This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json) Hash identifier: VHQ6HFst6Hiv1FFikGHluLU68HxtSoJtEP4jnFN1CsY= Subject key identifier: 7B:AC:52:95:D9:A9:32:85:92:C7:5D:93:FF:33:6A:68:A0:9F:F7:9A Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Certificate serial: 019AF5775D970A0E5DB61EE20A600B1ED417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft Manifest number: 09DC Signing time: Sat 06 Dec 2025 21:00:31 +0000 Manifest this update: Sat 06 Dec 2025 21:00:31 +0000 Manifest next update: Sun 07 Dec 2025 21:00:31 +0000 Files and hashes: 1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=) 2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: 0wvxd21jh/j4JIhTHYK5VGZXzMmei2mEMZgCAxoPRUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:5d:97:0a:0e:5d:b6:1e:e2:0a:60:0b:1e:d4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Validity Not Before: Dec 6 21:00:31 2025 GMT Not After : Dec 7 21:00:31 2025 GMT Subject: CN=7bac5295d9a9328592c75d93ff336a68a09ff79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:45:95:30:2b:4e:5b:0d:77:7a:9c:94:d0: ed:e0:b6:5a:12:5e:45:b8:17:d7:36:44:c0:94:c9: a5:9b:87:fb:ae:41:51:56:1d:1c:af:d4:48:44:1c: 2c:60:e6:15:ac:58:6b:d5:89:0c:ef:46:14:7c:a6: c8:34:59:b3:dc:d1:fe:89:09:9c:99:25:d7:43:02: 92:f9:ca:7d:9f:84:b4:0a:d6:05:4f:b6:da:9d:2b: d5:51:94:72:ce:12:df:92:c8:5b:72:79:71:02:39: 89:db:2c:7a:55:ba:d3:80:4b:57:1d:03:36:a0:9b: 05:e8:83:2a:b0:fa:e5:3f:6a:f2:54:05:4a:e7:3a: 12:54:18:36:3b:57:4a:03:56:c2:aa:3c:23:74:3e: 4c:63:e4:e2:f1:d9:d9:09:a2:ab:69:4e:48:8b:ba: 09:2e:03:81:4a:f0:ca:00:de:b9:0a:47:85:2c:83: b8:a2:28:75:27:f4:83:99:e2:c7:79:83:58:52:3e: 02:bd:79:90:82:fa:a5:71:8f:7c:c2:93:b5:72:1b: a4:a0:4d:0f:41:74:c2:1c:2d:15:9a:ee:c4:05:33: e5:55:2e:61:cb:19:c8:46:d3:06:7e:1d:aa:2f:c4: 51:19:0c:36:a3:c6:f4:76:92:67:88:4a:4c:c7:41: a5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AC:52:95:D9:A9:32:85:92:C7:5D:93:FF:33:6A:68:A0:9F:F7:9A X509v3 Authority Key Identifier: keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3f:49:f2:41:ac:92:c9:00:5d:b2:e7:71:d8:a1:fb:d7:f9: 0f:93:43:d8:bd:de:f3:e5:51:f2:29:34:ad:bc:51:22:aa:87: a5:89:95:28:25:db:60:ee:fc:1e:ca:47:6b:f3:7a:4c:df:7e: 51:de:45:11:25:70:59:a7:59:fe:c3:82:1a:12:a8:de:94:48: 14:1f:07:87:da:06:5f:0e:21:5b:fa:19:bb:ce:2b:3e:c7:e6: 45:05:dd:90:ed:54:b4:6c:d7:7b:3d:bc:72:af:15:6d:11:63: 84:6e:ee:08:03:d6:16:02:95:d9:bf:e8:30:af:ce:9e:52:f0: 0d:f1:88:18:fb:5b:26:b2:9b:ee:71:1e:21:93:9c:78:26:92: 8f:c0:2e:78:3d:2d:e7:f4:93:46:37:86:83:31:6f:7c:ca:81: ac:d6:9d:89:33:75:8a:3e:33:12:38:07:30:47:81:7f:04:ae: 7a:9d:fc:45:fa:3c:99:26:dc:57:62:54:51:5a:aa:8e:ba:fb: 17:7b:85:19:af:bb:83:d8:53:ea:5f:19:88:f1:f7:5c:4f:79: 38:25:2b:8b:35:7c:71:77:09:e9:68:36:3a:b3:26:98:5c:90: 23:24:13:53:a9:16:28:c2:51:a7:be:6a:5c:69:39:04:7a:d5: bd:df:55:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d12XCg5dth7iCmALHtQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2JiZjhlNWM3NGE1MjZiYWFmNjE4NWFiZDk0OWRhZmE4 ZjZkY2IwHhcNMjUxMjA2MjEwMDMxWhcNMjUxMjA3MjEwMDMxWjAzMTEwLwYDVQQD Eyg3YmFjNTI5NWQ5YTkzMjg1OTJjNzVkOTNmZjMzNmE2OGEwOWZmNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NtFlTArTlsNd3qclNDt4LZaEl5F uBfXNkTAlMmlm4f7rkFRVh0cr9RIRBwsYOYVrFhr1YkM70YUfKbINFmz3NH+iQmc mSXXQwKS+cp9n4S0CtYFT7banSvVUZRyzhLfkshbcnlxAjmJ2yx6VbrTgEtXHQM2 oJsF6IMqsPrlP2ryVAVK5zoSVBg2O1dKA1bCqjwjdD5MY+Ti8dnZCaKraU5Ii7oJ LgOBSvDKAN65CkeFLIO4oih1J/SDmeLHeYNYUj4CvXmQgvqlcY98wpO1chukoE0P QXTCHC0Vmu7EBTPlVS5hyxnIRtMGfh2qL8RRGQw2o8b0dpJniEpMx0GlUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHusUpXZqTKFksddk/8zamign/eaMB8GA1UdIwQY MBaAFLh7v45cdKUmuq9hhavZSdr6j23LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUt NTM5MGY5ZjgzNjIwLzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUtNTM5MGY5ZjgzNjIw LzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT9J8kGs kskAXbLncdih+9f5D5ND2L3e8+VR8ik0rbxRIqqHpYmVKCXbYO78HspHa/N6TN9+ Ud5FESVwWadZ/sOCGhKo3pRIFB8Hh9oGXw4hW/oZu84rPsfmRQXdkO1UtGzXez28 cq8VbRFjhG7uCAPWFgKV2b/oMK/OnlLwDfGIGPtbJrKb7nEeIZOceCaSj8AueD0t 5/STRjeGgzFvfMqBrNadiTN1ij4zEjgHMEeBfwSuep38Rfo8mSbcV2JUUVqqjrr7 F3uFGa+7g9hT6l8ZiPH3XE95OCUrizV8cXcJ6Wg2OrMmmFyQIyQTU6kWKMJRp75q XGk5BHrVvd9V4g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:41 2025 by rpki-client