This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json) Hash identifier: SpNA5nArriADwz8zR/kyrEpNWO2aq7vsJGsEsHzLIPU= Subject key identifier: FE:34:34:CA:3C:5B:B7:6C:24:EC:68:8C:C4:B3:93:7C:88:D4:35:9D Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed Certificate serial: 019B18A85C6CACD8303AC57074FA9C7DC49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft Manifest number: 05BB Signing time: Sat 13 Dec 2025 17:00:45 +0000 Manifest this update: Sat 13 Dec 2025 17:00:45 +0000 Manifest next update: Sun 14 Dec 2025 17:00:45 +0000 Files and hashes: 1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=) 2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: CQbe1s7W62kG6TijZDecxGVSgeOayyxYJXmGrAl7uyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:5c:6c:ac:d8:30:3a:c5:70:74:fa:9c:7d:c4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed Validity Not Before: Dec 13 17:00:45 2025 GMT Not After : Dec 14 17:00:45 2025 GMT Subject: CN=fe3434ca3c5bb76c24ec688cc4b3937c88d4359d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:b6:52:52:51:fe:5f:72:95:92:52:02:70: 01:5d:19:7f:b3:1b:43:ae:5a:cf:7e:75:86:5d:3a: 79:b6:1a:6c:be:76:78:93:16:92:24:6a:47:23:0f: 1a:2a:e0:61:0d:2c:6f:41:95:88:52:1e:41:3b:ea: ce:fc:aa:25:3d:79:45:00:e7:53:2f:61:16:a6:eb: 62:92:1e:49:42:20:02:25:a6:69:01:d1:dd:a6:dd: c4:65:38:67:c2:e9:7d:44:39:38:5b:df:37:37:4f: fd:f1:0a:88:9b:08:c4:9e:31:df:4a:6a:75:77:15: 6c:7a:64:30:bd:4e:67:a8:cf:2c:19:46:d2:7e:7c: 1e:e2:91:b4:42:1e:1a:14:61:55:1f:f0:bb:8c:1d: a2:ba:35:80:88:cd:8e:1a:58:22:0d:44:32:9e:41: 1e:8f:e7:50:29:65:be:b9:aa:d7:f2:eb:13:70:d4: 52:c0:c1:2c:a2:f7:4c:b5:78:d6:c0:b2:8a:53:91: 43:89:c7:5a:0e:fa:4e:45:e0:2e:13:66:22:c8:e3: 87:b5:47:7f:64:bb:46:36:5c:ff:05:35:0e:8e:dd: 9e:8e:9c:ec:85:a8:7d:63:0f:9b:bc:1d:52:e1:c9: ca:a5:2a:c4:cf:b5:db:12:11:34:80:5d:a4:df:71: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:34:34:CA:3C:5B:B7:6C:24:EC:68:8C:C4:B3:93:7C:88:D4:35:9D X509v3 Authority Key Identifier: keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c2:97:af:dd:89:78:55:9f:68:ce:a7:ca:96:1f:24:b2:f8: 1e:6d:a0:43:bc:6e:53:9e:d1:20:5d:be:53:0b:56:01:a6:49: 5d:f9:aa:96:36:b1:11:2c:9a:23:75:28:e4:0a:52:7f:b3:90: 9a:64:fe:77:f9:39:3d:59:d3:11:c5:78:12:1b:16:a2:35:85: 28:96:80:f4:fb:b9:44:6a:58:4e:cb:a6:aa:17:d6:71:51:6f: 4e:54:81:19:f5:91:71:87:e6:45:84:a7:0d:85:fa:68:1d:15: a2:89:e5:6b:fd:72:be:86:89:6a:07:27:1a:1e:ff:38:6d:4a: cd:c3:33:24:3f:74:ce:4a:ec:b2:bb:da:88:ed:dd:d6:c0:47: f3:e5:7b:95:eb:63:1f:4e:d4:84:63:a9:c5:1d:c8:8a:e9:d8: 2e:24:b6:99:cc:71:ad:32:96:09:ef:75:f0:35:d0:33:02:50: fa:9a:35:9a:56:8d:2c:3b:07:f1:70:69:2e:7e:b6:59:87:f7: 55:ca:05:49:d8:a6:19:69:d0:18:e2:98:4b:26:f1:b7:a7:c9: 37:47:cd:12:52:b5:2c:fa:47:66:b0:d0:c0:53:88:d3:19:13: 24:2e:53:36:ba:74:b7:55:c9:06:83:8a:9b:91:0d:4e:e4:06: da:10:31:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqFxsrNgwOsVwdPqcfcSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTcxNWFmNjY0MDRmYmEwMzcxZWU1YjMwMzc3Njg0ZWE2 ZDQ2ZWQwHhcNMjUxMjEzMTcwMDQ1WhcNMjUxMjE0MTcwMDQ1WjAzMTEwLwYDVQQD EyhmZTM0MzRjYTNjNWJiNzZjMjRlYzY4OGNjNGIzOTM3Yzg4ZDQzNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcm2UlJR/l9ylZJSAnABXRl/sxtD rlrPfnWGXTp5thpsvnZ4kxaSJGpHIw8aKuBhDSxvQZWIUh5BO+rO/KolPXlFAOdT L2EWputikh5JQiACJaZpAdHdpt3EZThnwul9RDk4W983N0/98QqImwjEnjHfSmp1 dxVsemQwvU5nqM8sGUbSfnwe4pG0Qh4aFGFVH/C7jB2iujWAiM2OGlgiDUQynkEe j+dQKWW+uarX8usTcNRSwMEsovdMtXjWwLKKU5FDicdaDvpOReAuE2YiyOOHtUd/ ZLtGNlz/BTUOjt2ejpzshah9Yw+bvB1S4cnKpSrEz7XbEhE0gF2k33Ee0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP40NMo8W7dsJOxojMSzk3yI1DWdMB8GA1UdIwQY MBaAFLhXFa9mQE+6A3HuWzA3doTqbUbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iYjc3MTgtNjNkYi00MTJmLWE3NWUt M2Y1NDE3OWQ0OWU1LzEvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iYjc3MTgtNjNkYi00MTJmLWE3NWUtM2Y1NDE3OWQ0OWU1 LzEvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsKXr92J eFWfaM6nypYfJLL4Hm2gQ7xuU57RIF2+UwtWAaZJXfmqljaxESyaI3Uo5ApSf7OQ mmT+d/k5PVnTEcV4EhsWojWFKJaA9Pu5RGpYTsumqhfWcVFvTlSBGfWRcYfmRYSn DYX6aB0Voonla/1yvoaJagcnGh7/OG1KzcMzJD90zkrssrvaiO3d1sBH8+V7letj H07UhGOpxR3IiunYLiS2mcxxrTKWCe918DXQMwJQ+po1mlaNLDsH8XBpLn62WYf3 VcoFSdimGWnQGOKYSybxt6fJN0fNElK1LPpHZrDQwFOI0xkTJC5TNrp0t1XJBoOK m5ENTuQG2hAxeQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:05 2025 by rpki-client