This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json) Hash identifier: KAXlWKwM0X8XF4AJiAlD7nsreU8TsR52ATDrtwEGAW8= Subject key identifier: 65:C7:10:4A:F8:B5:7C:66:E4:D0:F7:75:CA:5A:85:F6:6B:C3:42:03 Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05 Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05 Certificate serial: 019B3D5A4A2B2B2DEB31E2F5DFC65C4CCB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:01:25 +0000 Manifest this update: Sat 20 Dec 2025 20:01:25 +0000 Manifest next update: Sun 21 Dec 2025 20:01:25 +0000 Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=) 2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=) 3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: 3kVfk+9rpGMV9BabEuFBVdqhSbYZJQzvImVImh2G+yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:4a:2b:2b:2d:eb:31:e2:f5:df:c6:5c:4c:cb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05 Validity Not Before: Dec 20 20:01:25 2025 GMT Not After : Dec 21 20:01:25 2025 GMT Subject: CN=65c7104af8b57c66e4d0f775ca5a85f66bc34203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:62:19:89:84:6e:d4:2a:26:bf:49:a3:f5: d7:4c:8e:d9:02:a2:9b:8b:23:9e:f5:3a:3a:ca:d8: 73:e9:e9:a6:09:41:70:45:53:47:5e:24:a8:dc:72: 22:68:f7:85:b3:c4:ef:04:b1:9b:69:8b:7d:e3:b8: e6:b6:49:92:90:c5:d9:b1:da:a7:18:6f:fd:72:31: 27:f7:7e:75:f9:fd:93:f7:ce:82:59:96:f2:60:61: 30:ca:47:56:bc:24:bc:41:fa:69:f1:d5:b3:b5:69: 84:96:c5:eb:3f:26:de:ce:8f:79:9a:9c:96:ef:d0: aa:62:be:1f:c4:77:08:30:95:b9:0f:fd:83:6b:1d: e5:a8:86:2b:01:bd:e9:d3:6b:d7:8f:88:c4:69:55: eb:09:78:65:ea:e3:80:0d:f0:23:28:1b:64:10:04: 79:aa:77:16:b9:91:f4:88:97:e7:69:6c:84:2d:f7: 22:78:c9:cf:9c:f6:ba:0e:68:d2:59:bc:03:fb:e1: a5:a2:d1:1a:d6:34:61:6b:8d:5a:d7:e8:9e:c5:cc: b9:e2:39:ae:0a:36:d5:9d:66:44:2a:bb:ca:fd:ad: 5f:2c:6b:0e:bd:2c:46:34:f8:1b:3b:57:21:68:36: 02:01:a8:4a:71:6e:f6:c0:4e:8d:eb:d0:60:60:ca: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C7:10:4A:F8:B5:7C:66:E4:D0:F7:75:CA:5A:85:F6:6B:C3:42:03 X509v3 Authority Key Identifier: keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:92:71:f9:c6:11:14:23:96:08:67:52:61:8a:81:4e:88:32: 43:3a:ea:73:55:b7:6c:9b:43:09:db:46:89:f3:61:73:bf:c4: bb:c0:d1:23:45:c9:16:aa:c2:87:e1:4d:6a:a7:08:87:62:64: 9c:ae:9c:4a:3e:14:8f:8a:58:72:e9:3b:7c:fc:9e:0c:01:2a: 49:52:ec:11:4b:2d:f3:5b:00:d1:49:e6:52:1a:ed:4d:bc:2c: 4b:e4:cf:6f:2a:c5:ed:a5:6f:37:91:4d:78:8d:92:d2:f5:5c: 23:77:99:3a:f3:70:a6:7d:fa:87:a2:4d:7e:da:db:df:e0:68: ea:7c:b3:7c:aa:bc:26:d4:1c:10:4e:9c:b1:ed:b2:8f:85:a5: 64:d1:18:2e:5d:36:48:ac:92:00:b4:be:7f:f2:99:b8:61:04: 29:77:06:2b:67:8a:69:cf:9c:56:f1:46:59:85:74:83:31:c5: 82:b1:d8:01:e5:98:a6:16:3a:49:87:8a:90:97:3e:f2:61:b1: 3e:14:30:2b:17:fb:d9:2b:c5:f4:d8:b5:7c:7e:22:14:0f:04: 79:38:ab:ca:b9:91:d2:d2:6c:17:86:ff:63:1b:13:0a:5f:36: ed:01:63:df:df:6b:76:67:b7:1a:8f:ee:9d:b9:03:ec:0e:21: 5f:bf:2c:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WkorKy3rMeL138ZcTMt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0 Y2VhMDUwHhcNMjUxMjIwMjAwMTI1WhcNMjUxMjIxMjAwMTI1WjAzMTEwLwYDVQQD Eyg2NWM3MTA0YWY4YjU3YzY2ZTRkMGY3NzVjYTVhODVmNjZiYzM0MjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM9iGYmEbtQqJr9Jo/XXTI7ZAqKb iyOe9To6ythz6emmCUFwRVNHXiSo3HIiaPeFs8TvBLGbaYt947jmtkmSkMXZsdqn GG/9cjEn9351+f2T986CWZbyYGEwykdWvCS8Qfpp8dWztWmElsXrPybezo95mpyW 79CqYr4fxHcIMJW5D/2Dax3lqIYrAb3p02vXj4jEaVXrCXhl6uOADfAjKBtkEAR5 qncWuZH0iJfnaWyELfcieMnPnPa6DmjSWbwD++GlotEa1jRha41a1+iexcy54jmu CjbVnWZEKrvK/a1fLGsOvSxGNPgbO1chaDYCAahKcW72wE6N69BgYMo96wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXHEEr4tXxm5ND3dcpahfZrw0IDMB8GA1UdIwQY MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt Y2QxZmE0ODQ0MTFiLzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZJx+cYR FCOWCGdSYYqBTogyQzrqc1W3bJtDCdtGifNhc7/Eu8DRI0XJFqrCh+FNaqcIh2Jk nK6cSj4Uj4pYcuk7fPyeDAEqSVLsEUst81sA0UnmUhrtTbwsS+TPbyrF7aVvN5FN eI2S0vVcI3eZOvNwpn36h6JNftrb3+Bo6nyzfKq8JtQcEE6cse2yj4WlZNEYLl02 SKySALS+f/KZuGEEKXcGK2eKac+cVvFGWYV0gzHFgrHYAeWYphY6SYeKkJc+8mGx PhQwKxf72SvF9Ni1fH4iFA8EeTiryrmR0tJsF4b/YxsTCl827QFj399rdme3Go/u nbkD7A4hX78ssw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:57 2025 by rpki-client