This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json) Hash identifier: u3xM9imtiQvYtUIi5n4LX0SX6M8f8MXP+MYS4cvaqCM= Subject key identifier: E3:AA:CE:A4:E1:ED:07:D5:5E:BE:19:2D:A9:08:1B:09:B9:B8:5E:90 Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de Certificate serial: 019AF23F8ECAE745A8687B79D6BF67595FEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft Manifest number: 1396 Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=) 2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: vQjefRTNizYHyoyDcaTU23zrFzpCc+p39W4E2LxZfSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8e:ca:e7:45:a8:68:7b:79:d6:bf:67:59:5f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=e3aacea4e1ed07d55ebe192da9081b09b9b85e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:b1:84:8b:92:5f:b0:27:3e:63:95:12:34: 0a:04:7b:f6:89:3c:0e:8a:c4:3e:76:70:6a:10:b4: 07:5e:3a:4c:74:e8:a8:fc:fe:6f:c4:9f:1c:bf:c3: c7:c4:7e:c7:83:50:61:21:24:8d:1e:b8:7f:b8:42: 6c:79:19:0b:4e:44:7c:e5:8e:6b:36:fa:20:e1:06: c0:20:24:6a:2e:a3:b2:45:85:1b:cf:97:5c:21:51: 40:28:33:41:71:40:ec:a3:fe:51:7b:15:08:4b:89: c8:0a:81:d2:a4:46:32:2b:b2:a6:2e:98:9c:6e:c3: 39:50:38:64:32:0f:8a:0f:e5:a2:45:05:4c:c9:6e: 7c:6c:8f:52:e4:66:9c:c5:97:6b:ad:63:25:85:66: b0:40:94:ba:fa:a9:a5:b8:9a:02:34:2a:3a:33:52: 92:f4:5c:ab:af:03:62:5d:5a:51:76:57:a7:2e:36: 7d:f9:45:42:93:99:1f:dd:89:4c:a0:b6:eb:81:2e: c6:28:56:c9:50:98:d6:c7:c5:4a:1d:1e:0e:50:33: 9e:9a:6d:29:61:f4:28:d3:67:d6:bf:e9:a7:e4:8a: 4e:1d:29:28:5c:08:97:bd:46:38:fd:15:88:2d:d5: e8:93:76:3c:e3:3f:b4:c3:da:48:dc:82:ae:79:0e: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AA:CE:A4:E1:ED:07:D5:5E:BE:19:2D:A9:08:1B:09:B9:B8:5E:90 X509v3 Authority Key Identifier: keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:f2:06:81:69:76:51:38:ea:8c:a2:f8:08:aa:86:2c:e3:43: f3:9d:d6:4e:6e:aa:4d:45:5a:05:3f:b2:e1:6e:5f:2b:a9:2b: 8d:33:46:e6:15:2c:25:fb:4a:7f:8d:cd:9b:5f:26:a4:52:ee: 2a:ac:b9:e3:fe:a1:24:35:06:cf:4f:e4:87:8b:ca:03:dd:6c: 39:5e:29:9e:85:ba:b1:19:eb:24:f5:07:b8:bb:9d:c9:bc:3b: db:a2:46:e4:38:ba:6c:5e:d6:ba:e0:52:cd:25:39:dc:76:6b: 0d:58:1d:29:a6:8c:bc:6a:84:95:63:f3:7a:58:8c:ed:45:5f: 0b:69:58:91:49:ce:c8:40:75:b0:ac:ae:c2:b4:e4:df:fd:f7: b3:66:48:2f:54:8d:cc:d2:18:7e:b8:a6:f6:29:16:02:1f:db: f0:0d:e6:26:15:95:be:cd:b5:32:ad:cb:7e:da:0e:35:7d:dd: a6:a6:d1:e6:27:55:ae:7e:f7:f0:de:f1:1c:63:dd:b2:0b:b4: 18:96:76:05:a7:1f:7d:29:88:2d:7e:a2:21:7a:11:dd:d9:4c: 01:c1:07:fa:95:4f:50:fe:cc:92:82:f9:34:3d:e5:29:1a:03: e8:6b:4e:73:c0:5b:4a:cc:c6:01:9e:2b:e9:3d:b6:df:77:b2: 9a:1f:32:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP47K50WoaHt51r9nWV/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDRjYTJkOTkyZDc3ODU4MDBiZGQ1NTI0ZDNlMTEzODNk OWYxZGUwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EyhlM2FhY2VhNGUxZWQwN2Q1NWViZTE5MmRhOTA4MWIwOWI5Yjg1ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIOxhIuSX7AnPmOVEjQKBHv2iTwO isQ+dnBqELQHXjpMdOio/P5vxJ8cv8PHxH7Hg1BhISSNHrh/uEJseRkLTkR85Y5r Nvog4QbAICRqLqOyRYUbz5dcIVFAKDNBcUDso/5RexUIS4nICoHSpEYyK7KmLpic bsM5UDhkMg+KD+WiRQVMyW58bI9S5GacxZdrrWMlhWawQJS6+qmluJoCNCo6M1KS 9FyrrwNiXVpRdlenLjZ9+UVCk5kf3YlMoLbrgS7GKFbJUJjWx8VKHR4OUDOemm0p YfQo02fWv+mn5IpOHSkoXAiXvUY4/RWILdXok3Y84z+0w9pI3IKueQ47TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOqzqTh7QfVXr4ZLakIGwm5uF6QMB8GA1UdIwQY MBaAFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEt MDJhMTJiODYxODBkLzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEtMDJhMTJiODYxODBk LzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/IGgWl2 UTjqjKL4CKqGLOND853WTm6qTUVaBT+y4W5fK6krjTNG5hUsJftKf43Nm18mpFLu Kqy54/6hJDUGz0/kh4vKA91sOV4pnoW6sRnrJPUHuLudybw726JG5Di6bF7WuuBS zSU53HZrDVgdKaaMvGqElWPzeliM7UVfC2lYkUnOyEB1sKyuwrTk3/33s2ZIL1SN zNIYfrim9ikWAh/b8A3mJhWVvs21Mq3LftoONX3dpqbR5idVrn738N7xHGPdsgu0 GJZ2BacffSmILX6iIXoR3dlMAcEH+pVPUP7MkoL5ND3lKRoD6GtOc8BbSszGAZ4r 6T2233eymh8y0w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:43 2025 by rpki-client