This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft File: uKUWv-ySscjHVz_4hNhBaA5veD8.mft (raw, json) Hash identifier: CwVQd/5aI8W/3mkEWgNSGOHZiXv6lIuN3tJewdbn7hE= Subject key identifier: B6:0E:72:6D:0F:79:77:F9:BD:75:A0:75:B4:6F:98:F5:21:89:2C:B5 Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F Certificate issuer: /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f Certificate serial: 019B34C566ED77DCE1B58326697BEF0E14FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft Manifest number: 0249 Signing time: Fri 19 Dec 2025 04:01:50 +0000 Manifest this update: Fri 19 Dec 2025 04:01:50 +0000 Manifest next update: Sat 20 Dec 2025 04:01:50 +0000 Files and hashes: 1: 3y2tjY2wv2hPWo8Jjs9g1G9k2XU.roa (hash: qyjRMAEUAmhHrAhDYNjvXf2jg8IqGPd2UJBcfxCKTEk=) 2: uKUWv-ySscjHVz_4hNhBaA5veD8.crl (hash: +U5ia1ywP+q2/cV/IzoZK8scWlikPaKmzhQK6uejvqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:66:ed:77:dc:e1:b5:83:26:69:7b:ef:0e:14:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f Validity Not Before: Dec 19 04:01:50 2025 GMT Not After : Dec 20 04:01:50 2025 GMT Subject: CN=b60e726d0f7977f9bd75a075b46f98f521892cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:b8:c5:5f:c7:23:fa:80:9b:9f:7a:24:f1: 76:b1:3d:47:d0:99:17:aa:06:8d:9c:68:2a:45:6f: c2:b6:80:f5:e2:7f:5f:70:36:0f:08:02:4b:56:45: f0:b9:e9:2f:6b:75:3b:a3:c7:a4:a8:c6:c4:e3:5f: b1:c1:72:96:2d:cd:0e:c6:e8:c7:9c:e3:43:93:3f: f4:5a:ed:77:16:43:b5:b5:55:1e:07:03:0c:29:85: 83:82:5e:f4:97:28:ec:47:08:2b:7c:64:7a:d5:08: 8d:0a:ac:b7:0e:20:d9:c4:96:bd:03:b3:20:ec:54: cb:f6:21:bd:7f:fd:bf:36:0e:57:64:64:76:c2:fa: 37:ac:1b:a2:5a:d2:46:b6:b6:6a:7e:89:6e:69:54: df:fb:46:26:42:f8:49:5b:d7:e5:7e:d3:0e:63:37: bd:60:2f:6c:ea:c5:bb:63:ee:ae:a6:ac:82:b2:1d: 3c:f5:25:e1:a6:fd:f0:70:f1:1d:89:f8:2e:7b:b8: bb:e8:15:c6:6a:65:0d:42:89:b0:86:56:b1:87:de: 74:5c:b2:4e:5e:ec:ac:37:53:ab:a2:29:92:f3:c0: ae:a4:d3:d6:35:76:1a:dd:43:bb:a8:12:e9:61:2c: fa:e8:85:8c:f4:85:67:77:c5:16:d5:d5:79:7f:46: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0E:72:6D:0F:79:77:F9:BD:75:A0:75:B4:6F:98:F5:21:89:2C:B5 X509v3 Authority Key Identifier: keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b3:58:fc:9b:ff:c4:ac:18:68:dc:45:af:f3:0b:79:22:a3: b4:1a:a7:8b:1b:ec:a6:37:46:78:d2:f6:fc:7b:93:84:e7:74: 72:18:6c:ec:d8:76:4e:22:3d:db:3d:72:36:04:df:c7:be:5e: ee:5f:2f:c2:7a:8f:da:32:7d:f6:82:8c:bc:5d:22:d7:30:cb: e5:1f:45:8d:62:4e:49:f3:21:fe:82:b8:80:96:b5:e6:b6:9a: a3:66:99:bf:6b:41:76:5c:64:80:f6:4b:d4:c3:4f:cf:87:0d: 02:10:de:ba:42:cc:83:10:98:01:8a:92:ab:8b:2f:3f:ab:b2: 5e:32:54:3c:25:9f:25:3c:14:f3:79:b4:f3:a7:e2:39:1d:d8: 16:cc:71:44:f5:98:b8:9d:d8:69:49:24:aa:e8:3a:40:61:54: d1:83:8f:f0:41:86:04:c3:f3:6c:81:e1:72:01:98:99:84:7a: b2:75:fb:69:ca:8c:6a:c8:c7:22:44:ef:43:88:10:ed:7a:e3: f2:60:8c:e6:1d:88:34:5f:88:bb:6e:a9:5e:da:f6:b8:12:e7: a7:4c:b6:22:7c:73:4f:86:cf:2b:b3:11:23:ba:50:65:c0:ae: 50:d7:90:74:2f:56:c5:0f:19:35:a5:3e:2e:a4:9f:a5:98:43: 9b:bd:ee:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xWbtd9zhtYMmaXvvDhT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YTUxNmJmZWM5MmIxYzhjNzU3M2ZmODg0ZDg0MTY4MGU2 Zjc4M2YwHhcNMjUxMjE5MDQwMTUwWhcNMjUxMjIwMDQwMTUwWjAzMTEwLwYDVQQD EyhiNjBlNzI2ZDBmNzk3N2Y5YmQ3NWEwNzViNDZmOThmNTIxODkyY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/+4xV/HI/qAm596JPF2sT1H0JkX qgaNnGgqRW/CtoD14n9fcDYPCAJLVkXwuekva3U7o8ekqMbE41+xwXKWLc0OxujH nONDkz/0Wu13FkO1tVUeBwMMKYWDgl70lyjsRwgrfGR61QiNCqy3DiDZxJa9A7Mg 7FTL9iG9f/2/Ng5XZGR2wvo3rBuiWtJGtrZqfoluaVTf+0YmQvhJW9flftMOYze9 YC9s6sW7Y+6upqyCsh089SXhpv3wcPEdifgue7i76BXGamUNQomwhlaxh950XLJO XuysN1OroimS88CupNPWNXYa3UO7qBLpYSz66IWM9IVnd8UW1dV5f0YBHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYOcm0PeXf5vXWgdbRvmPUhiSy1MB8GA1UdIwQY MBaAFLilFr/skrHIx1c/+ITYQWgOb3g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZmJjMjAtMTM2Ny00ZDY0LWFlMDUt ZTE1MzM5Zjc3MmM1LzEvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81ZmJjMjAtMTM2Ny00ZDY0LWFlMDUtZTE1MzM5Zjc3MmM1 LzEvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7NY/Jv/ xKwYaNxFr/MLeSKjtBqnixvspjdGeNL2/HuThOd0chhs7Nh2TiI92z1yNgTfx75e 7l8vwnqP2jJ99oKMvF0i1zDL5R9FjWJOSfMh/oK4gJa15raao2aZv2tBdlxkgPZL 1MNPz4cNAhDeukLMgxCYAYqSq4svP6uyXjJUPCWfJTwU83m086fiOR3YFsxxRPWY uJ3YaUkkqug6QGFU0YOP8EGGBMPzbIHhcgGYmYR6snX7acqMasjHIkTvQ4gQ7Xrj 8mCM5h2INF+Iu26pXtr2uBLnp0y2InxzT4bPK7MRI7pQZcCuUNeQdC9WxQ8ZNaU+ LqSfpZhDm73u1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:47 2025 by rpki-client