This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft File: uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json) Hash identifier: iusNNLlI083aVD9ZBNlb4/iqgITFdG2k2rNBn7eB/O0= Subject key identifier: 08:15:D2:1D:AD:3C:D8:E2:D5:1F:A3:DA:88:A5:A4:1A:33:23:F6:A9 Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 Certificate issuer: /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3 Certificate serial: 019B3042D7D52D798753F7C9A076102669B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft Manifest number: 1309 Signing time: Thu 18 Dec 2025 07:00:45 +0000 Manifest this update: Thu 18 Dec 2025 07:00:45 +0000 Manifest next update: Fri 19 Dec 2025 07:00:45 +0000 Files and hashes: 1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=) 2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: DqWiZbmJSGtiyNnxSXvaF+VyCwcY4Y/PjNxVvrgMbeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:d7:d5:2d:79:87:53:f7:c9:a0:76:10:26:69:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3 Validity Not Before: Dec 18 07:00:45 2025 GMT Not After : Dec 19 07:00:45 2025 GMT Subject: CN=0815d21dad3cd8e2d51fa3da88a5a41a3323f6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:1c:8e:bf:94:b1:1f:c9:9e:c4:98:9b:2d: 01:56:05:66:cc:e2:8c:9a:7a:73:a0:fd:3e:6e:45: a8:96:c9:b9:b0:49:70:8e:53:b2:a6:8d:d3:07:4a: b0:28:c8:54:17:57:51:09:6b:77:41:1a:7b:85:8a: b0:84:17:7d:d6:d6:0e:fa:1f:af:4f:eb:9c:50:5c: 66:8d:b7:8c:c9:39:67:63:ba:e1:76:ea:e1:0b:3e: 86:4d:08:9c:f2:b5:58:b4:e8:5b:dd:88:b8:59:32: ec:3a:34:d3:1b:22:10:eb:71:78:e7:ea:ce:3f:a2: c1:ae:55:31:b6:65:b9:8a:85:2b:67:9c:5e:e9:c7: 5e:06:1c:7d:ed:28:32:2e:e4:10:72:62:36:3a:b6: b6:54:25:7e:99:b1:ad:15:d6:28:df:50:bd:1c:7c: 15:14:36:ab:bb:e8:a5:22:bc:89:56:c9:9f:8c:60: 31:9b:fe:e3:5e:10:c1:b1:c7:a5:09:07:fc:fc:c8: 1b:66:0c:d5:49:68:8f:c8:88:14:61:25:fd:f5:1f: 2b:1a:ff:58:4d:80:59:cf:5b:15:29:df:82:81:04: 90:97:26:3a:95:3f:e8:13:a3:cd:26:e9:ab:3c:82: 07:e7:cc:4a:fd:54:83:4a:18:be:af:90:04:b5:a9: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:D2:1D:AD:3C:D8:E2:D5:1F:A3:DA:88:A5:A4:1A:33:23:F6:A9 X509v3 Authority Key Identifier: keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4a:e0:01:5b:4d:9b:35:82:2e:2c:70:0d:c9:bb:09:68:65: 95:6d:bc:de:8d:12:56:c9:fa:c0:fe:95:8e:4a:99:da:af:dc: 0f:0b:0a:2e:0b:4f:7b:e5:3f:a1:15:eb:d7:2c:7f:50:1f:5d: b4:2d:65:82:b7:f4:20:43:c5:03:78:7f:c8:08:56:76:d5:36: c1:b4:f4:d6:a6:e8:df:55:75:7b:55:b0:69:f3:9e:28:04:57: 65:f7:ec:1f:3f:9c:71:35:dc:43:26:7a:c8:46:ca:07:83:3b: 75:64:b3:a6:87:d3:54:85:e5:c3:bd:b0:4e:b8:60:4b:0e:5a: af:2c:cc:ed:63:d5:0c:a9:78:43:9f:98:cf:0b:42:6b:b9:f1: 84:76:d7:5f:55:a4:52:77:d4:dc:0b:08:84:2d:40:0b:e6:8a: 9b:b2:c9:e7:8f:c6:82:3e:03:7f:c2:6a:73:2c:f5:4b:46:6e: c5:60:b6:05:f5:0f:db:ea:87:49:20:51:8c:82:e3:f2:f1:03: 93:8e:5d:1d:db:8f:a8:9b:07:06:55:3c:0b:6c:ce:b0:23:b6: 50:94:ac:c6:0d:74:dd:8c:0d:2f:75:22:97:b0:24:22:5c:16: db:6d:55:b7:46:22:a6:02:96:08:b1:68:b6:c5:89:b6:92:7d: 8b:b1:3b:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQtfVLXmHU/fJoHYQJmm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzE1ZmUxZTE5Y2I4MWNiMzQ2OWZjYWE1YzYwMjNhNmM1 YzQ1YTMwHhcNMjUxMjE4MDcwMDQ1WhcNMjUxMjE5MDcwMDQ1WjAzMTEwLwYDVQQD EygwODE1ZDIxZGFkM2NkOGUyZDUxZmEzZGE4OGE1YTQxYTMzMjNmNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszwcjr+UsR/JnsSYmy0BVgVmzOKM mnpzoP0+bkWolsm5sElwjlOypo3TB0qwKMhUF1dRCWt3QRp7hYqwhBd91tYO+h+v T+ucUFxmjbeMyTlnY7rhdurhCz6GTQic8rVYtOhb3Yi4WTLsOjTTGyIQ63F45+rO P6LBrlUxtmW5ioUrZ5xe6cdeBhx97SgyLuQQcmI2Ora2VCV+mbGtFdYo31C9HHwV FDaru+ilIryJVsmfjGAxm/7jXhDBscelCQf8/MgbZgzVSWiPyIgUYSX99R8rGv9Y TYBZz1sVKd+CgQSQlyY6lT/oE6PNJumrPIIH58xK/VSDShi+r5AEtal2UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgV0h2tPNji1R+j2oilpBozI/apMB8GA1UdIwQY MBaAFLjBX+HhnLgcs0afyqXGAjpsXEWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0Yzkt ZjI1OGMxMWNlNzdlLzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0YzktZjI1OGMxMWNlNzdl LzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkrgAVtN mzWCLixwDcm7CWhllW283o0SVsn6wP6VjkqZ2q/cDwsKLgtPe+U/oRXr1yx/UB9d tC1lgrf0IEPFA3h/yAhWdtU2wbT01qbo31V1e1WwafOeKARXZffsHz+ccTXcQyZ6 yEbKB4M7dWSzpofTVIXlw72wTrhgSw5aryzM7WPVDKl4Q5+YzwtCa7nxhHbXX1Wk UnfU3AsIhC1AC+aKm7LJ54/Ggj4Df8Jqcyz1S0ZuxWC2BfUP2+qHSSBRjILj8vED k45dHduPqJsHBlU8C2zOsCO2UJSsxg103YwNL3Uil7AkIlwW221Vt0YipgKWCLFo tsWJtpJ9i7E7UA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:17:41 2025 by rpki-client