This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json) Hash identifier: +cr8HfMdyjtA9Gyju5xeCV6pipqBp1oLFHVLKnOKRkU= Subject key identifier: 0E:04:25:C6:D9:94:F8:8D:91:28:3E:93:67:78:78:B3:A1:0E:22:8C Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87 Certificate serial: 019B5ABF2C5DACD5E55E5DBF42558801ED89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft Manifest number: 0152 Signing time: Fri 26 Dec 2025 13:00:36 +0000 Manifest this update: Fri 26 Dec 2025 13:00:36 +0000 Manifest next update: Sat 27 Dec 2025 13:00:36 +0000 Files and hashes: 1: 5GYWrzRu65AjS73_-IgwDSj8n-Q.roa (hash: YdE2CXn8HuPLnZ5nEOMoIyiMWMH03XMYxsoKuzVp7Lc=) 2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: gYOl1R4Ds01j/hqLVr+7753wo08pHAI1ywNWRtvRBOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:2c:5d:ac:d5:e5:5e:5d:bf:42:55:88:01:ed:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87 Validity Not Before: Dec 26 13:00:36 2025 GMT Not After : Dec 27 13:00:36 2025 GMT Subject: CN=0e0425c6d994f88d91283e93677878b3a10e228c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:8a:8e:04:57:12:17:6c:f7:08:80:7e:6a: 9c:6d:65:da:19:41:0f:fb:02:45:2a:fe:df:af:ad: 43:c8:fa:db:e3:b4:97:7c:82:14:da:26:0b:27:b8: e0:a5:dc:17:36:3a:86:c2:7b:f0:d8:ab:5a:7b:18: 37:b0:9a:2f:39:65:72:55:2e:7b:f3:ca:61:74:35: 7c:b0:c8:26:a6:96:31:ba:c2:5f:4c:f3:30:12:be: 45:1a:5a:f2:17:f1:02:e5:cd:d6:84:b6:7c:e1:cb: 50:da:35:df:8e:3c:b7:2c:b8:9f:4e:a7:7c:60:4b: 6f:c7:5c:e0:90:4c:a3:a9:4c:5f:d1:eb:a3:c7:97: e8:b8:b1:73:67:35:77:1e:c2:02:fb:98:b9:5a:7b: c5:c8:fa:17:b8:ff:6e:d1:be:39:b3:59:c5:50:99: 2b:11:56:e2:fc:ec:09:6f:18:5a:cb:0a:18:16:7a: b2:91:ca:7d:72:21:db:34:0a:d7:c6:48:6d:e2:22: 5d:2c:68:11:da:62:66:96:0f:f1:50:93:20:2f:c7: bd:5a:a9:30:d1:dd:fe:16:76:83:81:9b:7b:05:87: 83:e1:d4:1b:82:d4:6f:2b:f7:48:17:00:45:4f:ef: 27:02:db:4f:a3:4a:a1:fc:80:50:82:b9:70:c4:b1: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:04:25:C6:D9:94:F8:8D:91:28:3E:93:67:78:78:B3:A1:0E:22:8C X509v3 Authority Key Identifier: keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:4f:c2:ce:72:7f:c3:ab:31:cb:19:c0:8b:73:9e:3a:51: d9:16:f5:4c:d7:b3:f0:36:b8:00:9d:d3:a8:c8:39:67:6c:44: 39:1d:aa:04:4c:d9:45:70:f3:9f:0e:b7:58:10:94:2d:f0:0f: 89:68:a4:b2:8e:f5:d6:ac:f0:0c:fe:ea:fa:89:56:82:e2:a2: d6:00:ff:e0:38:8e:0d:fe:27:76:cf:ff:df:4c:dd:28:b0:b8: 15:c2:13:21:df:50:ae:9c:34:4a:8f:d1:95:fa:ea:8f:f7:17: f0:ee:77:06:3d:a5:01:0b:5a:79:6f:9c:d5:e7:eb:35:05:3d: 35:0b:b4:e9:dc:37:ae:02:5c:0b:47:fb:83:3a:aa:34:c1:df: 08:7e:36:6c:9b:5f:6e:19:05:b0:4a:14:08:ba:04:cd:1d:cc: ae:a6:44:1f:c5:58:b6:08:96:8e:06:08:d2:41:a6:76:ec:94: c2:e4:26:5d:13:f9:ac:a4:14:2c:2b:7a:3c:47:1b:fc:bd:7d: 5c:8f:dc:25:3d:b8:d6:a1:08:fc:47:63:aa:9d:a6:f7:fa:a7: cc:c0:2f:66:7c:22:5f:d3:7d:b1:1e:5e:24:a7:ff:0a:df:b3: 92:b6:1c:de:8b:e0:06:41:6e:57:64:79:4d:32:c7:7b:4b:1c: bc:4d:61:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavyxdrNXlXl2/QlWIAe2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjU4NWQwOGI5N2U2NzlmMDgyOGJmMTAyYmVhYjUxZGNk YWZhODcwHhcNMjUxMjI2MTMwMDM2WhcNMjUxMjI3MTMwMDM2WjAzMTEwLwYDVQQD EygwZTA0MjVjNmQ5OTRmODhkOTEyODNlOTM2Nzc4NzhiM2ExMGUyMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg+KjgRXEhds9wiAfmqcbWXaGUEP +wJFKv7fr61DyPrb47SXfIIU2iYLJ7jgpdwXNjqGwnvw2Ktaexg3sJovOWVyVS57 88phdDV8sMgmppYxusJfTPMwEr5FGlryF/EC5c3WhLZ84ctQ2jXfjjy3LLifTqd8 YEtvx1zgkEyjqUxf0eujx5fouLFzZzV3HsIC+5i5WnvFyPoXuP9u0b45s1nFUJkr EVbi/OwJbxhaywoYFnqykcp9ciHbNArXxkht4iJdLGgR2mJmlg/xUJMgL8e9Wqkw 0d3+FnaDgZt7BYeD4dQbgtRvK/dIFwBFT+8nAttPo0qh/IBQgrlwxLF5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4EJcbZlPiNkSg+k2d4eLOhDiKMMB8GA1UdIwQY MBaAFLhlhdCLl+Z58IKL8QK+q1Hc2vqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgt NGZhZGNiMTgyYzVhLzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgtNGZhZGNiMTgyYzVh LzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVBPws5y f8OrMcsZwItznjpR2Rb1TNez8Da4AJ3TqMg5Z2xEOR2qBEzZRXDznw63WBCULfAP iWikso711qzwDP7q+olWguKi1gD/4DiODf4nds//30zdKLC4FcITId9Qrpw0So/R lfrqj/cX8O53Bj2lAQtaeW+c1efrNQU9NQu06dw3rgJcC0f7gzqqNMHfCH42bJtf bhkFsEoUCLoEzR3MrqZEH8VYtgiWjgYI0kGmduyUwuQmXRP5rKQULCt6PEcb/L19 XI/cJT241qEI/Edjqp2m9/qnzMAvZnwiX9N9sR5eJKf/Ct+zkrYc3ovgBkFuV2R5 TTLHe0scvE1hMA== -----END CERTIFICATE-----Generated at Fri Dec 26 22:46:39 2025 by rpki-client