This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft File: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json) Hash identifier: fjlW+BSup6xPNr0+cX+KUwLxf7TgAAAKCmZYYA/bg9M= Subject key identifier: 95:A9:53:67:45:93:25:F6:97:71:9E:75:9C:5F:45:3E:0A:7E:91:65 Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Certificate serial: 019B6F8F556EC9546BB2E981FF2854805FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 14:00:23 +0000 Manifest this update: Tue 30 Dec 2025 14:00:23 +0000 Manifest next update: Wed 31 Dec 2025 14:00:23 +0000 Files and hashes: 1: PA8CjloTPg-68N7OnvoYD-1oLhk.roa (hash: 4/Ym4G39HmXB13TW6+krF+Wwi7w8FIhxrF2UkWzgLLU=) 2: c26zPerzgVBHPu_vijyV_Oovrl4.roa (hash: Gk43PDLGRAfU27KozR+OSnOsvS5KnMxHT/HJnzP3YQ0=) 3: i_g5q7-hPStlEv1O5n0OZOzfR60.roa (hash: m3x1cS4XhcesKKNznb1VTlqwdh2lVHJU/PvB8L7dB+M=) 4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: YUDOXWOP1/Gfy66cdf3hgFJ7ahJYQmvIlxHJbDZ9Z6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:8f:55:6e:c9:54:6b:b2:e9:81:ff:28:54:80:5f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Validity Not Before: Dec 30 14:00:23 2025 GMT Not After : Dec 31 14:00:23 2025 GMT Subject: CN=95a95367459325f697719e759c5f453e0a7e9165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:cc:00:ea:30:e7:df:8f:9e:db:80:bd:7e: d3:94:3f:4a:05:07:8e:c7:0a:b7:0b:5c:ea:d4:fd: c7:6c:4f:8b:9e:5a:be:57:2d:56:f9:31:b4:f7:50: e4:4d:56:bd:fe:89:d8:5c:b8:a5:36:69:a8:8e:fe: 97:d9:08:1b:8e:8a:c9:6d:5d:9a:fd:84:04:0d:88: 13:4c:44:87:ae:62:f1:72:91:dd:0b:1b:8e:ef:ed: b4:d1:b5:2b:e7:db:84:8a:16:36:98:70:0e:93:0c: cd:22:90:9a:99:40:ca:ec:9d:79:fe:57:40:75:b6: 08:f8:e2:6f:0b:b9:3d:6c:c1:de:85:2c:21:e1:15: fd:02:9b:b2:00:99:ff:dd:90:8c:82:9b:a7:ab:f9: 71:95:e4:d3:ec:b8:da:5e:8e:51:dc:ac:03:31:93: 37:a9:a9:6b:cb:dd:29:65:d3:bb:2e:7d:d6:8a:ce: 5e:bd:5e:e1:a2:e9:77:29:d3:5f:5e:e3:be:a2:33: 60:d1:11:d4:47:4c:ad:f4:c9:32:ef:59:29:65:a2: 4f:97:40:a3:d7:c3:46:ed:0c:d9:9b:e7:4b:6c:9f: 28:b7:16:16:85:31:b1:53:e0:15:73:3a:ec:1a:47: 0e:d8:97:ff:00:48:0c:45:2a:b6:34:48:e5:22:0a: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A9:53:67:45:93:25:F6:97:71:9E:75:9C:5F:45:3E:0A:7E:91:65 X509v3 Authority Key Identifier: keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:16:57:d8:d0:e5:1a:16:3c:65:0a:4a:a4:b3:31:b3:c2:32: 91:29:d4:6f:0f:17:f3:66:ff:3a:58:62:d9:fb:6f:ac:89:ff: e5:69:73:17:11:8f:9a:d9:59:a6:fe:18:f4:81:57:fa:a5:3c: f5:03:c5:bd:62:2a:ef:ec:b3:aa:77:fe:c2:10:7c:68:79:7c: 1d:5a:30:fe:de:a3:ed:8f:ea:e1:d9:a1:b2:9e:d5:31:97:bb: 75:d8:cd:b8:12:12:c7:d4:ac:1c:1d:4c:7e:e5:55:35:a1:b1: c1:4e:29:b7:9f:06:fc:69:a1:26:9a:10:d2:47:1f:9b:30:f8: 3f:c9:7f:7d:f6:53:75:a1:21:a8:37:e6:87:23:43:4d:e1:3c: d1:17:1a:89:9e:cc:a6:08:5d:c5:ab:99:6e:64:b5:d6:f5:ba: bf:a0:a6:2b:57:5a:9f:3e:19:7e:ca:e8:eb:41:77:52:a9:dd: 88:62:ef:22:4e:85:09:df:ed:6b:10:d2:30:85:a9:58:0a:9c: ab:a6:d4:31:2e:13:46:9d:f5:67:61:8e:b8:48:56:83:7f:2a: 50:23:8d:6d:c3:8a:b3:76:91:76:07:37:d0:aa:9d:1c:7e:4e: e3:65:2a:7a:5d:d4:0c:27:e4:2f:51:8f:05:dd:2b:3d:04:39: 26:76:e0:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvj1VuyVRrsumB/yhUgF/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh OWZjMGYwHhcNMjUxMjMwMTQwMDIzWhcNMjUxMjMxMTQwMDIzWjAzMTEwLwYDVQQD Eyg5NWE5NTM2NzQ1OTMyNWY2OTc3MTllNzU5YzVmNDUzZTBhN2U5MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaDMAOow59+PntuAvX7TlD9KBQeO xwq3C1zq1P3HbE+Lnlq+Vy1W+TG091DkTVa9/onYXLilNmmojv6X2QgbjorJbV2a /YQEDYgTTESHrmLxcpHdCxuO7+200bUr59uEihY2mHAOkwzNIpCamUDK7J15/ldA dbYI+OJvC7k9bMHehSwh4RX9ApuyAJn/3ZCMgpunq/lxleTT7LjaXo5R3KwDMZM3 qalry90pZdO7Ln3Wis5evV7houl3KdNfXuO+ojNg0RHUR0yt9Mky71kpZaJPl0Cj 18NG7QzZm+dLbJ8otxYWhTGxU+AVczrsGkcO2Jf/AEgMRSq2NEjlIgpX9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWpU2dFkyX2l3GedZxfRT4KfpFlMB8GA1UdIwQY MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt NmVhM2NiZmQzYTg0LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0 LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRZX2NDl GhY8ZQpKpLMxs8IykSnUbw8X82b/Olhi2ftvrIn/5WlzFxGPmtlZpv4Y9IFX+qU8 9QPFvWIq7+yzqnf+whB8aHl8HVow/t6j7Y/q4dmhsp7VMZe7ddjNuBISx9SsHB1M fuVVNaGxwU4pt58G/GmhJpoQ0kcfmzD4P8l/ffZTdaEhqDfmhyNDTeE80RcaiZ7M pghdxauZbmS11vW6v6CmK1danz4Zfsro60F3UqndiGLvIk6FCd/taxDSMIWpWAqc q6bUMS4TRp31Z2GOuEhWg38qUCONbcOKs3aRdgc30KqdHH5O42Uqel3UDCfkL1GP Bd0rPQQ5Jnbglg== -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:15 2025 by rpki-client