This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json) Hash identifier: WDn2RG1Dab/zE/72HQPQE2AcLm68DwgKpk3zXmyaI34= Subject key identifier: 41:6C:30:63:FE:B3:76:F0:D7:D3:86:1B:5A:B9:81:5F:7A:F7:39:D2 Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Certificate serial: 019B36EA0FD9F687AC4F4D24EE7CC7BDD312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft Manifest number: 0FFA Signing time: Fri 19 Dec 2025 14:01:07 +0000 Manifest this update: Fri 19 Dec 2025 14:01:07 +0000 Manifest next update: Sat 20 Dec 2025 14:01:07 +0000 Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=) 2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=) 3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: TNcD++Sz58RCCqEEYsNE3wFyl6AFmnJe47I15AKsbH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:0f:d9:f6:87:ac:4f:4d:24:ee:7c:c7:bd:d3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Validity Not Before: Dec 19 14:01:07 2025 GMT Not After : Dec 20 14:01:07 2025 GMT Subject: CN=416c3063feb376f0d7d3861b5ab9815f7af739d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:13:25:2a:31:6e:6d:32:da:52:ca:72:ad: a0:ad:8d:8b:52:5a:46:21:a7:be:37:7e:84:64:78: e0:ec:62:20:e6:37:68:e5:6f:43:4f:1f:4f:13:48: bd:fe:65:0c:cf:f2:54:2d:71:70:23:e3:db:a0:55: 1b:ed:12:c3:d7:bd:c5:d9:a6:14:f1:8c:55:40:44: 7a:74:94:77:6f:b9:6a:6d:07:88:de:4d:3d:7f:8c: c2:10:72:0d:a7:b6:22:95:9e:ad:dc:13:ef:ba:64: 8b:88:67:e6:68:69:3e:dc:7a:1a:26:b2:7f:8e:8d: 3e:dd:bc:46:3d:45:48:24:cf:7c:c4:2d:49:cf:b3: 67:a6:4f:51:ba:5b:ba:c2:88:dc:e5:12:f0:67:d8: be:5d:db:30:57:e8:2e:17:af:cb:65:9d:2c:f8:20: 0d:d4:fb:f5:77:22:e8:ac:cd:85:d8:18:b1:18:7f: 97:7a:77:a4:dd:88:43:0c:99:62:e5:1e:63:a1:5b: e8:44:ba:c4:81:37:2e:c2:80:6f:e4:0a:15:f3:71: df:52:7a:11:88:4d:21:48:e1:30:c8:bb:8a:56:b8: b3:30:bf:40:66:90:9e:6d:be:1d:00:45:e0:f9:b5: b6:b9:ff:3e:7e:c8:b8:6a:66:fd:dd:c5:90:96:57: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6C:30:63:FE:B3:76:F0:D7:D3:86:1B:5A:B9:81:5F:7A:F7:39:D2 X509v3 Authority Key Identifier: keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2e:5e:00:54:77:f0:0c:d9:de:8e:2a:c8:09:94:d7:ce:57: ae:54:0a:f0:35:7c:2c:7d:3f:c8:8e:46:4e:08:4f:1f:22:3f: 42:ed:78:a3:4e:66:e8:08:f8:77:52:4f:b6:6d:36:1b:30:f6: 3e:af:87:e1:00:4b:f8:67:f8:d7:68:6c:ab:90:18:97:14:da: 0f:be:03:e6:2b:66:d3:16:fa:d8:59:23:e4:3e:37:7c:fb:16: bf:7a:7e:f9:38:7b:37:38:dd:7c:19:73:8b:ad:25:05:a1:c1: 05:25:9b:b6:01:d0:d8:23:cb:40:fd:11:b7:42:4c:51:4f:b3: 88:77:39:cc:c6:3a:8a:57:9c:95:73:4f:77:92:28:8f:60:47: 32:f4:2c:68:e6:9f:91:7e:ab:e2:60:6b:e2:ab:fe:65:6f:88: 06:26:f2:50:7b:15:7a:44:48:c8:1e:04:4f:8b:cc:8a:a7:7d: 77:6f:20:b3:93:71:c9:ea:b5:59:2a:23:68:9d:48:ec:df:72: 0f:aa:ac:94:1c:34:1f:24:c5:93:eb:b9:cb:b1:24:10:d9:0e: 45:df:bc:cf:2b:a1:fe:0d:e7:86:6a:f4:67:d9:1a:5e:c8:0e: 05:46:01:50:39:7b:ba:54:5f:68:60:08:7b:fb:b9:1e:f3:3a: cc:94:41:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26g/Z9oesT00k7nzHvdMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0 ZWI4N2UwHhcNMjUxMjE5MTQwMTA3WhcNMjUxMjIwMTQwMTA3WjAzMTEwLwYDVQQD Eyg0MTZjMzA2M2ZlYjM3NmYwZDdkMzg2MWI1YWI5ODE1ZjdhZjczOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdwTJSoxbm0y2lLKcq2grY2LUlpG Iae+N36EZHjg7GIg5jdo5W9DTx9PE0i9/mUMz/JULXFwI+PboFUb7RLD173F2aYU 8YxVQER6dJR3b7lqbQeI3k09f4zCEHINp7YilZ6t3BPvumSLiGfmaGk+3HoaJrJ/ jo0+3bxGPUVIJM98xC1Jz7Nnpk9Rulu6wojc5RLwZ9i+XdswV+guF6/LZZ0s+CAN 1Pv1dyLorM2F2BixGH+Xenek3YhDDJli5R5joVvoRLrEgTcuwoBv5AoV83HfUnoR iE0hSOEwyLuKVrizML9AZpCebb4dAEXg+bW2uf8+fsi4amb93cWQlleRxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFsMGP+s3bw19OGG1q5gV969znSMB8GA1UdIwQY MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC5eAFR3 8AzZ3o4qyAmU185XrlQK8DV8LH0/yI5GTghPHyI/Qu14o05m6Aj4d1JPtm02GzD2 Pq+H4QBL+Gf412hsq5AYlxTaD74D5itm0xb62Fkj5D43fPsWv3p++Th7NzjdfBlz i60lBaHBBSWbtgHQ2CPLQP0Rt0JMUU+ziHc5zMY6ileclXNPd5Ioj2BHMvQsaOaf kX6r4mBr4qv+ZW+IBibyUHsVekRIyB4ET4vMiqd9d28gs5Nxyeq1WSojaJ1I7N9y D6qslBw0HyTFk+u5y7EkENkORd+8zyuh/g3nhmr0Z9kaXsgOBUYBUDl7ulRfaGAI e/u5HvM6zJRBIg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:21 2025 by rpki-client