This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft File: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft (raw, json) Hash identifier: h2bLlwIqaxc/0cmrQjW5V5I7qbLHxoKgWGewtoy1sSQ= Subject key identifier: FE:17:9A:6C:3B:63:62:5A:FC:DE:96:71:96:B5:67:27:B5:91:7E:D6 Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7 Certificate issuer: /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7 Certificate serial: 019AF1647C667CCD71A2F8180F95C5C88B74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft Manifest number: 0D33 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: c47adC4Bxlaw5597wV2V7KU0TIk.roa (hash: LtdOn5FUGrZ35ebiBFAgNw0wB+y/797Rd6pVef69jvw=) 2: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl (hash: exi+ByCnmuaVl6ebU9J0GnscZrX7ytPnKwpXI2mycTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7c:66:7c:cd:71:a2:f8:18:0f:95:c5:c8:8b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7 Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=fe179a6c3b63625afcde967196b56727b5917ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:9d:d9:cb:f4:d7:87:c6:03:82:6a:0d:42: 54:48:be:b0:01:d7:fe:b0:9f:de:69:14:45:8c:02: 4a:ab:be:65:8e:b5:45:1b:1d:b8:98:ef:5b:d9:5e: 76:46:39:95:35:4e:a7:48:84:97:cf:09:13:5a:a6: 47:5d:ed:ca:07:3c:e0:0f:f8:90:fe:f1:02:df:d8: 58:f4:e2:f5:e0:f1:b5:ea:04:a9:bd:7d:02:87:6f: e5:c2:d7:a3:97:01:71:fb:71:08:17:ff:76:89:0d: 92:48:51:55:2f:15:c9:54:b6:4f:ae:3b:36:37:e5: 4c:94:3a:dc:04:06:60:92:a4:5e:b8:6c:5f:54:ad: 3a:da:51:6e:18:64:74:03:b8:fd:4d:d2:36:a6:4a: 0a:4b:d6:b3:e0:08:35:89:57:5f:df:a9:2a:d5:00: e2:9b:54:dd:1c:9a:be:3a:b7:e4:3f:43:2a:f6:91: 12:a2:dd:87:ef:49:77:11:b2:cd:f5:40:25:8c:22: f5:fd:e6:29:66:8d:b0:02:53:f7:c2:21:2e:91:98: b0:8b:d5:a0:73:a2:ba:0f:d9:08:79:83:dc:0e:75: 40:84:ea:42:5a:c6:a2:da:e5:52:dd:c2:48:df:45: 4a:99:75:04:ac:c9:d2:e8:e1:09:58:da:f3:9d:af: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:17:9A:6C:3B:63:62:5A:FC:DE:96:71:96:B5:67:27:B5:91:7E:D6 X509v3 Authority Key Identifier: keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1c:e0:ee:c7:24:41:bb:fc:11:a9:1a:f6:71:87:cc:04:d3: de:00:05:42:ad:6f:db:1d:a4:09:3e:81:8e:02:53:1d:ef:b2: db:7f:a8:29:ee:b8:4d:e8:43:59:6d:ea:9e:4c:e4:ec:91:87: 93:c0:97:1c:0e:a1:f9:6a:20:26:7d:3c:b7:87:70:e6:8d:05: fa:c7:90:ac:7b:0c:df:b0:71:7c:d0:e1:c1:24:8c:aa:03:eb: 4c:8d:d8:d0:7c:05:67:28:89:0a:2f:21:39:be:3a:3d:8d:2e: e1:94:a6:f9:3c:e0:56:43:19:9d:80:2f:38:e0:54:d7:25:9f: 3f:b0:3e:ce:31:4f:fc:0f:f7:8f:12:eb:32:5d:93:2e:4c:57: 37:19:98:4b:3d:72:95:5d:94:45:a7:5e:93:0a:12:13:8c:db: a9:f3:ee:4e:c0:bf:89:ff:9a:32:5c:f9:b2:aa:c3:b2:59:f6: 73:68:ba:ac:6d:1e:d9:9e:66:da:d1:1e:3d:9a:0f:67:d4:b0: d1:ec:71:52:54:7e:30:b4:60:44:24:23:08:5c:6b:23:a6:63: 1d:99:7a:5d:47:18:cb:14:ae:6b:f3:d5:cc:21:e5:db:d5:4b: 7b:7c:b2:0b:37:58:9e:d3:2a:6f:ba:0c:88:1e:52:a1:b9:ef: 23:29:b9:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHxmfM1xovgYD5XFyIt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDcwMWFmNDNmZDdmODZjYjNlMDRjZTNhYjU0MmU1NTlj NmQ0YjcwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EyhmZTE3OWE2YzNiNjM2MjVhZmNkZTk2NzE5NmI1NjcyN2I1OTE3ZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA286d2cv014fGA4JqDUJUSL6wAdf+ sJ/eaRRFjAJKq75ljrVFGx24mO9b2V52RjmVNU6nSISXzwkTWqZHXe3KBzzgD/iQ /vEC39hY9OL14PG16gSpvX0Ch2/lwtejlwFx+3EIF/92iQ2SSFFVLxXJVLZPrjs2 N+VMlDrcBAZgkqReuGxfVK062lFuGGR0A7j9TdI2pkoKS9az4Ag1iVdf36kq1QDi m1TdHJq+OrfkP0Mq9pESot2H70l3EbLN9UAljCL1/eYpZo2wAlP3wiEukZiwi9Wg c6K6D9kIeYPcDnVAhOpCWsai2uVS3cJI30VKmXUErMnS6OEJWNrzna+7swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4Xmmw7Y2Ja/N6WcZa1Zye1kX7WMB8GA1UdIwQY MBaAFLjXAa9D/X+Gyz4Ezjq1QuVZxtS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5jQnIwUDlmNGJMUGdUT09yVkM1Vm5HMUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jN2RkMzUtZWYwZi00YzVlLTliYTYt MDA4NmEwYzRlMThjLzEvdU5jQnIwUDlmNGJMUGdUT09yVkM1Vm5HMUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jN2RkMzUtZWYwZi00YzVlLTliYTYtMDA4NmEwYzRlMThj LzEvdU5jQnIwUDlmNGJMUGdUT09yVkM1Vm5HMUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBzg7sck Qbv8Eaka9nGHzATT3gAFQq1v2x2kCT6BjgJTHe+y23+oKe64TehDWW3qnkzk7JGH k8CXHA6h+WogJn08t4dw5o0F+seQrHsM37BxfNDhwSSMqgPrTI3Y0HwFZyiJCi8h Ob46PY0u4ZSm+TzgVkMZnYAvOOBU1yWfP7A+zjFP/A/3jxLrMl2TLkxXNxmYSz1y lV2URadekwoSE4zbqfPuTsC/if+aMlz5sqrDsln2c2i6rG0e2Z5m2tEePZoPZ9Sw 0exxUlR+MLRgRCQjCFxrI6ZjHZl6XUcYyxSua/PVzCHl29VLe3yyCzdYntMqb7oM iB5SobnvIym55w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:38 2025 by rpki-client