This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json) Hash identifier: 24yNHsg/X2kC9+OzfCseVmEKFIncwvmX+pXhYc1PQ2U= Subject key identifier: 92:36:FA:53:0F:8D:B0:3D:A8:39:61:AD:A9:96:D4:D4:3F:4E:9C:2B Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb Certificate serial: 019B1682D847173B661B3CA385F2B54EB7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft Manifest number: 0E05 Signing time: Sat 13 Dec 2025 07:00:32 +0000 Manifest this update: Sat 13 Dec 2025 07:00:32 +0000 Manifest next update: Sun 14 Dec 2025 07:00:32 +0000 Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: nHPfsAlPz6X32B9+LiEbtIVqwOc0FyzHDwjDIoOPDl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:82:d8:47:17:3b:66:1b:3c:a3:85:f2:b5:4e:b7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb Validity Not Before: Dec 13 07:00:32 2025 GMT Not After : Dec 14 07:00:32 2025 GMT Subject: CN=9236fa530f8db03da83961ada996d4d43f4e9c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:55:69:2f:04:0c:79:f9:f6:61:24:43:dc: a2:71:23:d4:19:c8:60:0d:2f:e2:45:db:eb:0a:c2: 45:5c:c7:8e:47:2d:c5:51:39:01:41:f4:12:35:8a: 68:df:37:c3:44:5e:4f:9e:35:3a:cd:b6:c7:27:01: 50:2e:40:88:f7:95:2a:6f:95:6f:dc:b0:8e:0c:80: eb:4c:5e:38:aa:23:cc:c5:ff:42:82:12:b4:b0:75: 01:20:3c:f2:4f:90:3d:88:65:50:bb:26:c5:91:76: ae:f7:7c:2c:74:d8:33:66:b2:98:d9:4c:aa:a0:06: 21:33:ea:07:ee:8c:5c:aa:0e:62:9d:70:9b:a3:00: d1:62:cd:a9:8c:5f:95:00:e9:05:51:29:af:90:d8: 78:2a:64:52:04:6e:3a:56:ff:cf:53:0a:8b:59:bc: 7e:f8:bf:f3:bb:34:ce:c5:c1:a0:1d:6c:48:c5:79: ff:04:ba:88:f3:1e:3e:e7:45:5c:36:f0:93:ba:4c: 92:69:8f:cb:62:81:b7:07:6d:40:54:0b:2a:ce:fb: 59:0c:75:4a:9a:99:07:e8:87:7b:15:1b:a4:56:1c: fd:7e:4c:65:37:34:1c:62:80:4f:57:2e:64:8d:be: 7f:c4:a5:50:2f:38:05:21:cd:38:29:61:87:c8:58: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:FA:53:0F:8D:B0:3D:A8:39:61:AD:A9:96:D4:D4:3F:4E:9C:2B X509v3 Authority Key Identifier: keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c8:f3:74:9f:f8:37:5e:1d:01:89:c1:fd:d4:f9:97:a1:75: 1f:47:76:32:76:ba:1a:36:1d:2e:cc:e2:cb:94:97:4d:fb:ca: 22:b1:fc:06:43:e7:e9:05:01:d4:77:b5:ab:99:74:fa:5b:a3: 46:13:40:b9:b8:54:0c:c7:7a:1f:b2:b3:7c:a3:54:96:1c:64: 45:af:cd:35:31:39:3c:1d:44:3e:12:94:71:ee:07:5c:2f:22: 56:90:7f:49:cc:67:2d:f4:4a:54:37:29:2e:c9:9f:03:e5:b6: 25:43:4d:be:52:b6:ef:73:7d:3c:f8:c2:0d:8e:74:6f:26:10: 14:03:88:3f:81:54:70:d7:4d:67:04:b5:b8:94:5d:46:05:97: d1:39:b9:3a:2e:88:d5:b4:f1:3d:55:69:16:b1:d4:c0:b2:45: 86:f9:e9:75:2c:64:65:8d:8c:d8:df:54:f1:9e:e9:7a:25:9c: 7e:e5:fb:64:3d:ac:e7:00:03:d1:c6:8c:0e:09:cd:7d:1a:27: 93:06:3f:9f:8f:ac:3a:db:07:14:6e:1f:2b:7c:e5:00:b0:fc: 3a:95:04:e1:5c:61:c1:59:6e:2a:e4:96:46:71:fd:8f:21:66: 03:79:5d:91:23:0c:5b:72:5a:32:27:95:19:ab:64:d6:fc:26: 6d:55:42:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWgthHFztmGzyjhfK1TrenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4Yjg2Y2M4NDc4MmVhNDEwYzZkODdjMmNkM2JmODZhMDZh YTE3YmIwHhcNMjUxMjEzMDcwMDMyWhcNMjUxMjE0MDcwMDMyWjAzMTEwLwYDVQQD Eyg5MjM2ZmE1MzBmOGRiMDNkYTgzOTYxYWRhOTk2ZDRkNDNmNGU5YzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLVVaS8EDHn59mEkQ9yicSPUGchg DS/iRdvrCsJFXMeORy3FUTkBQfQSNYpo3zfDRF5PnjU6zbbHJwFQLkCI95Uqb5Vv 3LCODIDrTF44qiPMxf9CghK0sHUBIDzyT5A9iGVQuybFkXau93wsdNgzZrKY2Uyq oAYhM+oH7oxcqg5inXCbowDRYs2pjF+VAOkFUSmvkNh4KmRSBG46Vv/PUwqLWbx+ +L/zuzTOxcGgHWxIxXn/BLqI8x4+50VcNvCTukySaY/LYoG3B21AVAsqzvtZDHVK mpkH6Id7FRukVhz9fkxlNzQcYoBPVy5kjb5/xKVQLzgFIc04KWGHyFiedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI2+lMPjbA9qDlhramW1NQ/TpwrMB8GA1UdIwQY MBaAFLi4bMhHgupBDG2Hws07+GoGqhe7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82MmFkMTktM2U5Zi00N2VjLTllZTct Y2Y1MzFlYzIzMGQ4LzEvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS82MmFkMTktM2U5Zi00N2VjLTllZTctY2Y1MzFlYzIzMGQ4 LzEvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8jzdJ/4 N14dAYnB/dT5l6F1H0d2Mna6GjYdLsziy5SXTfvKIrH8BkPn6QUB1He1q5l0+luj RhNAubhUDMd6H7KzfKNUlhxkRa/NNTE5PB1EPhKUce4HXC8iVpB/ScxnLfRKVDcp LsmfA+W2JUNNvlK273N9PPjCDY50byYQFAOIP4FUcNdNZwS1uJRdRgWX0Tm5Oi6I 1bTxPVVpFrHUwLJFhvnpdSxkZY2M2N9U8Z7peiWcfuX7ZD2s5wAD0caMDgnNfRon kwY/n4+sOtsHFG4fK3zlALD8OpUE4VxhwVluKuSWRnH9jyFmA3ldkSMMW3JaMieV Gatk1vwmbVVCgg== -----END CERTIFICATE-----Generated at Sat Dec 13 14:42:20 2025 by rpki-client