FC61EFC2EA77244948ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft Manifest number: 091D Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=) 2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: HGY8M3afLNqZNN/9mhjFnC1WIwd4ostVV8wZSE1X91A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:57:b8:ee:76:fc:61:ef:c2:ea:77:24:49:48:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=1770742ca4a7faabddfe1119686b46caaf575988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:02:66:31:15:c3:d6:66:49:47:31:d3:fe: d4:04:cc:88:6a:7b:2b:bd:53:18:29:38:e6:69:cd: 69:7e:53:7d:99:bf:3b:4a:6b:05:0d:b7:31:a1:70: a8:b3:f2:3c:39:5c:ba:d0:e7:a5:b9:c0:dc:31:dc: e9:76:55:35:cd:d5:a6:a4:83:cc:24:04:7d:56:96: 91:c2:78:82:0b:0a:35:15:16:ed:34:ad:30:30:48: fe:ce:92:2c:10:76:62:c0:0d:7b:68:d2:1a:2f:f7: 15:ab:d9:fb:99:33:d9:1b:ee:7f:5c:e2:bc:de:d0: 66:06:04:01:fd:93:a7:1a:a9:77:0c:78:3b:90:53: ad:a9:fa:8f:48:19:db:6e:0b:57:3b:43:88:12:d5: 7d:3f:5a:e8:60:28:c7:76:a7:88:26:ae:f4:c2:c0: 55:0b:80:58:81:4c:3e:ca:05:8f:3b:52:cc:fd:67: a0:e3:ec:a4:3c:67:e5:84:6c:56:ae:c2:dd:a4:40: 45:c3:f5:17:f4:88:22:97:de:e0:95:60:32:4c:5d: 22:42:09:6f:01:6c:06:1e:67:69:a6:7f:b3:57:78: 90:f1:3f:36:0e:a4:39:fd:2f:64:79:d7:3c:51:0e: a6:21:58:e8:bf:bc:20:e5:9a:64:a0:26:5f:4e:61: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:70:74:2C:A4:A7:FA:AB:DD:FE:11:19:68:6B:46:CA:AF:57:59:88 X509v3 Authority Key Identifier: keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0f:17:12:cd:17:26:0b:ef:cf:2d:ec:ff:d0:5d:61:01:0a: 61:dd:54:bd:96:d4:52:86:4b:61:e2:52:b4:71:ff:35:02:ab: 27:c5:60:d5:c1:96:ed:aa:1a:dd:c3:4e:5f:1c:91:a7:b3:be: c0:87:3f:63:e3:62:ae:e2:fe:d5:41:a1:47:2c:d1:9d:0e:33: 39:ff:4b:48:67:0f:4e:63:28:84:b6:89:70:90:78:02:50:37: 27:a9:4d:32:e7:d1:63:d1:97:cf:55:18:eb:b8:62:56:a0:9a: e7:6e:bd:32:3a:57:17:a1:07:34:f8:c5:81:06:25:99:f1:a2: d2:05:ae:6f:d8:95:69:56:89:db:d1:ce:3a:89:00:15:e8:9e: 04:40:06:a8:23:7c:99:31:8a:44:6d:d8:ab:30:dd:d6:b4:15: c6:c4:00:08:4d:7c:36:6b:1e:60:49:9e:ee:64:0e:ec:57:8d: 93:22:92:de:ee:be:47:80:43:5d:f5:29:c3:40:01:c1:f6:16: f5:23:ab:66:a6:3e:e5:7e:cb:be:66:58:ab:b2:51:45:09:c8: 6b:2c:22:8f:15:b9:19:fc:bf:c0:2b:93:ba:03:94:05:17:b0: 00:c1:22:d9:ed:bb:8d:cb:20:0d:5b:e2:56:49:f9:51:f1:db: 11:ff:07:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0le47nb8Ye/C6nckSUjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZTRmNzM0ZmRlNzFhYzQyMTk1N2YyN2M4NDk5NDk2ZjQ0 NDBkN2MwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EygxNzcwNzQyY2E0YTdmYWFiZGRmZTExMTk2ODZiNDZjYWFmNTc1OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwCZjEVw9ZmSUcx0/7UBMyIansr vVMYKTjmac1pflN9mb87SmsFDbcxoXCos/I8OVy60OelucDcMdzpdlU1zdWmpIPM JAR9VpaRwniCCwo1FRbtNK0wMEj+zpIsEHZiwA17aNIaL/cVq9n7mTPZG+5/XOK8 3tBmBgQB/ZOnGql3DHg7kFOtqfqPSBnbbgtXO0OIEtV9P1roYCjHdqeIJq70wsBV C4BYgUw+ygWPO1LM/Weg4+ykPGflhGxWrsLdpEBFw/UX9Igil97glWAyTF0iQglv AWwGHmdppn+zV3iQ8T82DqQ5/S9kedc8UQ6mIVjov7wg5ZpkoCZfTmFsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdwdCykp/qr3f4RGWhrRsqvV1mIMB8GA1UdIwQY MBaAFLjk9zT95xrEIZV/J8hJlJb0RA18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEt YmNmZTNhZDM4N2NlLzEvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEtYmNmZTNhZDM4N2Nl LzEvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw8XEs0X Jgvvzy3s/9BdYQEKYd1UvZbUUoZLYeJStHH/NQKrJ8Vg1cGW7aoa3cNOXxyRp7O+ wIc/Y+NiruL+1UGhRyzRnQ4zOf9LSGcPTmMohLaJcJB4AlA3J6lNMufRY9GXz1UY 67hiVqCa5269MjpXF6EHNPjFgQYlmfGi0gWub9iVaVaJ29HOOokAFeieBEAGqCN8 mTGKRG3YqzDd1rQVxsQACE18NmseYEme7mQO7FeNkyKS3u6+R4BDXfUpw0ABwfYW 9SOrZqY+5X7LvmZYq7JRRQnIaywijxW5Gfy/wCuTugOUBRewAMEi2e27jcsgDVvi Vkn5UfHbEf8Hlw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:11 2025 by rpki-client