This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json) Hash identifier: pTByfA5GCSVJhCKb1g2G+LGILtC+DFw9QuHx6JEC6v4= Subject key identifier: B0:A9:B9:34:AE:4C:B5:96:75:EE:79:A2:9A:7A:59:7C:B7:C1:FE:88 Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f Certificate serial: 019B5907D3A6A18765AA54B48A20757AFBF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft Manifest number: 0DD8 Signing time: Fri 26 Dec 2025 05:00:43 +0000 Manifest this update: Fri 26 Dec 2025 05:00:43 +0000 Manifest next update: Sat 27 Dec 2025 05:00:43 +0000 Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=) 2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: Ts1mpr+JQJ1P40K3LRmT+OsgRNxRhoKYuhU8rneVD6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:d3:a6:a1:87:65:aa:54:b4:8a:20:75:7a:fb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f Validity Not Before: Dec 26 05:00:43 2025 GMT Not After : Dec 27 05:00:43 2025 GMT Subject: CN=b0a9b934ae4cb59675ee79a29a7a597cb7c1fe88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:6d:59:61:20:4d:4c:53:09:c8:e5:ca:bb: d1:ab:91:af:7a:2c:a4:bd:09:d5:2f:23:9a:68:72: a0:ca:2f:cc:00:2a:5a:33:ec:a2:6b:69:eb:24:59: 35:ed:ad:22:c0:63:9d:a1:32:23:d3:af:08:c2:56: e2:d4:87:6b:57:16:5c:b8:db:a6:9f:02:fb:0d:46: 37:21:c0:80:0c:9f:7d:4f:d3:97:77:77:c5:fb:c7: 0b:eb:96:1f:5d:3a:51:5f:78:87:d7:ab:a2:13:f1: a4:1b:3b:36:75:f6:dd:22:d6:10:30:05:8e:86:a2: 34:ec:f1:76:67:39:52:79:b8:f7:8e:33:4d:7b:3d: e2:da:ef:0c:f3:94:3c:d4:4b:78:bb:75:76:f5:4d: 8a:8b:2a:3e:43:9a:33:02:9f:89:0b:2f:36:cd:be: c1:d3:8e:0e:93:3c:be:a8:ca:69:ed:8d:f5:00:88: 29:37:0e:b6:d4:cd:fc:8a:b6:b7:3b:02:6f:8c:4d: 5e:ad:f5:b4:e6:a7:03:24:2e:02:45:66:d9:44:e5: 90:7b:09:2d:2e:08:1a:36:4c:4d:f9:31:c7:a3:a2: 2c:02:85:1d:85:c0:bc:b6:72:d1:a2:70:a2:06:ec: ef:8f:36:8b:4b:06:42:00:91:bb:b4:4f:1f:f4:96: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A9:B9:34:AE:4C:B5:96:75:EE:79:A2:9A:7A:59:7C:B7:C1:FE:88 X509v3 Authority Key Identifier: keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a8:87:5d:db:91:c5:ef:0d:4f:af:93:1a:18:46:f7:89:d1: 06:02:51:89:b7:1c:a7:a4:e1:77:04:ee:52:78:50:99:fa:9b: fd:fb:50:5d:72:93:f7:fc:6e:85:64:d3:cf:da:d5:14:5b:83: a2:5e:5f:7f:39:e2:08:eb:40:5a:fc:85:a0:83:cb:a2:58:d8: 0a:c1:a0:7d:74:19:79:42:68:b6:48:f7:b4:45:30:58:90:e4: 1c:f1:39:6a:d3:72:ce:60:50:20:10:84:99:1d:86:ab:4d:6f: ef:e9:c3:90:7d:8a:ba:1d:e3:1e:3c:9d:a7:e1:d4:9e:6e:f5: d3:7b:3c:2b:cd:bc:80:fe:84:7a:54:21:77:d6:6e:ab:55:28: e5:6b:63:64:9b:df:a5:9d:74:64:a2:d6:7e:22:ea:50:ba:3e: 5f:9e:a1:ed:03:4a:9c:e8:9d:8b:ec:e6:e0:dd:6f:d6:4c:5e: 92:31:59:5e:78:45:0a:ae:98:47:dc:87:5c:e2:2a:0c:60:8c: 08:50:34:53:6e:51:c6:5b:0c:b8:92:38:f2:b3:0c:af:ad:0d: 38:4e:08:7d:ff:d2:c9:05:59:df:2f:09:0f:8b:e0:b0:5c:f6: 9d:79:35:27:d1:90:28:91:be:bc:89:26:4a:e5:ca:b2:63:d6: c3:07:cc:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB9OmoYdlqlS0iiB1evv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh MmE1MGYwHhcNMjUxMjI2MDUwMDQzWhcNMjUxMjI3MDUwMDQzWjAzMTEwLwYDVQQD EyhiMGE5YjkzNGFlNGNiNTk2NzVlZTc5YTI5YTdhNTk3Y2I3YzFmZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprFtWWEgTUxTCcjlyrvRq5Gveiyk vQnVLyOaaHKgyi/MACpaM+yia2nrJFk17a0iwGOdoTIj068Iwlbi1IdrVxZcuNum nwL7DUY3IcCADJ99T9OXd3fF+8cL65YfXTpRX3iH16uiE/GkGzs2dfbdItYQMAWO hqI07PF2ZzlSebj3jjNNez3i2u8M85Q81Et4u3V29U2Kiyo+Q5ozAp+JCy82zb7B 044Okzy+qMpp7Y31AIgpNw621M38ira3OwJvjE1erfW05qcDJC4CRWbZROWQewkt LggaNkxN+THHo6IsAoUdhcC8tnLRonCiBuzvjzaLSwZCAJG7tE8f9JYUFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCpuTSuTLWWde55opp6WXy3wf6IMB8GA1UdIwQY MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaiHXduR xe8NT6+TGhhG94nRBgJRibccp6ThdwTuUnhQmfqb/ftQXXKT9/xuhWTTz9rVFFuD ol5ffzniCOtAWvyFoIPLoljYCsGgfXQZeUJotkj3tEUwWJDkHPE5atNyzmBQIBCE mR2Gq01v7+nDkH2Kuh3jHjydp+HUnm7103s8K828gP6EelQhd9Zuq1Uo5WtjZJvf pZ10ZKLWfiLqULo+X56h7QNKnOidi+zm4N1v1kxekjFZXnhFCq6YR9yHXOIqDGCM CFA0U25RxlsMuJI48rMMr60NOE4Iff/SyQVZ3y8JD4vgsFz2nXk1J9GQKJG+vIkm SuXKsmPWwwfMeQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:03 2025 by rpki-client