This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json) Hash identifier: iCZUbK/wRKZ87+JSFyh3uXD1n3dYvk1BCCEOAtUu2oE= Subject key identifier: 2B:1A:A6:92:8E:8B:FE:F3:33:E0:74:92:58:08:70:5F:6D:BB:0B:1E Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad Certificate serial: 019B330D106020BF41DEAAE1D36686DABE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft Manifest number: 0600 Signing time: Thu 18 Dec 2025 20:00:52 +0000 Manifest this update: Thu 18 Dec 2025 20:00:52 +0000 Manifest next update: Fri 19 Dec 2025 20:00:52 +0000 Files and hashes: 1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=) 2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: TAllvlvsKcn4rcwRUyAY2io3s5DH9LoYLH1jDsRy8Go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:10:60:20:bf:41:de:aa:e1:d3:66:86:da:be:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad Validity Not Before: Dec 18 20:00:52 2025 GMT Not After : Dec 19 20:00:52 2025 GMT Subject: CN=2b1aa6928e8bfef333e074925808705f6dbb0b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:52:01:15:29:f1:e0:2d:32:3b:fc:b1:81: 2b:32:26:58:37:5f:1f:5e:a4:77:e6:59:c9:33:9e: 62:b5:23:fe:0e:6b:7b:d1:5f:e3:34:c9:5b:e6:ce: ec:a1:84:21:b3:6c:e1:74:f7:93:c8:48:0c:cd:68: dc:76:f8:ba:d9:45:18:7c:23:bb:7c:9b:4d:13:c5: 26:5b:60:ab:7c:0a:36:55:79:3a:53:9c:65:f3:89: 72:fc:f9:dc:16:cc:2e:39:99:e6:e9:34:69:68:01: 14:a6:2c:16:e1:d2:4a:9e:cc:8d:ac:2c:83:46:55: 74:ca:6d:ff:15:20:a5:09:e1:f1:9b:79:62:41:d4: 0a:91:ea:63:30:1e:a8:06:35:a4:56:8c:a7:aa:ec: 6e:7e:9d:58:c7:7b:35:8a:51:7c:a0:43:01:52:89: 9a:93:68:8a:5a:7a:fb:4b:7a:2b:c8:26:91:95:e4: f5:a8:a3:48:08:44:51:77:0d:b6:16:4a:49:8d:ee: b2:e1:48:3c:f8:eb:33:f1:62:93:5a:29:03:eb:50: 88:64:50:10:b3:4a:a0:6c:32:aa:fe:27:02:5d:9b: 00:7e:30:b5:8e:ee:55:10:b0:a5:e6:a9:94:28:05: 1f:cc:72:58:f1:e7:7c:dc:5a:6a:47:a8:26:c5:7f: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1A:A6:92:8E:8B:FE:F3:33:E0:74:92:58:08:70:5F:6D:BB:0B:1E X509v3 Authority Key Identifier: keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6b:db:8b:ce:c5:cb:b0:08:a1:c6:01:78:4c:fc:ad:d1:63: d4:03:00:84:84:3a:d2:76:4d:1a:2b:87:22:78:35:0d:4e:a3: a3:8e:e6:d5:43:c7:7a:7b:24:4a:e2:fd:2f:9c:aa:02:2e:10: 5b:9c:7c:eb:62:b0:6a:91:a5:35:61:5a:aa:47:15:4b:6e:8c: 8b:7c:1b:0e:79:c6:fd:55:19:5b:6c:9a:b9:e1:a7:ca:a2:f6: 4f:f4:1c:60:24:12:56:54:39:a4:23:30:4c:e9:64:1b:64:d9: 8e:e9:fe:e1:2f:69:a5:b3:01:2a:bb:40:6c:af:81:c5:b1:43: 7a:d5:5d:fe:d1:fc:59:8f:96:9f:82:67:4e:e8:79:3f:81:f1: 3d:79:18:c6:3d:e3:ce:2f:43:22:c9:6f:47:38:6c:03:b5:99: df:7e:fc:b4:12:28:d1:c7:2e:fc:22:b3:f2:a7:94:80:a4:7e: 76:4f:53:5a:ae:cf:52:33:6e:9d:79:80:b7:34:5b:d9:7e:df: 5b:80:40:11:51:96:01:8f:af:82:21:8a:74:44:92:3b:2d:ac: d4:13:91:3a:4f:f4:34:4c:18:97:63:26:40:7f:dd:ed:0e:3b: 64:1e:d2:49:3e:83:05:07:07:1f:d3:fd:fa:a8:34:a2:a0:ef: 7c:ea:fe:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDRBgIL9B3qrh02aG2r46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOGRhZDJjNGEwZTExN2E2ODY4YzhkNjdiZTEwMzA4YTY0 OTc0YWQwHhcNMjUxMjE4MjAwMDUyWhcNMjUxMjE5MjAwMDUyWjAzMTEwLwYDVQQD EygyYjFhYTY5MjhlOGJmZWYzMzNlMDc0OTI1ODA4NzA1ZjZkYmIwYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xSARUp8eAtMjv8sYErMiZYN18f XqR35lnJM55itSP+Dmt70V/jNMlb5s7soYQhs2zhdPeTyEgMzWjcdvi62UUYfCO7 fJtNE8UmW2CrfAo2VXk6U5xl84ly/PncFswuOZnm6TRpaAEUpiwW4dJKnsyNrCyD RlV0ym3/FSClCeHxm3liQdQKkepjMB6oBjWkVoynquxufp1Yx3s1ilF8oEMBUoma k2iKWnr7S3oryCaRleT1qKNICERRdw22FkpJje6y4Ug8+Osz8WKTWikD61CIZFAQ s0qgbDKq/icCXZsAfjC1ju5VELCl5qmUKAUfzHJY8ed83FpqR6gmxX/ePwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsappKOi/7zM+B0klgIcF9tuwseMB8GA1UdIwQY MBaAFLqNrSxKDhF6aGjI1nvhAwimSXStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYt MjljMDIzZjk0NzgxLzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYtMjljMDIzZjk0Nzgx LzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWvbi87F y7AIocYBeEz8rdFj1AMAhIQ60nZNGiuHIng1DU6jo47m1UPHenskSuL9L5yqAi4Q W5x862KwapGlNWFaqkcVS26Mi3wbDnnG/VUZW2yaueGnyqL2T/QcYCQSVlQ5pCMw TOlkG2TZjun+4S9ppbMBKrtAbK+BxbFDetVd/tH8WY+Wn4JnTuh5P4HxPXkYxj3j zi9DIslvRzhsA7WZ3378tBIo0ccu/CKz8qeUgKR+dk9TWq7PUjNunXmAtzRb2X7f W4BAEVGWAY+vgiGKdESSOy2s1BOROk/0NEwYl2MmQH/d7Q47ZB7SST6DBQcHH9P9 +qg0oqDvfOr+9w== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:44 2025 by rpki-client