This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft File: uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json) Hash identifier: jUYi/FbW1zOasmj+X9p/ZeN0Nj998yA8hu6JkFlWuSE= Subject key identifier: 4A:F5:C8:83:03:5E:67:ED:E5:A2:36:40:0F:0A:BA:3D:F3:D6:0D:8A Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B3D23585508ACD3D687ABEC15ED85A658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft Manifest number: 07D8 Signing time: Sat 20 Dec 2025 19:01:25 +0000 Manifest this update: Sat 20 Dec 2025 19:01:25 +0000 Manifest next update: Sun 21 Dec 2025 19:01:25 +0000 Files and hashes: 1: 5iHrYrKlpDn574dcAV5MQF4xHuk.roa (hash: LC6TWEYqS1CZuKzBl6YN/kJ7pyn+QXIpxyQGn5An1+M=) 2: 60kleZPqdy7U3TKImAtI20xiPqk.roa (hash: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=) 3: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (hash: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=) 4: pMp95DzdRf1pgBQsJLmwp0JpeXI.roa (hash: VEU+wyERacx2v3R6jFxKp8QKArrmRvOUh8IhbniFnxs=) 5: prm1qcLxEj8IUMRu09iPaoSnYdU.roa (hash: y3vrxJh+4Vinokejxdf+O8lEIMMBO2XUs2Esa2IWQn0=) 6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: 7qTAmVgoS2pYXFsCLpnJX34nQUfHG5Oi5fSn/FuCpPA=) 7: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (hash: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:58:55:08:ac:d3:d6:87:ab:ec:15:ed:85:a6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Dec 20 19:01:25 2025 GMT Not After : Dec 21 19:01:25 2025 GMT Subject: CN=4af5c883035e67ede5a236400f0aba3df3d60d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:13:51:60:a8:cc:61:84:47:52:00:53:61: e7:f3:b9:4c:d2:65:35:77:11:ea:37:29:26:94:39: 86:4b:63:22:99:90:21:39:92:9f:1f:f5:13:b2:3e: fd:6f:3f:b5:d6:e4:d2:e4:dd:59:c2:d1:b6:fd:5c: 4d:16:be:38:c2:0b:d8:35:11:9c:df:a4:25:6e:17: 25:ff:c1:4f:3d:7f:f7:51:0b:93:b3:ea:45:aa:51: c9:b1:ed:9d:3d:e4:f0:f2:ea:a9:95:06:c0:c1:46: c4:e4:77:30:cd:57:c1:af:3c:36:c1:ae:58:a9:5f: dd:c0:13:0d:d6:c2:4d:dc:36:7c:41:57:f8:cf:27: 38:87:40:5c:6c:a9:c9:7d:60:08:83:1a:3f:4c:df: 69:62:2c:53:bb:9c:00:f0:c0:38:3b:b1:cb:d2:21: f4:5f:ec:e0:ac:a8:51:c3:b9:d6:41:bd:e8:03:56: 63:67:3b:54:ef:56:84:50:58:3e:4b:6f:9b:1b:00: cf:13:62:db:7d:f8:e0:8b:03:63:de:2f:8b:ff:0e: 09:a0:aa:65:fa:a0:cf:51:eb:14:55:97:b9:26:05: cc:e0:a2:fb:ea:d7:71:4b:f7:de:0e:0a:a2:35:de: 95:1d:ea:9f:97:52:05:ba:b6:c1:7f:bc:94:62:72: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:C8:83:03:5E:67:ED:E5:A2:36:40:0F:0A:BA:3D:F3:D6:0D:8A X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cd:4f:5c:a2:73:58:7c:49:5d:36:05:da:50:f1:6a:a2:5c: 66:7f:fb:88:8b:d4:19:e5:42:49:16:e6:8d:0a:45:e4:b7:4e: fb:de:0f:72:3b:55:49:e9:5b:95:8a:1d:5c:59:1e:46:96:77: 55:c1:cf:20:d1:04:99:cf:31:80:2b:49:d3:4b:d9:1c:b2:0f: 29:21:9a:5d:15:87:b6:0c:f0:27:a0:20:a2:ee:a5:48:fc:19: 0d:dd:63:1e:34:46:96:aa:de:30:b2:be:62:a4:6b:21:b3:5c: 80:32:b3:64:ef:f0:0c:38:84:af:b4:dc:86:4c:4d:63:9e:8c: 7e:b2:73:8d:17:81:84:4c:81:df:00:4d:4c:8d:a7:47:42:10: 10:97:9f:60:c8:0e:e2:05:9a:63:6d:56:fa:37:45:8d:5e:69: 1a:78:68:ea:2c:36:a8:66:fb:3e:40:66:11:c2:ee:19:da:0b: 25:63:cc:bc:b6:17:a8:31:3b:4b:ae:85:1f:eb:7b:9e:72:0c: b9:20:e2:ad:9a:42:a9:0f:bc:62:b4:aa:f2:67:65:d4:3a:62: 40:7e:e8:0d:69:bc:cb:93:b4:d7:fb:75:95:b8:c2:c4:91:b2: 9a:0f:f4:da:bc:c8:4d:c0:d3:1f:15:8a:a6:23:03:03:35:66: 5d:38:6a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1hVCKzT1oer7BXthaZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjUxMjIwMTkwMTI1WhcNMjUxMjIxMTkwMTI1WjAzMTEwLwYDVQQD Eyg0YWY1Yzg4MzAzNWU2N2VkZTVhMjM2NDAwZjBhYmEzZGYzZDYwZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBkTUWCozGGER1IAU2Hn87lM0mU1 dxHqNykmlDmGS2MimZAhOZKfH/UTsj79bz+11uTS5N1ZwtG2/VxNFr44wgvYNRGc 36Qlbhcl/8FPPX/3UQuTs+pFqlHJse2dPeTw8uqplQbAwUbE5HcwzVfBrzw2wa5Y qV/dwBMN1sJN3DZ8QVf4zyc4h0BcbKnJfWAIgxo/TN9pYixTu5wA8MA4O7HL0iH0 X+zgrKhRw7nWQb3oA1ZjZztU71aEUFg+S2+bGwDPE2LbffjgiwNj3i+L/w4JoKpl +qDPUesUVZe5JgXM4KL76tdxS/feDgqiNd6VHeqfl1IFurbBf7yUYnKvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr1yIMDXmft5aI2QA8Kuj3z1g2KMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOc1PXKJz WHxJXTYF2lDxaqJcZn/7iIvUGeVCSRbmjQpF5LdO+94PcjtVSelblYodXFkeRpZ3 VcHPINEEmc8xgCtJ00vZHLIPKSGaXRWHtgzwJ6Agou6lSPwZDd1jHjRGlqreMLK+ YqRrIbNcgDKzZO/wDDiEr7TchkxNY56MfrJzjReBhEyB3wBNTI2nR0IQEJefYMgO 4gWaY21W+jdFjV5pGnho6iw2qGb7PkBmEcLuGdoLJWPMvLYXqDE7S66FH+t7nnIM uSDirZpCqQ+8YrSq8mdl1DpiQH7oDWm8y5O01/t1lbjCxJGymg/02rzITcDTHxWK piMDAzVmXThq7g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:58 2025 by rpki-client