This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json) Hash identifier: +whESnuJacxea8Uc6J5ZjcfEm26Dc/TXFJDn2Tvvqw8= Subject key identifier: 88:02:01:85:C1:F7:01:DC:BF:4A:45:D1:1B:03:1E:14:8D:4F:24:4D Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Certificate serial: 019AF31B22180DED7C93C3E3F9D1BEE6725E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft Manifest number: 0FFA Signing time: Sat 06 Dec 2025 10:00:32 +0000 Manifest this update: Sat 06 Dec 2025 10:00:32 +0000 Manifest next update: Sun 07 Dec 2025 10:00:32 +0000 Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=) 2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: YOTNFC4E23X7br4GO1uQHfONdSXnTNWLxQKdmUe0ViQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:22:18:0d:ed:7c:93:c3:e3:f9:d1:be:e6:72:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Validity Not Before: Dec 6 10:00:32 2025 GMT Not After : Dec 7 10:00:32 2025 GMT Subject: CN=88020185c1f701dcbf4a45d11b031e148d4f244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:09:46:6f:70:05:fb:4a:dc:64:11:95:79: 26:f7:fd:2b:ca:34:d4:0b:56:99:82:38:52:15:a1: 8c:13:5a:47:fe:88:99:85:c7:ab:ff:ff:a4:fe:d3: d6:32:52:62:b6:2a:4f:e7:5e:e3:07:a9:b5:d0:e2: 60:4d:d8:6b:4b:64:b7:8f:07:35:29:8d:62:e0:d0: 56:0c:15:95:2c:4b:b7:91:3b:18:c5:a2:04:d7:b3: 70:3d:67:1f:6f:14:37:bd:9c:04:19:fc:4c:70:84: d4:8c:f1:a1:55:db:31:ed:a8:36:b0:b9:e6:73:71: e6:7a:f1:2d:80:89:a4:bf:8a:0f:26:0a:79:e8:54: f4:21:d4:4d:18:5e:24:65:bc:21:1f:b0:ae:9e:0e: 14:51:69:40:f2:59:33:04:c9:79:ad:ae:05:64:5f: 58:1f:d8:99:25:e8:03:c9:0f:c5:0b:f2:94:f5:05: 58:bb:e9:cc:b8:b5:11:97:b6:12:71:5d:1f:32:98: d1:aa:ed:58:55:80:0f:99:25:7b:aa:05:c9:20:28: 37:16:97:62:25:eb:8c:06:cb:37:3c:74:69:d6:4a: ea:c8:bd:02:4d:39:84:8d:35:96:f5:15:0f:21:cf: 5e:92:75:c4:19:21:c6:b7:ee:73:44:df:5f:cc:51: e8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:02:01:85:C1:F7:01:DC:BF:4A:45:D1:1B:03:1E:14:8D:4F:24:4D X509v3 Authority Key Identifier: keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f0:cf:cf:1e:5d:3d:8a:24:6d:b1:37:69:93:21:d8:29:e5: 4f:3b:42:9b:f1:fe:23:ad:be:35:4d:3a:96:d0:f6:4f:de:3b: d2:0c:b8:a2:11:ab:0c:e8:07:09:d0:1f:4b:e8:c7:59:87:80: 5f:26:24:06:ce:0d:6a:56:4c:64:5f:56:81:b7:e5:c4:ff:d8: 85:0e:7c:4b:d8:52:89:54:06:27:64:bd:bd:c1:1e:30:f6:97: 8b:54:87:02:2d:2f:ab:bd:c5:d8:c9:55:8d:76:f5:b1:df:22: 72:27:40:35:c2:0f:a0:bc:90:dc:55:59:40:36:1a:11:c8:ce: 0b:0a:b1:19:d5:df:6d:e7:5f:37:09:70:89:ac:28:8a:e9:b7: fa:69:96:56:2c:5b:b7:db:0a:6a:72:a8:dd:fd:56:57:ae:ec: e9:6a:8e:c2:e0:56:9f:0f:55:f3:b5:d6:ea:35:25:50:dd:ff: c4:f9:1a:17:b1:3f:98:c3:fe:14:79:6a:b6:26:51:e7:fd:ce: f7:50:e1:8e:f6:04:5b:09:b9:e7:5c:eb:82:1f:48:21:05:d7: 5f:37:f5:44:f9:85:35:00:fb:df:7d:ca:e8:ee:af:90:2a:72: 68:0c:fc:bc:46:b7:9b:a1:a5:6a:56:59:bc:63:ed:10:94:32: c6:f6:f9:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyIYDe18k8Pj+dG+5nJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZGU3MDEyMmU0OTI4NWQwNWIwNWY5YmJmNDQ0OWJmYzgw ODMwZTUwHhcNMjUxMjA2MTAwMDMyWhcNMjUxMjA3MTAwMDMyWjAzMTEwLwYDVQQD Eyg4ODAyMDE4NWMxZjcwMWRjYmY0YTQ1ZDExYjAzMWUxNDhkNGYyNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nUJRm9wBftK3GQRlXkm9/0ryjTU C1aZgjhSFaGME1pH/oiZhcer//+k/tPWMlJitipP517jB6m10OJgTdhrS2S3jwc1 KY1i4NBWDBWVLEu3kTsYxaIE17NwPWcfbxQ3vZwEGfxMcITUjPGhVdsx7ag2sLnm c3HmevEtgImkv4oPJgp56FT0IdRNGF4kZbwhH7Cung4UUWlA8lkzBMl5ra4FZF9Y H9iZJegDyQ/FC/KU9QVYu+nMuLURl7YScV0fMpjRqu1YVYAPmSV7qgXJICg3Fpdi JeuMBss3PHRp1krqyL0CTTmEjTWW9RUPIc9eknXEGSHGt+5zRN9fzFHoxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgCAYXB9wHcv0pF0RsDHhSNTyRNMB8GA1UdIwQY MBaAFLnecBIuSShdBbBfm79ESb/ICDDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYt ODk1Zjg2Mjg3NTA2LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYtODk1Zjg2Mjg3NTA2 LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPDPzx5d PYokbbE3aZMh2CnlTztCm/H+I62+NU06ltD2T9470gy4ohGrDOgHCdAfS+jHWYeA XyYkBs4NalZMZF9WgbflxP/YhQ58S9hSiVQGJ2S9vcEeMPaXi1SHAi0vq73F2MlV jXb1sd8icidANcIPoLyQ3FVZQDYaEcjOCwqxGdXfbedfNwlwiawoium3+mmWVixb t9sKanKo3f1WV67s6WqOwuBWnw9V87XW6jUlUN3/xPkaF7E/mMP+FHlqtiZR5/3O 91DhjvYEWwm551zrgh9IIQXXXzf1RPmFNQD7333K6O6vkCpyaAz8vEa3m6GlalZZ vGPtEJQyxvb5HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:37 2025 by rpki-client