This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft File: uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft (raw, json) Hash identifier: MV/HdtUYAUkqukdnw7A5SV1H+bel966iCuTEjz4/Ot8= Subject key identifier: C5:D3:57:CC:84:CE:15:BA:C1:01:9F:03:4B:B7:38:9F:65:B9:9E:15 Authority key identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C Certificate issuer: /CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c Certificate serial: 019B5AF6A737B2F2822FA0E33C58636257D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft Manifest number: 45 Signing time: Fri 26 Dec 2025 14:01:12 +0000 Manifest this update: Fri 26 Dec 2025 14:01:12 +0000 Manifest next update: Sat 27 Dec 2025 14:01:12 +0000 Files and hashes: 1: CvwfM_6zHhuKo7Rj0K0qaHy79hM.roa (hash: 7Qc+8Z4jv4GQPeDuRi9kM1/JRP0AKNTAWHU28w6X6pA=) 2: uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl (hash: ehSvZQe7wzIeXuCN0yoEut2niiJfT1mOhYX3pVEdrEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:a7:37:b2:f2:82:2f:a0:e3:3c:58:63:62:57:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c Validity Not Before: Dec 26 14:01:12 2025 GMT Not After : Dec 27 14:01:12 2025 GMT Subject: CN=c5d357cc84ce15bac1019f034bb7389f65b99e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:ae:fe:5d:ba:a5:12:bf:a8:5c:92:6b:fb: 1f:b5:82:e4:51:f4:08:26:72:5b:b6:2c:cb:3a:63: 47:3f:1b:d6:9a:5a:4f:78:bd:51:75:e8:7e:6f:bb: a0:69:10:b2:d5:f8:a9:c5:c0:72:c8:db:8f:8a:5b: 6c:09:88:04:49:b9:83:c6:18:85:d2:15:43:56:13: 0c:aa:70:55:fc:ec:ec:b7:ea:d2:22:b9:2a:02:b8: 6c:55:d6:49:70:2e:1b:d9:32:ec:57:5e:60:0d:f3: 9a:3e:c4:68:2e:66:35:0d:b3:ce:43:02:f1:27:f1: 03:8d:27:ac:16:93:35:c7:d3:a1:4b:d2:06:f5:85: 75:0a:03:d5:57:4f:d1:2e:dd:67:68:b0:9b:12:3f: 09:6b:61:e8:e3:b6:07:29:47:da:89:4a:dd:9d:b3: 2a:a1:80:fe:d8:e1:52:ac:31:d5:59:b3:3e:65:2b: 3c:02:db:dc:62:0c:4a:ab:38:31:5e:30:31:eb:63: 94:ca:fa:8e:ce:93:c0:bd:07:39:bf:2e:3e:45:65: 11:bc:c7:9f:f6:41:b4:92:0a:23:78:40:8d:0f:bf: fd:1b:bb:7f:b8:f1:30:83:42:ec:c9:3f:18:80:6a: 42:e1:c8:0a:8d:c5:2d:86:0b:2f:6f:90:5f:f9:98: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D3:57:CC:84:CE:15:BA:C1:01:9F:03:4B:B7:38:9F:65:B9:9E:15 X509v3 Authority Key Identifier: keyid:B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3a:3d:3c:f4:8e:05:fc:db:52:c3:98:e2:db:0b:8f:84:34: 4d:6e:78:1f:e7:3e:51:61:b1:43:fe:eb:33:da:28:d9:7d:c9: 28:e3:cc:4f:09:8c:8f:64:5a:d2:62:ff:67:6a:86:10:96:ea: 81:46:c0:04:e8:c1:67:2b:18:c1:55:68:6e:55:c1:38:9c:b6: 9d:dd:e4:02:ee:aa:a3:19:ce:47:cb:39:12:67:61:ca:4b:99: f6:e6:b6:20:74:2d:07:a5:93:cc:81:0a:00:96:dc:1b:57:89: b1:bc:a2:e4:70:87:01:3e:68:3b:ba:7b:31:69:15:32:52:c7: 3c:16:70:41:b0:50:e3:33:e1:40:42:f9:a0:be:a8:81:ad:e5: d7:39:7d:8d:3d:17:4f:f3:24:96:4f:fa:fa:e9:11:46:83:d0: 67:f8:d2:a1:50:23:d3:8c:f4:c6:f6:b0:7c:a2:97:08:63:03: f9:1b:0e:a1:36:10:7c:7b:6e:a3:12:47:38:bc:80:49:08:5d: d8:b8:84:a9:95:46:04:ec:16:6e:a3:10:92:c1:09:d7:20:f3: 2c:6b:57:30:e8:80:11:8a:06:78:93:94:49:06:70:53:4e:3a: 1d:18:8f:43:6f:6f:ee:cc:fb:3e:85:a0:6e:a0:d5:0c:41:9d: f4:08:d1:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qc3svKCL6DjPFhjYlfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OGQwMzQyY2YzZTcxNGY5YzE1NWE0ZDBkZjc1ZmY5ZmIz ZmY3M2MwHhcNMjUxMjI2MTQwMTEyWhcNMjUxMjI3MTQwMTEyWjAzMTEwLwYDVQQD EyhjNWQzNTdjYzg0Y2UxNWJhYzEwMTlmMDM0YmI3Mzg5ZjY1Yjk5ZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso6u/l26pRK/qFySa/sftYLkUfQI JnJbtizLOmNHPxvWmlpPeL1Rdeh+b7ugaRCy1fipxcByyNuPiltsCYgESbmDxhiF 0hVDVhMMqnBV/Ozst+rSIrkqArhsVdZJcC4b2TLsV15gDfOaPsRoLmY1DbPOQwLx J/EDjSesFpM1x9OhS9IG9YV1CgPVV0/RLt1naLCbEj8Ja2Ho47YHKUfaiUrdnbMq oYD+2OFSrDHVWbM+ZSs8AtvcYgxKqzgxXjAx62OUyvqOzpPAvQc5vy4+RWURvMef 9kG0kgojeECND7/9G7t/uPEwg0LsyT8YgGpC4cgKjcUthgsvb5Bf+ZgYFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXTV8yEzhW6wQGfA0u3OJ9luZ4VMB8GA1UdIwQY MBaAFLiNA0LPPnFPnBVaTQ33X/n7P/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zN2Q3NDYtNWVmOS00Yjc0LWJmNmYt ZmU3MTYyNzFhMmFkLzEvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zN2Q3NDYtNWVmOS00Yjc0LWJmNmYtZmU3MTYyNzFhMmFk LzEvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjo9PPSO BfzbUsOY4tsLj4Q0TW54H+c+UWGxQ/7rM9oo2X3JKOPMTwmMj2Ra0mL/Z2qGEJbq gUbABOjBZysYwVVoblXBOJy2nd3kAu6qoxnOR8s5EmdhykuZ9ua2IHQtB6WTzIEK AJbcG1eJsbyi5HCHAT5oO7p7MWkVMlLHPBZwQbBQ4zPhQEL5oL6oga3l1zl9jT0X T/Mklk/6+ukRRoPQZ/jSoVAj04z0xvawfKKXCGMD+RsOoTYQfHtuoxJHOLyASQhd 2LiEqZVGBOwWbqMQksEJ1yDzLGtXMOiAEYoGeJOUSQZwU046HRiPQ29v7sz7PoWg bqDVDEGd9AjRXg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:18 2025 by rpki-client