This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json) Hash identifier: /6zBQ5m3YY7h15TQ/NK2ziQV6OQedS6Ab/H+erUf24o= Subject key identifier: 83:2C:11:3A:62:17:DD:08:B9:80:6E:D1:90:5A:A5:21:68:EE:97:6D Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00 Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300 Certificate serial: 019AF208AE12F8D339994B3F665AA3A888FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft Manifest number: 1730 Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=) 2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: 8xorQD6uh14gomY9iP1DQHK2O7FTrfPeIuJwuO29/nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ae:12:f8:d3:39:99:4b:3f:66:5a:a3:a8:88:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300 Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=832c113a6217dd08b9806ed1905aa52168ee976d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:e3:b0:df:48:1a:48:7e:00:41:7b:cc:2f: c6:12:5d:ff:0b:c4:7d:da:55:8a:d8:18:59:d3:af: 81:68:d8:31:99:81:74:7d:ee:4b:a5:24:85:b0:de: 19:be:77:4c:7e:55:c2:d7:97:ab:8e:6b:16:a0:23: 67:2e:1f:53:a5:30:6e:86:99:22:30:18:52:3c:c9: d9:0a:cc:a2:64:6e:a3:ea:9a:4a:55:f1:d6:22:74: 30:f2:b2:06:bc:57:3a:3c:ec:78:fd:e0:d9:d8:8f: 58:f0:38:aa:44:be:b2:47:9f:ec:09:c3:18:21:07: 88:65:ba:c6:99:e7:cc:16:ab:e3:5a:15:0c:5d:6f: 08:51:b6:c0:8b:90:e6:c6:b7:16:40:05:10:1f:f9: d8:3f:e2:df:f0:40:e7:02:8c:56:f2:31:2a:48:a3: 17:f5:9b:05:03:5c:b2:39:f6:5e:a7:fd:49:ca:ad: 23:e8:c3:9d:4a:90:4b:1f:9e:f1:8e:ac:bd:83:9d: ef:ba:30:87:1f:30:19:17:a6:27:66:2f:83:42:86: 67:4c:08:c8:76:13:a4:8c:7f:2a:20:5f:c8:b7:76: 15:33:38:30:1c:4a:7e:00:19:7c:e7:d4:6a:84:3e: ad:c8:24:99:79:54:0a:c5:3b:99:75:b3:86:94:4b: 94:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2C:11:3A:62:17:DD:08:B9:80:6E:D1:90:5A:A5:21:68:EE:97:6D X509v3 Authority Key Identifier: keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3a:01:d5:0c:b9:96:02:3b:81:1b:dd:7c:37:a2:23:f4:dd: 6e:44:ed:ea:da:24:53:d5:aa:fb:4a:8a:4e:3d:c5:6d:91:c5: 43:1c:1d:2f:98:69:c4:54:8d:8b:2f:01:90:f8:e2:c3:f7:9a: 12:d4:db:6c:ba:24:1e:66:14:5e:ac:71:40:a4:39:32:7c:06: 1e:41:91:8e:bf:d7:29:1d:81:74:61:50:6c:fe:29:48:c7:65: fa:90:35:22:f6:a4:d4:b8:6f:b3:cb:0e:57:1f:cc:b8:2b:ea: 33:d7:aa:ea:83:e2:ef:1e:80:a2:d1:e3:25:68:93:34:99:7c: e9:3f:1a:3e:b3:85:d1:9e:1e:a6:6b:a4:f0:98:bb:02:0d:2b: 07:be:a0:3d:7b:32:fc:38:e4:b1:36:3f:bb:9d:e2:39:41:10: 25:e5:1e:8c:b7:68:fe:57:42:8e:6a:e7:58:1d:35:50:4e:a1: da:c4:a2:2d:1e:a2:e7:a4:fb:45:a3:76:79:5f:05:4c:99:f9: 2e:80:d3:76:18:f9:03:9a:05:32:03:92:2b:2e:23:da:b7:0b: 56:64:6a:e5:8d:96:57:57:4b:2d:c4:cc:00:15:5e:74:22:2b: 9f:d0:a8:4a:2e:c4:d5:6f:1e:ab:2b:96:81:9a:5f:56:c6:8f: a2:ea:33:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCK4S+NM5mUs/ZlqjqIj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZmFkYTg3YTc2ZjI5ZjgyZTI1YTMxNzllN2EzOGNmMGM2 YjAzMDAwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD Eyg4MzJjMTEzYTYyMTdkZDA4Yjk4MDZlZDE5MDVhYTUyMTY4ZWU5NzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLjjsN9IGkh+AEF7zC/GEl3/C8R9 2lWK2BhZ06+BaNgxmYF0fe5LpSSFsN4ZvndMflXC15erjmsWoCNnLh9TpTBuhpki MBhSPMnZCsyiZG6j6ppKVfHWInQw8rIGvFc6POx4/eDZ2I9Y8DiqRL6yR5/sCcMY IQeIZbrGmefMFqvjWhUMXW8IUbbAi5DmxrcWQAUQH/nYP+Lf8EDnAoxW8jEqSKMX 9ZsFA1yyOfZep/1Jyq0j6MOdSpBLH57xjqy9g53vujCHHzAZF6YnZi+DQoZnTAjI dhOkjH8qIF/It3YVMzgwHEp+ABl859RqhD6tyCSZeVQKxTuZdbOGlEuUbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMsETpiF90IuYBu0ZBapSFo7pdtMB8GA1UdIwQY MBaAFLj62oenbyn4LiWjF556OM8MawMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgt NmY2N2I2NDc3MjJkLzEvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgtNmY2N2I2NDc3MjJk LzEvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejoB1Qy5 lgI7gRvdfDeiI/TdbkTt6tokU9Wq+0qKTj3FbZHFQxwdL5hpxFSNiy8BkPjiw/ea EtTbbLokHmYUXqxxQKQ5MnwGHkGRjr/XKR2BdGFQbP4pSMdl+pA1Ivak1Lhvs8sO Vx/MuCvqM9eq6oPi7x6AotHjJWiTNJl86T8aPrOF0Z4epmuk8Ji7Ag0rB76gPXsy /DjksTY/u53iOUEQJeUejLdo/ldCjmrnWB01UE6h2sSiLR6i56T7RaN2eV8FTJn5 LoDTdhj5A5oFMgOSKy4j2rcLVmRq5Y2WV1dLLcTMABVedCIrn9CoSi7E1W8eqyuW gZpfVsaPouoztg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:11 2025 by rpki-client