This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json) Hash identifier: /ISkz0PYzqOlr6MARO/ff3VGJ847rWgpAfqlJn42HpM= Subject key identifier: BA:1D:7A:58:86:CF:35:57:27:0F:36:54:63:4F:94:24:67:65:E8:C7 Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80 Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80 Certificate serial: 019B0ECA1B1A5CEE34C5F5A137015B8D5232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 19:01:24 +0000 Manifest this update: Thu 11 Dec 2025 19:01:24 +0000 Manifest next update: Fri 12 Dec 2025 19:01:24 +0000 Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=) 2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: rJcHhMkiRHfxrsrGJ+aqIxDWvM+4WSLwGkenrXRbcpM=) 3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:1b:1a:5c:ee:34:c5:f5:a1:37:01:5b:8d:52:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80 Validity Not Before: Dec 11 19:01:24 2025 GMT Not After : Dec 12 19:01:24 2025 GMT Subject: CN=ba1d7a5886cf3557270f3654634f94246765e8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:ca:ec:8f:c8:2d:0e:a2:93:4c:a9:1e:6b: 0b:11:80:5b:6b:b2:f6:1a:a2:7e:1c:dd:96:ae:7f: 38:71:fe:17:e3:7f:4c:69:be:75:9e:5d:0f:cf:8e: 84:03:6d:8e:c5:b1:ee:53:c2:a8:0c:f3:17:0f:65: 73:38:ec:54:19:0f:a2:77:73:ee:55:07:f2:4d:57: ec:73:a8:ea:77:71:4c:af:f7:09:ce:fd:e2:9b:80: 9e:d3:0a:df:f7:0f:86:76:f7:db:c9:ce:52:aa:ea: 78:ec:35:ad:c8:0c:3f:7e:37:56:14:c4:d1:f7:d6: 76:09:3a:87:13:1a:53:28:d9:9f:2e:e0:b4:3c:93: f8:b1:d1:a5:e7:00:54:56:50:08:16:e3:39:74:cc: 59:37:61:ee:03:21:6f:43:f7:ec:61:04:2c:56:29: 56:63:1c:0f:cf:19:f3:9e:c6:12:37:f2:6e:c4:f2: 1a:0f:92:5c:44:fc:c8:d4:0e:2f:24:6d:30:ce:51: 36:69:d3:4b:8b:19:64:30:ba:9b:4e:e9:ae:9e:7d: fd:f9:a4:9e:b1:4a:61:98:2f:47:0b:d2:86:d6:f5: 68:30:ad:4f:e7:5d:07:34:1c:14:e5:db:86:6d:25: 2e:4a:ab:bc:86:5a:78:66:02:c7:b2:19:9d:9b:fc: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:7A:58:86:CF:35:57:27:0F:36:54:63:4F:94:24:67:65:E8:C7 X509v3 Authority Key Identifier: keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3e:23:dc:8f:56:9a:cb:f3:47:97:8a:30:7c:50:d7:2b:08: 8c:31:34:9f:f8:71:f6:99:d1:af:df:d4:d5:dd:d5:ad:b8:42: e8:15:e5:64:d8:f2:c0:40:d2:47:a1:7f:57:1b:45:44:91:4c: 21:76:25:23:2e:0a:83:1c:26:8c:41:f4:4e:26:96:0f:44:97: 70:c3:57:ef:94:b2:bf:3d:de:43:29:99:86:34:83:fb:fc:58: 9d:96:91:65:f2:ab:69:d3:17:19:7e:65:fd:ad:c8:45:a7:6e: 6e:36:34:73:f7:bf:9a:9d:97:a8:3d:5d:8f:dd:50:42:fe:f5: 0e:7a:b0:70:e7:d7:02:0d:31:f5:e8:d5:be:0a:72:c6:c7:c0: c2:b7:1c:82:57:00:76:74:4d:88:0f:62:c8:21:94:d4:15:47: b3:db:09:aa:eb:b5:40:5f:2b:84:2b:2b:86:13:8c:2e:18:59: ec:e7:1f:38:42:e2:e0:70:84:42:c9:55:b1:a3:2d:57:17:6c: 42:36:67:5a:05:ea:d7:7f:13:20:b3:6d:a5:71:55:03:c5:49: 4f:2b:7e:75:f8:69:55:3f:5b:f9:d9:67:82:70:98:54:32:27: b0:7f:7e:ea:0c:f4:e2:c4:36:a6:f0:8c:b8:f2:0f:68:5f:d3: e8:6c:2d:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyhsaXO40xfWhNwFbjVIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZjRiZTQxMDU0ZWFmNzg3ZWFhMzgzM2ZmY2FlOGYxZWQ3 ZmFhODAwHhcNMjUxMjExMTkwMTI0WhcNMjUxMjEyMTkwMTI0WjAzMTEwLwYDVQQD EyhiYTFkN2E1ODg2Y2YzNTU3MjcwZjM2NTQ2MzRmOTQyNDY3NjVlOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G/K7I/ILQ6ik0ypHmsLEYBba7L2 GqJ+HN2Wrn84cf4X439Mab51nl0Pz46EA22OxbHuU8KoDPMXD2VzOOxUGQ+id3Pu VQfyTVfsc6jqd3FMr/cJzv3im4Ce0wrf9w+Gdvfbyc5Squp47DWtyAw/fjdWFMTR 99Z2CTqHExpTKNmfLuC0PJP4sdGl5wBUVlAIFuM5dMxZN2HuAyFvQ/fsYQQsVilW YxwPzxnznsYSN/JuxPIaD5JcRPzI1A4vJG0wzlE2adNLixlkMLqbTumunn39+aSe sUphmC9HC9KG1vVoMK1P510HNBwU5duGbSUuSqu8hlp4ZgLHshmdm/wzdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLodeliGzzVXJw82VGNPlCRnZejHMB8GA1UdIwQY MBaAFLj0vkEFTq94fqo4M//K6PHtf6qAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2Mt NzFjZDZhZjA3MmE1LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2MtNzFjZDZhZjA3MmE1 LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj4j3I9W msvzR5eKMHxQ1ysIjDE0n/hx9pnRr9/U1d3VrbhC6BXlZNjywEDSR6F/VxtFRJFM IXYlIy4KgxwmjEH0TiaWD0SXcMNX75Syvz3eQymZhjSD+/xYnZaRZfKradMXGX5l /a3IRadubjY0c/e/mp2XqD1dj91QQv71DnqwcOfXAg0x9ejVvgpyxsfAwrccglcA dnRNiA9iyCGU1BVHs9sJquu1QF8rhCsrhhOMLhhZ7OcfOELi4HCEQslVsaMtVxds QjZnWgXq138TILNtpXFVA8VJTyt+dfhpVT9b+dlngnCYVDInsH9+6gz04sQ2pvCM uPIPaF/T6GwtfA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:22:12 2025 by rpki-client