This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft File: uHk6g7BixN6WkELwnBcoBmY2_cM.mft (raw, json) Hash identifier: PsGKpb/0ALrent636++8rwxRdEfvRkxAxmjK/nbvENA= Subject key identifier: 17:9C:4E:D1:7C:A3:82:0A:E6:AD:31:82:33:60:A5:AC:A6:F8:81:BC Authority key identifier: B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3 Certificate issuer: /CN=b8793a83b062c4de969042f09c1728066636fdc3 Certificate serial: 019AF31B35E22E193890F864AC25D0866A61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft Manifest number: 07C1 Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: a3C3D0YT0LCxzYk_gP-uTZA6fnI.roa (hash: baiAvJGpUsAZJ7npsCUrORP22mHXOv/h6ETJi81b0fM=) 2: uHk6g7BixN6WkELwnBcoBmY2_cM.crl (hash: ejJ2srGpNWLgiZGAsYaR73pYhHi5BvobaU9u5tOvzNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:35:e2:2e:19:38:90:f8:64:ac:25:d0:86:6a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8793a83b062c4de969042f09c1728066636fdc3 Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=179c4ed17ca3820ae6ad31823360a5aca6f881bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:08:de:c3:2e:52:9b:e0:7d:aa:19:7a:50: 69:cb:da:2a:8d:b9:fb:82:3c:13:5b:13:23:e5:52: 0d:78:d6:4a:43:e9:0a:4c:51:7c:66:0d:34:c3:3c: 2a:0b:ca:ca:70:1c:2a:95:da:1b:ad:d8:00:4d:42: 4f:81:b6:a0:dc:da:9a:8a:01:8f:a7:ce:30:4b:cf: db:87:53:38:a6:4c:8e:bb:80:a9:e6:aa:95:3f:ad: 24:eb:0a:b4:98:46:17:29:b6:e3:98:52:79:c2:d5: e0:47:a0:11:dd:dd:d8:65:36:68:cd:b8:e5:52:84: e1:c8:17:c2:aa:da:37:b1:0b:e0:df:39:b4:53:19: 75:04:ff:80:b1:86:3e:40:7a:d1:e5:de:dd:13:19: 51:10:a6:25:2a:d4:43:16:c9:61:bf:8c:93:00:6e: e6:0c:cd:99:a7:e1:46:d7:10:c9:ee:ca:d6:c8:e7: a1:f3:50:9f:54:2f:a2:88:cf:56:0c:0a:dd:30:b4: ca:09:a3:27:31:7b:2b:be:55:c4:c6:18:4b:5b:1a: e7:16:9c:1f:b1:47:6e:c0:64:13:79:68:02:2f:4a: d6:64:df:49:08:3b:02:bf:dc:1a:37:cd:5e:46:51: a8:71:73:7b:83:32:73:02:82:12:dd:07:0c:20:9d: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:4E:D1:7C:A3:82:0A:E6:AD:31:82:33:60:A5:AC:A6:F8:81:BC X509v3 Authority Key Identifier: keyid:B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:46:a3:c6:86:e1:9c:fa:5d:55:6e:99:92:0e:26:f8:b9:d7: 21:af:78:d3:4c:5e:fc:bf:29:89:94:e9:5e:d5:78:41:9e:9d: 83:86:9f:85:16:f7:c5:5c:bc:b3:f3:14:b7:e4:3b:01:de:12: fb:34:41:d9:58:b2:04:d5:81:76:2d:b0:32:a0:77:b0:d7:82: 23:77:0b:28:d1:2f:6b:27:88:e7:8f:03:f8:fb:67:a1:57:3f: f3:1a:e8:73:ce:a9:e3:ad:04:07:a1:20:69:af:e3:6d:89:87: c8:52:6b:1d:cc:a0:07:1c:4f:c1:f3:81:bf:83:46:cc:70:a8: 93:a7:4e:1c:19:9e:7d:f1:c6:73:39:bc:4c:a5:f1:a4:13:bc: e5:ec:b3:04:0b:82:42:d3:5f:3c:f7:68:b6:94:5d:a9:4b:4b: b4:d3:b8:cd:41:08:01:1e:c7:c5:cf:74:05:04:d0:b8:14:cb: 29:f4:64:cc:79:ba:36:0b:04:68:d3:be:e3:dd:7a:5d:0f:3b: ce:e8:48:3c:c3:2e:ad:46:8b:81:9a:2c:74:08:e3:fa:bd:46: e2:9a:71:4a:eb:8f:fa:d8:cf:de:bd:91:d2:b0:3b:cd:ac:be: a3:c8:1c:6f:9a:1a:99:a0:eb:70:c7:b3:9e:a9:6d:29:e7:c8: b4:b1:9f:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzXiLhk4kPhkrCXQhmphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NzkzYTgzYjA2MmM0ZGU5NjkwNDJmMDljMTcyODA2NjYz NmZkYzMwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD EygxNzljNGVkMTdjYTM4MjBhZTZhZDMxODIzMzYwYTVhY2E2Zjg4MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygkI3sMuUpvgfaoZelBpy9oqjbn7 gjwTWxMj5VINeNZKQ+kKTFF8Zg00wzwqC8rKcBwqldobrdgATUJPgbag3NqaigGP p84wS8/bh1M4pkyOu4Cp5qqVP60k6wq0mEYXKbbjmFJ5wtXgR6AR3d3YZTZozbjl UoThyBfCqto3sQvg3zm0Uxl1BP+AsYY+QHrR5d7dExlREKYlKtRDFslhv4yTAG7m DM2Zp+FG1xDJ7srWyOeh81CfVC+iiM9WDArdMLTKCaMnMXsrvlXExhhLWxrnFpwf sUduwGQTeWgCL0rWZN9JCDsCv9waN81eRlGocXN7gzJzAoIS3QcMIJ15SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBecTtF8o4IK5q0xgjNgpaym+IG8MB8GA1UdIwQY MBaAFLh5OoOwYsTelpBC8JwXKAZmNv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUhrNmc3Qml4TjZXa0VMd25CY29CbVkyX2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83OWM3NDEtNmZlYS00ZDNjLWE4NDAt NTYyM2YwYzU2NGJmLzEvdUhrNmc3Qml4TjZXa0VMd25CY29CbVkyX2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83OWM3NDEtNmZlYS00ZDNjLWE4NDAtNTYyM2YwYzU2NGJm LzEvdUhrNmc3Qml4TjZXa0VMd25CY29CbVkyX2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEajxobh nPpdVW6Zkg4m+LnXIa9400xe/L8piZTpXtV4QZ6dg4afhRb3xVy8s/MUt+Q7Ad4S +zRB2ViyBNWBdi2wMqB3sNeCI3cLKNEvayeI548D+PtnoVc/8xroc86p460EB6Eg aa/jbYmHyFJrHcygBxxPwfOBv4NGzHCok6dOHBmeffHGczm8TKXxpBO85eyzBAuC QtNfPPdotpRdqUtLtNO4zUEIAR7Hxc90BQTQuBTLKfRkzHm6NgsEaNO+4916XQ87 zuhIPMMurUaLgZosdAjj+r1G4ppxSuuP+tjP3r2R0rA7zay+o8gcb5oamaDrcMez nqltKefItLGfkg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:45 2025 by rpki-client