This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json) Hash identifier: wlIKLyDQbsgz//kGV8JaaCxZBd/FBjwXRfR6qqZ/4tE= Subject key identifier: 80:2E:43:52:08:A1:6F:29:78:69:E3:41:30:43:FB:ED:10:D3:A1:69 Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055 Certificate serial: 019AF276FF86A0DA95165740F89DD1E2000B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft Manifest number: 1255 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=) 2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: c4fVOuV1waaIfhODoDJFAetP2avs/fgN+0V7LRhGflk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ff:86:a0:da:95:16:57:40:f8:9d:d1:e2:00:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=802e435208a16f297869e3413043fbed10d3a169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:9b:dc:d0:8e:02:b9:4f:59:33:36:d9:d3: 97:7f:70:31:b2:81:90:56:18:ad:9e:6a:37:f3:c7: 7a:64:01:20:e8:9a:b6:e6:38:07:00:28:94:80:ad: 43:c2:e4:f6:fb:0b:93:a1:42:5a:12:c9:97:05:f5: c2:5f:0d:c6:e0:6b:e6:35:39:ba:c7:93:8c:9a:01: 94:aa:d2:0e:a7:f6:ac:6a:d0:2c:fb:ff:a1:21:d2: 8a:1a:11:71:01:9b:df:54:09:55:37:e0:d2:1d:f3: d2:cf:77:d4:a6:ed:f2:aa:dd:73:1b:71:96:da:96: 0b:cc:0c:13:5a:cc:da:72:49:07:15:a8:77:60:8b: 6c:83:66:75:52:4f:f8:e0:9f:78:e3:88:6c:a5:67: 6e:b9:ad:fb:0a:df:09:c5:42:06:25:14:5a:7a:78: ab:7a:cd:32:1c:3b:2f:6a:3d:23:e8:64:40:1f:66: 1f:0b:94:3e:63:6a:71:5a:4a:5a:56:28:86:3f:34: 4e:65:03:fa:5e:c8:2b:c6:11:e2:b4:06:0d:a0:ef: 43:8e:66:f4:4d:10:9d:d1:61:4f:84:3e:0a:9b:e8: 5e:2a:ba:71:5d:31:78:09:ff:32:54:e8:43:23:3c: b7:66:4f:f3:19:45:b1:11:75:fb:50:a9:d0:17:6e: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2E:43:52:08:A1:6F:29:78:69:E3:41:30:43:FB:ED:10:D3:A1:69 X509v3 Authority Key Identifier: keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4a:5f:2d:87:9c:93:ce:dd:5c:de:97:b9:2a:4e:4a:e4:40: 8c:8d:09:03:af:77:92:cf:01:94:2c:8a:4a:a6:2c:fa:8c:cd: 07:1d:af:73:01:2c:ec:2f:4d:86:f3:46:bf:49:65:db:d7:6d: 56:0a:a2:24:18:b8:80:79:44:49:7c:b1:be:15:d3:38:d9:2d: 4b:73:71:71:e6:94:c0:92:2c:85:24:36:68:76:49:25:b4:d9: 64:8f:66:33:9d:5f:c6:d3:ea:22:9b:e6:cb:26:28:05:80:37: ae:db:12:cf:5a:5b:94:f8:62:f9:36:9d:8a:ce:ec:ea:63:17: fb:f3:8a:d1:3d:cc:68:f3:bf:4a:95:2a:81:c5:b6:f3:ff:21: fb:00:62:03:60:32:5e:71:b3:e0:7d:14:ea:4d:60:83:63:7a: 80:ba:ea:6d:76:15:ae:f7:97:f3:db:e0:7e:11:79:74:4c:90: 26:5c:e9:e0:61:34:59:f6:bd:90:0f:3e:45:c8:f8:a1:15:53: 8a:ae:e5:a2:30:51:b6:e5:bb:0a:25:71:20:31:85:05:73:4f: db:60:23:bc:bc:55:26:87:d1:02:a2:f0:4d:b0:68:58:5d:5b: df:ff:f7:0a:16:77:92:a2:32:d7:c7:6e:ae:5d:80:70:b3:a8: ca:15:d0:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv+GoNqVFldA+J3R4gALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTg3OTUwMzdkZDQwZjAxODM3M2Y0N2M1OWUwNGEyMTJm NWEwNTUwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg4MDJlNDM1MjA4YTE2ZjI5Nzg2OWUzNDEzMDQzZmJlZDEwZDNhMTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YOb3NCOArlPWTM22dOXf3AxsoGQ Vhitnmo388d6ZAEg6Jq25jgHACiUgK1DwuT2+wuToUJaEsmXBfXCXw3G4GvmNTm6 x5OMmgGUqtIOp/asatAs+/+hIdKKGhFxAZvfVAlVN+DSHfPSz3fUpu3yqt1zG3GW 2pYLzAwTWszackkHFah3YItsg2Z1Uk/44J9444hspWduua37Ct8JxUIGJRRaenir es0yHDsvaj0j6GRAH2YfC5Q+Y2pxWkpaViiGPzROZQP6XsgrxhHitAYNoO9Djmb0 TRCd0WFPhD4Km+heKrpxXTF4Cf8yVOhDIzy3Zk/zGUWxEXX7UKnQF24nbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAuQ1IIoW8peGnjQTBD++0Q06FpMB8GA1UdIwQY MBaAFLmoeVA33UDwGDc/R8WeBKIS9aBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQt N2QyMmI3Njg0NDc5LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQtN2QyMmI3Njg0NDc5 LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEpfLYec k87dXN6XuSpOSuRAjI0JA693ks8BlCyKSqYs+ozNBx2vcwEs7C9NhvNGv0ll29dt VgqiJBi4gHlESXyxvhXTONktS3NxceaUwJIshSQ2aHZJJbTZZI9mM51fxtPqIpvm yyYoBYA3rtsSz1pblPhi+Tadis7s6mMX+/OK0T3MaPO/SpUqgcW28/8h+wBiA2Ay XnGz4H0U6k1gg2N6gLrqbXYVrveX89vgfhF5dEyQJlzp4GE0Wfa9kA8+Rcj4oRVT iq7lojBRtuW7CiVxIDGFBXNP22AjvLxVJofRAqLwTbBoWF1b3//3ChZ3kqIy18du rl2AcLOoyhXQIA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:25 2025 by rpki-client