This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft File: uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft (raw, json) Hash identifier: CBNEMfnaUNqfc6jT6sSUSHB+bBxRIVTueED6OdoZdtY= Subject key identifier: 11:D0:18:0C:C0:EF:A1:E4:32:02:0B:FD:82:B2:39:1F:A7:39:40:A1 Authority key identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C Certificate issuer: /CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c Certificate serial: 019AF0BF7A31B9047B65771C7AA5C75431D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft Manifest number: 0E Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: CvwfM_6zHhuKo7Rj0K0qaHy79hM.roa (hash: 7Qc+8Z4jv4GQPeDuRi9kM1/JRP0AKNTAWHU28w6X6pA=) 2: uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl (hash: 3NcHFow+alqGXp3YGeNsXq9Uzik3Kbma7RS7SgNiN/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7a:31:b9:04:7b:65:77:1c:7a:a5:c7:54:31:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=11d0180cc0efa1e432020bfd82b2391fa73940a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:97:6f:bd:31:9c:b8:c7:79:f3:3f:7a:6c: 02:d0:7c:25:d5:b1:66:bb:96:b0:4d:56:62:f1:a7: 3d:0f:12:80:d3:22:62:bf:e4:9a:6e:49:cc:15:29: 07:a6:9a:a2:c3:f2:5f:86:a6:35:97:0a:8a:58:ce: 95:63:b6:cb:6b:8f:44:42:0d:0a:72:87:a1:0d:fe: a2:ed:6a:df:4a:5e:b5:01:10:80:b6:3f:8d:da:76: 43:6a:a1:e7:a9:23:8d:46:68:99:0b:e4:78:c1:74: 2c:9e:a6:95:15:7f:36:fa:a8:5d:14:8f:2e:09:67: eb:60:f4:87:47:d7:ef:11:23:f5:b6:62:cd:ed:40: d1:4d:db:a5:f0:2f:d3:62:f5:cf:59:24:8c:a4:4d: c1:54:55:dd:54:2e:52:42:ba:c1:85:f5:bc:96:a7: ab:bc:7a:bc:4d:3d:0d:a9:d6:4c:f5:65:3f:ea:c8: b7:ba:cd:61:05:b4:93:42:10:ed:5d:c4:18:f9:81: e8:37:34:63:4e:4f:22:78:01:46:9b:e1:34:d2:6b: 4d:63:70:81:c2:b9:b8:23:73:58:a5:3a:8b:47:69: ee:3a:b8:f1:80:68:51:ab:2b:76:66:09:eb:60:eb: 95:9e:43:bb:fa:fa:f1:f3:13:99:20:28:e2:1e:2d: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D0:18:0C:C0:EF:A1:E4:32:02:0B:FD:82:B2:39:1F:A7:39:40:A1 X509v3 Authority Key Identifier: keyid:B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:5f:2f:66:b8:7e:10:40:e9:44:69:3b:83:07:bf:76:51:fb: 02:06:cc:03:16:d1:96:59:b8:d6:26:71:64:52:9e:3b:d8:b0: 15:2b:47:b4:64:a0:2f:dd:34:ce:0e:98:62:12:8d:bb:97:93: 19:3c:57:32:73:07:1a:67:1c:7c:85:5b:4a:38:41:8d:b8:4f: c9:fb:af:78:cd:a2:b6:1f:5a:55:31:08:56:3b:e4:4b:d1:0c: b5:d9:ff:0e:12:71:f6:b6:6f:16:62:74:fa:b4:3b:a1:27:b4: a1:51:31:bb:e7:47:3b:d7:45:a2:ba:bf:67:6b:bf:8e:72:dd: ba:04:40:5d:a2:5b:34:48:cc:e8:21:02:01:3d:4d:fb:c6:2b: 91:71:87:86:5f:c1:05:a4:f5:4f:7c:70:4a:ed:3d:90:1e:4d: d2:51:36:b9:c9:d1:6c:5b:17:d6:21:50:d8:50:b9:39:57:df: 62:df:22:8f:55:b4:35:8e:17:82:f2:53:03:5f:a6:ca:90:de: e8:11:03:96:3d:c4:73:b7:3a:63:7e:94:e7:ac:97:f3:f2:eb: 4a:d3:be:b1:d1:1c:25:71:45:74:83:a3:6d:41:7b:39:b2:a9: 9b:05:db:15:de:cf:12:bd:b3:0d:f1:ac:68:ed:a2:d3:1d:19: 3c:e2:7e:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3oxuQR7ZXcceqXHVDHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OGQwMzQyY2YzZTcxNGY5YzE1NWE0ZDBkZjc1ZmY5ZmIz ZmY3M2MwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD EygxMWQwMTgwY2MwZWZhMWU0MzIwMjBiZmQ4MmIyMzkxZmE3Mzk0MGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ryXb70xnLjHefM/emwC0Hwl1bFm u5awTVZi8ac9DxKA0yJiv+SabknMFSkHppqiw/JfhqY1lwqKWM6VY7bLa49EQg0K coehDf6i7WrfSl61ARCAtj+N2nZDaqHnqSONRmiZC+R4wXQsnqaVFX82+qhdFI8u CWfrYPSHR9fvESP1tmLN7UDRTdul8C/TYvXPWSSMpE3BVFXdVC5SQrrBhfW8lqer vHq8TT0NqdZM9WU/6si3us1hBbSTQhDtXcQY+YHoNzRjTk8ieAFGm+E00mtNY3CB wrm4I3NYpTqLR2nuOrjxgGhRqyt2ZgnrYOuVnkO7+vrx8xOZICjiHi3ilwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHQGAzA76HkMgIL/YKyOR+nOUChMB8GA1UdIwQY MBaAFLiNA0LPPnFPnBVaTQ33X/n7P/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zN2Q3NDYtNWVmOS00Yjc0LWJmNmYt ZmU3MTYyNzFhMmFkLzEvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zN2Q3NDYtNWVmOS00Yjc0LWJmNmYtZmU3MTYyNzFhMmFk LzEvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtl8vZrh+ EEDpRGk7gwe/dlH7AgbMAxbRllm41iZxZFKeO9iwFStHtGSgL900zg6YYhKNu5eT GTxXMnMHGmccfIVbSjhBjbhPyfuveM2ith9aVTEIVjvkS9EMtdn/DhJx9rZvFmJ0 +rQ7oSe0oVExu+dHO9dForq/Z2u/jnLdugRAXaJbNEjM6CECAT1N+8YrkXGHhl/B BaT1T3xwSu09kB5N0lE2ucnRbFsX1iFQ2FC5OVffYt8ij1W0NY4XgvJTA1+mypDe 6BEDlj3Ec7c6Y36U56yX8/LrStO+sdEcJXFFdIOjbUF7ObKpmwXbFd7PEr2zDfGs aO2i0x0ZPOJ+dA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:13 2025 by rpki-client