This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json) Hash identifier: 065dhokUxSmGsGgxOLuOmYClbCqhu8vcfJjNAX0Ik30= Subject key identifier: 96:E5:91:2A:1D:50:65:E1:DB:0C:C0:6F:5C:DB:1C:70:8C:4E:E6:06 Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Certificate serial: 019B48F0678615F5818B1FA41A4EE4077948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft Manifest number: 06DA Signing time: Tue 23 Dec 2025 02:01:13 +0000 Manifest this update: Tue 23 Dec 2025 02:01:13 +0000 Manifest next update: Wed 24 Dec 2025 02:01:13 +0000 Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=) 2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=) 3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: Wg+pgtv8nHHHhEOELE5fPnrSL88ykeUsPxvIz0ajklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:67:86:15:f5:81:8b:1f:a4:1a:4e:e4:07:79:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Validity Not Before: Dec 23 02:01:13 2025 GMT Not After : Dec 24 02:01:13 2025 GMT Subject: CN=96e5912a1d5065e1db0cc06f5cdb1c708c4ee606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e7:e9:0d:93:c7:d4:63:69:67:57:a1:57:0c: 80:15:b3:a6:a0:d4:90:cd:5f:29:05:08:4a:04:0b: a2:2b:fc:f1:01:7e:0d:db:a6:a1:79:83:42:22:b1: 39:b3:64:7f:28:76:12:f7:78:b5:34:31:55:28:fc: 5e:08:5d:af:1e:29:66:89:22:8f:27:ac:f2:6c:9e: cc:bb:9f:41:19:58:81:08:81:f9:cd:0e:74:c7:44: e2:b6:4a:b9:9d:92:cb:dd:ad:a0:18:9c:5c:0f:6e: 4b:ed:87:af:6b:c5:99:f8:cb:36:8b:a6:44:da:c1: 46:82:a8:b5:5a:5e:b8:9b:fd:eb:3e:6e:b9:f0:55: 92:1b:96:c6:1d:bc:6a:22:34:55:fb:f3:49:4d:ef: 35:75:de:c8:d9:19:f2:74:7a:f8:67:57:08:12:45: a3:1c:7e:87:8d:18:26:70:27:a1:b0:4c:ef:1b:82: 55:fb:48:e9:49:5a:0c:e1:b7:b6:15:b2:71:07:2d: d9:04:80:2a:22:bd:e6:e3:3a:b9:8b:db:ab:51:db: e4:b6:ed:c9:da:22:f9:72:68:a0:66:35:d6:3d:15: 59:4c:49:5e:b5:29:21:33:32:bc:7a:72:9f:01:74: c2:be:4d:3a:1c:7b:90:1d:91:f2:b7:5b:eb:7c:00: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E5:91:2A:1D:50:65:E1:DB:0C:C0:6F:5C:DB:1C:70:8C:4E:E6:06 X509v3 Authority Key Identifier: keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3f:85:5a:35:b3:5c:15:ac:cb:67:6a:ac:f4:1c:d4:0f:03: e7:c3:6f:5d:fa:f0:5d:67:7b:2f:7e:09:10:19:4b:c7:fc:d1: 88:29:bd:05:b9:04:3a:0f:92:bc:04:5d:0c:d7:5d:5a:5d:96: 4f:06:a4:d8:c7:4c:be:80:20:a8:2a:33:40:c0:1c:ad:d2:6a: 17:3c:58:a8:4b:a7:74:35:7e:ae:cc:01:85:7b:15:ef:86:38: 8b:80:68:c1:8e:99:16:bd:a8:b3:ae:77:e1:2d:5f:33:80:f2: c7:b3:83:61:b3:a0:1d:bc:6c:7d:50:2f:7e:be:c2:db:d7:d9: 16:fe:12:46:02:18:93:8a:a2:c9:d7:36:88:2d:f0:b1:87:43: 0c:68:d6:54:fc:a4:31:3e:c9:6d:c5:32:03:0d:c2:8c:82:6a: f7:89:6f:2b:98:be:1c:d6:a3:4d:48:05:4f:c9:68:8a:69:dd: 83:e1:03:ad:20:5b:07:b8:9c:55:88:6b:7d:53:e9:fa:79:58: b0:37:75:e8:8f:d3:55:03:a7:9b:f8:9f:99:65:91:3a:31:5e: ad:f4:92:f9:36:50:53:3c:d9:93:2c:81:f7:23:18:be:f6:fc: 69:1f:fc:da:59:27:24:8b:1f:6c:17:34:33:ae:e6:97:f3:bb: 66:fe:be:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8GeGFfWBix+kGk7kB3lIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl OWQ3MDkwHhcNMjUxMjIzMDIwMTEzWhcNMjUxMjI0MDIwMTEzWjAzMTEwLwYDVQQD Eyg5NmU1OTEyYTFkNTA2NWUxZGIwY2MwNmY1Y2RiMWM3MDhjNGVlNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+efpDZPH1GNpZ1ehVwyAFbOmoNSQ zV8pBQhKBAuiK/zxAX4N26aheYNCIrE5s2R/KHYS93i1NDFVKPxeCF2vHilmiSKP J6zybJ7Mu59BGViBCIH5zQ50x0Titkq5nZLL3a2gGJxcD25L7Yeva8WZ+Ms2i6ZE 2sFGgqi1Wl64m/3rPm658FWSG5bGHbxqIjRV+/NJTe81dd7I2RnydHr4Z1cIEkWj HH6HjRgmcCehsEzvG4JV+0jpSVoM4be2FbJxBy3ZBIAqIr3m4zq5i9urUdvktu3J 2iL5cmigZjXWPRVZTEletSkhMzK8enKfAXTCvk06HHuQHZHyt1vrfADjXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJblkSodUGXh2wzAb1zbHHCMTuYGMB8GA1UdIwQY MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD+FWjWz XBWsy2dqrPQc1A8D58NvXfrwXWd7L34JEBlLx/zRiCm9BbkEOg+SvARdDNddWl2W Twak2MdMvoAgqCozQMAcrdJqFzxYqEundDV+rswBhXsV74Y4i4BowY6ZFr2os653 4S1fM4Dyx7ODYbOgHbxsfVAvfr7C29fZFv4SRgIYk4qiydc2iC3wsYdDDGjWVPyk MT7JbcUyAw3CjIJq94lvK5i+HNajTUgFT8loimndg+EDrSBbB7icVYhrfVPp+nlY sDd16I/TVQOnm/ifmWWROjFerfSS+TZQUzzZkyyB9yMYvvb8aR/82lknJIsfbBc0 M67ml/O7Zv6+VA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:09:46 2025 by rpki-client