This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft File: uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json) Hash identifier: cV0GItA11QBfmcTaSbsCjaj0im6xY6efOqPfwPI4c5c= Subject key identifier: CC:17:56:46:5D:7C:CD:3A:01:F0:49:6A:E9:D2:0C:4B:37:23:73:ED Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5 Certificate issuer: /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5 Certificate serial: 019B3AFDB869A6CA5274B1C18A40000B31A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft Manifest number: 12EE Signing time: Sat 20 Dec 2025 09:01:04 +0000 Manifest this update: Sat 20 Dec 2025 09:01:04 +0000 Manifest next update: Sun 21 Dec 2025 09:01:04 +0000 Files and hashes: 1: Brko5nMKSPwBgCgkjjg5igCr-DI.roa (hash: 3fOnCI08ItaZVpBsarkgTQcdgGi7HK10nR8m2pkLLWI=) 2: RdMb9DZXvill1bIjga0E0ALFTSE.roa (hash: glVlBHXB1p3fuc6KcN7QeAF0s4whdubmLa4lXiIAO04=) 3: bGID9MISfapCQvxtnoK2mwgER1c.roa (hash: 48jEs1SYz7H/DF1j6XjhPt2MSQotOuG8cV4gNdbAuRU=) 4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: 64by5RwEc/L5DLJEeXn2/hJBsw8T0B2Bkq6bf8Egogs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:b8:69:a6:ca:52:74:b1:c1:8a:40:00:0b:31:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5 Validity Not Before: Dec 20 09:01:04 2025 GMT Not After : Dec 21 09:01:04 2025 GMT Subject: CN=cc1756465d7ccd3a01f0496ae9d20c4b372373ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:41:37:78:17:38:7f:1f:ac:c2:6f:f7:c4: 5d:09:f0:50:9a:5c:79:9e:bb:fb:85:c7:02:94:3f: b5:76:d9:99:2f:80:d3:05:88:85:6f:a9:f7:89:47: 45:10:3f:47:84:8f:e9:3c:b2:5e:28:a7:20:24:c2: a5:fa:36:79:cc:b7:cc:34:2f:40:87:3b:5e:c7:08: ca:58:40:39:60:5b:4e:ad:35:21:20:cf:1a:4f:e8: 8e:b1:3a:19:0b:cb:89:65:6f:af:45:a8:a0:0c:7d: b2:1b:41:c0:cb:d5:b0:d2:e4:94:55:29:e6:02:03: a9:76:ad:ec:37:17:21:48:be:94:d8:de:f2:03:39: 2d:41:01:36:30:81:78:6e:22:35:20:a5:44:2d:6b: 07:f3:0d:c2:81:ca:44:aa:aa:95:9c:7b:22:d7:fd: 5d:f8:d3:1f:6b:c8:72:96:87:d9:54:d9:f8:d6:ad: 65:bf:28:f9:ac:d6:85:38:6b:10:e9:52:ba:bc:0e: 1a:9f:59:94:11:46:37:12:de:6b:ee:38:6f:e9:43: 03:1b:22:95:7e:1a:0b:90:e3:04:16:12:b7:1c:aa: b3:e3:91:0d:e3:0e:52:b2:49:38:51:26:20:a2:9c: 15:01:59:55:e1:0b:f7:f2:f4:34:5b:b1:b1:ef:dc: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:17:56:46:5D:7C:CD:3A:01:F0:49:6A:E9:D2:0C:4B:37:23:73:ED X509v3 Authority Key Identifier: keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:68:ad:2e:2d:42:0a:12:ab:e0:33:fc:ff:08:80:72:8a:9f: ae:5a:23:08:19:8f:97:51:e9:ac:2f:10:d3:ee:37:9f:11:46: ce:8e:22:55:90:fd:0b:7b:83:5c:1f:80:45:d6:2c:af:ce:3f: d2:00:e0:8d:c1:45:60:6c:fa:b2:39:12:a9:a1:17:d0:5f:cb: d2:16:27:62:9b:db:01:2d:92:25:c6:8a:b9:92:af:16:2e:47: 88:45:75:3f:69:32:02:28:0e:20:a3:8c:b9:3c:39:58:7e:ff: 26:73:37:ab:f8:fb:8e:04:bf:50:ca:25:4f:f0:39:db:58:39: fd:58:e7:8d:14:12:fc:bf:f9:61:df:2b:31:cc:54:2a:26:cf: 25:67:77:de:23:fa:e3:4b:40:49:d1:c9:a5:f0:77:b2:3c:b6: 9a:b3:9e:d7:57:9f:e3:20:8e:17:f7:9e:be:2d:22:5d:27:b2: fd:54:fe:43:26:c6:0a:09:ed:1c:e7:08:b2:53:f8:6e:f5:b5: 84:4b:50:94:23:cb:53:dd:ce:7d:fd:3a:50:2b:46:47:94:58: b6:f4:27:84:79:ae:35:d8:7d:da:c1:12:e7:bf:1a:bb:f3:7d: 5a:cc:24:5d:b2:e9:52:97:4e:97:7f:60:44:a3:d7:6d:7c:4f: 00:e9:98:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/bhppspSdLHBikAACzGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZWQzZWJjZDIxNTVmOWExNzhhMTAzYWRhYjQ4ZmRhOGIy Mjc1YTUwHhcNMjUxMjIwMDkwMTA0WhcNMjUxMjIxMDkwMTA0WjAzMTEwLwYDVQQD EyhjYzE3NTY0NjVkN2NjZDNhMDFmMDQ5NmFlOWQyMGM0YjM3MjM3M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW9BN3gXOH8frMJv98RdCfBQmlx5 nrv7hccClD+1dtmZL4DTBYiFb6n3iUdFED9HhI/pPLJeKKcgJMKl+jZ5zLfMNC9A hztexwjKWEA5YFtOrTUhIM8aT+iOsToZC8uJZW+vRaigDH2yG0HAy9Ww0uSUVSnm AgOpdq3sNxchSL6U2N7yAzktQQE2MIF4biI1IKVELWsH8w3CgcpEqqqVnHsi1/1d +NMfa8hylofZVNn41q1lvyj5rNaFOGsQ6VK6vA4an1mUEUY3Et5r7jhv6UMDGyKV fhoLkOMEFhK3HKqz45EN4w5Sskk4USYgopwVAVlV4Qv38vQ0W7Gx79wsQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwXVkZdfM06AfBJaunSDEs3I3PtMB8GA1UdIwQY MBaAFLjtPrzSFV+aF4oQOtq0j9qLInWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMt ZGVhMTJkZDhjN2Y0LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMtZGVhMTJkZDhjN2Y0 LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWitLi1C ChKr4DP8/wiAcoqfrlojCBmPl1HprC8Q0+43nxFGzo4iVZD9C3uDXB+ARdYsr84/ 0gDgjcFFYGz6sjkSqaEX0F/L0hYnYpvbAS2SJcaKuZKvFi5HiEV1P2kyAigOIKOM uTw5WH7/JnM3q/j7jgS/UMolT/A521g5/VjnjRQS/L/5Yd8rMcxUKibPJWd33iP6 40tASdHJpfB3sjy2mrOe11ef4yCOF/eevi0iXSey/VT+QybGCgntHOcIslP4bvW1 hEtQlCPLU93Off06UCtGR5RYtvQnhHmuNdh92sES578au/N9WswkXbLpUpdOl39g RKPXbXxPAOmYRw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:59 2025 by rpki-client