This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json) Hash identifier: hhAT3orekjBokTf0lb24NwvTFn3LiulCq8ybvS/33h4= Subject key identifier: 0D:33:0A:72:DD:6B:21:BA:C8:9A:4D:63:7B:9E:2E:AB:BE:A3:FB:F4 Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Certificate serial: 019AF23F739846F9371354AF081F789468DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft Manifest number: 09C2 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: WLPv_kiHkV3foWtvEt3ca8XVjG4.roa (hash: 485f4Pk93SekykKHn/Aq62sR6+/AvJghjHie2NYKlhI=) 2: hcpelkMB3HLp2KFjx3F4u7p7QiA.roa (hash: 61+3xEVQzTEIYSViuJWqNAx3iaX+tJlcGs9MEnOKcRg=) 3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: HnZMPuYQGBAyuyj9T/hAqBdi1XpHaBxoHDJU54lzWQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:73:98:46:f9:37:13:54:af:08:1f:78:94:68:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=0d330a72dd6b21bac89a4d637b9e2eabbea3fbf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:60:03:5d:fb:05:0b:11:a2:ad:04:36:7d: be:77:80:b8:aa:28:44:34:9b:6f:6f:0b:1e:12:ae: 23:43:37:74:62:1d:88:51:29:bb:29:63:67:81:2c: e1:62:e7:69:0c:4e:fc:ae:60:9a:23:72:50:36:47: fa:94:f3:6d:3d:e3:36:55:90:12:41:89:1a:07:18: e0:66:c8:6b:39:78:f4:e4:7b:dd:75:6a:45:56:8e: a1:2b:ad:35:99:eb:d1:b8:88:e2:7c:dc:22:24:e1: 23:ed:4c:15:f2:34:bf:58:7e:46:42:38:43:47:4c: 70:20:c4:9f:0e:91:0b:c7:8e:66:04:7d:be:b9:ab: 68:53:57:cc:51:7f:7c:4b:c8:06:9f:72:57:7d:3d: 9c:80:a1:70:c1:bd:08:60:0d:b3:ca:ff:29:e9:63: 72:5c:1c:ab:91:f2:fd:5d:39:a2:55:2e:fb:65:fe: 17:7f:d9:0d:7e:23:12:a5:3b:22:fa:ca:64:91:b1: a0:6a:da:4a:08:48:ea:0e:90:8d:c0:98:8c:85:3b: 15:ad:59:83:79:ab:48:57:76:e5:e9:0a:6f:b5:1a: d8:09:3f:c9:ca:fc:a1:bf:65:5b:25:84:24:af:d1: 90:08:00:c3:5d:df:00:b1:15:58:d7:26:b9:a1:0b: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:33:0A:72:DD:6B:21:BA:C8:9A:4D:63:7B:9E:2E:AB:BE:A3:FB:F4 X509v3 Authority Key Identifier: keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2c:dd:c8:4a:60:ec:05:7b:49:f3:7d:c8:84:14:c6:01:c6: 01:6b:e0:9c:5d:55:2c:c9:2e:b7:9e:59:29:e2:32:cc:b4:eb: bf:43:03:21:cd:5c:55:3c:44:1a:90:27:f9:5c:41:e1:ec:f1: 00:bc:3d:1b:c5:9f:a8:e4:e7:c0:f0:4f:0f:e0:da:86:2b:c2: af:86:fa:0b:75:dd:48:b8:93:aa:c3:ab:99:2d:6f:06:d6:01: 96:3b:c5:9b:41:a9:c1:0b:37:a6:a7:b8:36:12:3c:91:50:90: 85:8a:cb:75:db:32:62:88:d7:a5:e8:91:d1:8f:f1:1c:37:29: c8:76:0b:d7:93:03:77:a0:63:ae:b6:d3:98:dd:df:5d:ed:22: ac:0e:18:12:89:4b:ab:6d:df:99:14:08:e4:9d:d9:a1:fd:65: 4e:d8:e2:1d:0f:93:b1:45:85:eb:56:85:49:b5:da:10:71:6d: 21:48:8f:95:b1:1c:16:36:ab:15:61:8f:06:94:47:2b:56:66: 4f:4e:80:69:c1:2a:11:ab:f8:3d:f3:30:8b:a5:51:40:c0:19: f9:5f:bc:fd:f1:d4:93:41:19:37:a9:a7:cf:88:a9:87:4e:42: da:d9:89:89:56:e5:1c:b6:ac:aa:3b:1e:e3:03:3a:f4:51:5c: 27:99:b3:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3OYRvk3E1SvCB94lGjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NzJiZDQ5ZDU1MWI0YWRhNWJkNmJiNjk1NjE4YTc5NDUx YWQzNGUwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EygwZDMzMGE3MmRkNmIyMWJhYzg5YTRkNjM3YjllMmVhYmJlYTNmYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdRgA137BQsRoq0ENn2+d4C4qihE NJtvbwseEq4jQzd0Yh2IUSm7KWNngSzhYudpDE78rmCaI3JQNkf6lPNtPeM2VZAS QYkaBxjgZshrOXj05HvddWpFVo6hK601mevRuIjifNwiJOEj7UwV8jS/WH5GQjhD R0xwIMSfDpELx45mBH2+uatoU1fMUX98S8gGn3JXfT2cgKFwwb0IYA2zyv8p6WNy XByrkfL9XTmiVS77Zf4Xf9kNfiMSpTsi+spkkbGgatpKCEjqDpCNwJiMhTsVrVmD eatIV3bl6QpvtRrYCT/Jyvyhv2VbJYQkr9GQCADDXd8AsRVY1ya5oQvz9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0zCnLdayG6yJpNY3ueLqu+o/v0MB8GA1UdIwQY MBaAFLlyvUnVUbStpb1rtpVhinlFGtNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTkt Y2E1ZTY4NTQzOGEyLzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTktY2E1ZTY4NTQzOGEy LzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACizdyEpg 7AV7SfN9yIQUxgHGAWvgnF1VLMkut55ZKeIyzLTrv0MDIc1cVTxEGpAn+VxB4ezx ALw9G8WfqOTnwPBPD+DahivCr4b6C3XdSLiTqsOrmS1vBtYBljvFm0GpwQs3pqe4 NhI8kVCQhYrLddsyYojXpeiR0Y/xHDcpyHYL15MDd6BjrrbTmN3fXe0irA4YEolL q23fmRQI5J3Zof1lTtjiHQ+TsUWF61aFSbXaEHFtIUiPlbEcFjarFWGPBpRHK1Zm T06AacEqEav4PfMwi6VRQMAZ+V+8/fHUk0EZN6mnz4iph05C2tmJiVblHLasqjse 4wM69FFcJ5mzgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:37 2025 by rpki-client