This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json) Hash identifier: qPGu/FVTBD79ixKhZ4ctaZ3RNfdz7yO5UH1L8EB+A38= Subject key identifier: 41:54:8C:77:76:81:5A:A6:D1:5D:07:BB:60:A9:13:BE:F8:E7:87:D7 Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f Certificate serial: 019B1014394A1C3A7CE395418C0421DC99F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 01:01:59 +0000 Manifest this update: Fri 12 Dec 2025 01:01:59 +0000 Manifest next update: Sat 13 Dec 2025 01:01:59 +0000 Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=) 2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: zwuQVzxXDyORgZgBPYI72HFnIGlqV0GwRhH+XcKFNd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:39:4a:1c:3a:7c:e3:95:41:8c:04:21:dc:99:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f Validity Not Before: Dec 12 01:01:59 2025 GMT Not After : Dec 13 01:01:59 2025 GMT Subject: CN=41548c7776815aa6d15d07bb60a913bef8e787d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:c9:4d:76:a3:d7:26:b0:19:1f:04:e9:6b: 53:ed:ef:d8:db:3d:d3:cd:67:35:b8:35:a1:50:6b: f9:66:05:c5:02:16:f1:f2:f0:7f:23:04:b3:11:77: 1b:8c:b1:d5:39:e2:6d:1f:a9:0b:13:7f:61:51:79: ee:e1:01:dc:f5:f6:01:04:0c:1e:32:a5:81:0d:5d: 5a:f6:ba:aa:3d:7a:f3:60:11:82:09:e4:61:50:59: 00:ff:7f:70:6a:98:e4:2c:37:d3:1c:4b:c2:4e:70: 22:c9:d3:e6:3c:1e:f3:48:ca:5f:17:87:ed:48:9f: 63:f2:95:85:d3:cf:a4:15:92:d1:22:0b:77:1c:28: 86:1d:f8:02:2a:ed:39:f2:b2:40:7f:df:00:7f:98: f4:40:72:9a:c0:6d:67:a1:5d:73:db:11:f1:ea:00: a8:b6:f3:12:8d:68:b9:bf:cc:e6:ea:a2:5e:e5:62: 83:8a:ed:62:5a:66:63:dc:2d:ad:56:ba:5b:89:38: 96:85:db:77:42:6f:7e:34:59:65:91:0c:fe:23:c4: 9f:81:67:59:a8:91:a0:19:d7:b9:e9:d5:ea:f0:15: 01:19:f0:95:54:24:5e:1d:93:47:74:15:f4:f2:fd: 0d:ef:b5:70:3f:8d:26:c3:11:71:d7:ab:96:2e:f3: 3b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:8C:77:76:81:5A:A6:D1:5D:07:BB:60:A9:13:BE:F8:E7:87:D7 X509v3 Authority Key Identifier: keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e3:5f:76:32:99:f8:a8:98:85:d9:0f:b9:f8:82:f9:35:9e: 3f:d3:93:53:7d:96:e5:f8:e9:8c:a6:4b:af:7b:84:f5:42:6d: 13:03:83:3d:56:e4:09:2b:82:25:38:9e:1f:34:67:6f:c5:d5: f0:b8:b1:22:a9:1b:02:ad:01:8a:1b:9e:09:cd:a4:3a:90:54: 80:37:13:5f:7b:67:6b:74:42:3a:5d:b8:2a:2a:6d:28:17:c4: 15:f0:23:ba:d0:92:09:7d:b6:55:f2:0a:2f:94:08:ae:e4:d7: d1:b4:9d:55:42:6b:90:f9:9b:d1:cd:9d:eb:f7:c2:32:d0:f7: ea:3a:e0:9e:7e:33:fc:2f:b8:38:85:9b:f4:40:19:55:0c:98: b6:94:93:b7:6f:33:6a:c2:ea:79:eb:fa:d9:a5:03:d2:35:2b: 71:84:7e:e5:f6:98:09:db:f1:98:b7:0e:02:6a:84:c3:7c:3c: c9:22:d3:ff:02:f3:f2:00:da:af:0b:c7:d6:9a:38:66:bb:ee: 6b:64:67:a8:33:a5:8c:18:87:c2:05:2d:45:82:0f:13:5c:d6: 85:be:4f:12:35:0d:2d:b8:a9:87:11:41:a2:82:e7:43:69:bd: a6:65:8a:ab:8b:65:b2:a7:49:b7:c6:30:3a:cc:63:11:fe:7f: c2:97:da:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFDlKHDp845VBjAQh3JnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODcyMzY1MWNhYmNmMDAwOWNmMjgxYTJhNTFjNWI0ZTkw NTYyMmYwHhcNMjUxMjEyMDEwMTU5WhcNMjUxMjEzMDEwMTU5WjAzMTEwLwYDVQQD Eyg0MTU0OGM3Nzc2ODE1YWE2ZDE1ZDA3YmI2MGE5MTNiZWY4ZTc4N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGfJTXaj1yawGR8E6WtT7e/Y2z3T zWc1uDWhUGv5ZgXFAhbx8vB/IwSzEXcbjLHVOeJtH6kLE39hUXnu4QHc9fYBBAwe MqWBDV1a9rqqPXrzYBGCCeRhUFkA/39wapjkLDfTHEvCTnAiydPmPB7zSMpfF4ft SJ9j8pWF08+kFZLRIgt3HCiGHfgCKu058rJAf98Af5j0QHKawG1noV1z2xHx6gCo tvMSjWi5v8zm6qJe5WKDiu1iWmZj3C2tVrpbiTiWhdt3Qm9+NFllkQz+I8SfgWdZ qJGgGde56dXq8BUBGfCVVCReHZNHdBX08v0N77VwP40mwxFx16uWLvM7ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFUjHd2gVqm0V0Hu2CpE77454fXMB8GA1UdIwQY MBaAFLqHI2Ucq88ACc8oGipRxbTpBWIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjct MmU3MGRlZDlkOTRmLzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjctMmU3MGRlZDlkOTRm LzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+NfdjKZ +KiYhdkPufiC+TWeP9OTU32W5fjpjKZLr3uE9UJtEwODPVbkCSuCJTieHzRnb8XV 8LixIqkbAq0BihueCc2kOpBUgDcTX3tna3RCOl24KiptKBfEFfAjutCSCX22VfIK L5QIruTX0bSdVUJrkPmb0c2d6/fCMtD36jrgnn4z/C+4OIWb9EAZVQyYtpSTt28z asLqeev62aUD0jUrcYR+5faYCdvxmLcOAmqEw3w8ySLT/wLz8gDarwvH1po4Zrvu a2RnqDOljBiHwgUtRYIPE1zWhb5PEjUNLbiphxFBooLnQ2m9pmWKq4tlsqdJt8Yw OsxjEf5/wpfaag== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:22 2025 by rpki-client