This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json) Hash identifier: Mx9pwepaFWQlBHPW+twfmEvbhAa5kfe/qEl+MMsyF6M= Subject key identifier: 85:0C:FD:CE:A8:E6:84:89:9B:93:19:B6:FA:D8:62:E2:AE:1F:17:A7 Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2 Certificate serial: 019AF3F8037AAE7CBE072CEB2830345D75BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft Manifest number: 0F6D Signing time: Sat 06 Dec 2025 14:01:48 +0000 Manifest this update: Sat 06 Dec 2025 14:01:48 +0000 Manifest next update: Sun 07 Dec 2025 14:01:48 +0000 Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=) 2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=) 3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=) 4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: MwOdcZzYxuFJA0XawjOxybcQyF7XGkyuKXpqbqaNDr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:03:7a:ae:7c:be:07:2c:eb:28:30:34:5d:75:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2 Validity Not Before: Dec 6 14:01:48 2025 GMT Not After : Dec 7 14:01:48 2025 GMT Subject: CN=850cfdcea8e684899b9319b6fad862e2ae1f17a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:7c:5b:12:13:c1:e0:b8:04:9c:e6:1a:35: d2:ec:6f:9e:b3:d1:42:fe:07:ab:66:81:0d:12:ba: df:27:24:10:28:67:12:f2:47:fa:96:7e:c7:f2:f0: e6:7c:ac:85:cb:1b:cf:cb:e3:7c:bc:73:c2:02:56: 08:e1:84:fd:46:b0:2b:9b:cd:ab:e3:8d:d8:81:21: c6:2d:f9:5b:75:32:47:09:3f:30:62:0a:a4:65:95: f0:ca:b6:4e:29:ba:fc:0b:4e:ab:23:27:d0:00:ad: 9b:28:9b:5e:68:16:1a:d0:18:a8:fc:c4:6c:cd:b2: 6a:9e:ca:34:1b:8b:f2:01:9e:0c:97:82:52:51:ee: 5a:93:60:a9:e5:7a:4d:a7:24:41:f6:55:3a:c3:dd: 41:cf:7d:d0:c0:de:d8:78:11:23:71:28:5c:cb:2a: 23:7f:3a:18:a6:6d:c2:3f:63:48:30:dc:99:3e:62: 35:e6:5f:18:b5:f1:19:b0:27:d3:c6:5a:d7:1a:ba: 16:2e:6c:d1:61:65:03:4f:62:64:53:7a:9e:94:5a: f5:97:6d:43:8b:34:31:02:57:25:88:4b:ef:7e:4f: 17:84:f8:65:6a:80:67:69:6b:f6:75:04:bc:d9:72: b1:d8:50:24:92:80:06:49:b9:9c:50:1e:47:f5:c4: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0C:FD:CE:A8:E6:84:89:9B:93:19:B6:FA:D8:62:E2:AE:1F:17:A7 X509v3 Authority Key Identifier: keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:0b:22:3a:64:e0:4c:10:23:7e:83:12:4c:3f:cf:56:83:43: 83:e4:fc:70:45:18:2f:13:d9:4c:26:ce:88:d2:1a:78:f0:28: 56:13:b3:94:db:82:1c:4d:a9:a4:5c:d4:6e:6a:2d:90:44:bd: ae:e4:0b:c1:77:42:b3:e7:90:e7:37:81:d4:da:dc:8c:17:3f: 68:fd:82:51:7b:23:c3:6b:28:07:ba:b1:79:b6:d2:94:01:cf: 5a:4b:7a:bf:df:9a:75:a0:c6:f2:ee:0a:65:dd:76:e0:f0:eb: ec:a9:a7:d8:ca:b1:57:5a:ea:ea:ba:11:42:0f:ea:f3:0b:d2: cb:36:3e:4c:53:4a:90:c6:76:fa:f2:34:47:4c:45:e3:1f:e8: 90:ec:35:05:07:04:7b:ed:0f:e9:15:e2:71:12:dd:56:e4:52: 5f:7d:71:38:7d:3e:db:bc:9d:78:46:c1:76:34:1f:d9:c2:23: 4b:a7:da:e3:12:54:f7:37:77:bc:a5:e3:70:c3:42:85:a5:1a: 98:1d:98:9c:ce:e4:db:cd:15:32:4d:d9:14:ca:62:37:74:8a: 5a:c9:b9:0a:3b:32:57:71:6f:a8:b8:51:d5:9d:13:88:31:60: 00:29:ed:72:63:e1:ec:20:ff:64:3e:14:fd:91:34:3e:48:8d: 62:6d:68:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AN6rny+ByzrKDA0XXW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi OTNjYzIwHhcNMjUxMjA2MTQwMTQ4WhcNMjUxMjA3MTQwMTQ4WjAzMTEwLwYDVQQD Eyg4NTBjZmRjZWE4ZTY4NDg5OWI5MzE5YjZmYWQ4NjJlMmFlMWYxN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcx8WxITweC4BJzmGjXS7G+es9FC /gerZoENErrfJyQQKGcS8kf6ln7H8vDmfKyFyxvPy+N8vHPCAlYI4YT9RrArm82r 443YgSHGLflbdTJHCT8wYgqkZZXwyrZOKbr8C06rIyfQAK2bKJteaBYa0Bio/MRs zbJqnso0G4vyAZ4Ml4JSUe5ak2Cp5XpNpyRB9lU6w91Bz33QwN7YeBEjcShcyyoj fzoYpm3CP2NIMNyZPmI15l8YtfEZsCfTxlrXGroWLmzRYWUDT2JkU3qelFr1l21D izQxAlcliEvvfk8XhPhlaoBnaWv2dQS82XKx2FAkkoAGSbmcUB5H9cQuQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUM/c6o5oSJm5MZtvrYYuKuHxenMB8GA1UdIwQY MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et ZmYwNWQ0NDZlN2ZkLzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2EtZmYwNWQ0NDZlN2Zk LzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwAsiOmTg TBAjfoMSTD/PVoNDg+T8cEUYLxPZTCbOiNIaePAoVhOzlNuCHE2ppFzUbmotkES9 ruQLwXdCs+eQ5zeB1NrcjBc/aP2CUXsjw2soB7qxebbSlAHPWkt6v9+adaDG8u4K Zd124PDr7Kmn2MqxV1rq6roRQg/q8wvSyzY+TFNKkMZ2+vI0R0xF4x/okOw1BQcE e+0P6RXicRLdVuRSX31xOH0+27ydeEbBdjQf2cIjS6fa4xJU9zd3vKXjcMNChaUa mB2YnM7k280VMk3ZFMpiN3SKWsm5CjsyV3FvqLhR1Z0TiDFgACntcmPh7CD/ZD4U /ZE0PkiNYm1oTA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:41 2025 by rpki-client