This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json) Hash identifier: KsY/CRSLqOz9VZ0tH3RdN6vJlKAnCTzyRRWshRakOIY= Subject key identifier: 80:2D:60:E0:13:D0:63:7D:75:4F:80:F2:54:9E:17:4F:4D:05:BF:6B Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Certificate serial: 019B3D5A0CF2080FF7996640B8357DBE6D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft Manifest number: 06D4 Signing time: Sat 20 Dec 2025 20:01:10 +0000 Manifest this update: Sat 20 Dec 2025 20:01:10 +0000 Manifest next update: Sun 21 Dec 2025 20:01:10 +0000 Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=) 2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=) 3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: us9oXJdtQl04MAjEP/dT9GBYjK3DdDRx3hUxR1wk9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:0c:f2:08:0f:f7:99:66:40:b8:35:7d:be:6d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Validity Not Before: Dec 20 20:01:10 2025 GMT Not After : Dec 21 20:01:10 2025 GMT Subject: CN=802d60e013d0637d754f80f2549e174f4d05bf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:21:40:ac:a2:94:a5:52:ef:48:c5:e5:86: cd:33:07:c9:fc:83:3b:24:7f:f1:90:73:79:34:e1: b9:f4:cb:8f:fa:e3:c9:ce:39:57:10:3b:d6:12:b2: 17:52:23:7b:72:2d:df:50:bf:ae:c9:a4:8d:00:ab: f2:a2:e4:a8:9d:ca:4c:49:ff:c5:b9:aa:b1:c5:3f: 60:65:63:eb:62:49:21:5a:ad:23:ad:4b:24:5c:08: d1:9e:7f:91:db:a6:79:a8:89:8b:fc:0c:8f:4a:45: 8f:7a:f9:85:4e:56:4c:5b:94:5f:d3:01:da:65:0e: 50:a9:2e:70:45:01:b0:b6:22:8b:9b:f7:42:73:e8: 4f:ad:51:54:0f:96:b3:0d:02:e8:57:1b:f2:62:98: b3:85:74:72:b6:80:ed:78:bb:cf:bf:9f:a2:b1:aa: c5:02:8c:c9:39:23:63:50:e4:93:02:4b:bf:00:8a: 82:6e:7a:fb:e7:2d:8f:5e:99:2b:67:c5:fe:01:4f: 07:35:89:b9:2b:16:5b:ae:47:ee:83:a0:6f:51:d3: c8:c2:55:b7:0a:e0:15:a5:a3:9f:b1:86:f3:57:c0: 9e:d2:85:b9:9c:1e:87:20:91:68:18:1b:14:64:e4: a2:85:47:48:8a:d7:0d:ab:49:09:51:6e:cb:01:07: ae:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:60:E0:13:D0:63:7D:75:4F:80:F2:54:9E:17:4F:4D:05:BF:6B X509v3 Authority Key Identifier: keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d3:03:94:49:4b:93:54:a2:95:93:57:d5:53:cd:34:92:6d: 5f:27:de:c6:30:2d:db:ae:c4:0a:ca:da:dc:9a:47:40:a3:98: ca:5c:bb:fa:57:6a:72:7a:df:47:ad:bd:46:aa:ee:e7:53:a8: 71:72:f5:06:a3:81:3f:d0:df:6c:09:05:64:a7:d3:5b:a1:bd: 81:a8:a6:17:d9:86:91:44:a0:f2:3f:8b:d5:7d:ff:2a:d0:10: d4:6d:f1:27:87:e4:aa:98:e1:ea:03:56:dd:60:54:f9:69:0c: 2f:da:ff:09:9a:ff:78:13:c9:1c:2c:71:c1:88:82:34:5a:1e: be:94:3a:3f:6c:47:5e:bb:dd:ed:28:cb:47:c9:50:e1:ac:c4: 7a:85:c9:04:47:36:7c:63:4a:18:5a:76:37:08:c0:2c:3d:a3: a5:8a:9f:99:ca:64:ca:9d:d6:2f:bf:2d:2c:98:d5:b2:f2:ae: c9:d3:f6:15:e2:63:53:3d:99:75:a5:83:f2:ce:d8:bd:7c:cc: 6a:8b:34:60:55:34:9f:d4:16:68:8e:ae:98:eb:a2:e8:ae:a0: 29:93:66:13:7f:3f:d4:99:6d:e6:1d:8b:b7:de:32:17:59:54: b7:1b:76:02:46:3e:2d:55:db:08:38:68:de:40:4b:f9:bf:e5: 48:8f:86:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgzyCA/3mWZAuDV9vm1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl OWQ3MDkwHhcNMjUxMjIwMjAwMTEwWhcNMjUxMjIxMjAwMTEwWjAzMTEwLwYDVQQD Eyg4MDJkNjBlMDEzZDA2MzdkNzU0ZjgwZjI1NDllMTc0ZjRkMDViZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ghQKyilKVS70jF5YbNMwfJ/IM7 JH/xkHN5NOG59MuP+uPJzjlXEDvWErIXUiN7ci3fUL+uyaSNAKvyouSoncpMSf/F uaqxxT9gZWPrYkkhWq0jrUskXAjRnn+R26Z5qImL/AyPSkWPevmFTlZMW5Rf0wHa ZQ5QqS5wRQGwtiKLm/dCc+hPrVFUD5azDQLoVxvyYpizhXRytoDteLvPv5+isarF AozJOSNjUOSTAku/AIqCbnr75y2PXpkrZ8X+AU8HNYm5KxZbrkfug6BvUdPIwlW3 CuAVpaOfsYbzV8Ce0oW5nB6HIJFoGBsUZOSihUdIitcNq0kJUW7LAQeuswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAtYOAT0GN9dU+A8lSeF09NBb9rMB8GA1UdIwQY MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddMDlElL k1SilZNX1VPNNJJtXyfexjAt267ECsra3JpHQKOYyly7+ldqcnrfR629Rqru51Oo cXL1BqOBP9DfbAkFZKfTW6G9gaimF9mGkUSg8j+L1X3/KtAQ1G3xJ4fkqpjh6gNW 3WBU+WkML9r/CZr/eBPJHCxxwYiCNFoevpQ6P2xHXrvd7SjLR8lQ4azEeoXJBEc2 fGNKGFp2NwjALD2jpYqfmcpkyp3WL78tLJjVsvKuydP2FeJjUz2ZdaWD8s7YvXzM aos0YFU0n9QWaI6umOui6K6gKZNmE38/1Jlt5h2Lt94yF1lUtxt2AkY+LVXbCDho 3kBL+b/lSI+G3g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:51:52 2025 by rpki-client