This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft File: uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json) Hash identifier: LnwpUq86LfLEBj/TQedmn53zpcncwAZzJ5lzBLZPt9Q= Subject key identifier: 3F:C8:7D:E4:AF:F0:85:1E:AC:D9:D5:E6:9D:B5:37:36:76:A5:4F:6D Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Certificate serial: 019AF23FF4E514664AF50F7495D5DC2C417F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft Manifest number: 8A Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa (hash: Yeg65Usz9zdCfiKTUR//qasZbCYjIaaB9OcLvlxhcWk=) 2: cYKZnIvI1ahMsBXfvhEXhKIkQZ4.roa (hash: mpa74AxdpAfIObXm7sXQn/VwhVqFNz+oygo29Hbz7ns=) 3: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: JEmHAunqyZ7GBsTiN3M7WOTocF2TUEVaH0KMmUWZf30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f4:e5:14:66:4a:f5:0f:74:95:d5:dc:2c:41:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=3fc87de4aff0851eacd9d5e69db5373676a54f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:16:a9:99:5e:2b:98:45:19:41:42:25:da: 89:37:30:2a:34:cf:58:8b:73:dd:04:17:14:5e:e2: 79:5b:2d:73:21:41:dc:dc:7c:12:df:38:78:36:59: ba:fa:1b:40:ca:d4:bb:f0:4f:02:91:c7:d8:b1:11: d6:c3:47:61:af:29:fb:7e:dd:e3:02:5f:38:c5:ab: ba:78:37:54:22:1f:e1:30:8b:40:59:f6:d6:c1:f1: 29:77:18:73:f3:9e:26:8f:a0:e1:55:5e:76:48:4d: 5a:12:72:3a:81:7c:cf:0f:a9:3e:bc:81:ff:63:bc: 9a:f1:4b:ad:a5:f8:e4:d2:ce:f8:8c:56:45:2f:b8: 5a:25:43:e4:11:64:a8:b0:5b:86:81:b3:49:a4:20: 19:1d:c6:cd:fe:31:bc:33:1a:ac:1e:a0:43:42:b7: 03:20:ba:a0:47:ea:64:c3:c6:57:93:6a:5d:c8:e7: 4a:90:fb:a0:84:39:7a:a4:4e:f0:6a:fe:d6:ab:55: d8:62:34:77:89:b6:06:92:c7:11:01:fc:91:89:1d: 8a:60:7d:33:f1:ea:ab:95:66:d0:03:40:d8:ec:2f: 76:30:c2:bd:42:a3:f1:b3:34:a0:f5:2a:cd:6b:56: b4:82:ca:97:78:1f:9b:9f:75:27:87:78:7b:52:6a: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C8:7D:E4:AF:F0:85:1E:AC:D9:D5:E6:9D:B5:37:36:76:A5:4F:6D X509v3 Authority Key Identifier: keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1f:2c:c6:40:9e:be:e3:1f:58:bf:61:20:ff:79:90:f5:b1: 15:d8:f5:a7:ba:80:6e:c3:72:c2:3c:72:22:47:d3:81:88:b5: bf:59:95:be:89:9f:d6:cf:9a:cb:ac:81:0c:58:78:37:68:8b: 4f:58:c1:c2:40:35:f9:c2:24:03:e6:f7:c7:95:c3:00:62:4c: be:fe:40:20:88:18:dd:8a:93:c6:75:89:11:5c:c7:55:2e:8d: 78:35:54:57:58:21:84:83:e4:a2:c8:92:92:c1:50:1c:0d:58: 36:bb:f2:cb:2c:87:96:a9:3d:52:c3:ed:c0:09:67:16:92:e8: e0:fd:f7:d6:c0:ab:48:40:71:1d:b6:0e:8a:16:5a:35:b2:35: 4c:34:7c:9c:90:8e:33:68:50:be:6a:3c:c3:9b:8e:18:f9:35: 44:1b:86:12:f0:a4:34:17:34:4b:5e:67:e9:14:7f:d3:a3:7e: 75:31:f6:62:75:31:68:fd:9f:24:17:f3:45:30:a9:bb:c6:76: 22:ea:8c:11:68:e5:3a:2b:49:5d:00:d4:03:5a:33:e4:0d:1d: ea:ac:0e:ed:74:33:9f:22:62:51:3d:d3:c4:1e:d6:be:91:5b: 1e:22:71:43:9e:03:40:34:80:07:cd:ae:e6:c8:16:71:0e:da: 4f:29:47:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/TlFGZK9Q90ldXcLEF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjNkNGFjZTczNTYxM2VjYmM1OTFkZmZjMjk4NWYzNDE3 NjY3ZDMwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD EygzZmM4N2RlNGFmZjA4NTFlYWNkOWQ1ZTY5ZGI1MzczNjc2YTU0ZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGkWqZleK5hFGUFCJdqJNzAqNM9Y i3PdBBcUXuJ5Wy1zIUHc3HwS3zh4Nlm6+htAytS78E8CkcfYsRHWw0dhryn7ft3j Al84xau6eDdUIh/hMItAWfbWwfEpdxhz854mj6DhVV52SE1aEnI6gXzPD6k+vIH/ Y7ya8Uutpfjk0s74jFZFL7haJUPkEWSosFuGgbNJpCAZHcbN/jG8MxqsHqBDQrcD ILqgR+pkw8ZXk2pdyOdKkPughDl6pE7wav7Wq1XYYjR3ibYGkscRAfyRiR2KYH0z 8eqrlWbQA0DY7C92MMK9QqPxszSg9SrNa1a0gsqXeB+bn3Unh3h7UmpiWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/IfeSv8IUerNnV5p21NzZ2pU9tMB8GA1UdIwQY MBaAFLiz1KznNWE+y8WR3/wphfNBdmfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2Et NDQyY2MzNjQ5YmFjLzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2EtNDQyY2MzNjQ5YmFj LzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx8sxkCe vuMfWL9hIP95kPWxFdj1p7qAbsNywjxyIkfTgYi1v1mVvomf1s+ay6yBDFh4N2iL T1jBwkA1+cIkA+b3x5XDAGJMvv5AIIgY3YqTxnWJEVzHVS6NeDVUV1ghhIPkosiS ksFQHA1YNrvyyyyHlqk9UsPtwAlnFpLo4P331sCrSEBxHbYOihZaNbI1TDR8nJCO M2hQvmo8w5uOGPk1RBuGEvCkNBc0S15n6RR/06N+dTH2YnUxaP2fJBfzRTCpu8Z2 IuqMEWjlOitJXQDUA1oz5A0d6qwO7XQznyJiUT3TxB7WvpFbHiJxQ54DQDSAB82u 5sgWcQ7aTylHtA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:01 2025 by rpki-client