This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft File: uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json) Hash identifier: LYBBqu2ty3ab4MKUNW+dExWBJIk2xlMNk/704KGLaAY= Subject key identifier: E1:64:CB:15:53:F9:FB:4F:3B:C6:C1:18:EA:AA:AC:3B:4B:7D:B1:70 Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B337B62950A1194124B0E8A15F7F78AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft Manifest number: 07D3 Signing time: Thu 18 Dec 2025 22:01:22 +0000 Manifest this update: Thu 18 Dec 2025 22:01:22 +0000 Manifest next update: Fri 19 Dec 2025 22:01:22 +0000 Files and hashes: 1: 5iHrYrKlpDn574dcAV5MQF4xHuk.roa (hash: LC6TWEYqS1CZuKzBl6YN/kJ7pyn+QXIpxyQGn5An1+M=) 2: 60kleZPqdy7U3TKImAtI20xiPqk.roa (hash: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=) 3: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (hash: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=) 4: pMp95DzdRf1pgBQsJLmwp0JpeXI.roa (hash: VEU+wyERacx2v3R6jFxKp8QKArrmRvOUh8IhbniFnxs=) 5: prm1qcLxEj8IUMRu09iPaoSnYdU.roa (hash: y3vrxJh+4Vinokejxdf+O8lEIMMBO2XUs2Esa2IWQn0=) 6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: rPw8oh0EVkiSUKtoizOxcF6D21KfbS6/BDrx2gpDpr4=) 7: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (hash: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:62:95:0a:11:94:12:4b:0e:8a:15:f7:f7:8a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Dec 18 22:01:22 2025 GMT Not After : Dec 19 22:01:22 2025 GMT Subject: CN=e164cb1553f9fb4f3bc6c118eaaaac3b4b7db170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:62:28:0d:54:76:37:24:fc:75:96:4d:d5: f7:3b:7c:02:e1:4f:1a:01:8d:04:19:6c:8c:75:16: 47:7d:37:26:4f:5f:2f:f0:eb:54:7c:25:10:0d:92: ba:22:f4:60:c4:a6:10:12:30:42:d3:73:fe:3a:2c: 03:50:e3:39:ca:fa:ce:de:c7:ba:85:fe:23:d7:9f: 0d:03:1a:dc:47:27:9c:3a:72:ae:79:79:80:af:53: 52:89:0d:77:fd:8c:d3:6a:3a:24:f3:af:1c:69:3f: bd:80:3f:b7:f2:bb:92:f2:e2:98:91:e1:47:6e:d0: 65:90:0a:6b:2f:a0:16:b4:49:2a:6a:91:1c:28:d5: 9f:74:18:83:85:2b:88:33:05:45:9b:61:42:0f:dc: 00:ca:63:b9:0c:a3:98:49:04:b4:5d:3c:ec:f2:f2: 99:8a:e3:90:3a:d1:55:10:d1:8f:ad:15:a0:28:4e: e6:ae:4d:5d:75:bd:2f:dc:4f:18:b0:04:da:86:a1: 74:0a:d4:78:5f:bc:12:0a:68:f8:39:23:e7:4b:cf: 02:62:ed:9f:b0:0c:0e:2e:70:6c:41:69:90:b5:35: 0f:40:f6:3a:94:d5:94:ba:8c:c1:26:b2:b5:c6:10: 59:eb:01:64:24:ff:d0:a7:b4:2b:04:c2:0d:84:06: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:64:CB:15:53:F9:FB:4F:3B:C6:C1:18:EA:AA:AC:3B:4B:7D:B1:70 X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:23:99:b1:7f:f2:05:65:b9:30:65:19:bb:97:d6:c4:6a:1d: 1b:a8:10:fd:95:c2:68:10:4d:26:23:5f:0f:67:5c:41:5e:5c: a8:25:10:5b:de:d9:e6:0c:63:6a:b3:df:20:d4:d9:0b:cb:95: 9d:76:68:6e:cd:e9:58:ab:5a:df:89:01:a7:89:49:bc:3e:eb: 4f:d1:ca:f5:31:51:fa:bf:f8:51:ab:94:3f:ba:0d:85:83:16: b7:7e:3c:c1:7a:a1:e6:2e:f6:84:45:ad:53:77:d7:3e:33:1d: bc:b5:4d:fd:85:5e:ed:ba:62:b2:ae:58:b0:32:4b:ee:99:e7: 95:2d:5f:11:db:e9:cf:d6:4c:1e:75:8a:e7:fa:76:ae:38:92: ba:4c:16:3b:da:b6:e3:21:e7:63:ca:56:30:ff:b1:be:5e:3f: 85:39:25:5c:79:d2:1e:4e:c3:b9:4b:1d:ee:ca:18:fa:7a:1e: d6:ac:2c:b9:e1:a2:e6:50:be:af:75:40:4f:40:b9:d7:a7:cb: cc:59:f3:5b:0d:a3:3b:b8:e2:ff:fb:7b:b2:73:8a:76:39:4d: 82:ea:92:58:b7:aa:eb:76:5f:32:c3:68:25:64:39:ec:55:d2: ea:09:d2:e9:59:f0:4b:6d:cb:87:1e:dd:6d:eb:83:4b:cc:49: 9e:dd:ab:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze2KVChGUEksOihX394qiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjUxMjE4MjIwMTIyWhcNMjUxMjE5MjIwMTIyWjAzMTEwLwYDVQQD EyhlMTY0Y2IxNTUzZjlmYjRmM2JjNmMxMThlYWFhYWMzYjRiN2RiMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjViKA1Udjck/HWWTdX3O3wC4U8a AY0EGWyMdRZHfTcmT18v8OtUfCUQDZK6IvRgxKYQEjBC03P+OiwDUOM5yvrO3se6 hf4j158NAxrcRyecOnKueXmAr1NSiQ13/YzTajok868caT+9gD+38ruS8uKYkeFH btBlkAprL6AWtEkqapEcKNWfdBiDhSuIMwVFm2FCD9wAymO5DKOYSQS0XTzs8vKZ iuOQOtFVENGPrRWgKE7mrk1ddb0v3E8YsATahqF0CtR4X7wSCmj4OSPnS88CYu2f sAwOLnBsQWmQtTUPQPY6lNWUuozBJrK1xhBZ6wFkJP/Qp7QrBMINhAZWcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFkyxVT+ftPO8bBGOqqrDtLfbFwMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyOZsX/y BWW5MGUZu5fWxGodG6gQ/ZXCaBBNJiNfD2dcQV5cqCUQW97Z5gxjarPfINTZC8uV nXZobs3pWKta34kBp4lJvD7rT9HK9TFR+r/4UauUP7oNhYMWt348wXqh5i72hEWt U3fXPjMdvLVN/YVe7bpisq5YsDJL7pnnlS1fEdvpz9ZMHnWK5/p2rjiSukwWO9q2 4yHnY8pWMP+xvl4/hTklXHnSHk7DuUsd7soY+noe1qwsueGi5lC+r3VAT0C516fL zFnzWw2jO7ji//t7snOKdjlNguqSWLeq63ZfMsNoJWQ57FXS6gnS6VnwS23Lhx7d beuDS8xJnt2r4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:36 2025 by rpki-client