This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json) Hash identifier: xEW54Oh7vXG79cGUJOAEJLNQi7GtfZaG94Lj0G2SqMM= Subject key identifier: 31:CD:90:FB:7A:ED:0E:A9:BD:AE:F8:BB:01:C5:C9:FC:C3:B9:25:A6 Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e Certificate serial: 019B5AF617749D7F3800BF9F38DD8C910592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft Manifest number: 0730 Signing time: Fri 26 Dec 2025 14:00:35 +0000 Manifest this update: Fri 26 Dec 2025 14:00:35 +0000 Manifest next update: Sat 27 Dec 2025 14:00:35 +0000 Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=) 2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: SNEkKFJHB+ABeMo0ylQcxqK9MYQh25KVtgrX5V4gwEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:17:74:9d:7f:38:00:bf:9f:38:dd:8c:91:05:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e Validity Not Before: Dec 26 14:00:35 2025 GMT Not After : Dec 27 14:00:35 2025 GMT Subject: CN=31cd90fb7aed0ea9bdaef8bb01c5c9fcc3b925a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:b4:fb:70:a8:0e:18:1f:37:85:0a:bb:43: 4c:d5:4f:17:61:c9:79:8d:9c:83:97:8b:85:99:9d: 8b:f4:a0:7a:84:b9:8f:c6:05:a8:f2:86:7e:a8:56: a7:55:e4:36:af:df:a8:75:a6:d5:d2:06:0b:25:91: 59:24:c2:29:93:70:df:33:34:01:20:22:f8:e5:aa: b8:f0:7b:72:70:31:94:b3:d9:07:aa:e7:bc:da:67: a8:c9:75:8f:5d:0e:4a:20:58:0a:ba:41:49:e4:c7: fc:8c:b2:66:0e:d3:f1:3e:61:36:2f:d3:6d:56:e9: be:bb:5f:1d:e4:16:0e:a9:92:6b:b5:3a:97:ba:13: c8:38:5a:04:14:59:b8:be:5a:5c:11:53:81:54:92: a6:38:0b:3d:d7:8f:a7:54:ed:1d:7c:df:e5:73:a9: a9:ab:e2:a1:02:62:f0:e4:42:b8:4a:e3:b6:c0:ed: 50:57:1e:05:f2:c8:19:3f:43:24:75:6a:43:33:f2: 94:ed:b0:7f:a8:53:7e:69:99:d3:ee:07:d1:fb:89: ee:ac:c1:76:b1:81:c1:1e:61:0f:a1:86:9f:9e:ff: 29:60:43:9c:cc:03:03:fc:3c:63:b7:7a:63:e9:ef: e4:78:1d:9f:2c:a6:0e:71:b2:43:b8:92:95:34:ce: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CD:90:FB:7A:ED:0E:A9:BD:AE:F8:BB:01:C5:C9:FC:C3:B9:25:A6 X509v3 Authority Key Identifier: keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a1:fe:f8:dd:c7:89:1a:da:b5:d0:6b:42:52:7d:a0:50:eb: 36:20:d4:a9:a5:19:5b:98:36:49:56:eb:79:3a:63:36:1f:f5: b9:f8:c4:83:78:23:11:47:0b:49:16:c1:cf:3c:a1:40:7e:93: 4f:06:bc:c7:6c:da:58:54:6a:b0:48:d6:dd:b6:8e:0b:43:cf: b6:3b:4a:37:e6:87:56:f5:8e:5a:25:ea:46:5d:e0:0e:59:8d: 89:9a:51:94:70:b6:d7:98:8b:ba:7c:75:6d:04:82:78:9c:d4: bf:f9:18:5c:fe:af:b8:9e:f8:70:7f:61:9a:0d:9d:ab:81:5f: e8:3d:62:4c:ed:4e:b7:80:8f:e5:0f:b7:0d:cf:e1:20:19:1e: 11:9a:22:bf:e5:4a:c2:b8:52:f2:2e:2d:0a:81:12:90:ce:cd: e5:83:97:c7:85:02:a0:5d:55:d0:97:09:05:b8:1e:ac:da:41: 08:46:a0:bf:06:f2:b3:5e:0f:0a:07:29:df:32:26:00:1b:4c: 4a:75:43:69:a7:ca:bf:8b:8c:cc:c4:1c:9f:5b:26:56:14:ba: df:ea:c2:ad:17:b6:82:0a:4c:cf:a8:81:54:a2:0e:a5:df:8b: a7:9f:dc:e7:27:70:e3:34:85:70:21:b4:8e:8f:7b:06:ae:ff: a3:26:ba:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9hd0nX84AL+fON2MkQWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTg3NDA5NWM0Yzk0MjJiOTM1OTc1YTcxNTY0ZjA3NzFj ZDI5MmUwHhcNMjUxMjI2MTQwMDM1WhcNMjUxMjI3MTQwMDM1WjAzMTEwLwYDVQQD EygzMWNkOTBmYjdhZWQwZWE5YmRhZWY4YmIwMWM1YzlmY2MzYjkyNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqde0+3CoDhgfN4UKu0NM1U8XYcl5 jZyDl4uFmZ2L9KB6hLmPxgWo8oZ+qFanVeQ2r9+odabV0gYLJZFZJMIpk3DfMzQB ICL45aq48HtycDGUs9kHque82meoyXWPXQ5KIFgKukFJ5Mf8jLJmDtPxPmE2L9Nt Vum+u18d5BYOqZJrtTqXuhPIOFoEFFm4vlpcEVOBVJKmOAs914+nVO0dfN/lc6mp q+KhAmLw5EK4SuO2wO1QVx4F8sgZP0MkdWpDM/KU7bB/qFN+aZnT7gfR+4nurMF2 sYHBHmEPoYafnv8pYEOczAMD/Dxjt3pj6e/keB2fLKYOcbJDuJKVNM5vtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHNkPt67Q6pva74uwHFyfzDuSWmMB8GA1UdIwQY MBaAFLhYdAlcTJQiuTWXWnFWTwdxzSkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTct MDcwYTFmNzE4ODVlLzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTctMDcwYTFmNzE4ODVl LzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKH++N3H iRratdBrQlJ9oFDrNiDUqaUZW5g2SVbreTpjNh/1ufjEg3gjEUcLSRbBzzyhQH6T Twa8x2zaWFRqsEjW3baOC0PPtjtKN+aHVvWOWiXqRl3gDlmNiZpRlHC215iLunx1 bQSCeJzUv/kYXP6vuJ74cH9hmg2dq4Ff6D1iTO1Ot4CP5Q+3Dc/hIBkeEZoiv+VK wrhS8i4tCoESkM7N5YOXx4UCoF1V0JcJBbgerNpBCEagvwbys14PCgcp3zImABtM SnVDaafKv4uMzMQcn1smVhS63+rCrRe2ggpMz6iBVKIOpd+Lp5/c5ydw4zSFcCG0 jo97Bq7/oya6Cw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:18 2025 by rpki-client