This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json) Hash identifier: nSnUW5x4mC8S8ppHb2RhzGIhZz+fMrguMF68ePUlCY0= Subject key identifier: 4E:8C:42:2C:8B:95:FB:5D:6C:38:B0:A8:2F:23:53:19:31:04:29:2E Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Certificate serial: 019AF12DD836940F15E7B6E3DBB321FF8C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft Manifest number: 0309 Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=) 2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: 8c0U7YeuxOdOS8NjTmeJc0DlCrUJju75FufszFnDBmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d8:36:94:0f:15:e7:b6:e3:db:b3:21:ff:8c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=4e8c422c8b95fb5d6c38b0a82f2353193104292e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:0d:40:fe:8f:01:25:47:1b:e7:5c:0c:bf: 80:69:34:ef:c5:5e:61:f8:4a:29:08:c3:df:49:4e: 5c:4d:b5:4e:35:df:a2:57:3d:e9:07:2d:f4:f6:ff: ef:16:72:f9:dd:aa:fe:97:28:a7:b5:f5:c4:e1:c1: 8a:7c:4d:24:af:ce:eb:36:08:6f:bc:42:ae:6f:7f: c4:04:ca:f7:cb:c9:fc:7d:63:0f:dc:82:2f:00:e3: db:02:34:fc:9d:18:8a:9e:07:cf:44:2b:66:11:39: b2:0a:9a:62:cc:f0:1e:24:46:c8:19:92:99:ea:b8: 23:76:ba:ca:fb:8b:d9:47:c0:91:aa:8c:45:0f:1d: e4:d3:ed:2b:93:ed:84:a3:17:bb:64:a7:17:b3:e3: 8a:cc:27:a7:63:fd:b1:57:d5:e1:f1:f9:66:df:c5: e8:d9:f4:94:e5:32:0d:7b:a8:ea:5b:9c:f5:a4:81: 52:d0:c1:b8:bd:db:f8:ba:06:b1:39:22:14:64:5d: 5e:1e:b5:85:3b:7e:b7:ae:cb:d4:bb:f3:f3:67:f2: b0:50:8e:d5:8a:97:12:37:40:b3:65:c5:63:a2:47: 24:bb:28:ec:84:5e:02:66:ad:89:db:7e:28:fd:63: 7d:1c:84:cb:a2:98:a0:00:17:a1:cf:d0:ab:7f:0f: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8C:42:2C:8B:95:FB:5D:6C:38:B0:A8:2F:23:53:19:31:04:29:2E X509v3 Authority Key Identifier: keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:77:53:48:00:2c:ce:c5:e2:31:3c:83:17:7c:98:08:ec:16: 86:0c:68:87:47:7b:88:5d:48:3f:45:a6:9a:16:20:03:1d:25: 6c:04:d6:0c:4b:7f:23:51:4d:8c:02:65:17:c7:82:e5:cb:09: bf:33:83:9c:0d:51:6f:2f:82:87:f3:db:1d:02:68:21:af:11: 27:b9:9e:ad:13:85:52:30:05:fd:58:78:95:10:42:58:cb:13: 9f:8c:4a:94:d7:ad:20:8a:46:69:a4:54:c9:06:f0:e7:26:15: 92:93:3d:d2:2f:9a:e1:81:ff:f5:5d:80:07:eb:0f:c9:e6:86: 38:49:60:2c:4f:22:57:7e:e7:7a:49:f9:b0:70:48:e8:60:a8: f6:27:62:74:11:f2:db:3d:60:c3:4c:67:30:6e:ed:1c:eb:59: 4c:86:aa:1e:00:6e:a9:46:e2:46:99:fb:00:6c:b6:98:d4:a1: bc:be:8e:b6:6b:cc:93:d7:65:79:07:ce:74:6d:08:6a:17:0b: ca:2a:94:3f:c4:0c:7e:3c:54:41:03:85:fc:92:a7:50:1a:c3: 5b:f1:a0:72:8b:90:55:27:dd:c8:11:80:2d:03:60:86:41:fe: 83:bf:07:39:b5:c6:30:7e:e3:d6:c9:5f:e4:50:af:4b:6a:71: c3:fa:02:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdg2lA8V57bj27Mh/4xVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NzM1ZWIyY2QyYzRkOGNmNWJmM2Q3NTA3ZDg0ZDYwMzU0 NWRmZTMwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD Eyg0ZThjNDIyYzhiOTVmYjVkNmMzOGIwYTgyZjIzNTMxOTMxMDQyOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOoNQP6PASVHG+dcDL+AaTTvxV5h +EopCMPfSU5cTbVONd+iVz3pBy309v/vFnL53ar+lyintfXE4cGKfE0kr87rNghv vEKub3/EBMr3y8n8fWMP3IIvAOPbAjT8nRiKngfPRCtmETmyCppizPAeJEbIGZKZ 6rgjdrrK+4vZR8CRqoxFDx3k0+0rk+2Eoxe7ZKcXs+OKzCenY/2xV9Xh8flm38Xo 2fSU5TINe6jqW5z1pIFS0MG4vdv4ugaxOSIUZF1eHrWFO363rsvUu/PzZ/KwUI7V ipcSN0CzZcVjokckuyjshF4CZq2J234o/WN9HITLopigABehz9Crfw+F4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6MQiyLlftdbDiwqC8jUxkxBCkuMB8GA1UdIwQY MBaAFLhzXrLNLE2M9b89dQfYTWA1Rd/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUt YjRkY2Y4Y2VhMzVhLzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUtYjRkY2Y4Y2VhMzVh LzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXdTSAAs zsXiMTyDF3yYCOwWhgxoh0d7iF1IP0WmmhYgAx0lbATWDEt/I1FNjAJlF8eC5csJ vzODnA1Rby+Ch/PbHQJoIa8RJ7merROFUjAF/Vh4lRBCWMsTn4xKlNetIIpGaaRU yQbw5yYVkpM90i+a4YH/9V2AB+sPyeaGOElgLE8iV37nekn5sHBI6GCo9ididBHy 2z1gw0xnMG7tHOtZTIaqHgBuqUbiRpn7AGy2mNShvL6OtmvMk9dleQfOdG0IahcL yiqUP8QMfjxUQQOF/JKnUBrDW/GgcouQVSfdyBGALQNghkH+g78HObXGMH7j1slf 5FCvS2pxw/oC4g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:04 2025 by rpki-client