This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json) Hash identifier: 1c3AmYqWkIBbMRMR+jy5A0N1eA6J0zKwk5EpxhQgeGc= Subject key identifier: C5:F3:25:55:B7:76:B5:B1:5E:D6:A5:8F:EF:42:64:F8:33:CE:16:B1 Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Certificate serial: 019AF208CDFFC2498A3BAFF9E2C666B2D64E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft Manifest number: 0B39 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=) 2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=) 3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: nhzXdAoP6yfauQVePaQNvLk29cF6RWdqaIpqq21ymzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cd:ff:c2:49:8a:3b:af:f9:e2:c6:66:b2:d6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=c5f32555b776b5b15ed6a58fef4264f833ce16b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:23:94:d7:23:24:64:95:18:cd:63:ad:6d:c0: 06:56:6d:98:a0:68:da:23:cc:f4:3c:99:57:b1:93: b3:df:36:12:78:c2:c2:34:44:72:a7:93:cd:cd:77: be:22:34:44:32:71:82:c1:ca:fa:76:f1:45:d6:78: d2:57:df:9a:3c:06:0a:75:a0:39:c9:8f:ef:ad:3e: cb:61:e3:fd:9b:f3:4e:82:d3:96:3f:ff:cb:1d:d7: b4:b1:d6:7f:ff:7b:b9:d7:a4:02:16:16:24:ce:00: 57:6e:11:97:6b:05:43:1c:55:e6:f0:10:82:8c:04: 74:b0:3e:f9:8c:f2:9c:68:0d:56:ba:4c:74:8f:90: f4:82:ea:cd:df:c8:35:a5:0e:91:2e:78:69:c8:00: 71:71:26:e1:30:f3:4b:81:7c:22:a5:b4:54:25:2c: 69:cd:cf:3c:24:21:3e:b4:31:6a:d1:e9:0e:15:f8: 06:1f:73:bb:14:07:19:9e:91:c3:7d:eb:fe:4a:fe: f9:2e:6a:dd:a7:85:4c:d2:a2:d5:79:28:5e:d5:b0: 4c:93:2e:b3:d2:30:a1:ca:fb:9c:ee:64:30:63:a3: b1:ac:c1:cf:ec:df:f6:33:23:02:21:6a:99:b1:71: 57:df:2d:97:54:24:82:c1:23:94:7d:a6:40:43:17: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F3:25:55:B7:76:B5:B1:5E:D6:A5:8F:EF:42:64:F8:33:CE:16:B1 X509v3 Authority Key Identifier: keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:47:6b:46:b9:d0:ab:70:fb:5e:46:be:c9:7e:e3:88:3c:d2: 65:c3:1f:e7:cc:fc:41:eb:8b:25:be:28:97:9f:4b:fc:11:16: 6c:53:27:ed:5d:c3:68:f2:41:36:bb:1d:9e:a3:a1:f9:d4:09: 46:4b:7b:4a:22:2d:8a:8d:c5:79:54:c1:c1:47:39:57:c7:f5: c7:15:4a:48:d1:30:99:3c:b9:80:76:eb:4c:a3:68:79:23:69: 57:35:a3:77:12:79:93:f6:fe:23:38:cc:5c:6e:47:1b:1d:2b: c6:03:32:b1:5c:e8:b8:64:e9:c0:ce:77:84:86:91:ca:0e:da: ac:b8:95:04:3a:a6:6d:07:50:5c:6a:63:0d:28:2c:a2:0b:d1: ed:3b:b9:5f:32:34:6a:68:20:de:32:44:af:63:9b:84:59:63: aa:3a:e1:9c:95:5e:47:74:eb:7f:a1:b6:0b:1b:4e:9d:0e:7f: 26:f8:48:a6:aa:a6:7a:13:8f:e3:1a:61:d4:76:50:f8:c1:ec: 94:d5:f4:b2:58:ec:4c:27:d8:96:be:c8:5f:dc:9e:c5:cb:32: 05:96:61:be:ae:e8:6d:25:e9:5f:71:d0:cf:21:11:c7:48:4d: fd:32:2a:ee:50:e8:aa:bb:7a:f2:33:60:45:f5:12:e1:dd:e1: 12:a5:5e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM3/wkmKO6/54sZmstZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1 OTcyZTYwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EyhjNWYzMjU1NWI3NzZiNWIxNWVkNmE1OGZlZjQyNjRmODMzY2UxNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yOU1yMkZJUYzWOtbcAGVm2YoGja I8z0PJlXsZOz3zYSeMLCNERyp5PNzXe+IjREMnGCwcr6dvFF1njSV9+aPAYKdaA5 yY/vrT7LYeP9m/NOgtOWP//LHde0sdZ//3u516QCFhYkzgBXbhGXawVDHFXm8BCC jAR0sD75jPKcaA1Wukx0j5D0gurN38g1pQ6RLnhpyABxcSbhMPNLgXwipbRUJSxp zc88JCE+tDFq0ekOFfgGH3O7FAcZnpHDfev+Sv75Lmrdp4VM0qLVeShe1bBMky6z 0jChyvuc7mQwY6OxrMHP7N/2MyMCIWqZsXFX3y2XVCSCwSOUfaZAQxfUOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXzJVW3drWxXtalj+9CZPgzzhaxMB8GA1UdIwQY MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt NzQyNWIxM2Q1Y2Y4LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4 LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3EdrRrnQ q3D7Xka+yX7jiDzSZcMf58z8QeuLJb4ol59L/BEWbFMn7V3DaPJBNrsdnqOh+dQJ Rkt7SiItio3FeVTBwUc5V8f1xxVKSNEwmTy5gHbrTKNoeSNpVzWjdxJ5k/b+IzjM XG5HGx0rxgMysVzouGTpwM53hIaRyg7arLiVBDqmbQdQXGpjDSgsogvR7Tu5XzI0 amgg3jJEr2ObhFljqjrhnJVeR3Trf6G2CxtOnQ5/JvhIpqqmehOP4xph1HZQ+MHs lNX0sljsTCfYlr7IX9yexcsyBZZhvq7obSXpX3HQzyERx0hN/TIq7lDoqrt68jNg RfUS4d3hEqVe1A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:12 2025 by rpki-client