This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json) Hash identifier: 20PvgghLOClHpQudGG2sLquniqXS3h35lDzTgcCSxoU= Subject key identifier: 41:9E:11:29:3C:03:AB:2B:4F:D0:D0:39:84:04:AC:59:71:48:FB:54 Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad Certificate serial: 019B53E1CB3E48F7B39953DC768A660AEB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft Manifest number: 0611 Signing time: Thu 25 Dec 2025 05:01:05 +0000 Manifest this update: Thu 25 Dec 2025 05:01:05 +0000 Manifest next update: Fri 26 Dec 2025 05:01:05 +0000 Files and hashes: 1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=) 2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: ZrXfSlARo85fmu3UnsTEgqgdMmw0n8ysDnvkIe2qcFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:cb:3e:48:f7:b3:99:53:dc:76:8a:66:0a:eb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad Validity Not Before: Dec 25 05:01:05 2025 GMT Not After : Dec 26 05:01:05 2025 GMT Subject: CN=419e11293c03ab2b4fd0d0398404ac597148fb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:19:c6:3f:34:51:0f:4e:8c:77:76:a3:27: 4c:2e:28:87:4d:ca:8f:bc:41:ea:f6:11:f8:68:6c: db:16:7f:d8:aa:bc:f5:6c:82:7d:be:03:a6:a9:57: e1:58:92:cd:49:72:3b:63:a0:57:73:64:82:74:a7: 7c:32:4d:96:10:51:50:d2:10:36:fd:dd:da:40:b8: 62:f5:6b:0b:3c:44:c9:76:8c:7d:3d:fc:70:ab:c6: 22:b4:e2:c8:b6:0a:21:4b:0b:7d:63:72:40:76:19: 6d:fc:ec:65:e7:34:96:1b:08:83:49:a2:b7:44:02: 4a:f5:5b:18:81:f1:98:a6:bf:e9:c5:b4:80:e7:e9: a0:3a:98:34:f3:70:c2:26:ae:8d:d6:4c:5b:de:0a: 59:d3:26:03:33:08:37:cc:eb:57:46:fd:1a:9b:55: 17:58:be:4a:4f:1a:f1:ed:d6:2e:f0:ce:b9:13:db: 0d:60:a5:b6:33:b1:77:7e:44:13:d8:24:a5:78:63: 5d:93:ba:4e:c8:a4:e4:6e:08:19:25:36:47:f2:8f: 39:8f:c7:32:c6:fb:17:12:a2:e6:1a:e3:b7:19:9d: c0:c8:50:a9:15:f4:fb:1a:01:f3:17:cd:22:b5:54: c7:b3:54:2e:b5:a2:d9:e1:3b:80:16:04:1f:e2:a7: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:11:29:3C:03:AB:2B:4F:D0:D0:39:84:04:AC:59:71:48:FB:54 X509v3 Authority Key Identifier: keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:86:23:67:fe:74:7f:62:0a:dc:39:29:29:f4:13:95:7e:0f: 01:1b:01:6b:2a:14:17:4e:1e:f0:c9:47:f4:19:88:b0:fc:1f: 8e:ad:f4:05:c6:f7:19:aa:19:54:dd:29:3b:c6:f4:0d:ad:1c: 60:8f:9e:d0:64:51:59:b7:6e:a3:03:35:02:4e:2b:5a:1b:f2: 43:0e:20:06:18:20:fa:b7:60:2a:01:f6:6c:31:91:eb:b7:29: c3:2c:51:40:9f:09:3b:b5:1d:49:3f:6a:f9:e8:a1:35:27:3e: 5e:32:0c:2d:ea:a8:5e:de:90:1e:c5:4e:54:37:13:9d:07:ad: 58:0c:0f:8f:cc:3e:f6:38:10:00:a0:cd:35:28:35:3f:3b:a7: 52:8b:48:dc:fd:32:e0:c1:46:77:4c:8a:7d:5a:36:a6:ba:83: 2d:f3:45:3c:54:ba:ff:fa:f5:00:7c:a9:43:ba:a2:3f:ee:a2: db:d2:64:73:6b:06:a8:7b:1b:6d:d4:39:53:06:92:0c:7d:f4: f6:23:dc:71:c2:d8:0d:ac:80:35:ca:aa:ac:01:1b:67:68:c5: e6:d6:46:a5:bf:19:0b:2b:fd:3f:f6:a4:76:57:64:1e:9e:7a: 11:3d:39:4b:e4:29:1f:e6:a5:9f:4b:c3:15:ba:a6:a7:6a:94: ba:24:86:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4cs+SPezmVPcdopmCuuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOGRhZDJjNGEwZTExN2E2ODY4YzhkNjdiZTEwMzA4YTY0 OTc0YWQwHhcNMjUxMjI1MDUwMTA1WhcNMjUxMjI2MDUwMTA1WjAzMTEwLwYDVQQD Eyg0MTllMTEyOTNjMDNhYjJiNGZkMGQwMzk4NDA0YWM1OTcxNDhmYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO8Zxj80UQ9OjHd2oydMLiiHTcqP vEHq9hH4aGzbFn/Yqrz1bIJ9vgOmqVfhWJLNSXI7Y6BXc2SCdKd8Mk2WEFFQ0hA2 /d3aQLhi9WsLPETJdox9Pfxwq8YitOLItgohSwt9Y3JAdhlt/Oxl5zSWGwiDSaK3 RAJK9VsYgfGYpr/pxbSA5+mgOpg083DCJq6N1kxb3gpZ0yYDMwg3zOtXRv0am1UX WL5KTxrx7dYu8M65E9sNYKW2M7F3fkQT2CSleGNdk7pOyKTkbggZJTZH8o85j8cy xvsXEqLmGuO3GZ3AyFCpFfT7GgHzF80itVTHs1QutaLZ4TuAFgQf4qfYBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGeESk8A6srT9DQOYQErFlxSPtUMB8GA1UdIwQY MBaAFLqNrSxKDhF6aGjI1nvhAwimSXStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYt MjljMDIzZjk0NzgxLzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYtMjljMDIzZjk0Nzgx LzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4YjZ/50 f2IK3DkpKfQTlX4PARsBayoUF04e8MlH9BmIsPwfjq30Bcb3GaoZVN0pO8b0Da0c YI+e0GRRWbduowM1Ak4rWhvyQw4gBhgg+rdgKgH2bDGR67cpwyxRQJ8JO7UdST9q +eihNSc+XjIMLeqoXt6QHsVOVDcTnQetWAwPj8w+9jgQAKDNNSg1PzunUotI3P0y 4MFGd0yKfVo2prqDLfNFPFS6//r1AHypQ7qiP+6i29Jkc2sGqHsbbdQ5UwaSDH30 9iPcccLYDayANcqqrAEbZ2jF5tZGpb8ZCyv9P/akdldkHp56ET05S+QpH+aln0vD Fbqmp2qUuiSGXw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:13:20 2025 by rpki-client