This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json) Hash identifier: E32IkWv6AHOgFC1KybgPir5xWrKbyg0IZ0Z+4lTRjkU= Subject key identifier: 34:55:15:0C:85:22:C7:A9:57:1E:FC:25:F7:24:63:6A:CE:AB:EE:55 Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Certificate serial: 019B2FD5591201377039C90CFAC1D30FFF73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft Manifest number: 0B59 Signing time: Thu 18 Dec 2025 05:01:09 +0000 Manifest this update: Thu 18 Dec 2025 05:01:09 +0000 Manifest next update: Fri 19 Dec 2025 05:01:09 +0000 Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=) 2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=) 3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: VHjDqhxDFEVI+KmPUKQ0J7RQSQToO0k/CPXVuqKhSyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:59:12:01:37:70:39:c9:0c:fa:c1:d3:0f:ff:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Validity Not Before: Dec 18 05:01:09 2025 GMT Not After : Dec 19 05:01:09 2025 GMT Subject: CN=3455150c8522c7a9571efc25f724636aceabee55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:98:6c:4e:08:92:b0:a5:ad:b0:b1:eb:af:52: 2f:86:80:fd:bb:ad:be:51:09:a1:9c:dc:50:1d:eb: c6:af:5e:a0:9b:d3:17:14:89:5c:a9:4b:78:5a:d9: 9f:52:9b:8c:2e:c2:76:4c:ca:e7:2b:cf:92:f1:ac: 4f:82:e0:1f:6a:4c:ec:e1:90:e5:69:8f:70:ad:0d: c6:7e:6b:6a:04:5f:40:17:c8:c2:64:4f:20:a6:f7: 5a:ce:40:01:50:7c:35:e0:f2:c7:f5:90:4d:a1:68: 46:b7:4c:19:8a:48:41:e7:29:cf:ec:9e:71:93:8b: fc:42:06:bb:4b:94:71:eb:87:e6:f2:f3:3c:7f:66: 41:0f:09:9a:db:8a:97:5f:5b:63:42:bb:58:2f:4b: 17:d8:c0:41:97:0d:47:27:f8:0c:b7:cd:9a:da:d3: cc:19:d9:e2:60:b9:2d:bf:20:6a:08:e2:da:64:84: 5f:9d:cf:68:62:29:86:47:81:09:b2:a5:f1:e9:c5: b2:9b:e3:b7:a1:3e:2e:63:e3:57:7d:7e:c0:fd:fa: 31:22:54:87:7d:58:df:fd:85:bb:43:3f:c2:e0:39: 35:ec:da:85:13:f6:5f:3e:8b:78:e2:eb:3f:51:b7: 2b:bd:82:de:f5:ae:c1:49:b6:2f:03:6d:64:1d:1e: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:55:15:0C:85:22:C7:A9:57:1E:FC:25:F7:24:63:6A:CE:AB:EE:55 X509v3 Authority Key Identifier: keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:66:3c:a5:15:5c:25:d7:5c:aa:d5:ff:a1:ba:65:ed:b1:e7: d4:e8:fb:1b:d5:e4:85:44:56:9a:d1:c2:d7:2e:c8:d3:44:88: 95:f1:75:0d:37:cf:3e:67:1d:08:81:e1:46:51:36:f6:f2:73: 65:cd:2a:16:94:b7:b7:54:79:e4:c6:78:27:6a:67:05:c0:71: f5:e3:0e:c3:99:f0:f2:cf:a3:96:34:37:f1:01:ec:4b:1a:45: fc:35:2b:2f:69:f0:62:fb:32:20:d6:71:2e:2b:3a:a0:69:6b: 8a:de:75:43:67:ec:1f:8f:43:27:75:b7:8f:29:4c:d5:09:10: 4f:08:d2:da:8c:87:a0:a2:3c:ee:87:56:72:a2:18:47:f5:eb: 0e:e3:56:ea:03:12:dd:31:62:4c:8a:ec:fd:1d:2b:d0:5b:66: d9:ea:95:b3:f0:48:57:92:e6:9d:6a:9a:0d:4e:cb:08:34:ee: da:67:85:7c:a5:e6:5a:fc:06:19:37:86:06:c7:bb:3a:60:f5: d6:61:00:dd:0a:00:2f:2f:a1:41:0a:20:b1:8a:3a:2c:8d:3f: e3:18:7d:15:d8:dc:aa:ec:50:ca:98:7a:2e:54:33:90:83:e2: 28:e8:8d:c0:55:d0:62:5f:65:a3:12:f3:6a:fa:91:db:f9:29: 65:e8:a0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1VkSATdwOckM+sHTD/9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1 OTcyZTYwHhcNMjUxMjE4MDUwMTA5WhcNMjUxMjE5MDUwMTA5WjAzMTEwLwYDVQQD EygzNDU1MTUwYzg1MjJjN2E5NTcxZWZjMjVmNzI0NjM2YWNlYWJlZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZhsTgiSsKWtsLHrr1IvhoD9u62+ UQmhnNxQHevGr16gm9MXFIlcqUt4WtmfUpuMLsJ2TMrnK8+S8axPguAfakzs4ZDl aY9wrQ3GfmtqBF9AF8jCZE8gpvdazkABUHw14PLH9ZBNoWhGt0wZikhB5ynP7J5x k4v8Qga7S5Rx64fm8vM8f2ZBDwma24qXX1tjQrtYL0sX2MBBlw1HJ/gMt82a2tPM GdniYLktvyBqCOLaZIRfnc9oYimGR4EJsqXx6cWym+O3oT4uY+NXfX7A/foxIlSH fVjf/YW7Qz/C4Dk17NqFE/ZfPot44us/UbcrvYLe9a7BSbYvA21kHR5hhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRVFQyFIsepVx78JfckY2rOq+5VMB8GA1UdIwQY MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt NzQyNWIxM2Q1Y2Y4LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4 LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGY8pRVc JddcqtX/obpl7bHn1Oj7G9XkhURWmtHC1y7I00SIlfF1DTfPPmcdCIHhRlE29vJz Zc0qFpS3t1R55MZ4J2pnBcBx9eMOw5nw8s+jljQ38QHsSxpF/DUrL2nwYvsyINZx Lis6oGlrit51Q2fsH49DJ3W3jylM1QkQTwjS2oyHoKI87odWcqIYR/XrDuNW6gMS 3TFiTIrs/R0r0Ftm2eqVs/BIV5LmnWqaDU7LCDTu2meFfKXmWvwGGTeGBse7OmD1 1mEA3QoALy+hQQogsYo6LI0/4xh9FdjcquxQyph6LlQzkIPiKOiNwFXQYl9loxLz avqR2/kpZeigOw== -----END CERTIFICATE-----Generated at Thu Dec 18 13:56:26 2025 by rpki-client