This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json) Hash identifier: h/jB4YSPNH605p+Xq61wHqPS0BEKMqr0CUubJzSU+eo= Subject key identifier: 11:5F:0F:3E:A9:8C:8A:2D:B9:C6:42:4D:8F:A3:91:82:AB:26:5D:61 Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Certificate serial: 019B108191E211929A29BDEA8E70D562DC83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft Manifest number: 0AA5 Signing time: Fri 12 Dec 2025 03:01:25 +0000 Manifest this update: Fri 12 Dec 2025 03:01:25 +0000 Manifest next update: Sat 13 Dec 2025 03:01:25 +0000 Files and hashes: 1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=) 2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: bxeIUJyG+2rlw2t8gMcomZccxlwXPYK5cw+GvhiAHqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:91:e2:11:92:9a:29:bd:ea:8e:70:d5:62:dc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Validity Not Before: Dec 12 03:01:25 2025 GMT Not After : Dec 13 03:01:25 2025 GMT Subject: CN=115f0f3ea98c8a2db9c6424d8fa39182ab265d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:60:1a:41:5c:be:e9:75:54:06:23:e0:78: 4e:a5:bd:bd:32:bc:fb:93:e2:60:6f:39:30:bd:8c: be:3c:33:03:5c:07:fc:3c:e4:3a:aa:88:ef:d8:ee: 7a:29:30:92:10:c3:77:3e:d6:fa:c3:f6:da:fe:79: 6a:c0:98:43:77:33:aa:f2:90:d7:70:bb:e3:db:a5: 68:57:cc:9c:67:73:39:41:41:6a:8e:c3:b5:c7:93: d0:66:c6:e8:3c:01:d4:37:6f:8f:1d:63:35:ff:9a: 93:b3:a4:11:f5:26:f0:23:b2:29:31:9f:1a:ac:81: e8:9c:ed:d8:cf:5e:88:98:a4:a3:9e:d2:d3:40:3f: 45:73:ba:dd:c6:0b:63:bd:f1:9c:fa:10:79:87:0e: 23:43:5a:1f:9d:45:b2:4c:6f:fd:15:5b:3c:d5:44: a1:3b:dd:f7:c1:2c:50:a7:ac:ce:14:e2:d7:11:df: 00:94:e1:aa:82:51:93:a4:ea:7e:57:4f:d0:f6:cc: 7e:36:10:bb:e4:b0:9b:8d:80:b3:13:79:fe:79:d5: bc:c4:43:76:a8:79:71:13:7a:c6:74:e1:e9:2b:89: d2:03:72:b6:4e:60:a9:37:cb:67:29:44:2c:33:2d: 92:43:bf:6d:01:38:80:a7:45:6a:e4:fa:e1:0a:76: 67:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5F:0F:3E:A9:8C:8A:2D:B9:C6:42:4D:8F:A3:91:82:AB:26:5D:61 X509v3 Authority Key Identifier: keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:07:38:81:8f:bc:37:4f:4f:78:f6:5c:95:c0:f0:f0:9c:e2: 3d:a8:08:c7:b6:26:d2:fc:c2:2c:70:e6:d3:33:e5:36:63:e8: 91:68:48:f3:11:54:23:b7:98:18:44:9e:1a:d4:70:7d:9c:9e: da:56:83:c3:16:6b:e4:5c:c8:d6:6b:d7:e5:ce:9a:0f:52:8f: 32:fc:14:78:03:19:01:af:e5:9f:1f:17:0c:30:ac:2a:18:13: 2e:5d:41:db:4e:21:d8:a7:81:d1:4d:95:00:e3:6c:42:77:0f: 6b:ac:87:d9:0c:ae:6c:62:80:73:59:22:0a:67:5c:e1:95:fc: ed:36:1b:d9:6d:76:fc:b0:f3:7a:08:59:6b:c0:b8:70:fb:40: 88:33:1d:a7:21:e1:a2:44:3c:81:48:14:04:4d:cf:51:8e:46: 21:ed:51:d1:d3:7d:59:a6:6f:cd:fd:54:15:08:54:a4:ce:1e: a3:44:48:47:13:ae:91:a8:bc:9c:58:f4:ca:bf:5f:f4:41:e6: 04:cc:d9:43:38:9d:b7:5e:a5:5e:cd:8f:69:0e:61:b5:f0:5c: ab:c0:53:d7:76:a0:10:5d:7b:8c:a1:c1:dc:09:c7:f0:ff:24: 35:84:d8:7b:27:49:8b:7e:d0:53:78:c4:2a:6d:e2:80:6b:c6: e2:98:1a:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgZHiEZKaKb3qjnDVYtyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMTFhZTIzYTNlOWM4YmM2ZjVhNzljNzE1ZmE5OWE3OGNm ODVkZmUwHhcNMjUxMjEyMDMwMTI1WhcNMjUxMjEzMDMwMTI1WjAzMTEwLwYDVQQD EygxMTVmMGYzZWE5OGM4YTJkYjljNjQyNGQ4ZmEzOTE4MmFiMjY1ZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEBgGkFcvul1VAYj4HhOpb29Mrz7 k+JgbzkwvYy+PDMDXAf8POQ6qojv2O56KTCSEMN3Ptb6w/ba/nlqwJhDdzOq8pDX cLvj26VoV8ycZ3M5QUFqjsO1x5PQZsboPAHUN2+PHWM1/5qTs6QR9SbwI7IpMZ8a rIHonO3Yz16ImKSjntLTQD9Fc7rdxgtjvfGc+hB5hw4jQ1ofnUWyTG/9FVs81USh O933wSxQp6zOFOLXEd8AlOGqglGTpOp+V0/Q9sx+NhC75LCbjYCzE3n+edW8xEN2 qHlxE3rGdOHpK4nSA3K2TmCpN8tnKUQsMy2SQ79tATiAp0Vq5PrhCnZnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFfDz6pjIotucZCTY+jkYKrJl1hMB8GA1UdIwQY MBaAFLoRriOj6ci8b1p5xxX6maeM+F3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGIt YjFlMGRkMmJmNWM3LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGItYjFlMGRkMmJmNWM3 LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQc4gY+8 N09PePZclcDw8JziPagIx7Ym0vzCLHDm0zPlNmPokWhI8xFUI7eYGESeGtRwfZye 2laDwxZr5FzI1mvX5c6aD1KPMvwUeAMZAa/lnx8XDDCsKhgTLl1B204h2KeB0U2V AONsQncPa6yH2QyubGKAc1kiCmdc4ZX87TYb2W12/LDzeghZa8C4cPtAiDMdpyHh okQ8gUgUBE3PUY5GIe1R0dN9WaZvzf1UFQhUpM4eo0RIRxOukai8nFj0yr9f9EHm BMzZQzidt16lXs2PaQ5htfBcq8BT13agEF17jKHB3AnH8P8kNYTYeydJi37QU3jE Km3igGvG4pgaMA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:45 2025 by rpki-client