This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json) Hash identifier: paCsyG+0OxDq/YARkkPO5AEOnQ+959y05P6E5LxkzKY= Subject key identifier: D9:67:70:E8:7B:DB:D0:7B:09:63:A1:CA:72:3A:75:29:42:A9:9A:81 Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f Certificate serial: 019B33B1A0CA5E2BB45441405DD344423A90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft Manifest number: 10A6 Signing time: Thu 18 Dec 2025 23:00:37 +0000 Manifest this update: Thu 18 Dec 2025 23:00:37 +0000 Manifest next update: Fri 19 Dec 2025 23:00:37 +0000 Files and hashes: 1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=) 2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=) 3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=) 4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=) 5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: oooPXNACOPLNL17OROExwPgIZD/6CJD2fjuhKBQRfbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:a0:ca:5e:2b:b4:54:41:40:5d:d3:44:42:3a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f Validity Not Before: Dec 18 23:00:37 2025 GMT Not After : Dec 19 23:00:37 2025 GMT Subject: CN=d96770e87bdbd07b0963a1ca723a752942a99a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:d7:f6:ec:f1:0a:ec:6e:e5:26:8e:40:a6: 96:28:df:6f:f1:bb:1f:fa:c0:ef:8f:a0:3c:b4:d6: 9e:77:cd:4f:c6:df:f5:cb:3a:c0:e6:77:e4:47:80: de:63:97:78:7e:04:9d:3a:b4:9d:21:07:b3:17:83: 6f:19:ca:80:e0:62:8c:9a:04:13:3c:28:31:fa:7d: 04:16:42:13:10:e2:7c:b0:6b:67:a8:e0:d7:c4:d2: 9c:ea:5b:b6:3d:6f:52:b8:c8:8d:24:d3:5a:49:5e: 65:c0:7a:81:ec:ff:38:28:0a:a4:f9:6b:1f:0e:05: 63:04:a3:a2:fc:d5:0b:8f:62:3f:9b:13:b9:9f:56: 39:8e:b2:02:0f:39:c9:ed:86:f4:6a:b0:ae:93:1a: 79:c1:17:9d:44:be:d9:f4:3b:f1:2f:fe:63:15:4d: 00:53:48:4d:b0:88:32:0e:74:c7:71:2f:0e:0a:7d: ff:01:66:8b:12:86:a7:95:1c:92:69:f9:2e:31:c0: bb:70:92:3f:d8:e9:cf:2b:8e:c3:30:91:33:09:58: c0:1d:08:7f:24:92:79:92:bf:99:9f:58:f6:29:70: b3:fc:a7:2d:02:85:d2:1a:d4:6e:11:ea:56:31:89: f5:ec:74:30:59:cb:5e:93:9b:7f:18:54:0d:7c:9b: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:70:E8:7B:DB:D0:7B:09:63:A1:CA:72:3A:75:29:42:A9:9A:81 X509v3 Authority Key Identifier: keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e5:6f:ee:0a:ed:ac:28:cf:11:0c:f2:7a:85:f8:b4:4f:f1: a7:8e:2a:dd:b5:4e:af:1e:e2:87:f5:06:e2:aa:a6:76:eb:fe: 76:46:a4:46:bf:c2:26:6b:dd:01:75:41:ed:69:69:c7:f5:c5: 7b:54:d2:1e:ac:ef:2c:33:7f:0b:c4:5e:23:8a:51:9f:44:f3: c4:8c:c3:7c:d1:0b:7e:71:05:8b:ae:a1:9f:dc:c4:2d:65:9e: a1:33:ff:49:c1:67:f9:3d:0e:0b:d5:69:83:60:e0:2a:61:35: ef:13:a1:2c:a1:5b:54:b5:00:72:05:0b:21:dc:9a:86:bb:f0: 22:2c:4d:e8:72:e8:17:e7:a5:b9:95:79:04:3b:a2:59:90:9b: 58:c1:88:f1:33:cb:94:3c:ab:f2:2d:8d:f6:72:b1:80:d1:5e: 75:a4:22:c2:1d:37:48:7e:6f:8b:ee:15:bd:a8:49:41:24:5d: f3:b8:dd:bc:cb:8e:ff:8e:0d:dc:ad:14:29:0f:bb:f7:c2:76: ac:d6:01:df:d5:ee:a7:3b:8b:95:8d:23:e8:b4:52:5f:07:81: 25:1b:e1:99:ea:82:9a:3f:9d:f4:38:cc:fc:70:b4:68:aa:40: 63:75:e0:71:6b:4c:12:6a:68:3a:53:ff:96:ac:07:5c:e5:14: 15:b6:80:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsaDKXiu0VEFAXdNEQjqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm MDI0NGYwHhcNMjUxMjE4MjMwMDM3WhcNMjUxMjE5MjMwMDM3WjAzMTEwLwYDVQQD EyhkOTY3NzBlODdiZGJkMDdiMDk2M2ExY2E3MjNhNzUyOTQyYTk5YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMjX9uzxCuxu5SaOQKaWKN9v8bsf +sDvj6A8tNaed81Pxt/1yzrA5nfkR4DeY5d4fgSdOrSdIQezF4NvGcqA4GKMmgQT PCgx+n0EFkITEOJ8sGtnqODXxNKc6lu2PW9SuMiNJNNaSV5lwHqB7P84KAqk+Wsf DgVjBKOi/NULj2I/mxO5n1Y5jrICDznJ7Yb0arCukxp5wRedRL7Z9DvxL/5jFU0A U0hNsIgyDnTHcS8OCn3/AWaLEoanlRySafkuMcC7cJI/2OnPK47DMJEzCVjAHQh/ JJJ5kr+Zn1j2KXCz/KctAoXSGtRuEepWMYn17HQwWctek5t/GFQNfJsU9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlncOh729B7CWOhynI6dSlCqZqBMB8GA1UdIwQY MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct OTZkMzA0YzhkYjAyLzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+Vv7grt rCjPEQzyeoX4tE/xp44q3bVOrx7ih/UG4qqmduv+dkakRr/CJmvdAXVB7Wlpx/XF e1TSHqzvLDN/C8ReI4pRn0TzxIzDfNELfnEFi66hn9zELWWeoTP/ScFn+T0OC9Vp g2DgKmE17xOhLKFbVLUAcgULIdyahrvwIixN6HLoF+eluZV5BDuiWZCbWMGI8TPL lDyr8i2N9nKxgNFedaQiwh03SH5vi+4VvahJQSRd87jdvMuO/44N3K0UKQ+798J2 rNYB39XupzuLlY0j6LRSXweBJRvhmeqCmj+d9DjM/HC0aKpAY3XgcWtMEmpoOlP/ lqwHXOUUFbaAbQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:00:23 2025 by rpki-client