This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json) Hash identifier: NyX+9xNpg2cx6wHlauFEIr/tQE6zDAM5izWOrZjuidU= Subject key identifier: 89:E6:E1:BE:06:71:73:29:64:9F:BE:79:B6:3C:B8:4A:DB:44:C0:2E Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94 Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94 Certificate serial: 019B217545A5CEB90D52E9F5A92C95DDF617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft Manifest number: 0F7A Signing time: Mon 15 Dec 2025 10:01:32 +0000 Manifest this update: Mon 15 Dec 2025 10:01:32 +0000 Manifest next update: Tue 16 Dec 2025 10:01:32 +0000 Files and hashes: 1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=) 2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: cmvonLzd0vVzyt7bfHz+qOK604Du6i9/IekpAeGEjeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:45:a5:ce:b9:0d:52:e9:f5:a9:2c:95:dd:f6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94 Validity Not Before: Dec 15 10:01:32 2025 GMT Not After : Dec 16 10:01:32 2025 GMT Subject: CN=89e6e1be06717329649fbe79b63cb84adb44c02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:97:04:48:6c:43:20:08:7f:d7:33:3e:87: 02:fd:e2:67:61:9b:ad:b9:9f:35:47:af:a8:32:5c: fb:e6:3a:6c:06:dd:31:8a:d5:30:82:5b:65:1b:31: 05:86:44:75:4b:e9:b5:34:9a:c6:2f:02:9c:74:c7: 1f:61:55:5f:23:7a:8a:31:da:2d:8f:59:76:4f:d9: 2e:b7:16:29:14:bb:8e:c6:bf:09:2a:cb:c6:c1:56: 10:6d:05:10:1f:c6:15:f9:90:85:02:ca:06:2a:de: da:70:bd:87:46:85:e6:85:1a:78:49:0e:ec:77:a9: ae:bb:d7:d7:79:d4:fe:b7:43:bd:87:91:b7:ba:6c: ad:18:c9:a4:89:d5:32:22:be:8e:05:06:38:68:8f: 7f:a7:e1:97:7a:1f:58:5c:57:36:62:45:9d:94:65: 6a:e5:19:0e:3a:80:ea:74:3b:a2:dc:d8:74:30:0d: 04:46:60:cf:f6:61:30:88:e0:73:da:28:99:45:8e: 24:a9:89:e7:47:e5:b0:04:a6:4d:34:0d:68:e4:75: 75:f9:f8:88:0e:6b:f1:d0:d9:d2:6f:ff:b5:dd:e7: 26:3f:72:ad:84:16:fe:66:21:7a:c5:3d:d3:a9:9a: c2:ea:c2:a1:4a:c4:eb:e4:de:05:43:4f:93:a5:d8: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E6:E1:BE:06:71:73:29:64:9F:BE:79:B6:3C:B8:4A:DB:44:C0:2E X509v3 Authority Key Identifier: keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:74:13:07:65:d8:d6:27:f8:9e:01:61:4a:ac:ca:81:36:8c: 79:62:1c:fd:0f:0f:93:e5:f0:e4:6b:78:c9:0b:30:96:cb:e7: 4b:72:ad:19:58:e1:ab:7e:5c:fc:99:d9:26:7e:03:80:47:08: e3:57:dc:b6:c5:2b:8a:21:22:27:1a:ef:73:6f:8a:a6:ce:bc: 79:fa:c8:6b:28:b1:35:28:04:44:74:f0:02:42:7f:9f:12:99: 7b:fc:96:5e:78:e8:67:a4:3a:34:81:23:e4:d2:48:9e:a1:8b: 89:ee:f3:3c:c0:c7:b7:b8:46:c9:16:ab:a4:b8:20:94:b5:7e: f0:6b:1f:c5:9d:5e:d1:39:ce:e0:68:eb:b5:85:5b:d7:47:5f: f5:5b:1a:0f:2d:e6:62:eb:8a:8a:09:78:ba:68:6d:6e:34:be: 55:59:be:fd:33:f0:2e:26:07:c5:a3:46:8e:5b:24:68:76:12: a7:89:c3:73:2b:b2:7e:df:29:25:32:cf:b3:f2:bb:b9:06:2c: be:bf:13:41:50:1f:51:00:79:79:42:ad:6f:4f:58:03:24:79: 06:6d:17:f9:d9:a9:58:9c:d6:a2:b1:a7:fd:fa:a9:7a:ed:af: 3b:65:86:0d:b3:79:72:d1:77:fa:18:44:04:35:7f:76:0e:75: 9b:9f:9d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdUWlzrkNUun1qSyV3fYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDFjMzMwOTRhMDk5MjJjMGExMDQ4NmQyMWRmNTU4OTY3 NWJjOTQwHhcNMjUxMjE1MTAwMTMyWhcNMjUxMjE2MTAwMTMyWjAzMTEwLwYDVQQD Eyg4OWU2ZTFiZTA2NzE3MzI5NjQ5ZmJlNzliNjNjYjg0YWRiNDRjMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+yXBEhsQyAIf9czPocC/eJnYZut uZ81R6+oMlz75jpsBt0xitUwgltlGzEFhkR1S+m1NJrGLwKcdMcfYVVfI3qKMdot j1l2T9kutxYpFLuOxr8JKsvGwVYQbQUQH8YV+ZCFAsoGKt7acL2HRoXmhRp4SQ7s d6muu9fXedT+t0O9h5G3umytGMmkidUyIr6OBQY4aI9/p+GXeh9YXFc2YkWdlGVq 5RkOOoDqdDui3Nh0MA0ERmDP9mEwiOBz2iiZRY4kqYnnR+WwBKZNNA1o5HV1+fiI Dmvx0NnSb/+13ecmP3KthBb+ZiF6xT3TqZrC6sKhSsTr5N4FQ0+TpdinoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInm4b4GcXMpZJ++ebY8uErbRMAuMB8GA1UdIwQY MBaAFLgBwzCUoJkiwKEEhtId9ViWdbyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEt M2M4NjI3ZDk3ODhkLzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEtM2M4NjI3ZDk3ODhk LzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHQTB2XY 1if4ngFhSqzKgTaMeWIc/Q8Pk+Xw5Gt4yQswlsvnS3KtGVjhq35c/JnZJn4DgEcI 41fctsUriiEiJxrvc2+Kps68efrIayixNSgERHTwAkJ/nxKZe/yWXnjoZ6Q6NIEj 5NJInqGLie7zPMDHt7hGyRarpLgglLV+8GsfxZ1e0TnO4GjrtYVb10df9VsaDy3m YuuKigl4umhtbjS+VVm+/TPwLiYHxaNGjlskaHYSp4nDcyuyft8pJTLPs/K7uQYs vr8TQVAfUQB5eUKtb09YAyR5Bm0X+dmpWJzWorGn/fqpeu2vO2WGDbN5ctF3+hhE BDV/dg51m5+dhg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:25 2025 by rpki-client