This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json) Hash identifier: +4n8OSILmyIKdRLgFvy0ASQZLcUz4DiEwsdfgEI2ijA= Subject key identifier: F1:81:BB:77:CD:A3:CB:B3:E7:B1:44:B5:9E:74:E6:11:7B:26:44:6B Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2 Certificate serial: 019B2251109C343E6FDAB1D6D1F4A5359492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft Manifest number: 0F85 Signing time: Mon 15 Dec 2025 14:01:36 +0000 Manifest this update: Mon 15 Dec 2025 14:01:36 +0000 Manifest next update: Tue 16 Dec 2025 14:01:36 +0000 Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=) 2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=) 3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=) 4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: XpMN8xn1LbCD8joo/e0g60pA8PjG5+zgn3HmEtFZjbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:10:9c:34:3e:6f:da:b1:d6:d1:f4:a5:35:94:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2 Validity Not Before: Dec 15 14:01:36 2025 GMT Not After : Dec 16 14:01:36 2025 GMT Subject: CN=f181bb77cda3cbb3e7b144b59e74e6117b26446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:0d:4b:02:51:4b:25:10:0f:4b:b1:52:2e: 70:8a:42:7d:41:b0:2f:92:e7:08:70:27:b3:24:74: ad:0d:d2:16:9a:40:63:9f:63:b9:8d:b0:65:c8:ef: fc:ca:5f:1d:ad:56:82:88:20:0c:89:3a:01:4b:45: fd:2e:35:e0:ff:82:ba:4d:5f:3f:80:1a:6d:2d:8a: c9:fa:f6:e9:7f:6f:01:46:05:81:d5:00:8d:1b:d7: fb:7f:be:bf:dc:af:c6:0f:eb:76:8b:10:4e:20:5d: a4:d2:6b:c1:55:ca:4f:8a:f1:df:3d:2c:b1:db:61: 17:51:be:c6:89:b1:a0:9b:b7:75:4b:4f:19:24:79: 84:0d:12:a0:e4:1f:f7:e7:8e:c9:71:3a:15:fc:cf: 9a:4d:a5:dd:8d:96:d5:44:08:64:60:71:75:54:16: ef:1d:56:61:d0:b8:e4:11:2e:60:75:df:ad:2d:c2: 43:a6:a3:a1:53:e7:c8:77:16:c5:0d:dc:75:bd:f8: e2:68:a1:81:65:49:c0:f3:4b:d8:f2:8a:81:e4:dd: 15:20:24:97:97:cd:ba:6a:76:c4:25:38:07:f4:2a: af:4e:a1:a9:a6:99:91:1a:a4:83:83:8c:0b:74:ac: 14:50:ae:ae:3e:94:fc:52:0b:a4:f7:7e:6e:47:47: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:81:BB:77:CD:A3:CB:B3:E7:B1:44:B5:9E:74:E6:11:7B:26:44:6B X509v3 Authority Key Identifier: keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0c:66:10:c5:f1:30:a7:91:9c:93:44:2c:84:2c:01:ac:40: f3:d5:c3:06:5b:55:61:6f:81:28:2f:37:9d:d3:10:74:97:9e: 42:fa:c0:c6:c0:be:8b:67:4b:89:60:e2:21:b1:7e:4b:29:75: d4:3b:72:fb:c9:41:79:aa:cb:50:1c:93:3b:63:d2:a5:bc:95: 5b:58:b7:54:0d:12:09:4f:a6:47:3d:e3:1b:f1:ac:a1:90:ff: 89:c9:b9:11:7a:cf:b0:9e:81:79:ac:40:42:08:d6:7b:d8:85: 55:9c:bb:db:9b:d2:98:15:18:2e:23:e4:44:c4:1a:49:90:b5: 6f:1a:b2:a3:bb:93:fd:7c:31:54:c0:68:46:90:a0:62:fc:1f: 59:ac:aa:2b:f4:7b:9a:f0:cf:c1:5a:8c:3e:ca:d5:93:50:c5: 03:7b:08:4d:e0:46:91:c9:bc:d0:96:1a:3c:8d:a8:22:2b:65: ee:a9:46:9f:67:a3:3f:ac:69:01:1f:8f:7e:bf:7e:9b:2d:1b: 33:b4:04:1f:6c:07:b5:6d:0b:37:b5:67:fb:81:ef:31:c6:d2: 20:dc:18:c5:8d:15:7a:4c:b2:9c:88:45:f9:69:93:e8:ee:6b: 12:df:c7:30:0a:e3:9d:74:6c:79:40:09:c6:00:d5:38:94:34: 05:76:91:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiURCcND5v2rHW0fSlNZSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi OTNjYzIwHhcNMjUxMjE1MTQwMTM2WhcNMjUxMjE2MTQwMTM2WjAzMTEwLwYDVQQD EyhmMTgxYmI3N2NkYTNjYmIzZTdiMTQ0YjU5ZTc0ZTYxMTdiMjY0NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06sNSwJRSyUQD0uxUi5wikJ9QbAv kucIcCezJHStDdIWmkBjn2O5jbBlyO/8yl8drVaCiCAMiToBS0X9LjXg/4K6TV8/ gBptLYrJ+vbpf28BRgWB1QCNG9f7f76/3K/GD+t2ixBOIF2k0mvBVcpPivHfPSyx 22EXUb7GibGgm7d1S08ZJHmEDRKg5B/3547JcToV/M+aTaXdjZbVRAhkYHF1VBbv HVZh0LjkES5gdd+tLcJDpqOhU+fIdxbFDdx1vfjiaKGBZUnA80vY8oqB5N0VICSX l826anbEJTgH9CqvTqGpppmRGqSDg4wLdKwUUK6uPpT8Uguk935uR0fUiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGBu3fNo8uz57FEtZ505hF7JkRrMB8GA1UdIwQY MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et ZmYwNWQ0NDZlN2ZkLzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2EtZmYwNWQ0NDZlN2Zk LzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAxmEMXx MKeRnJNELIQsAaxA89XDBltVYW+BKC83ndMQdJeeQvrAxsC+i2dLiWDiIbF+Syl1 1Dty+8lBearLUByTO2PSpbyVW1i3VA0SCU+mRz3jG/GsoZD/icm5EXrPsJ6BeaxA QgjWe9iFVZy725vSmBUYLiPkRMQaSZC1bxqyo7uT/XwxVMBoRpCgYvwfWayqK/R7 mvDPwVqMPsrVk1DFA3sITeBGkcm80JYaPI2oIitl7qlGn2ejP6xpAR+Pfr9+my0b M7QEH2wHtW0LN7Vn+4HvMcbSINwYxY0VekyynIhF+WmT6O5rEt/HMArjnXRseUAJ xgDVOJQ0BXaRKQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:36:22 2025 by rpki-client