This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json) Hash identifier: pTeOm64a/a7es8asL1UviM1qGLTTI2reQaHUmoYzQuk= Subject key identifier: B1:00:3E:0C:82:9F:9F:CE:08:C5:FC:73:79:B2:18:45:87:C1:4D:19 Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76 Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376 Certificate serial: 019AF31C431EC5F968A4E2BBAD10082A5D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:46 +0000 Manifest this update: Sat 06 Dec 2025 10:01:46 +0000 Manifest next update: Sun 07 Dec 2025 10:01:46 +0000 Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: sj+ssYt/vXOFXOh8YSh+YPZ9L7oKCScXDfD6NL9M6oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:43:1e:c5:f9:68:a4:e2:bb:ad:10:08:2a:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376 Validity Not Before: Dec 6 10:01:46 2025 GMT Not After : Dec 7 10:01:46 2025 GMT Subject: CN=b1003e0c829f9fce08c5fc7379b2184587c14d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:db:01:3b:22:97:56:de:ca:15:fb:a6:b2: e8:29:52:ff:29:b5:dd:be:1f:53:96:35:19:3d:99: 61:88:0c:60:d1:8a:8e:d7:d4:2c:c4:dd:8d:8e:da: 2b:4f:08:97:83:8b:f3:d4:b6:95:00:81:4a:7e:e4: b3:5b:6b:82:bf:37:af:53:bb:27:02:63:bc:81:dd: 47:57:8a:79:2a:3a:46:d2:68:08:01:9b:86:d2:38: 1e:6f:d4:fa:a4:f0:81:6d:72:80:14:54:82:01:85: 9b:b8:ef:a2:44:b2:10:04:7b:f0:f7:3b:ff:2e:52: 16:7e:70:49:e6:66:46:1e:9f:a7:a1:a2:89:e5:70: 3f:c9:63:9c:77:6c:3c:16:8a:ae:b5:6b:71:ff:a5: d0:22:ed:a2:42:d0:c0:2c:2e:86:91:52:ad:18:14: 30:91:1e:2e:14:34:de:69:48:33:43:e4:8f:47:f0: 41:f8:ec:7c:8e:a1:d2:61:48:16:47:cc:60:45:83: f6:a6:e9:1d:a4:bb:33:21:b2:d7:e5:9d:46:9a:36: a0:c6:e7:28:fb:76:93:98:8e:7c:84:75:13:55:a3: 25:f4:cd:0d:0a:98:8b:ae:d0:12:cc:bb:9f:1e:48: 44:b4:66:b7:90:bb:60:e8:eb:6b:c9:f4:44:b2:a7: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:00:3E:0C:82:9F:9F:CE:08:C5:FC:73:79:B2:18:45:87:C1:4D:19 X509v3 Authority Key Identifier: keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:59:93:85:49:25:10:11:64:72:1e:e5:9e:33:dd:c4:98:81: bb:dd:aa:71:1a:40:94:b6:9c:d9:35:de:68:1d:76:af:e3:0c: 34:6a:10:be:20:00:25:cd:01:00:97:f1:31:62:32:fe:6d:ac: f4:31:89:3a:9d:1a:c7:09:95:52:62:41:ea:59:73:b5:8f:7f: 68:22:c5:3b:ff:fa:4f:00:65:55:e1:05:89:fc:81:81:57:5d: f1:cd:a6:db:23:32:61:28:59:d2:10:a6:b9:2d:01:72:5d:79: 4f:5d:08:6f:54:6f:78:55:6f:2e:8c:0b:e0:0f:1f:2f:a8:7f: e5:79:97:38:75:df:8f:72:29:5c:68:e2:35:0d:19:2e:9a:46: be:8c:27:2e:23:5e:55:55:60:47:01:2f:ee:be:89:aa:91:da: 47:98:85:c2:08:fe:89:b2:b9:73:6f:c4:62:6c:ca:ec:4c:55: f4:fa:fc:d0:7c:e9:0c:98:b9:90:96:69:de:e1:91:70:06:52: b3:70:f7:71:89:90:5f:69:71:01:9a:b8:06:75:38:24:8d:0b: 1d:82:3e:01:3e:6a:87:4d:48:6e:96:ad:fc:d1:f2:d5:e7:0d: 26:fe:df:ef:65:de:9a:09:da:78:de:5d:6d:be:6a:c3:cd:6d: 50:6c:77:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEMexflopOK7rRAIKl1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZWIyYzk5YjhjYTY4NWEyYTUzODU4ODE0MWRiMWM0YjY0 MWQzNzYwHhcNMjUxMjA2MTAwMTQ2WhcNMjUxMjA3MTAwMTQ2WjAzMTEwLwYDVQQD EyhiMTAwM2UwYzgyOWY5ZmNlMDhjNWZjNzM3OWIyMTg0NTg3YzE0ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxXbATsil1beyhX7prLoKVL/KbXd vh9TljUZPZlhiAxg0YqO19QsxN2NjtorTwiXg4vz1LaVAIFKfuSzW2uCvzevU7sn AmO8gd1HV4p5KjpG0mgIAZuG0jgeb9T6pPCBbXKAFFSCAYWbuO+iRLIQBHvw9zv/ LlIWfnBJ5mZGHp+noaKJ5XA/yWOcd2w8FoqutWtx/6XQIu2iQtDALC6GkVKtGBQw kR4uFDTeaUgzQ+SPR/BB+Ox8jqHSYUgWR8xgRYP2pukdpLszIbLX5Z1Gmjagxuco +3aTmI58hHUTVaMl9M0NCpiLrtASzLufHkhEtGa3kLtg6OtryfREsqen5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEAPgyCn5/OCMX8c3myGEWHwU0ZMB8GA1UdIwQY MBaAFLjrLJm4ymhaKlOFiBQdscS2QdN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2Mt YWI2ZDBjMjEzZmRjLzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2MtYWI2ZDBjMjEzZmRj LzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVmThUkl EBFkch7lnjPdxJiBu92qcRpAlLac2TXeaB12r+MMNGoQviAAJc0BAJfxMWIy/m2s 9DGJOp0axwmVUmJB6llztY9/aCLFO//6TwBlVeEFifyBgVdd8c2m2yMyYShZ0hCm uS0Bcl15T10Ib1RveFVvLowL4A8fL6h/5XmXOHXfj3IpXGjiNQ0ZLppGvownLiNe VVVgRwEv7r6JqpHaR5iFwgj+ibK5c2/EYmzK7ExV9Pr80HzpDJi5kJZp3uGRcAZS s3D3cYmQX2lxAZq4BnU4JI0LHYI+AT5qh01Ibpat/NHy1ecNJv7f72XemgnaeN5d bb5qw81tUGx3tA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:38 2025 by rpki-client