This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft File: uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json) Hash identifier: fs8ZBAbImAqcZu3+931rEyOG7nqxzNVCLDAb18612y4= Subject key identifier: 8C:9B:AD:E6:00:C5:DA:93:F6:51:A4:25:6D:55:3F:AF:7D:76:6E:0C Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 Certificate issuer: /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3 Certificate serial: 019AF27738496E2579A80676EE744C36AD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft Manifest number: 12E9 Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=) 2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: F4VzRcGvviwJ+kphbQpmDPSzT9Q1F/ZeNzKBcDAhLAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:38:49:6e:25:79:a8:06:76:ee:74:4c:36:ad:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=8c9bade600c5da93f651a4256d553faf7d766e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:44:8d:a9:0d:c5:2a:89:3a:5e:7b:1d:82:6e: 18:89:e8:89:c3:a6:1e:86:cf:21:11:fd:d6:72:96: 96:1b:fa:51:24:53:88:32:47:c3:42:ce:ec:db:92: 7d:33:94:a0:3e:ce:46:72:58:0d:1b:89:66:57:67: 88:15:d7:b0:c9:ec:1c:bd:37:6e:f0:72:88:59:b4: 62:a0:f9:c1:b2:97:3b:22:1d:6a:89:81:d5:fd:89: 4f:aa:4f:7f:b0:18:eb:27:70:12:39:9f:22:82:4a: 98:89:72:a2:81:a8:02:ab:19:9c:ad:37:13:66:17: 35:f4:44:a4:63:d8:d7:56:20:cc:3f:80:eb:27:73: 3a:cb:df:fb:ea:26:ca:99:eb:dc:9f:86:e9:bf:19: 88:2e:f3:97:f0:ed:c6:57:e0:09:44:b5:ac:f3:75: eb:04:4f:4f:c0:4a:21:10:e9:ec:a7:f1:cf:0d:a7: 1c:4d:05:a8:32:f9:0d:17:8d:32:ac:ec:bc:11:8b: 1f:1e:c4:21:16:77:98:ac:b3:fa:ae:41:8b:cb:10: 27:63:69:a1:e6:43:a1:c4:91:6f:07:c0:e9:7f:df: a0:65:c9:9c:eb:f5:f8:ff:68:57:0e:5d:d5:8f:14: 4a:76:46:6d:a3:29:51:25:a8:06:fe:a0:c9:ff:cb: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:AD:E6:00:C5:DA:93:F6:51:A4:25:6D:55:3F:AF:7D:76:6E:0C X509v3 Authority Key Identifier: keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:80:ff:68:df:60:9f:e1:14:ae:bc:3c:7a:60:21:ea:5e:02: c6:72:5c:4f:18:82:3e:44:ce:c1:a8:d8:a8:0a:a0:3a:bb:8c: 89:e0:60:08:09:7d:01:a5:3a:80:cc:60:e7:0e:34:67:5d:80: e7:8c:4a:29:82:94:53:71:56:0a:32:a8:6a:fd:7d:cb:80:7a: c4:a0:c1:26:d5:50:ab:50:cb:e6:e2:85:0d:dd:aa:65:32:ec: 1b:69:80:78:9b:6f:8b:80:04:00:35:b9:ec:ea:1d:66:54:ef: 67:a6:f3:fb:b3:3b:70:b2:17:2a:98:f3:ca:a2:8e:30:b4:5c: 7a:7a:d7:5d:64:57:a3:f1:66:10:32:cd:3a:8f:2d:71:9d:cc: e5:10:d3:0b:c0:67:b0:3f:63:a5:b2:20:b5:f8:c8:c9:d8:ed: 21:e1:ef:69:b2:ce:ae:bb:2e:dd:9f:40:5e:0b:c6:57:57:10: d3:11:5e:b6:1e:5d:6f:78:1a:02:f7:6b:22:cb:ab:4a:04:c9: 2b:58:6e:52:c9:6d:0c:ce:bb:be:29:90:57:7e:47:f4:7c:ac: d1:78:88:15:b5:55:ee:2b:dc:ca:03:b4:cf:4a:f6:d0:0b:8b: 2d:49:5f:e6:ba:a0:20:6f:b3:8a:41:a2:2d:d5:29:2b:78:ef: 4c:a0:be:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzhJbiV5qAZ27nRMNq2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzE1ZmUxZTE5Y2I4MWNiMzQ2OWZjYWE1YzYwMjNhNmM1 YzQ1YTMwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD Eyg4YzliYWRlNjAwYzVkYTkzZjY1MWE0MjU2ZDU1M2ZhZjdkNzY2ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ESNqQ3FKok6Xnsdgm4YieiJw6Ye hs8hEf3WcpaWG/pRJFOIMkfDQs7s25J9M5SgPs5GclgNG4lmV2eIFdewyewcvTdu 8HKIWbRioPnBspc7Ih1qiYHV/YlPqk9/sBjrJ3ASOZ8igkqYiXKigagCqxmcrTcT Zhc19ESkY9jXViDMP4DrJ3M6y9/76ibKmevcn4bpvxmILvOX8O3GV+AJRLWs83Xr BE9PwEohEOnsp/HPDaccTQWoMvkNF40yrOy8EYsfHsQhFneYrLP6rkGLyxAnY2mh 5kOhxJFvB8Dpf9+gZcmc6/X4/2hXDl3VjxRKdkZtoylRJagG/qDJ/8tYYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIybreYAxdqT9lGkJW1VP699dm4MMB8GA1UdIwQY MBaAFLjBX+HhnLgcs0afyqXGAjpsXEWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0Yzkt ZjI1OGMxMWNlNzdlLzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0YzktZjI1OGMxMWNlNzdl LzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4D/aN9g n+EUrrw8emAh6l4CxnJcTxiCPkTOwajYqAqgOruMieBgCAl9AaU6gMxg5w40Z12A 54xKKYKUU3FWCjKoav19y4B6xKDBJtVQq1DL5uKFDd2qZTLsG2mAeJtvi4AEADW5 7OodZlTvZ6bz+7M7cLIXKpjzyqKOMLRcenrXXWRXo/FmEDLNOo8tcZ3M5RDTC8Bn sD9jpbIgtfjIydjtIeHvabLOrrsu3Z9AXgvGV1cQ0xFeth5db3gaAvdrIsurSgTJ K1huUsltDM67vimQV35H9Hys0XiIFbVV7ivcygO0z0r20AuLLUlf5rqgIG+zikGi LdUpK3jvTKC+eA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:03 2025 by rpki-client