This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft File: uEDbhrmLXLMnCkjPf6AjyHrKucU.mft (raw, json) Hash identifier: Sdk+uZxMAld704ny397XroFyAFT/CBPTKeQa2XXFe8w= Subject key identifier: F9:6A:5D:0E:21:C6:8D:20:79:B0:20:3D:FA:2A:C3:54:4B:C9:30:7F Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5 Certificate issuer: /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5 Certificate serial: 019B35D739EBBD0AD42E83A604310FB54084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft Manifest number: 071C Signing time: Fri 19 Dec 2025 09:00:56 +0000 Manifest this update: Fri 19 Dec 2025 09:00:56 +0000 Manifest next update: Sat 20 Dec 2025 09:00:56 +0000 Files and hashes: 1: FxFAHCh-xR5SmE47a0ARTd4GkRw.roa (hash: slz/fDlVOpfItIULaAZ74wfhbWz9EKShd3tsnurJfb0=) 2: uEDbhrmLXLMnCkjPf6AjyHrKucU.crl (hash: EGMt5R4Vt3SFc31gNPh/AN/mYEcl82xh3wFmQf8I/+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:39:eb:bd:0a:d4:2e:83:a6:04:31:0f:b5:40:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5 Validity Not Before: Dec 19 09:00:56 2025 GMT Not After : Dec 20 09:00:56 2025 GMT Subject: CN=f96a5d0e21c68d2079b0203dfa2ac3544bc9307f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:8c:56:01:d1:2d:e4:bc:db:8d:05:58:78: 9a:eb:92:91:ff:80:cc:d5:82:ba:7f:67:4e:df:83: 5c:8f:b6:e6:84:13:db:09:4e:7f:50:e2:94:fd:d0: c0:2a:a5:8c:50:16:3f:2c:18:a5:7d:f5:49:1c:67: 65:90:5f:1f:1c:41:62:31:d3:cf:cb:aa:8c:bd:e9: f9:bc:4b:ba:44:25:73:94:8a:58:11:bc:20:30:63: de:90:cd:04:60:16:f4:f6:b3:6d:22:8a:bf:3a:c1: 42:85:46:35:a0:20:4f:ca:c9:88:e9:32:21:90:00: 89:5e:e6:b6:9e:dd:f9:f2:78:2e:e5:91:44:49:fb: fd:cc:9f:88:06:f2:42:2a:32:77:3d:eb:04:8f:09: de:8d:9f:ce:43:49:88:01:c3:f3:e0:b6:2a:65:f8: 44:93:bb:9f:20:cb:7c:11:b6:ee:5a:d8:60:68:86: 1a:11:8c:35:18:d1:82:b8:b5:dc:47:b3:a8:fc:48: 20:a9:9a:c1:97:a3:61:0a:5a:38:c3:1c:da:55:e0: 4c:d1:d3:8e:4e:f0:cb:21:43:3e:32:f8:58:c8:1b: 6f:b4:21:9e:a5:82:5e:93:58:69:52:a5:dd:f4:63: 89:b5:f3:c6:5b:5d:62:25:c1:a9:35:f5:f9:47:22: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6A:5D:0E:21:C6:8D:20:79:B0:20:3D:FA:2A:C3:54:4B:C9:30:7F X509v3 Authority Key Identifier: keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:86:e4:dc:c6:e6:e3:5d:71:26:b1:c8:f5:9a:0c:68:4e:b9: 22:27:82:3c:bd:12:fd:d3:06:47:fd:3e:10:c5:32:45:0e:7e: 79:f5:48:f8:2e:cf:e8:01:46:8f:61:0d:38:ef:13:d0:05:9e: 51:a9:58:5d:e2:c3:4a:ec:c3:e1:b1:35:38:20:59:d7:3e:e5: af:2e:fb:c1:58:16:2f:d3:52:81:a8:0b:7d:53:77:1f:55:2b: de:eb:c7:d1:b8:1f:38:29:d2:31:48:41:83:54:d9:8a:b8:c8: 54:d5:71:d3:23:7a:15:21:87:8b:a6:01:88:77:a9:f8:5c:0b: 6f:b5:45:c8:08:fa:da:23:2e:c4:f9:d8:8f:62:2e:44:b8:82: fd:b7:cf:49:39:8b:63:fb:d6:26:60:db:99:2b:40:c5:d6:b0: 3d:6b:96:66:2b:54:c8:f2:e1:2d:5e:0e:7c:26:48:25:5b:c4: 85:ef:09:51:d4:8f:3b:23:db:61:95:72:68:9c:88:3b:12:52: 65:b6:c0:36:9f:f4:fb:44:cf:30:7c:7a:99:18:ed:62:e7:8e: ca:f4:1e:fe:4f:86:c3:66:c0:98:66:47:ab:df:2d:6b:41:ea: 01:70:22:12:b6:22:27:1b:27:ef:70:7a:46:0c:fe:09:a9:38: 5d:89:f9:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11znrvQrULoOmBDEPtUCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NDBkYjg2Yjk4YjVjYjMyNzBhNDhjZjdmYTAyM2M4N2Fj YWI5YzUwHhcNMjUxMjE5MDkwMDU2WhcNMjUxMjIwMDkwMDU2WjAzMTEwLwYDVQQD EyhmOTZhNWQwZTIxYzY4ZDIwNzliMDIwM2RmYTJhYzM1NDRiYzkzMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxmMVgHRLeS8240FWHia65KR/4DM 1YK6f2dO34Ncj7bmhBPbCU5/UOKU/dDAKqWMUBY/LBilffVJHGdlkF8fHEFiMdPP y6qMven5vEu6RCVzlIpYEbwgMGPekM0EYBb09rNtIoq/OsFChUY1oCBPysmI6TIh kACJXua2nt358ngu5ZFESfv9zJ+IBvJCKjJ3PesEjwnejZ/OQ0mIAcPz4LYqZfhE k7ufIMt8EbbuWthgaIYaEYw1GNGCuLXcR7Oo/EggqZrBl6NhClo4wxzaVeBM0dOO TvDLIUM+MvhYyBtvtCGepYJek1hpUqXd9GOJtfPGW11iJcGpNfX5RyLqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlqXQ4hxo0gebAgPfoqw1RLyTB/MB8GA1UdIwQY MBaAFLhA24a5i1yzJwpIz3+gI8h6yrnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUVEYmhybUxYTE1uQ2tqUGY2QWp5SHJLdWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xMWZmYmUtMzc5Zi00ZmRlLWE4NGEt YzdiZDZjMjYzNzQ0LzEvdUVEYmhybUxYTE1uQ2tqUGY2QWp5SHJLdWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xMWZmYmUtMzc5Zi00ZmRlLWE4NGEtYzdiZDZjMjYzNzQ0 LzEvdUVEYmhybUxYTE1uQ2tqUGY2QWp5SHJLdWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYbk3Mbm 411xJrHI9ZoMaE65IieCPL0S/dMGR/0+EMUyRQ5+efVI+C7P6AFGj2ENOO8T0AWe UalYXeLDSuzD4bE1OCBZ1z7lry77wVgWL9NSgagLfVN3H1Ur3uvH0bgfOCnSMUhB g1TZirjIVNVx0yN6FSGHi6YBiHep+FwLb7VFyAj62iMuxPnYj2IuRLiC/bfPSTmL Y/vWJmDbmStAxdawPWuWZitUyPLhLV4OfCZIJVvEhe8JUdSPOyPbYZVyaJyIOxJS ZbbANp/0+0TPMHx6mRjtYueOyvQe/k+Gw2bAmGZHq98ta0HqAXAiErYiJxsn73B6 Rgz+Cak4XYn55Q== -----END CERTIFICATE-----Generated at Fri Dec 19 16:57:18 2025 by rpki-client