This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json) Hash identifier: nbVE6Mgq/wcPX6vXeesrWXAdKfulvOz7h+RD/QW0Oxw= Subject key identifier: 3D:9B:89:0D:4A:ED:CB:E6:6E:6A:6B:D7:FD:95:E0:C8:B2:84:2E:DE Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Certificate serial: 019B0F37B1BEF25A3419A98BEDF44124F13E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft Manifest number: 0EB5 Signing time: Thu 11 Dec 2025 21:01:06 +0000 Manifest this update: Thu 11 Dec 2025 21:01:06 +0000 Manifest next update: Fri 12 Dec 2025 21:01:06 +0000 Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=) 2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=) 3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: 4X3/lPMbqy0+7Xp5hyHcnMgwTQsq7e0gBSLdFgGrHng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b1:be:f2:5a:34:19:a9:8b:ed:f4:41:24:f1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Validity Not Before: Dec 11 21:01:06 2025 GMT Not After : Dec 12 21:01:06 2025 GMT Subject: CN=3d9b890d4aedcbe66e6a6bd7fd95e0c8b2842ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:06:08:7a:30:6e:ea:01:83:56:1d:b6:67: fe:9b:7a:10:58:e1:9a:49:40:2c:be:61:16:5c:0d: e6:35:43:9d:68:52:cb:dc:71:35:1a:1f:97:1b:2c: 9d:0d:74:e9:f2:f3:2f:b2:4a:cc:8c:2f:94:64:32: 3a:a1:a4:b5:55:c5:c6:5e:6b:ba:fa:32:37:7d:b9: 95:07:fd:bd:9f:af:95:d5:9c:03:b4:29:83:49:be: c5:9c:0a:56:f4:a5:d6:79:77:ef:ba:cc:a5:02:e3: 13:e0:a0:90:ae:72:72:1b:9b:db:65:4a:a5:3e:7c: df:a1:a9:f3:02:a1:18:f7:1f:fd:33:c5:07:b5:c5: 0f:fb:bf:1d:de:8e:7c:1b:04:cf:ab:4f:e2:f4:fb: 17:83:3e:48:af:40:a6:a6:ed:23:07:47:21:49:d2: 71:de:19:a1:3a:75:d6:03:7b:0b:b8:54:e2:cd:78: ed:5b:b4:c6:02:e8:f7:a8:37:74:da:1a:b5:58:f8: c8:69:94:00:b7:5e:a5:ca:d6:5a:de:b8:d3:09:4f: d3:f4:70:1a:6b:66:0d:e3:77:e9:f2:c2:29:c1:09: c7:0c:59:ce:49:23:1a:7e:94:97:00:d5:7f:25:03: 20:fb:8b:d2:d1:46:c3:ca:31:33:39:b6:f5:b2:34: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:89:0D:4A:ED:CB:E6:6E:6A:6B:D7:FD:95:E0:C8:B2:84:2E:DE X509v3 Authority Key Identifier: keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:44:58:7d:3a:95:c9:05:d2:e7:94:85:8f:32:67:a1:b2:c9: 07:2a:aa:4b:63:32:46:1b:43:f5:65:70:0e:ff:10:d9:5b:82: 3d:bc:d5:7c:ae:d9:51:1b:83:bb:4c:d6:ed:97:13:1a:d5:45: cf:b4:89:05:e3:ff:b5:8c:50:0c:96:e9:64:d8:fc:0a:3b:7f: fd:b1:51:07:a6:28:f3:c6:3c:a0:76:b9:8c:ce:d4:56:1b:cf: 26:45:ab:3c:c7:99:93:57:8f:15:7f:ba:8e:7a:59:d0:c3:c7: bc:85:32:51:87:c9:44:ad:76:44:73:0d:6a:ca:79:63:74:a9: f1:39:18:dd:b8:a6:e0:c0:a1:7e:44:00:c4:81:16:e9:3e:5a: af:4d:35:42:60:98:df:10:b7:30:e5:41:0b:4e:75:fa:09:0d: 7e:e3:eb:f6:7c:eb:5f:4b:fd:1b:4c:47:18:67:09:41:46:66: d5:dc:2d:d6:fb:5c:22:fa:e8:11:42:d0:1c:fd:ac:45:00:4a: 2b:f2:5c:04:67:db:ce:45:fa:fd:9e:ac:2a:6b:ed:af:b9:ea: 5b:c3:96:1e:b6:7b:b8:eb:f8:5f:61:6c:f2:1f:c5:cf:ff:7b: f8:88:02:72:c3:b4:ee:ab:10:fa:97:94:41:aa:79:10:a2:32: ef:23:ac:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7G+8lo0GamL7fRBJPE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1 MWIxMTEwHhcNMjUxMjExMjEwMTA2WhcNMjUxMjEyMjEwMTA2WjAzMTEwLwYDVQQD EygzZDliODkwZDRhZWRjYmU2NmU2YTZiZDdmZDk1ZTBjOGIyODQyZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwoGCHowbuoBg1Ydtmf+m3oQWOGa SUAsvmEWXA3mNUOdaFLL3HE1Gh+XGyydDXTp8vMvskrMjC+UZDI6oaS1VcXGXmu6 +jI3fbmVB/29n6+V1ZwDtCmDSb7FnApW9KXWeXfvusylAuMT4KCQrnJyG5vbZUql PnzfoanzAqEY9x/9M8UHtcUP+78d3o58GwTPq0/i9PsXgz5Ir0Cmpu0jB0chSdJx 3hmhOnXWA3sLuFTizXjtW7TGAuj3qDd02hq1WPjIaZQAt16lytZa3rjTCU/T9HAa a2YN43fp8sIpwQnHDFnOSSMafpSXANV/JQMg+4vS0UbDyjEzObb1sjTOPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2biQ1K7cvmbmpr1/2V4MiyhC7eMB8GA1UdIwQY MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkRYfTqV yQXS55SFjzJnobLJByqqS2MyRhtD9WVwDv8Q2VuCPbzVfK7ZURuDu0zW7ZcTGtVF z7SJBeP/tYxQDJbpZNj8Cjt//bFRB6Yo88Y8oHa5jM7UVhvPJkWrPMeZk1ePFX+6 jnpZ0MPHvIUyUYfJRK12RHMNasp5Y3Sp8TkY3bim4MChfkQAxIEW6T5ar001QmCY 3xC3MOVBC051+gkNfuPr9nzrX0v9G0xHGGcJQUZm1dwt1vtcIvroEULQHP2sRQBK K/JcBGfbzkX6/Z6sKmvtr7nqW8OWHrZ7uOv4X2Fs8h/Fz/97+IgCcsO07qsQ+peU Qap5EKIy7yOsSw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:01:00 2025 by rpki-client