This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft File: uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json) Hash identifier: Z8zd8ddEDMsM7MRSkanteDzXV4f0+ia3ubMfvB7gtLo= Subject key identifier: 0E:AA:23:DA:77:0A:D3:DE:14:14:99:51:FA:7A:6B:78:60:87:A2:DD Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78 Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278 Certificate serial: 019B0E5BD26AF2282F92795AE018724B3EB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft Manifest number: 16C6 Signing time: Thu 11 Dec 2025 17:00:57 +0000 Manifest this update: Thu 11 Dec 2025 17:00:57 +0000 Manifest next update: Fri 12 Dec 2025 17:00:57 +0000 Files and hashes: 1: FAbnnF69oHTmqk-_EL74zctuaA4.roa (hash: fltdyHSTKiTHvNl3z1Whswl3hhYadpjXzd/kAG+oHEc=) 2: aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa (hash: RYvSIhl4EMxqFZiyrQ0zAL7ZWanzg67h6dO8KAffWY0=) 3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: omT05QFiq1zoyfFexFk2rSU7b1eyMHsuAwvRLV6OK8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:d2:6a:f2:28:2f:92:79:5a:e0:18:72:4b:3e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278 Validity Not Before: Dec 11 17:00:57 2025 GMT Not After : Dec 12 17:00:57 2025 GMT Subject: CN=0eaa23da770ad3de14149951fa7a6b786087a2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:30:23:f6:a4:c1:b2:13:58:a6:cb:38:de: b0:59:97:81:5a:dd:8e:aa:57:ec:7b:5e:54:aa:94: 4e:9b:f4:e3:5c:f3:26:8c:99:30:06:dd:f1:d4:95: 00:e8:ae:cc:ee:46:40:28:c2:e2:69:82:cb:9e:9e: 1e:d5:c3:ff:bc:4c:f0:a6:62:e1:42:31:0b:ce:1c: 1f:3e:1f:fa:27:1b:37:8b:47:b0:b2:f7:0a:c0:97: 39:04:3e:32:08:7e:b2:7d:83:d2:df:fe:dd:a1:10: 18:cb:28:7a:db:69:0e:03:44:f8:15:86:b3:69:97: a6:f7:d5:a9:88:ba:eb:26:14:98:c5:ec:49:43:59: 8a:08:bf:c5:28:1e:42:87:ed:3d:a9:5c:9a:dc:c6: 59:58:53:c3:95:75:59:49:f9:60:b9:26:15:19:5e: 43:fc:cd:de:5c:3e:89:5e:2a:a6:61:5b:80:fa:79: a5:c0:b2:59:42:80:eb:22:f1:54:2c:d6:a7:7e:f4: 86:1c:35:b1:9b:63:c1:6c:45:b9:76:18:01:83:f3: 11:33:cd:cc:10:40:71:73:3a:fb:65:ba:a2:a4:73: b6:f0:95:da:54:a8:d5:cd:79:de:a9:96:9d:63:8f: 5d:b0:cc:a6:b2:7d:f4:a8:26:57:16:e0:32:6b:a1: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AA:23:DA:77:0A:D3:DE:14:14:99:51:FA:7A:6B:78:60:87:A2:DD X509v3 Authority Key Identifier: keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:31:63:17:49:37:b1:87:f5:20:db:72:0d:31:96:82:be:77: 8e:11:05:b0:17:98:01:98:e5:5e:88:cd:bc:f9:1c:e3:91:a4: 13:33:1f:dc:a7:b3:f6:36:f0:29:09:ef:de:41:de:d8:d5:17: 76:a9:29:6a:ca:9d:71:51:8b:71:56:31:84:20:00:b8:96:9d: d2:9d:2e:9e:bb:45:35:aa:5d:7a:58:1c:8c:b1:7d:f7:1c:fe: 4b:d1:7a:c4:0d:dc:a0:5c:46:24:b5:d0:51:67:db:60:81:98: d2:a9:79:72:4b:1f:72:10:39:23:27:ae:9b:63:cd:24:26:5f: 6a:d4:7b:4a:18:f2:66:eb:a2:f8:65:12:a5:4c:77:6d:83:22: ac:02:00:a4:ac:7e:f7:85:e7:2c:67:49:fc:d7:18:12:70:51: da:7e:69:11:f6:46:c8:2e:0f:a3:ac:1f:5b:f7:dc:e4:d2:0b: fe:37:08:1e:90:be:7e:08:f2:bb:59:e8:b9:d7:e1:77:77:3b: 7a:96:e2:f0:51:4f:59:1e:31:3d:8e:69:b2:82:fe:f2:7e:5f: ee:1b:40:07:6f:58:e9:26:65:fe:ba:71:1f:86:87:68:c2:e4: b6:36:21:5d:32:27:48:74:ab:cc:7d:33:50:0b:53:7a:d3:b8: e6:3d:46:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW9Jq8igvknla4BhySz6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWIwYzhhNzU4OTNhNGY4ZTFlZjBkOWE0ZDQxNDc4ZDhi MzMyNzgwHhcNMjUxMjExMTcwMDU3WhcNMjUxMjEyMTcwMDU3WjAzMTEwLwYDVQQD EygwZWFhMjNkYTc3MGFkM2RlMTQxNDk5NTFmYTdhNmI3ODYwODdhMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5UwI/akwbITWKbLON6wWZeBWt2O qlfse15UqpROm/TjXPMmjJkwBt3x1JUA6K7M7kZAKMLiaYLLnp4e1cP/vEzwpmLh QjELzhwfPh/6Jxs3i0ewsvcKwJc5BD4yCH6yfYPS3/7doRAYyyh622kOA0T4FYaz aZem99WpiLrrJhSYxexJQ1mKCL/FKB5Ch+09qVya3MZZWFPDlXVZSflguSYVGV5D /M3eXD6JXiqmYVuA+nmlwLJZQoDrIvFULNanfvSGHDWxm2PBbEW5dhgBg/MRM83M EEBxczr7ZbqipHO28JXaVKjVzXneqZadY49dsMymsn30qCZXFuAya6GtLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6qI9p3CtPeFBSZUfp6a3hgh6LdMB8GA1UdIwQY MBaAFLhbDIp1iTpPjh7w2aTUFHjYszJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84ODE5ZTItYzRlMy00YmNlLWE2MWMt MzA1ZDQxZDUzYTY1LzEvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84ODE5ZTItYzRlMy00YmNlLWE2MWMtMzA1ZDQxZDUzYTY1 LzEvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajFjF0k3 sYf1INtyDTGWgr53jhEFsBeYAZjlXojNvPkc45GkEzMf3Kez9jbwKQnv3kHe2NUX dqkpasqdcVGLcVYxhCAAuJad0p0unrtFNapdelgcjLF99xz+S9F6xA3coFxGJLXQ UWfbYIGY0ql5cksfchA5Iyeum2PNJCZfatR7ShjyZuui+GUSpUx3bYMirAIApKx+ 94XnLGdJ/NcYEnBR2n5pEfZGyC4Po6wfW/fc5NIL/jcIHpC+fgjyu1noudfhd3c7 epbi8FFPWR4xPY5psoL+8n5f7htAB29Y6SZl/rpxH4aHaMLktjYhXTInSHSrzH0z UAtTetO45j1GCA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:52 2025 by rpki-client