This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json) Hash identifier: rnfckoYcq+m3E4HRttb/FCp6LNHxpyhHMf6WEcJLss4= Subject key identifier: E1:D3:F3:6E:90:4B:6C:E9:44:A2:65:F1:C9:97:3D:36:62:8B:42:7B Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Certificate serial: 019B32D6A51E2FB4C05A2CFD7FCBF2AE8DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft Manifest number: 032B Signing time: Thu 18 Dec 2025 19:01:26 +0000 Manifest this update: Thu 18 Dec 2025 19:01:26 +0000 Manifest next update: Fri 19 Dec 2025 19:01:26 +0000 Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=) 2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: 41PpXAyXAkpI6axRzNfwVb98KE+X79EM9AAWqzcYSIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:a5:1e:2f:b4:c0:5a:2c:fd:7f:cb:f2:ae:8d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Validity Not Before: Dec 18 19:01:26 2025 GMT Not After : Dec 19 19:01:26 2025 GMT Subject: CN=e1d3f36e904b6ce944a265f1c9973d36628b427b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:19:87:cb:60:67:73:5d:56:a5:11:3c:40: a8:ac:c7:1e:cf:46:5a:4b:3d:dc:b2:7e:c4:88:02: 16:4a:f1:7e:e1:5d:83:ec:e5:78:d9:2e:fd:5e:45: d7:38:08:b2:8a:f9:4f:25:7d:90:70:ff:46:d3:d1: ea:35:1d:cd:ca:27:f8:92:3c:b6:27:f0:d9:be:db: e5:0d:75:03:1a:fd:34:cb:a0:26:07:7e:ce:f6:2c: c3:e7:98:f3:f3:3c:ad:7b:d3:bb:86:d2:97:2a:13: 00:cd:bc:4f:8a:93:30:3d:a7:07:71:db:56:67:39: d4:f8:73:4b:13:30:31:ce:92:b3:c1:a0:6d:2c:61: 1b:92:66:43:1f:35:de:9a:46:cd:dc:db:c0:ea:73: 58:15:63:a5:fa:3a:a3:57:a1:87:0f:92:45:9f:96: 9e:2f:c7:44:dc:35:7a:5f:89:9f:dc:2d:26:9f:95: 92:02:0e:d8:88:f7:6c:5c:28:22:21:04:99:be:31: de:70:c3:2c:5c:1b:94:b6:23:04:d0:3b:06:0b:2b: a1:3b:6e:3c:94:be:69:14:27:97:fc:5d:b9:61:ca: a8:37:f7:3d:c6:77:91:c6:6d:f4:81:35:ca:89:29: 60:62:f4:e6:4a:5a:f7:ed:1e:7a:57:22:d7:9a:69: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D3:F3:6E:90:4B:6C:E9:44:A2:65:F1:C9:97:3D:36:62:8B:42:7B X509v3 Authority Key Identifier: keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5d:64:84:4c:6d:73:db:cd:cd:b3:45:78:69:79:06:ff:67: d7:c0:32:ac:07:28:b8:86:4b:04:03:f4:f6:81:ef:67:ba:a8: 68:a3:e4:63:66:f4:7a:f7:bb:4e:12:2d:96:11:24:c4:aa:12: a0:2a:97:00:61:27:15:3a:c5:96:d7:af:8c:c6:33:a8:63:e2: 76:d8:ad:4d:1a:f6:18:4a:47:7a:4b:f6:06:e5:59:35:a2:19: 0a:1b:bf:8b:4f:7e:e7:65:22:88:c1:2f:4e:45:c0:44:89:c4: 68:0d:5b:ad:6d:22:3f:e3:c7:67:3a:fd:3f:e9:9b:1a:17:8b: 73:45:5e:42:00:76:42:35:73:db:1f:d0:6e:a5:f1:8b:e1:49: f3:6e:c9:6b:d4:ea:6b:97:34:eb:00:b8:92:80:7d:c9:f7:a3: 5f:7d:da:1c:36:0a:76:3b:37:ff:a5:93:42:32:94:5f:08:4b: 0a:4c:16:77:54:69:18:42:7a:83:62:f4:29:e6:5e:b8:70:f6: 81:d2:6b:32:24:d6:41:0d:74:44:4f:dc:01:a3:f1:9d:ab:0b: b8:27:0f:37:4e:29:61:be:d8:d9:75:0c:86:34:6c:a6:5b:6c: 9b:b4:48:7b:6d:13:29:1c:f7:12:f3:24:fd:27:9c:ae:4f:f5: dc:4d:20:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1qUeL7TAWiz9f8vyro26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NzM1ZWIyY2QyYzRkOGNmNWJmM2Q3NTA3ZDg0ZDYwMzU0 NWRmZTMwHhcNMjUxMjE4MTkwMTI2WhcNMjUxMjE5MTkwMTI2WjAzMTEwLwYDVQQD EyhlMWQzZjM2ZTkwNGI2Y2U5NDRhMjY1ZjFjOTk3M2QzNjYyOGI0MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6cZh8tgZ3NdVqURPECorMcez0Za Sz3csn7EiAIWSvF+4V2D7OV42S79XkXXOAiyivlPJX2QcP9G09HqNR3Nyif4kjy2 J/DZvtvlDXUDGv00y6AmB37O9izD55jz8zyte9O7htKXKhMAzbxPipMwPacHcdtW ZznU+HNLEzAxzpKzwaBtLGEbkmZDHzXemkbN3NvA6nNYFWOl+jqjV6GHD5JFn5ae L8dE3DV6X4mf3C0mn5WSAg7YiPdsXCgiIQSZvjHecMMsXBuUtiME0DsGCyuhO248 lL5pFCeX/F25YcqoN/c9xneRxm30gTXKiSlgYvTmSlr37R56VyLXmmlcXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHT826QS2zpRKJl8cmXPTZii0J7MB8GA1UdIwQY MBaAFLhzXrLNLE2M9b89dQfYTWA1Rd/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUt YjRkY2Y4Y2VhMzVhLzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUtYjRkY2Y4Y2VhMzVh LzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAel1khExt c9vNzbNFeGl5Bv9n18AyrAcouIZLBAP09oHvZ7qoaKPkY2b0eve7ThItlhEkxKoS oCqXAGEnFTrFltevjMYzqGPidtitTRr2GEpHekv2BuVZNaIZChu/i09+52UiiMEv TkXARInEaA1brW0iP+PHZzr9P+mbGheLc0VeQgB2QjVz2x/QbqXxi+FJ827Ja9Tq a5c06wC4koB9yfejX33aHDYKdjs3/6WTQjKUXwhLCkwWd1RpGEJ6g2L0KeZeuHD2 gdJrMiTWQQ10RE/cAaPxnasLuCcPN04pYb7Y2XUMhjRspltsm7RIe20TKRz3EvMk /Secrk/13E0gyg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:44 2025 by rpki-client