This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json) Hash identifier: dIx7eqKyVfXuZBVRFHXIRuQYRaJrG/r4DNI0wPmNSGk= Subject key identifier: CE:61:C6:0E:14:7F:CD:F3:A6:44:2B:0E:CF:C9:96:7E:5F:B1:4A:92 Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76 Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376 Certificate serial: 019B3E6C1FC01AFEBCE512C29A8544C26B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft Manifest number: 1786 Signing time: Sun 21 Dec 2025 01:00:31 +0000 Manifest this update: Sun 21 Dec 2025 01:00:31 +0000 Manifest next update: Mon 22 Dec 2025 01:00:31 +0000 Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: WSHYy0OOmVgyC9CfLSwlLsxxanj7l97YXR0IZsWKeho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:1f:c0:1a:fe:bc:e5:12:c2:9a:85:44:c2:6b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376 Validity Not Before: Dec 21 01:00:31 2025 GMT Not After : Dec 22 01:00:31 2025 GMT Subject: CN=ce61c60e147fcdf3a6442b0ecfc9967e5fb14a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:85:c7:00:29:fc:f8:7f:75:bf:97:b3:ad: bb:3d:01:04:2c:2f:fc:b5:a9:e3:d0:87:e0:d5:3d: 8f:35:8b:1f:b3:94:ea:49:26:32:de:cf:9a:fd:73: 9a:8c:3f:ee:ba:43:2c:1e:df:1d:b7:ae:d6:56:b2: 33:d4:63:dd:b2:ee:b0:cd:10:c5:2c:40:30:04:37: 45:b5:50:96:a4:98:50:97:d2:17:c6:79:1a:49:2e: c1:ba:d7:3e:42:ac:07:03:68:b3:cf:51:22:1d:fd: a1:c5:35:71:f9:77:3a:a0:e6:43:07:13:26:c1:86: 12:12:0d:0e:f9:f0:de:8d:bf:c5:2d:8c:71:dc:b6: d2:42:11:64:2f:fe:44:97:2a:4e:fc:b0:97:17:45: 46:b2:a9:fe:55:e3:59:f3:21:92:7d:d2:5e:9b:ef: e4:4f:c9:b4:0e:e8:a8:7e:12:c3:3a:a8:3f:16:f9: e9:c5:79:06:0d:11:09:6b:5d:e1:2e:95:b7:21:a1: 2f:f8:5f:a9:3d:54:86:d4:79:5f:2b:5d:be:45:eb: 68:a9:a0:16:d6:b3:e0:a8:ef:ca:ce:99:19:40:06: a4:98:7c:f5:6c:96:1c:e9:c4:76:8e:8c:bb:19:36: 11:fa:11:4f:f6:a8:42:e4:47:7b:c4:6d:40:92:92: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:C6:0E:14:7F:CD:F3:A6:44:2B:0E:CF:C9:96:7E:5F:B1:4A:92 X509v3 Authority Key Identifier: keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fe:32:1c:01:c7:8f:26:60:0c:f5:cb:d7:e6:26:6c:6d:85: 4f:fe:e3:9d:ca:18:53:88:c4:00:46:60:44:95:10:d6:72:90: ba:61:4b:2c:7c:ee:c7:39:8d:54:fc:d4:69:4a:09:5e:29:c9: 1f:c5:fe:3e:ea:bb:53:b2:04:50:60:11:10:75:72:bd:13:1b: 18:fd:e0:06:62:e6:94:6f:3c:5b:a3:7b:34:7c:34:4f:51:8d: a1:b4:f4:d8:94:8d:0b:b4:10:ab:9f:8a:0f:05:19:75:ce:b9: 60:d7:d5:00:b7:59:01:01:0c:4c:4f:af:55:7b:04:5a:20:38: 9e:14:73:6f:1f:3e:ad:85:e1:70:d9:c4:91:01:c7:04:f4:4c: 5b:f0:6a:fa:c6:0b:e5:f6:96:9d:e1:14:98:4c:a0:fe:2d:fd: b4:86:de:ca:e0:8d:e6:76:74:ee:ea:f1:f4:79:24:40:0b:f2: e9:6c:7d:80:51:80:b2:04:0f:03:02:20:37:27:aa:f9:de:44: 93:da:00:69:ab:54:84:13:d5:f7:55:24:c2:87:20:d4:e0:80: 99:3f:c1:f9:d7:63:5f:97:ea:2c:08:c3:20:30:f8:77:62:6f: 58:18:92:33:44:63:6f:5b:5d:37:20:11:09:8e:bb:53:e2:2e: a1:fc:44:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bB/AGv685RLCmoVEwmtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZWIyYzk5YjhjYTY4NWEyYTUzODU4ODE0MWRiMWM0YjY0 MWQzNzYwHhcNMjUxMjIxMDEwMDMxWhcNMjUxMjIyMDEwMDMxWjAzMTEwLwYDVQQD EyhjZTYxYzYwZTE0N2ZjZGYzYTY0NDJiMGVjZmM5OTY3ZTVmYjE0YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7iFxwAp/Ph/db+Xs627PQEELC/8 tanj0Ifg1T2PNYsfs5TqSSYy3s+a/XOajD/uukMsHt8dt67WVrIz1GPdsu6wzRDF LEAwBDdFtVCWpJhQl9IXxnkaSS7Butc+QqwHA2izz1EiHf2hxTVx+Xc6oOZDBxMm wYYSEg0O+fDejb/FLYxx3LbSQhFkL/5ElypO/LCXF0VGsqn+VeNZ8yGSfdJem+/k T8m0DuiofhLDOqg/FvnpxXkGDREJa13hLpW3IaEv+F+pPVSG1HlfK12+RetoqaAW 1rPgqO/KzpkZQAakmHz1bJYc6cR2joy7GTYR+hFP9qhC5Ed7xG1AkpJh5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5hxg4Uf83zpkQrDs/Jln5fsUqSMB8GA1UdIwQY MBaAFLjrLJm4ymhaKlOFiBQdscS2QdN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2Mt YWI2ZDBjMjEzZmRjLzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2MtYWI2ZDBjMjEzZmRj LzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf4yHAHH jyZgDPXL1+YmbG2FT/7jncoYU4jEAEZgRJUQ1nKQumFLLHzuxzmNVPzUaUoJXinJ H8X+Puq7U7IEUGAREHVyvRMbGP3gBmLmlG88W6N7NHw0T1GNobT02JSNC7QQq5+K DwUZdc65YNfVALdZAQEMTE+vVXsEWiA4nhRzbx8+rYXhcNnEkQHHBPRMW/Bq+sYL 5faWneEUmEyg/i39tIbeyuCN5nZ07urx9HkkQAvy6Wx9gFGAsgQPAwIgNyeq+d5E k9oAaatUhBPV91Ukwocg1OCAmT/B+ddjX5fqLAjDIDD4d2JvWBiSM0Rjb1tdNyAR CY67U+IuofxEIw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:43:36 2025 by rpki-client