This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft File: uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json) Hash identifier: OHObFnn391xnYotUshgXIBji7s7fWwNHoviQbQN2m4I= Subject key identifier: B7:AB:1B:3E:52:BB:82:47:1E:63:F0:89:1D:2B:DB:68:14:0C:35:67 Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8 Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8 Certificate serial: 019AF20954D462783A1DF15C29F0303D87AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: oimw25gLGrg8VoA88DA5Qz6cbTs.roa (hash: pg4JhqGSyuBLyWQkEY6EPIiPycbtpRjAMWZIyZYwiWM=) 2: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: rRdSyv6jgUtbL8/qx1T89nKo19MUQFtGCDdjMmGViT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:54:d4:62:78:3a:1d:f1:5c:29:f0:30:3d:87:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=b7ab1b3e52bb82471e63f0891d2bdb68140c3567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:f3:3a:7a:58:c5:77:bd:92:c3:1b:3a:c8: 10:a0:95:85:12:c0:46:ef:4d:5d:ee:7c:11:56:3c: 58:ad:54:45:9c:4c:01:8e:2b:58:c1:88:66:79:03: a3:ff:fa:f3:31:6b:87:d6:94:e8:91:34:5f:32:bd: 8f:75:a3:f3:e4:1f:8c:c9:46:88:68:3d:c6:9d:f5: 57:05:9d:f0:75:cb:88:9f:3b:1c:96:15:bb:b7:0b: 02:94:f3:1d:d4:f1:ed:0c:67:cd:af:de:15:41:9b: a0:3b:51:e2:d9:67:ee:d6:53:36:72:52:c7:ca:f6: 08:ab:56:1f:17:90:db:d7:c3:0f:15:4a:7a:f1:d1: b4:6d:23:20:1e:3e:9b:3a:7b:e8:fc:9b:aa:d5:43: 87:f0:11:6b:54:13:25:e4:b6:59:d4:13:b1:d6:64: 93:23:eb:7c:91:69:8a:51:91:12:40:4f:22:5b:9c: 14:2a:c1:a3:db:59:6f:03:b1:40:03:bc:86:a6:20: a6:5e:9e:15:9c:c6:98:80:fd:2c:39:4b:d2:f9:03: 4d:9c:b4:e5:3d:1d:75:dd:20:30:08:ac:c7:03:ed: d3:5f:35:e5:df:a6:6d:31:ac:ec:cb:16:7c:02:ea: d2:18:ff:67:21:20:7d:e8:dd:cc:6d:7f:e1:92:99: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:1B:3E:52:BB:82:47:1E:63:F0:89:1D:2B:DB:68:14:0C:35:67 X509v3 Authority Key Identifier: keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d9:3d:fd:7b:ee:06:e9:40:a1:ce:8b:46:cd:7b:b8:a7:64: 44:e3:5a:aa:ae:f2:94:3f:01:6c:8f:10:b4:ef:31:eb:33:f6: c7:2b:fa:88:ca:b5:25:39:5f:07:7b:8d:1d:3a:1f:4e:55:22: 07:10:bf:d9:ac:df:d7:3b:b6:a1:f9:65:8d:4a:af:17:cb:f1: 09:e7:04:3d:9a:e0:1e:37:fb:f4:95:90:c4:0e:8a:ce:eb:ed: 5a:b2:08:0e:6d:7a:f8:18:90:08:d9:a3:3d:5d:ea:4c:62:05: 02:71:3d:df:6d:fc:e8:20:ca:7f:9d:67:16:83:40:d9:4d:5e: 6d:05:09:3a:fc:8a:23:7d:09:7a:4b:fb:04:52:ff:17:a7:2b: d3:4f:20:f9:01:18:bc:7d:e9:15:f4:da:23:08:5c:6f:97:5b: 04:eb:9c:d4:08:25:98:2d:2f:a7:00:cb:6b:72:2a:a0:16:8a: c0:20:c0:28:a5:d8:2e:97:c3:84:91:1a:85:44:3a:39:18:9b: 55:42:ab:af:d6:cf:be:ae:c3:1b:1c:4b:0a:02:42:65:4e:85: 68:9d:d2:bb:79:06:19:0e:f4:94:91:67:f3:3f:eb:03:96:16: 2d:63:12:f2:06:c7:70:9f:f9:a6:ed:15:b2:25:14:99:1f:1a: 1e:a1:b0:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVTUYng6HfFcKfAwPYeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OTQzNzU0ZTkyMzQ1YThiYmFiM2RiMmJjMzZkNjE4ZTVl Y2MwZTgwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EyhiN2FiMWIzZTUyYmI4MjQ3MWU2M2YwODkxZDJiZGI2ODE0MGMzNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO3zOnpYxXe9ksMbOsgQoJWFEsBG 701d7nwRVjxYrVRFnEwBjitYwYhmeQOj//rzMWuH1pTokTRfMr2PdaPz5B+MyUaI aD3GnfVXBZ3wdcuInzsclhW7twsClPMd1PHtDGfNr94VQZugO1Hi2Wfu1lM2clLH yvYIq1YfF5Db18MPFUp68dG0bSMgHj6bOnvo/Juq1UOH8BFrVBMl5LZZ1BOx1mST I+t8kWmKUZESQE8iW5wUKsGj21lvA7FAA7yGpiCmXp4VnMaYgP0sOUvS+QNNnLTl PR113SAwCKzHA+3TXzXl36ZtMazsyxZ8AurSGP9nISB96N3MbX/hkpncjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLerGz5Su4JHHmPwiR0r22gUDDVnMB8GA1UdIwQY MBaAFLiUN1TpI0Wou6s9srw21hjl7MDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMt M2U2YTE0ZGUyYzQ3LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMtM2U2YTE0ZGUyYzQ3 LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNk9/Xvu BulAoc6LRs17uKdkRONaqq7ylD8BbI8QtO8x6zP2xyv6iMq1JTlfB3uNHTofTlUi BxC/2azf1zu2oflljUqvF8vxCecEPZrgHjf79JWQxA6KzuvtWrIIDm16+BiQCNmj PV3qTGIFAnE932386CDKf51nFoNA2U1ebQUJOvyKI30Jekv7BFL/F6cr008g+QEY vH3pFfTaIwhcb5dbBOuc1AglmC0vpwDLa3IqoBaKwCDAKKXYLpfDhJEahUQ6ORib VUKrr9bPvq7DGxxLCgJCZU6FaJ3Su3kGGQ70lJFn8z/rA5YWLWMS8gbHcJ/5pu0V siUUmR8aHqGwZw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:22 2025 by rpki-client