This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft File: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json) Hash identifier: 8lkomc5mGNh3jG5l8QfdKyV/+rRWyOCtUCbkn98I8UA= Subject key identifier: F8:CE:9D:EF:95:D6:7F:09:9F:FB:D3:C3:0E:76:CA:4A:C5:44:78:FF Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44 Certificate issuer: /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244 Certificate serial: 019B5A1AE77F4BE121C417E61CC07FCE07B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft Manifest number: 06F3 Signing time: Fri 26 Dec 2025 10:01:11 +0000 Manifest this update: Fri 26 Dec 2025 10:01:11 +0000 Manifest next update: Sat 27 Dec 2025 10:01:11 +0000 Files and hashes: 1: oXndQEWLAi93Q3gStogUAMhpojg.roa (hash: 3yyWwrPlKu/PVm4mmaMjgKzNXRTuMyz0HTS/+PODjNA=) 2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: uv/4DaaZu39xPfZusLk/VnyC1m/m06DCzu4tJjCLuiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:e7:7f:4b:e1:21:c4:17:e6:1c:c0:7f:ce:07:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244 Validity Not Before: Dec 26 10:01:11 2025 GMT Not After : Dec 27 10:01:11 2025 GMT Subject: CN=f8ce9def95d67f099ffbd3c30e76ca4ac54478ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:2e:4b:3b:38:43:9a:17:75:40:4d:17:71: d5:ef:55:db:4c:d1:a3:d4:7f:93:15:e4:31:a1:73: 4a:d8:58:05:4a:08:81:ce:ab:3a:24:5d:65:60:04: b7:4a:9a:d1:12:04:7b:dc:f5:e0:89:6c:d9:20:04: 4c:37:d9:5b:f0:82:e7:92:5c:8b:07:03:d4:8f:10: 10:6b:68:09:3b:61:60:fe:fb:80:40:a9:75:5c:2d: 40:17:08:1a:a4:6d:01:48:8e:cd:5c:5a:27:2b:a4: 2d:fd:f9:f2:ab:d9:86:27:f2:6c:3e:bd:0e:0b:96: 48:94:a6:87:d2:51:cb:94:43:80:85:37:5f:a1:87: 02:c8:22:30:d0:0f:80:4c:d4:35:f4:6b:6b:0d:27: 7f:3d:61:be:fa:67:c2:ee:8c:86:7b:0a:a3:e3:90: 15:4f:97:fd:34:57:df:3d:bc:c5:50:ab:29:f5:33: 8d:b1:29:e2:86:85:12:df:84:19:4e:2e:8c:4e:9c: 4c:22:51:36:2b:65:0d:c5:28:7b:f6:15:89:ab:a9: ea:7d:b2:52:4a:d9:31:e5:70:80:da:37:b8:ab:ec: 15:ab:eb:71:d9:c7:60:bc:d6:1d:6e:21:36:8a:29: af:8b:c2:13:6b:03:47:fc:4d:c8:0f:86:31:a0:19: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:9D:EF:95:D6:7F:09:9F:FB:D3:C3:0E:76:CA:4A:C5:44:78:FF X509v3 Authority Key Identifier: keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:b2:a4:ae:a7:9a:41:73:1a:8e:40:33:cd:71:df:9c:a3:64: 71:8c:25:3c:39:1b:8f:7a:a2:93:e3:a6:9c:ad:a8:65:de:12: c9:09:ae:3c:90:8f:9b:16:bc:8e:e5:ba:a7:54:3d:50:f6:73: 67:7b:61:42:59:7c:a8:ac:b1:a9:23:50:6c:79:03:b7:6d:f3: 4d:69:54:2b:59:e7:e2:6f:18:1d:83:c5:2c:3c:6c:6f:4d:21: 16:06:87:e7:9e:de:d4:ba:86:df:14:71:05:f4:cc:53:6a:6d: 5f:2a:ad:3e:5e:49:65:84:0d:9d:a9:2c:4a:a8:e1:b5:b2:8f: 7c:69:8b:b4:d2:b7:50:d7:55:18:b3:ee:61:01:b0:5e:df:79: c4:3f:80:19:fe:e6:d2:26:18:23:39:2a:b4:c4:bd:7a:14:18: 5b:1b:67:af:08:72:8d:b5:40:d2:93:e9:ce:e4:11:d4:e7:1a: 92:87:bb:6a:d4:ab:46:e2:d9:6b:08:5f:14:46:30:e7:07:ec: 8f:64:4f:4d:d0:c0:44:4e:56:f8:48:0d:83:79:fa:37:d0:19: 44:bd:65:a9:16:4c:13:8d:b3:d2:3e:a0:fe:fa:97:7b:b5:fc: 37:a6:92:4c:5d:ad:82:d4:9f:03:0a:a6:b3:13:c8:2c:27:ca: b0:c3:2b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGud/S+EhxBfmHMB/zge0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDYxOTg3ZDAwMGQ4ZTYxODg1NGNlNGUzZmY4MTlmZjhm NGQyNDQwHhcNMjUxMjI2MTAwMTExWhcNMjUxMjI3MTAwMTExWjAzMTEwLwYDVQQD EyhmOGNlOWRlZjk1ZDY3ZjA5OWZmYmQzYzMwZTc2Y2E0YWM1NDQ3OGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxwuSzs4Q5oXdUBNF3HV71XbTNGj 1H+TFeQxoXNK2FgFSgiBzqs6JF1lYAS3SprREgR73PXgiWzZIARMN9lb8ILnklyL BwPUjxAQa2gJO2Fg/vuAQKl1XC1AFwgapG0BSI7NXFonK6Qt/fnyq9mGJ/JsPr0O C5ZIlKaH0lHLlEOAhTdfoYcCyCIw0A+ATNQ19GtrDSd/PWG++mfC7oyGewqj45AV T5f9NFffPbzFUKsp9TONsSnihoUS34QZTi6MTpxMIlE2K2UNxSh79hWJq6nqfbJS Stkx5XCA2je4q+wVq+tx2cdgvNYdbiE2iimvi8ITawNH/E3ID4YxoBnUKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjOne+V1n8Jn/vTww52ykrFRHj/MB8GA1UdIwQY MBaAFLlGGYfQANjmGIVM5OP/gZ/49NJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWIt YWUxNzk5YTNkOTE0LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWItYWUxNzk5YTNkOTE0 LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bKkrqea QXMajkAzzXHfnKNkcYwlPDkbj3qik+OmnK2oZd4SyQmuPJCPmxa8juW6p1Q9UPZz Z3thQll8qKyxqSNQbHkDt23zTWlUK1nn4m8YHYPFLDxsb00hFgaH557e1LqG3xRx BfTMU2ptXyqtPl5JZYQNnaksSqjhtbKPfGmLtNK3UNdVGLPuYQGwXt95xD+AGf7m 0iYYIzkqtMS9ehQYWxtnrwhyjbVA0pPpzuQR1Ocakoe7atSrRuLZawhfFEYw5wfs j2RPTdDARE5W+EgNg3n6N9AZRL1lqRZME42z0j6g/vqXe7X8N6aSTF2tgtSfAwqm sxPILCfKsMMrNA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:00 2025 by rpki-client