This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft File: uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json) Hash identifier: QRn9EQATIwcgqje9ZvjgIdnbPd4QR6nBOGmZ8mi/FE4= Subject key identifier: 2B:47:4B:0F:20:4B:90:07:DB:E5:7B:C4:B7:05:52:F4:20:DA:5C:90 Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E Certificate issuer: /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e Certificate serial: 019AF50ADBE1F677DF48BDDFD3CE7243981B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft Manifest number: 0F40 Signing time: Sat 06 Dec 2025 19:02:00 +0000 Manifest this update: Sat 06 Dec 2025 19:02:00 +0000 Manifest next update: Sun 07 Dec 2025 19:02:00 +0000 Files and hashes: 1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: NSg0ZIkbmeYh2Js8LMm24dGJZysjP8iDJg1ttAEIxTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:db:e1:f6:77:df:48:bd:df:d3:ce:72:43:98:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e Validity Not Before: Dec 6 19:02:00 2025 GMT Not After : Dec 7 19:02:00 2025 GMT Subject: CN=2b474b0f204b9007dbe57bc4b70552f420da5c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:a5:2b:d6:7c:74:37:2c:85:ed:cb:02:b3: 1a:19:f6:c7:38:25:25:03:09:15:c1:7b:81:c8:64: 13:0f:86:99:3d:79:8d:cc:91:33:d6:00:bc:01:6a: 2a:22:e3:ca:0f:6d:56:11:dd:31:4d:1b:7e:1c:be: b5:70:ee:21:d4:71:89:d7:10:23:80:09:e5:89:d4: 8c:ab:af:c2:90:1f:e3:42:63:d0:10:73:38:63:da: 92:02:a0:09:a1:b2:e2:71:21:e0:17:33:49:26:fd: 02:ae:96:bd:09:19:99:99:41:b2:1f:61:ae:10:81: c7:41:09:d7:ec:a2:6d:7e:60:07:fb:d6:fb:46:24: 5f:4c:10:c9:e0:8d:62:4b:02:63:6f:ff:67:03:4c: f1:c7:63:35:a0:9f:39:78:d2:5f:b3:47:98:72:23: 70:66:5e:bc:9d:1c:11:13:33:d3:40:d3:c3:1f:7e: e9:2c:98:d5:0d:d1:af:4a:34:26:a6:31:df:2f:5b: 0e:62:14:cf:3a:65:f3:6b:5e:b4:68:24:ba:9c:d0: 56:19:ee:b7:5f:65:57:9b:75:62:05:8d:ae:69:6b: ff:11:cf:96:f4:a5:dc:94:12:88:a9:24:9d:21:43: a8:cd:80:90:90:96:e9:b7:eb:01:47:ad:50:43:b5: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:4B:0F:20:4B:90:07:DB:E5:7B:C4:B7:05:52:F4:20:DA:5C:90 X509v3 Authority Key Identifier: keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4c:76:05:86:b6:d7:2d:e6:30:e4:8f:f3:5f:c6:c6:21:0c: e3:11:c7:63:03:05:89:96:f5:b3:03:4b:0a:f4:6c:4e:0b:b1: 6a:39:e5:18:68:c5:0a:24:71:4f:84:c1:79:22:cd:15:66:d4: 3f:d5:bf:01:6c:1a:99:09:db:7f:ea:0c:13:c3:1a:12:4b:22: a3:56:f5:bd:0e:dc:25:6b:78:62:32:b9:7c:73:64:54:fd:06: 97:5a:03:24:31:ed:00:08:2a:cf:63:6f:19:09:c5:03:48:82: a5:44:36:d6:54:5b:19:e0:9d:45:14:c5:bf:03:9d:45:43:eb: 71:40:f8:0e:dd:a3:74:18:02:dd:11:f6:6e:58:a9:9a:ee:81: e3:13:4f:e6:2f:7a:2a:6a:35:c9:be:95:b3:4c:19:d3:a8:37: 10:6b:ee:03:77:fa:39:8d:9d:2d:27:fd:65:fa:14:8e:a3:07: 6d:83:f5:08:bd:99:0d:c6:e4:ba:f1:39:fa:8f:84:fc:13:29: 0e:7e:fd:90:ef:9c:88:0d:cb:d2:2b:3c:93:67:23:30:30:9b: 52:12:c3:4a:35:f6:e2:f5:3f:d8:2a:95:ef:28:78:df:c6:0d: e9:9f:f8:34:a5:f0:7b:31:52:c2:7c:7f:55:71:c5:f5:72:a5: cf:67:fe:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ctvh9nffSL3f085yQ5gbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2Y1ZThmZWViNWY1ZTczYjA5N2I2NjY1N2VlZDhkYjk3 NGE0MGUwHhcNMjUxMjA2MTkwMjAwWhcNMjUxMjA3MTkwMjAwWjAzMTEwLwYDVQQD EygyYjQ3NGIwZjIwNGI5MDA3ZGJlNTdiYzRiNzA1NTJmNDIwZGE1YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppalK9Z8dDcshe3LArMaGfbHOCUl AwkVwXuByGQTD4aZPXmNzJEz1gC8AWoqIuPKD21WEd0xTRt+HL61cO4h1HGJ1xAj gAnlidSMq6/CkB/jQmPQEHM4Y9qSAqAJobLicSHgFzNJJv0Crpa9CRmZmUGyH2Gu EIHHQQnX7KJtfmAH+9b7RiRfTBDJ4I1iSwJjb/9nA0zxx2M1oJ85eNJfs0eYciNw Zl68nRwREzPTQNPDH37pLJjVDdGvSjQmpjHfL1sOYhTPOmXza160aCS6nNBWGe63 X2VXm3ViBY2uaWv/Ec+W9KXclBKIqSSdIUOozYCQkJbpt+sBR61QQ7XATwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtHSw8gS5AH2+V7xLcFUvQg2lyQMB8GA1UdIwQY MBaAFLh/Xo/utfXnOwl7ZmV+7Y25dKQOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mZmMwMGQtMzMxNi00Mjg2LTg5MzIt Y2M2MGE1ZmRlZWIyLzEvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mZmMwMGQtMzMxNi00Mjg2LTg5MzItY2M2MGE1ZmRlZWIy LzEvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUx2BYa2 1y3mMOSP81/GxiEM4xHHYwMFiZb1swNLCvRsTguxajnlGGjFCiRxT4TBeSLNFWbU P9W/AWwamQnbf+oME8MaEksio1b1vQ7cJWt4YjK5fHNkVP0Gl1oDJDHtAAgqz2Nv GQnFA0iCpUQ21lRbGeCdRRTFvwOdRUPrcUD4Dt2jdBgC3RH2blipmu6B4xNP5i96 Kmo1yb6Vs0wZ06g3EGvuA3f6OY2dLSf9ZfoUjqMHbYP1CL2ZDcbkuvE5+o+E/BMp Dn79kO+ciA3L0is8k2cjMDCbUhLDSjX24vU/2CqV7yh438YN6Z/4NKXwezFSwnx/ VXHF9XKlz2f+hw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:25:31 2025 by rpki-client