This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft File: uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft (raw, json) Hash identifier: 0Sh6jByYLgNvny8rku3cuB4tkOidCi05L8JTct7N3G4= Subject key identifier: 0C:A4:0E:4D:D1:5B:2F:63:25:05:31:08:77:3B:B9:91:35:F2:25:6D Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Certificate serial: 019AF163DEBAF0DE7926BFD04C720C5AC8AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft Manifest number: 0B5F Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: FpN3CNrpC7an-iJQGSmMT_sDhCQ.roa (hash: IP5LQBH3slQY1vq5cW96oTpQwzobOGLQLnnmLh+kv0c=) 2: T2xZGAQ2utapiNKAxRkC6LvmPaU.roa (hash: wOG+SGzxtaS4DLVV01zxTU+InL0GZso9vp2F1RAwi2M=) 3: knjugsz4dO-GRlfWjJa4TPEo8dc.roa (hash: pgS04K1pxu870WaArIBezAQBjlsLTOobzOHJ29I84kY=) 4: uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl (hash: xdd+jxySisemN5lQwea+VDUUxKrXvDfDAMYwtGQk4pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:de:ba:f0:de:79:26:bf:d0:4c:72:0c:5a:c8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=0ca40e4dd15b2f6325053108773bb99135f2256d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:46:89:64:97:9b:47:7f:e2:98:88:07:66: bc:21:0c:c6:85:5d:50:9c:8e:45:fe:ae:68:02:72: 0e:a4:1d:51:85:0b:04:59:7a:b8:41:b9:8c:22:7e: e8:6f:5d:60:00:a4:4b:6a:fe:32:f7:c6:dd:17:c5: dd:c9:c3:15:4a:60:9c:c9:ac:79:0a:c9:00:f9:99: a8:76:ef:73:ba:37:cb:1a:1b:09:8c:f2:57:ce:28: b3:e4:a2:60:80:32:ae:a2:96:41:0c:61:f1:a4:fb: 54:9f:84:16:ad:6c:2c:27:64:5a:4e:89:21:39:39: fa:87:6f:a1:c6:e7:25:67:2d:4c:da:c0:d8:14:08: ab:54:98:9e:7a:30:02:2f:ea:84:8c:35:31:be:bc: 84:0e:7a:e9:eb:fe:2e:05:8e:4c:f9:a1:c0:8b:3a: 6a:90:88:0b:51:c3:e6:01:01:bc:31:09:62:0b:9d: 70:7e:90:98:80:e5:04:8e:69:20:92:d4:ab:f7:71: 3e:aa:85:20:b1:99:cd:f6:ba:dc:c7:06:09:9c:8f: 7c:09:ee:8a:c8:5d:94:d0:a9:45:06:78:eb:20:d9: a0:cd:e0:0f:70:55:e2:c2:07:e0:5d:d3:cf:9f:6e: 02:52:95:07:45:4e:43:0f:94:ac:a8:fd:f4:b0:b5: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A4:0E:4D:D1:5B:2F:63:25:05:31:08:77:3B:B9:91:35:F2:25:6D X509v3 Authority Key Identifier: keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e8:b1:c7:ed:6d:e5:d3:56:3c:38:4f:ff:c3:3d:6d:13:cd: 4a:24:2f:8a:ac:1a:60:69:ae:40:1a:69:bb:5d:3b:00:5d:d9: 1e:6c:19:47:5c:bb:51:f0:85:f0:1e:a8:88:0b:3c:ba:52:e0: d4:9a:1f:b4:5e:5f:4f:1d:6f:f4:94:95:40:da:ad:47:4f:33: 49:59:b0:e8:c9:d1:78:fc:79:4b:0f:b7:9e:e7:b6:03:df:5c: 2c:f3:0b:dc:eb:58:69:dd:f2:21:7e:55:2b:c0:82:01:53:15: 73:89:97:6a:44:3b:f4:43:6b:47:9b:a0:78:58:52:e8:26:d1: 48:72:c0:83:c4:58:12:7c:7a:2b:c1:65:a6:fe:b9:f6:96:ed: b7:e2:f1:79:e6:ed:c4:60:49:76:63:15:db:e5:9b:86:5d:6e: 2d:ad:43:cf:87:7d:39:8f:51:f8:f1:7b:00:88:2b:f2:ee:08: c0:65:51:10:50:48:7d:c6:73:6b:91:c9:71:72:69:7a:38:e9: 59:53:b3:dd:86:13:75:11:0a:ad:16:c4:dd:c9:79:60:a4:0a: 4a:b9:6d:5b:53:1e:09:06:0b:44:04:8d:d6:de:d7:90:a5:83: 86:f4:2c:3b:c3:60:24:77:05:37:1c:10:fd:98:ed:ba:44:b4: 16:db:66:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9668N55Jr/QTHIMWsivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGRmYzJhNjUxYjVlZmFiMmMwY2Q1OTMyMmQ2ZDNiNTU5 MDY1NjMwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EygwY2E0MGU0ZGQxNWIyZjYzMjUwNTMxMDg3NzNiYjk5MTM1ZjIyNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqVGiWSXm0d/4piIB2a8IQzGhV1Q nI5F/q5oAnIOpB1RhQsEWXq4QbmMIn7ob11gAKRLav4y98bdF8XdycMVSmCcyax5 CskA+Zmodu9zujfLGhsJjPJXziiz5KJggDKuopZBDGHxpPtUn4QWrWwsJ2RaTokh OTn6h2+hxuclZy1M2sDYFAirVJieejACL+qEjDUxvryEDnrp6/4uBY5M+aHAizpq kIgLUcPmAQG8MQliC51wfpCYgOUEjmkgktSr93E+qoUgsZnN9rrcxwYJnI98Ce6K yF2U0KlFBnjrINmgzeAPcFXiwgfgXdPPn24CUpUHRU5DD5SsqP30sLWKXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAykDk3RWy9jJQUxCHc7uZE18iVtMB8GA1UdIwQY MBaAFLkN/CplG176ssDNWTItbTtVkGVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2Yt ZDNlMTZhMTYzZGQzLzEvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2YtZDNlMTZhMTYzZGQz LzEvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+ixx+1t 5dNWPDhP/8M9bRPNSiQviqwaYGmuQBppu107AF3ZHmwZR1y7UfCF8B6oiAs8ulLg 1JoftF5fTx1v9JSVQNqtR08zSVmw6MnRePx5Sw+3nue2A99cLPML3OtYad3yIX5V K8CCAVMVc4mXakQ79ENrR5ugeFhS6CbRSHLAg8RYEnx6K8Flpv659pbtt+Lxeebt xGBJdmMV2+Wbhl1uLa1Dz4d9OY9R+PF7AIgr8u4IwGVREFBIfcZza5HJcXJpejjp WVOz3YYTdREKrRbE3cl5YKQKSrltW1MeCQYLRASN1t7XkKWDhvQsO8NgJHcFNxwQ /ZjtukS0Fttm5w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:39 2025 by rpki-client