This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft File: uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json) Hash identifier: 5ln+4kILH2Pe137iDbLlsMAUrydWZw6nNX6jjvNIgyA= Subject key identifier: 11:04:B9:C6:94:C6:31:23:EC:4D:66:4D:45:D7:65:13:8B:BD:D7:CB Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 Certificate issuer: /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3 Certificate serial: 019B2E54C2F4E993F22B267BC10F224354F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft Manifest number: 1308 Signing time: Wed 17 Dec 2025 22:01:05 +0000 Manifest this update: Wed 17 Dec 2025 22:01:05 +0000 Manifest next update: Thu 18 Dec 2025 22:01:05 +0000 Files and hashes: 1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=) 2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: bNvt+BDByrE2BbaVdKoetC7p9825Tek5TfPejLZ1CKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:c2:f4:e9:93:f2:2b:26:7b:c1:0f:22:43:54:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3 Validity Not Before: Dec 17 22:01:05 2025 GMT Not After : Dec 18 22:01:05 2025 GMT Subject: CN=1104b9c694c63123ec4d664d45d765138bbdd7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:53:2e:08:41:a1:49:19:d1:15:c9:b3:8e: ba:bc:3c:b0:17:c5:e5:fd:2a:90:d4:5e:66:1f:ed: 0f:ed:0a:66:8a:1d:48:05:07:37:7e:7b:4d:79:2a: cc:18:39:e3:fe:70:5d:56:8a:4e:a2:2d:84:78:84: 3f:b0:da:83:f1:eb:42:aa:4d:fd:4f:76:a4:1c:37: 49:e1:1d:7d:a9:ca:f5:3e:71:12:ce:47:e5:5f:b8: 33:2b:b6:06:36:d7:24:9d:8f:02:75:7d:a7:e6:5a: 29:7d:38:5b:ed:9e:cf:de:4f:04:dd:ae:78:94:e2: 1a:f9:fc:bf:bc:27:52:52:2a:05:1f:f3:30:4f:22: 28:73:eb:29:19:c4:69:c7:76:a3:19:47:a8:a1:01: f7:93:b6:c1:ee:2f:59:05:70:89:05:e0:b5:b2:99: f7:82:f5:5e:c2:e1:95:62:f3:d1:9f:1a:12:06:d1: c6:84:98:49:b6:e8:2f:6a:f7:e0:30:27:6e:78:df: bd:08:30:bb:d0:b8:64:30:4b:c3:9c:8e:35:5f:35: fd:f4:5f:39:cf:ad:e9:91:36:53:00:12:33:59:38: 19:ed:c2:66:ab:b9:80:44:61:7b:94:93:ec:82:4d: ea:d3:0a:70:ae:ad:04:fe:23:51:0b:4a:62:a5:46: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:04:B9:C6:94:C6:31:23:EC:4D:66:4D:45:D7:65:13:8B:BD:D7:CB X509v3 Authority Key Identifier: keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9f:a6:cd:9c:29:86:70:02:bc:ad:2a:16:89:6e:77:22:97: 72:f2:49:a0:c8:2d:04:0b:8f:0a:2f:6d:81:70:c8:95:0e:1b: 3d:4d:5f:3e:b7:34:a1:c6:50:04:13:6c:a3:70:01:d7:a8:af: e9:b1:65:f4:4b:79:f6:f0:93:06:2b:01:ba:52:7b:d0:6b:5c: 3a:59:f6:10:91:36:12:6f:fc:a1:14:27:7e:f6:5b:e5:c7:58: d0:de:1a:54:fa:72:96:58:9b:5e:ae:43:c3:90:39:d9:83:6f: 9c:81:a9:b2:5d:e2:eb:53:3e:e9:0a:0c:79:97:8d:89:71:ce: d1:a2:db:22:19:08:11:c1:62:4c:8e:75:b3:22:8b:7e:10:09: 42:e5:c4:29:0b:d6:bb:af:f3:44:6d:ae:4e:81:5a:8e:42:8d: 4d:6b:fc:a4:31:26:a0:ab:79:b0:ed:ce:aa:46:5b:81:de:79: c7:d6:73:ec:c6:db:f0:f4:df:fe:75:23:2a:9b:bd:db:fc:b0: 53:44:b2:95:e4:1c:ab:97:2a:30:20:b6:5c:1f:dc:c4:a3:67: db:af:ce:f1:11:c7:f0:d1:a5:7f:64:17:5b:3c:f1:a6:21:98: 03:0b:be:78:d7:bc:f7:73:6b:98:00:bc:61:5c:69:11:5f:c2: 8b:db:47:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVML06ZPyKyZ7wQ8iQ1T0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzE1ZmUxZTE5Y2I4MWNiMzQ2OWZjYWE1YzYwMjNhNmM1 YzQ1YTMwHhcNMjUxMjE3MjIwMTA1WhcNMjUxMjE4MjIwMTA1WjAzMTEwLwYDVQQD EygxMTA0YjljNjk0YzYzMTIzZWM0ZDY2NGQ0NWQ3NjUxMzhiYmRkN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9xTLghBoUkZ0RXJs466vDywF8Xl /SqQ1F5mH+0P7Qpmih1IBQc3fntNeSrMGDnj/nBdVopOoi2EeIQ/sNqD8etCqk39 T3akHDdJ4R19qcr1PnESzkflX7gzK7YGNtcknY8CdX2n5lopfThb7Z7P3k8E3a54 lOIa+fy/vCdSUioFH/MwTyIoc+spGcRpx3ajGUeooQH3k7bB7i9ZBXCJBeC1spn3 gvVewuGVYvPRnxoSBtHGhJhJtugvavfgMCdueN+9CDC70LhkMEvDnI41XzX99F85 z63pkTZTABIzWTgZ7cJmq7mARGF7lJPsgk3q0wpwrq0E/iNRC0pipUY/5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEEucaUxjEj7E1mTUXXZROLvdfLMB8GA1UdIwQY MBaAFLjBX+HhnLgcs0afyqXGAjpsXEWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0Yzkt ZjI1OGMxMWNlNzdlLzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0YzktZjI1OGMxMWNlNzdl LzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5+mzZwp hnACvK0qFoludyKXcvJJoMgtBAuPCi9tgXDIlQ4bPU1fPrc0ocZQBBNso3AB16iv 6bFl9Et59vCTBisBulJ70GtcOln2EJE2Em/8oRQnfvZb5cdY0N4aVPpyllibXq5D w5A52YNvnIGpsl3i61M+6QoMeZeNiXHO0aLbIhkIEcFiTI51syKLfhAJQuXEKQvW u6/zRG2uToFajkKNTWv8pDEmoKt5sO3OqkZbgd55x9Zz7Mbb8PTf/nUjKpu92/yw U0SyleQcq5cqMCC2XB/cxKNn26/O8RHH8NGlf2QXWzzxpiGYAwu+eNe893NrmAC8 YVxpEV/Ci9tHUw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:07 2025 by rpki-client