This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json) Hash identifier: hRq9/pxxHiOoIcUZdYXVFl1WYbsyO31ZR9REc5oGxdw= Subject key identifier: DE:85:65:66:BC:6D:AE:A0:57:1E:2C:4E:14:36:9B:3D:3E:FA:F0:D1 Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Certificate serial: 019B46939A6699DB7F9088C0DF45863BF0C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft Manifest number: 0A06 Signing time: Mon 22 Dec 2025 15:00:36 +0000 Manifest this update: Mon 22 Dec 2025 15:00:36 +0000 Manifest next update: Tue 23 Dec 2025 15:00:36 +0000 Files and hashes: 1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=) 2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: m+wZi4ETtE3r7wIZJ9yrRkLZvT/RFZ82aYZIukwmSn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:9a:66:99:db:7f:90:88:c0:df:45:86:3b:f0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Validity Not Before: Dec 22 15:00:36 2025 GMT Not After : Dec 23 15:00:36 2025 GMT Subject: CN=de856566bc6daea0571e2c4e14369b3d3efaf0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:5f:e6:4b:2a:2b:75:4e:97:27:d2:c1:c4: 00:93:d4:63:0c:c1:22:86:49:0c:33:52:ca:58:c4: 30:10:3a:e9:af:f5:e0:4f:d4:98:01:db:41:dd:3b: da:66:4a:ce:c7:b9:42:24:d3:62:ac:e9:39:9f:3b: d1:e6:3c:bf:97:d5:6f:b1:9c:97:c0:d3:82:13:c8: 70:18:44:33:3b:f4:74:81:8f:1d:26:51:6a:df:ee: 5c:d4:b9:00:5a:8e:32:e2:b7:2f:3d:41:5a:7a:dd: 50:12:8d:89:5d:6a:72:e3:de:c1:0e:c5:ad:0a:51: 74:a0:cf:53:f3:b4:ee:d2:2d:49:21:56:59:3c:df: fa:02:09:3c:78:cf:4c:9c:84:86:45:e9:f5:81:b5: 2a:62:7e:85:32:78:24:c2:4f:8d:3f:1a:c5:b9:d5: e1:6f:27:98:8a:df:4c:e1:d4:ff:94:99:eb:51:aa: 4b:b3:26:dd:e0:36:cd:fb:f0:34:7d:a7:84:d7:74: 36:5a:b0:ca:6f:1b:71:55:6d:62:5d:c3:03:72:52: a5:8f:94:f6:8f:25:c1:73:5a:4d:e7:fe:3e:aa:97: c2:82:82:3a:14:f3:13:c2:02:d6:c3:31:a1:9d:99: a4:c3:b3:3e:52:c3:4d:8e:76:8f:8f:07:df:fe:a0: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:85:65:66:BC:6D:AE:A0:57:1E:2C:4E:14:36:9B:3D:3E:FA:F0:D1 X509v3 Authority Key Identifier: keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:eb:32:40:10:c7:dc:8c:7a:3a:49:1b:40:99:3a:a0:2c:cb: f5:18:72:95:ba:42:be:d1:3a:6c:94:0e:2a:6c:ae:cb:04:13: d8:92:29:96:f1:b7:fe:b1:23:84:c3:f7:19:cd:d5:88:c6:1c: 05:c0:b0:e7:df:b6:ad:4a:39:d9:52:82:2c:c3:ac:8e:bf:4e: 46:91:e7:64:b3:0c:56:e0:6d:6e:f4:5f:0b:4c:80:96:bf:70: 27:36:bb:3d:7e:f9:25:3a:5a:46:47:83:4a:8a:49:46:a5:d3: 13:ba:82:92:e7:e1:d4:d0:73:b9:cb:cc:8b:25:c1:b8:04:7c: a2:09:1c:e7:43:ea:5f:5e:9c:e9:3b:7d:a6:45:cd:f3:10:6f: ef:c6:39:2e:fb:33:26:05:cd:fb:e4:8b:3e:88:22:8b:c0:60: 87:61:e2:8e:64:ed:16:83:f6:8f:1f:f9:02:6b:69:77:33:8d: c7:de:23:ef:a3:e6:b5:fe:87:1b:99:d7:10:38:6c:69:79:e0: 91:6b:67:04:74:ae:e2:92:d2:09:fd:ea:c1:31:a6:54:59:2d: 38:37:2f:ec:a4:c0:7a:89:a3:4b:cf:d4:91:1a:2f:1b:0a:1a: 91:4f:9a:5c:1b:2e:9a:31:65:43:77:cf:1c:6c:33:5a:d0:78: 8a:72:c6:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk5pmmdt/kIjA30WGO/DCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2JiZjhlNWM3NGE1MjZiYWFmNjE4NWFiZDk0OWRhZmE4 ZjZkY2IwHhcNMjUxMjIyMTUwMDM2WhcNMjUxMjIzMTUwMDM2WjAzMTEwLwYDVQQD EyhkZTg1NjU2NmJjNmRhZWEwNTcxZTJjNGUxNDM2OWIzZDNlZmFmMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQNf5ksqK3VOlyfSwcQAk9RjDMEi hkkMM1LKWMQwEDrpr/XgT9SYAdtB3TvaZkrOx7lCJNNirOk5nzvR5jy/l9VvsZyX wNOCE8hwGEQzO/R0gY8dJlFq3+5c1LkAWo4y4rcvPUFaet1QEo2JXWpy497BDsWt ClF0oM9T87Tu0i1JIVZZPN/6Agk8eM9MnISGRen1gbUqYn6FMngkwk+NPxrFudXh byeYit9M4dT/lJnrUapLsybd4DbN+/A0faeE13Q2WrDKbxtxVW1iXcMDclKlj5T2 jyXBc1pN5/4+qpfCgoI6FPMTwgLWwzGhnZmkw7M+UsNNjnaPjwff/qDlVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6FZWa8ba6gVx4sThQ2mz0++vDRMB8GA1UdIwQY MBaAFLh7v45cdKUmuq9hhavZSdr6j23LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUt NTM5MGY5ZjgzNjIwLzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUtNTM5MGY5ZjgzNjIw LzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOsyQBDH 3Ix6OkkbQJk6oCzL9RhylbpCvtE6bJQOKmyuywQT2JIplvG3/rEjhMP3Gc3ViMYc BcCw59+2rUo52VKCLMOsjr9ORpHnZLMMVuBtbvRfC0yAlr9wJza7PX75JTpaRkeD SopJRqXTE7qCkufh1NBzucvMiyXBuAR8ogkc50PqX16c6Tt9pkXN8xBv78Y5Lvsz JgXN++SLPogii8Bgh2HijmTtFoP2jx/5AmtpdzONx94j76Pmtf6HG5nXEDhsaXng kWtnBHSu4pLSCf3qwTGmVFktODcv7KTAeomjS8/UkRovGwoakU+aXBsumjFlQ3fP HGwzWtB4inLGcA== -----END CERTIFICATE-----Generated at Mon Dec 22 21:59:34 2025 by rpki-client