This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft File: Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft (raw, json) Hash identifier: E+e4zGDAAnIiM2mmZVDoJ1ZzSOJ54UV9FtdljHJ+Mc8= Subject key identifier: 00:38:61:6C:6A:6B:09:C6:57:A6:99:F4:45:99:3A:E6:04:BC:2E:A4 Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09 Certificate serial: 019B1C4E68A59EBC2FD4317CC3114D67E232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft Manifest number: 0A Signing time: Sun 14 Dec 2025 10:00:59 +0000 Manifest this update: Sun 14 Dec 2025 10:00:59 +0000 Manifest next update: Mon 15 Dec 2025 10:00:59 +0000 Files and hashes: 1: Eka03ixTa0rbIVY3EVccaPzZLnY.roa (hash: QrVBhgLUzt0geoj7tl25NtLMy6PhBoLaxRHmC7VNEtc=) 2: Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl (hash: 2di6CLP/sAnCFAVxpPY5v++0kp1ws7AUy2yLx/28w+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:68:a5:9e:bc:2f:d4:31:7c:c3:11:4d:67:e2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09 Validity Not Before: Dec 14 10:00:59 2025 GMT Not After : Dec 15 10:00:59 2025 GMT Subject: CN=0038616c6a6b09c657a699f445993ae604bc2ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:b9:60:09:97:1f:62:5d:82:b7:4e:c7:79: 59:1c:97:7f:a4:c6:ee:68:75:0a:aa:41:32:c1:ff: 31:c7:49:24:a6:9c:85:ad:a5:c9:7d:30:23:f1:8c: 15:90:14:80:80:2e:24:3d:64:29:cb:dc:21:d5:46: 7d:4d:60:de:3e:60:9e:25:5d:98:50:25:58:f2:13: 87:41:05:4a:44:a1:34:17:b1:52:81:f8:c7:c0:d0: c1:f5:90:14:29:34:cb:05:91:e6:70:5c:90:b8:d9: 8b:ad:b6:f0:86:10:33:3b:13:98:c9:71:30:8c:61: 8f:f6:b8:10:ca:fa:2a:8b:fb:21:5c:7b:78:cc:a4: 41:c4:e8:29:99:66:b5:d5:17:8a:56:80:f3:d9:cf: 21:fb:d8:0d:90:3e:a6:c4:2f:bd:6b:07:84:91:6c: 15:d0:04:c8:b5:c7:37:a5:fe:eb:95:3d:d1:1d:93: 22:eb:f2:76:cf:38:7e:46:9e:e8:2e:55:48:c8:27: dc:44:99:12:28:90:a6:ed:36:92:23:0d:76:23:86: b1:f4:4a:45:bd:c8:fc:f9:2e:e8:d6:f4:95:58:3c: 72:38:ae:a3:99:a6:c0:48:84:3d:f0:5f:42:5f:16: b4:71:78:b6:1d:db:2f:b5:45:dd:84:c8:e2:eb:21: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:38:61:6C:6A:6B:09:C6:57:A6:99:F4:45:99:3A:E6:04:BC:2E:A4 X509v3 Authority Key Identifier: keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4a:8a:2e:bb:68:98:95:2d:48:bf:0d:5c:b0:8d:ac:d2:91: 32:3c:30:ff:92:9f:a9:04:37:11:68:97:fd:36:ad:c4:f4:59: 16:84:7c:37:f5:94:4f:07:c0:cf:8f:43:b7:32:7b:99:db:67: ab:c2:cc:ed:08:cc:45:b2:14:27:d6:cd:d1:38:b2:01:82:49: ea:92:56:a9:6d:1c:c3:04:ad:37:09:cb:ea:18:2b:22:06:62: 13:2e:f9:85:cd:c1:07:a5:40:05:0c:d2:5c:6a:ff:c8:51:94: cc:16:a0:d8:1f:bc:1b:31:99:cf:ca:62:56:f8:2a:12:72:cc: 50:3c:2e:34:78:38:78:9a:36:6c:f5:9e:be:7d:42:ad:7f:5d: e9:d5:88:e1:d2:dd:25:5e:01:cd:2b:e6:f6:96:31:24:1d:df: 85:ea:65:b1:b4:78:b5:f5:68:f7:55:a7:f3:0f:4b:b7:cf:fc: 7f:a5:99:1b:80:ea:8c:24:fb:bb:eb:ee:c1:19:af:51:a8:55: 23:2f:3d:e7:c9:d4:4e:58:30:0d:79:79:eb:b9:49:1b:3a:66: 57:09:7b:31:73:77:8b:f2:2e:88:43:1a:d4:61:10:60:88:08: b0:cd:aa:ba:de:ea:b2:11:f3:7a:5f:82:1f:55:0f:3a:e0:6f: 7e:31:4a:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTmilnrwv1DF8wxFNZ+IyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1 MzBiMDkwHhcNMjUxMjE0MTAwMDU5WhcNMjUxMjE1MTAwMDU5WjAzMTEwLwYDVQQD EygwMDM4NjE2YzZhNmIwOWM2NTdhNjk5ZjQ0NTk5M2FlNjA0YmMyZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy65YAmXH2JdgrdOx3lZHJd/pMbu aHUKqkEywf8xx0kkppyFraXJfTAj8YwVkBSAgC4kPWQpy9wh1UZ9TWDePmCeJV2Y UCVY8hOHQQVKRKE0F7FSgfjHwNDB9ZAUKTTLBZHmcFyQuNmLrbbwhhAzOxOYyXEw jGGP9rgQyvoqi/shXHt4zKRBxOgpmWa11ReKVoDz2c8h+9gNkD6mxC+9aweEkWwV 0ATItcc3pf7rlT3RHZMi6/J2zzh+Rp7oLlVIyCfcRJkSKJCm7TaSIw12I4ax9EpF vcj8+S7o1vSVWDxyOK6jmabASIQ98F9CXxa0cXi2HdsvtUXdhMji6yHFZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA4YWxqawnGV6aZ9EWZOuYEvC6kMB8GA1UdIwQY MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt M2JiOGIwNzVkNjlmLzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUqKLrto mJUtSL8NXLCNrNKRMjww/5KfqQQ3EWiX/TatxPRZFoR8N/WUTwfAz49DtzJ7mdtn q8LM7QjMRbIUJ9bN0TiyAYJJ6pJWqW0cwwStNwnL6hgrIgZiEy75hc3BB6VABQzS XGr/yFGUzBag2B+8GzGZz8piVvgqEnLMUDwuNHg4eJo2bPWevn1CrX9d6dWI4dLd JV4BzSvm9pYxJB3fheplsbR4tfVo91Wn8w9Lt8/8f6WZG4DqjCT7u+vuwRmvUahV Iy8958nUTlgwDXl567lJGzpmVwl7MXN3i/IuiEMa1GEQYIgIsM2qut7qshHzel+C H1UPOuBvfjFKqw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:29:14 2025 by rpki-client