This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json) Hash identifier: NILFMEZRsA6DQuoTU9VyrizN/4XZjd1+y+zS0k4RD7U= Subject key identifier: 13:3F:28:C9:74:EA:1A:B4:CD:FF:CC:F6:48:C6:C2:A6:2D:77:BD:BD Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f Certificate serial: 019AF0BEDB9A051ACD9121B2B24041E82D9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:00:31 +0000 Manifest this update: Fri 05 Dec 2025 23:00:31 +0000 Manifest next update: Sat 06 Dec 2025 23:00:31 +0000 Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=) 2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: A6asnaYhLXjVwMpAuTTjHnCw7vnNcpz1LkUXo9SQGP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:db:9a:05:1a:cd:91:21:b2:b2:40:41:e8:2d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f Validity Not Before: Dec 5 23:00:31 2025 GMT Not After : Dec 6 23:00:31 2025 GMT Subject: CN=133f28c974ea1ab4cdffccf648c6c2a62d77bdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:2a:1d:82:0a:8a:c1:63:13:2b:a8:3e:78: e5:2a:5b:e7:49:a2:44:bd:aa:86:9e:24:08:72:15: 91:f0:e1:50:ac:42:07:f2:00:e9:9a:70:fc:3c:75: 39:99:72:62:e4:26:b8:a2:83:71:4a:b2:05:ab:26: 12:d0:4c:2c:50:aa:db:5c:bc:e2:99:70:74:54:86: 11:fd:46:38:dd:af:68:99:f0:bd:fb:48:33:52:5c: f9:3a:cf:9b:d1:99:6f:97:36:ed:db:56:09:4e:5c: 2e:7d:62:d8:4b:fe:df:13:4a:f4:9f:0f:70:bf:50: 83:ae:7a:70:77:85:ea:ab:fd:30:09:92:04:20:31: 2c:ad:5f:30:20:e6:3f:02:0b:35:29:f5:af:d0:27: 7b:cb:4f:27:4a:e7:ad:19:16:1e:69:a0:25:15:8f: 53:b7:fc:7c:19:e0:2a:bf:ce:a6:e4:b2:d1:61:33: 32:b4:69:3e:76:55:a4:e2:e2:45:e5:9b:c1:22:5d: 4c:cd:49:79:13:84:bf:f4:1f:13:47:68:a1:f4:42: f2:10:99:d2:a4:a0:f8:fa:cc:ed:43:4b:75:03:52: 00:80:fe:e8:58:d6:2d:2c:62:54:e2:35:a0:53:be: 33:44:9e:6c:8b:74:dc:bc:00:e8:c2:4a:1a:b8:5b: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3F:28:C9:74:EA:1A:B4:CD:FF:CC:F6:48:C6:C2:A6:2D:77:BD:BD X509v3 Authority Key Identifier: keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:69:69:c2:c5:0c:31:2e:ad:84:f9:89:1f:ec:b3:cd:5c:42: fd:ea:f4:41:41:cb:73:0d:b7:6b:30:2f:d1:d0:38:b3:97:31: 1b:15:26:e4:c3:5e:d4:18:08:59:f3:b3:5e:23:a7:49:a1:cb: 19:ae:33:7e:7a:7a:da:ec:39:c8:64:d9:a4:d6:d6:85:46:25: 24:ed:f4:58:22:94:ca:e7:df:77:de:1a:f8:95:40:91:c0:f1: a5:c6:10:9f:5d:20:5a:65:b0:f7:2a:75:54:6e:d9:3e:99:cf: c1:3c:d6:96:74:4b:03:2d:90:d1:a1:e9:c5:5e:20:77:ef:5e: 03:b1:d2:08:4b:5d:af:ee:a4:11:04:a4:77:6a:a2:eb:10:73: 8e:fc:62:74:35:f0:ca:98:81:f5:8b:94:1f:bf:a7:e4:f0:ec: 49:c1:be:45:ae:7b:a8:02:de:2e:fa:88:6f:5b:fb:5e:de:3a: 06:4e:20:35:64:c9:92:3b:ab:db:19:b9:4e:a7:43:e7:e3:a9: a9:6e:b3:90:6f:9b:e8:94:b0:84:73:99:63:ba:df:e8:67:6e: aa:f8:56:a2:cb:b5:9a:cd:76:e6:10:bf:c7:24:68:2a:e2:22: eb:79:a4:d6:7a:6f:6f:32:1d:bf:0d:37:60:48:fa:0d:29:89: f8:56:ed:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtuaBRrNkSGyskBB6C2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDE0MjI3NDczZTRiNzVjODc3Mjc0Y2Y2YzA1MGYyNWM1 NzcyMWYwHhcNMjUxMjA1MjMwMDMxWhcNMjUxMjA2MjMwMDMxWjAzMTEwLwYDVQQD EygxMzNmMjhjOTc0ZWExYWI0Y2RmZmNjZjY0OGM2YzJhNjJkNzdiZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GsqHYIKisFjEyuoPnjlKlvnSaJE vaqGniQIchWR8OFQrEIH8gDpmnD8PHU5mXJi5Ca4ooNxSrIFqyYS0EwsUKrbXLzi mXB0VIYR/UY43a9omfC9+0gzUlz5Os+b0Zlvlzbt21YJTlwufWLYS/7fE0r0nw9w v1CDrnpwd4Xqq/0wCZIEIDEsrV8wIOY/Ags1KfWv0Cd7y08nSuetGRYeaaAlFY9T t/x8GeAqv86m5LLRYTMytGk+dlWk4uJF5ZvBIl1MzUl5E4S/9B8TR2ih9ELyEJnS pKD4+sztQ0t1A1IAgP7oWNYtLGJU4jWgU74zRJ5si3TcvADowkoauFuTpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBM/KMl06hq0zf/M9kjGwqYtd729MB8GA1UdIwQY MBaAFLjRQidHPkt1yHcnTPbAUPJcV3IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNzRiODAtNDBlYS00ZTM0LWI1MGQt MTE0ZmFjZTFhNTcxLzEvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNzRiODAtNDBlYS00ZTM0LWI1MGQtMTE0ZmFjZTFhNTcx LzEvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmlpwsUM MS6thPmJH+yzzVxC/er0QUHLcw23azAv0dA4s5cxGxUm5MNe1BgIWfOzXiOnSaHL Ga4zfnp62uw5yGTZpNbWhUYlJO30WCKUyuffd94a+JVAkcDxpcYQn10gWmWw9yp1 VG7ZPpnPwTzWlnRLAy2Q0aHpxV4gd+9eA7HSCEtdr+6kEQSkd2qi6xBzjvxidDXw ypiB9YuUH7+n5PDsScG+Ra57qALeLvqIb1v7Xt46Bk4gNWTJkjur2xm5TqdD5+Op qW6zkG+b6JSwhHOZY7rf6GduqvhWosu1ms125hC/xyRoKuIi63mk1npvbzIdvw03 YEj6DSmJ+FbtyA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:48 2025 by rpki-client