This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json) Hash identifier: yKUXnwpO3u/giZ32dG7yUuPum2O05C/+jiHTXJzrAyg= Subject key identifier: A3:C7:09:8B:87:69:37:19:89:83:22:41:80:88:71:D3:49:23:D9:E0 Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87 Certificate serial: 019B41A44049E91AE71416513DD69F39AE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft Manifest number: 0145 Signing time: Sun 21 Dec 2025 16:00:41 +0000 Manifest this update: Sun 21 Dec 2025 16:00:41 +0000 Manifest next update: Mon 22 Dec 2025 16:00:41 +0000 Files and hashes: 1: 5GYWrzRu65AjS73_-IgwDSj8n-Q.roa (hash: YdE2CXn8HuPLnZ5nEOMoIyiMWMH03XMYxsoKuzVp7Lc=) 2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: 59hNcuHvZe/OGKUDbtsvrWUivC924zW5oH6hMlNwRkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:40:49:e9:1a:e7:14:16:51:3d:d6:9f:39:ae:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87 Validity Not Before: Dec 21 16:00:41 2025 GMT Not After : Dec 22 16:00:41 2025 GMT Subject: CN=a3c7098b8769371989832241808871d34923d9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:61:4b:62:7c:27:78:92:bf:7f:8e:ba:90: a7:a8:58:ae:15:c9:89:4f:3e:41:ba:53:9a:1f:60: 14:70:d7:61:f3:46:e5:92:6f:7d:34:40:b1:c0:74: fe:e8:8a:74:17:26:d0:c2:d1:09:73:bc:99:bf:0d: 78:b7:45:61:9b:49:cc:c5:7b:7e:f8:7e:02:cf:23: e8:b9:f1:72:f3:b7:b9:0d:13:11:32:41:5f:ae:29: 29:b7:45:bf:08:4e:25:a7:16:ad:c9:42:69:d2:c3: fa:0f:59:80:0b:79:78:90:03:e9:85:24:c2:1c:d8: 7b:04:82:a3:a1:cc:7c:0d:45:a1:e5:2a:18:77:79: 1d:88:df:94:fa:16:cf:eb:f2:f5:54:21:4c:ba:a2: 29:13:46:bc:f2:f1:7c:08:b9:37:2d:fd:54:68:cf: 05:e5:50:49:88:7f:4e:c0:a5:aa:5f:c6:34:db:65: 72:01:67:0b:13:f3:79:bf:8f:a3:ab:c7:bd:4f:b4: 43:c1:c5:6f:21:c1:31:14:89:7d:bb:bf:c6:61:e8: 91:f9:c7:23:ba:b7:53:e2:30:94:99:a4:9a:e1:a3: 6a:35:65:98:a0:df:f6:87:e5:b2:76:a3:9e:01:38: df:23:16:eb:fe:6c:88:48:9d:76:91:fb:03:89:d6: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C7:09:8B:87:69:37:19:89:83:22:41:80:88:71:D3:49:23:D9:E0 X509v3 Authority Key Identifier: keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:51:7a:4c:5b:25:79:90:45:ce:07:7d:d2:17:78:88:9f:7c: ab:50:4c:2b:b9:4f:83:4f:3c:0a:ab:ee:7e:ed:3c:77:77:61: 29:9e:bc:7f:d3:b6:df:1c:f8:1d:ba:6d:38:91:af:1e:f3:25: 42:55:43:c1:76:ad:15:da:b6:a8:fa:41:7a:04:b7:b3:4b:d2: 04:ca:aa:71:f0:e0:77:ee:e1:1a:d2:a0:87:2c:36:d7:9c:6e: ff:b9:d6:20:1a:35:c2:dc:b1:02:c2:b6:15:20:08:4d:02:ad: 22:8c:1e:2d:6a:3a:e5:1c:08:3f:e8:eb:36:86:e7:4c:ca:a4: 9d:5f:0a:b4:86:49:66:33:cb:f4:1f:c8:ae:e5:48:7c:ad:3c: 97:fc:3d:6d:94:30:c4:18:16:e6:cb:49:75:f0:27:d5:bf:7b: 9d:6f:cf:df:a3:58:04:25:1b:eb:ec:be:d2:a7:ab:c2:fe:23: 66:6d:ba:e3:f4:3b:f3:3e:a5:5b:18:19:c5:92:d6:be:b8:d9: 47:b5:c4:3f:c6:f2:e4:c4:3a:ce:b1:a9:53:2b:52:fd:26:a4: f6:99:91:96:85:69:1d:9c:8b:02:6b:61:ad:0a:5d:35:b0:52: 9f:55:a6:a7:02:1f:66:c4:5f:ea:e5:6e:2d:91:9f:11:d3:bf: e5:91:a1:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpEBJ6RrnFBZRPdafOa6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjU4NWQwOGI5N2U2NzlmMDgyOGJmMTAyYmVhYjUxZGNk YWZhODcwHhcNMjUxMjIxMTYwMDQxWhcNMjUxMjIyMTYwMDQxWjAzMTEwLwYDVQQD EyhhM2M3MDk4Yjg3NjkzNzE5ODk4MzIyNDE4MDg4NzFkMzQ5MjNkOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/5hS2J8J3iSv3+OupCnqFiuFcmJ Tz5BulOaH2AUcNdh80blkm99NECxwHT+6Ip0FybQwtEJc7yZvw14t0Vhm0nMxXt+ +H4CzyPoufFy87e5DRMRMkFfrikpt0W/CE4lpxatyUJp0sP6D1mAC3l4kAPphSTC HNh7BIKjocx8DUWh5SoYd3kdiN+U+hbP6/L1VCFMuqIpE0a88vF8CLk3Lf1UaM8F 5VBJiH9OwKWqX8Y022VyAWcLE/N5v4+jq8e9T7RDwcVvIcExFIl9u7/GYeiR+ccj urdT4jCUmaSa4aNqNWWYoN/2h+WydqOeATjfIxbr/myISJ12kfsDidaqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPHCYuHaTcZiYMiQYCIcdNJI9ngMB8GA1UdIwQY MBaAFLhlhdCLl+Z58IKL8QK+q1Hc2vqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgt NGZhZGNiMTgyYzVhLzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgtNGZhZGNiMTgyYzVh LzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVF6TFsl eZBFzgd90hd4iJ98q1BMK7lPg088Cqvufu08d3dhKZ68f9O23xz4HbptOJGvHvMl QlVDwXatFdq2qPpBegS3s0vSBMqqcfDgd+7hGtKghyw215xu/7nWIBo1wtyxAsK2 FSAITQKtIoweLWo65RwIP+jrNobnTMqknV8KtIZJZjPL9B/IruVIfK08l/w9bZQw xBgW5stJdfAn1b97nW/P36NYBCUb6+y+0qerwv4jZm264/Q78z6lWxgZxZLWvrjZ R7XEP8by5MQ6zrGpUytS/Sak9pmRloVpHZyLAmthrQpdNbBSn1WmpwIfZsRf6uVu LZGfEdO/5ZGhBQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:31 2025 by rpki-client