This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json) Hash identifier: 2aPEuvSjN3JyZASLASHnu2LfV6aWfsPmb6F2MPh7UPo= Subject key identifier: B3:9C:EC:CE:2C:EA:88:FD:0D:4D:78:C2:3E:96:DF:F4:EF:62:60:63 Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Certificate serial: 019AF389426CBCBA01BAEF67EACF57256C15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft Manifest number: 0A96 Signing time: Sat 06 Dec 2025 12:00:49 +0000 Manifest this update: Sat 06 Dec 2025 12:00:49 +0000 Manifest next update: Sun 07 Dec 2025 12:00:49 +0000 Files and hashes: 1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=) 2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: qEI4Ibrz7RuouE+jKRrk9ien2bmOWI1fKR9lYoHhPt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:42:6c:bc:ba:01:ba:ef:67:ea:cf:57:25:6c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Validity Not Before: Dec 6 12:00:49 2025 GMT Not After : Dec 7 12:00:49 2025 GMT Subject: CN=b39cecce2cea88fd0d4d78c23e96dff4ef626063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:a6:1b:dc:99:58:25:5b:26:28:e9:d1:f6: 7c:58:b6:da:d0:09:a6:c9:c5:4b:29:ca:d7:2a:55: 1e:64:35:c6:08:df:95:a5:aa:bd:7a:4f:27:16:73: 87:b8:b0:7a:03:f6:1a:4e:4c:a6:8c:3e:f2:31:53: 6e:a7:f1:6a:e5:ee:e9:6d:ef:38:51:bf:25:5a:59: 47:e9:05:8f:45:9e:97:83:9f:4c:19:fb:07:37:68: e3:f6:65:59:98:f2:76:32:02:4e:fd:1e:57:69:cf: a9:1f:8c:b2:d2:3f:d9:6c:e4:61:7f:39:e4:b2:ae: cc:25:d5:ba:c9:a7:1c:ed:99:37:51:2c:88:6f:03: 86:d7:6d:fd:e7:46:f3:51:83:75:d5:79:c7:df:ca: a0:82:e4:3c:da:2e:48:0c:08:56:f4:3b:32:ca:e7: 83:91:c4:70:6d:94:73:e8:f5:d5:77:a5:ea:d1:77: af:a5:ff:1e:7d:af:ed:b9:62:5a:dd:32:38:f4:85: a7:6b:5f:c7:37:44:ad:11:01:97:97:49:ef:7e:62: 17:ac:58:54:d2:eb:2a:5e:ff:ce:f5:fe:14:10:e0: 77:10:80:5d:67:58:8a:3c:ef:5b:e7:ca:0b:5e:23: 22:93:56:80:c2:29:35:82:a2:bc:ac:0a:ae:8f:b8: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9C:EC:CE:2C:EA:88:FD:0D:4D:78:C2:3E:96:DF:F4:EF:62:60:63 X509v3 Authority Key Identifier: keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c4:37:d4:f5:98:79:97:ba:49:44:dd:e2:6d:28:49:8f:6e: f4:71:64:ba:3d:64:21:b1:13:24:b7:38:55:2e:9b:88:c1:f9: 93:fb:12:bb:55:2e:62:17:42:55:a4:8d:4b:69:93:ef:19:b1: 47:40:53:66:b0:50:c6:4a:9b:d5:3a:53:70:a9:8f:f0:63:c8: 5e:8c:ae:60:d6:b9:f3:1f:f7:d2:78:37:f3:6d:9b:a9:20:50: 03:16:2b:cb:85:5d:aa:34:46:08:2a:ab:f1:5c:bd:a5:59:a9: a3:88:fc:a5:2b:50:d7:72:82:fd:21:03:84:d8:df:d5:e7:ec: a4:14:a2:76:2e:63:18:72:d1:e1:a9:42:10:0d:61:30:69:a5: c1:ef:a4:ea:e7:84:8c:a9:b5:19:de:07:21:cf:af:7a:c6:1a: ad:3d:75:b5:1f:8f:b9:d9:03:59:a8:8a:f6:40:d6:02:48:d7: 91:32:26:34:87:38:33:be:eb:2f:a8:40:f0:4c:97:93:07:eb: f3:cb:50:df:f1:d9:5b:d6:82:30:7f:9d:a0:15:58:ee:b8:5b: 37:10:38:ec:87:74:d9:c1:6f:dd:44:5a:94:e7:64:37:a0:e3: 3a:bd:2a:d5:a5:40:b7:23:1a:79:8c:c6:e8:54:81:fa:ea:0c: 24:40:bc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUJsvLoBuu9n6s9XJWwVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMTFhZTIzYTNlOWM4YmM2ZjVhNzljNzE1ZmE5OWE3OGNm ODVkZmUwHhcNMjUxMjA2MTIwMDQ5WhcNMjUxMjA3MTIwMDQ5WjAzMTEwLwYDVQQD EyhiMzljZWNjZTJjZWE4OGZkMGQ0ZDc4YzIzZTk2ZGZmNGVmNjI2MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HCmG9yZWCVbJijp0fZ8WLba0Amm ycVLKcrXKlUeZDXGCN+Vpaq9ek8nFnOHuLB6A/YaTkymjD7yMVNup/Fq5e7pbe84 Ub8lWllH6QWPRZ6Xg59MGfsHN2jj9mVZmPJ2MgJO/R5Xac+pH4yy0j/ZbORhfznk sq7MJdW6yacc7Zk3USyIbwOG123950bzUYN11XnH38qgguQ82i5IDAhW9DsyyueD kcRwbZRz6PXVd6Xq0Xevpf8efa/tuWJa3TI49IWna1/HN0StEQGXl0nvfmIXrFhU 0usqXv/O9f4UEOB3EIBdZ1iKPO9b58oLXiMik1aAwik1gqK8rAquj7hLiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOc7M4s6oj9DU14wj6W3/TvYmBjMB8GA1UdIwQY MBaAFLoRriOj6ci8b1p5xxX6maeM+F3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGIt YjFlMGRkMmJmNWM3LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGItYjFlMGRkMmJmNWM3 LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsQ31PWY eZe6SUTd4m0oSY9u9HFkuj1kIbETJLc4VS6biMH5k/sSu1UuYhdCVaSNS2mT7xmx R0BTZrBQxkqb1TpTcKmP8GPIXoyuYNa58x/30ng3822bqSBQAxYry4VdqjRGCCqr 8Vy9pVmpo4j8pStQ13KC/SEDhNjf1efspBSidi5jGHLR4alCEA1hMGmlwe+k6ueE jKm1Gd4HIc+vesYarT11tR+PudkDWaiK9kDWAkjXkTImNIc4M77rL6hA8EyXkwfr 88tQ3/HZW9aCMH+doBVY7rhbNxA47Id02cFv3URalOdkN6DjOr0q1aVAtyMaeYzG 6FSB+uoMJEC8/w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:38 2025 by rpki-client