This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json) Hash identifier: 1DtVbPpcNm8DabQFdSJkFtl6nlHcCBuBvQhg/aV94mM= Subject key identifier: 0C:B3:6E:59:D7:36:38:E2:D4:C3:2E:5C:A4:E1:52:A5:C9:BE:5C:1F Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83 Certificate serial: 019B75244F19B4D132CB1D212E1C5BD7DFAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft Manifest number: 17A2 Signing time: Wed 31 Dec 2025 16:01:12 +0000 Manifest this update: Wed 31 Dec 2025 16:01:12 +0000 Manifest next update: Thu 01 Jan 2026 16:01:12 +0000 Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=) 2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=) 3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=) 4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: gWjIGU45/UDlyhOmVpEu6uT1lL7317aCMQbo3nb+o2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:24:4f:19:b4:d1:32:cb:1d:21:2e:1c:5b:d7:df:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83 Validity Not Before: Dec 31 16:01:12 2025 GMT Not After : Jan 1 16:01:12 2026 GMT Subject: CN=0cb36e59d73638e2d4c32e5ca4e152a5c9be5c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:4f:ed:01:c9:ae:6d:4f:58:00:28:8f:48: bc:db:ee:6a:99:bb:cd:d9:51:ee:55:d2:fc:80:03: f0:83:49:17:6f:5f:84:d5:11:e7:0c:d6:1c:98:6d: e0:77:ac:78:f7:79:f8:22:68:87:9d:a6:ea:fb:09: 4a:d4:66:6f:cc:ee:13:c1:f1:c0:6f:41:0c:32:df: 4e:fa:2e:b1:ca:a2:57:6d:02:e1:29:27:79:77:05: d6:aa:48:b4:c5:94:a9:ef:14:15:53:0b:04:bc:1c: f6:ba:0f:f6:14:1b:fa:40:c8:f4:4e:fb:be:d4:19: 95:5c:02:3f:6e:a5:d2:fd:32:e3:a8:aa:7f:10:19: a9:c0:57:42:8b:29:28:a4:fc:12:89:a3:13:4a:ac: d0:cc:ad:42:41:9e:c1:b2:83:da:9a:6f:5e:c0:1f: 8c:36:98:0d:b0:a8:dc:2a:53:40:96:33:27:55:a7: e0:f3:c5:da:1c:c3:b3:4f:a5:c2:20:94:3f:49:5e: 9d:5b:7e:d5:77:1f:55:c9:0a:44:6c:8d:f0:81:3e: c0:c8:73:11:c7:05:f2:91:68:0a:0a:8d:aa:b4:88: 03:12:c6:0d:62:57:0a:dd:80:0f:5a:ea:d0:96:10: 13:f2:3d:1e:6c:fc:4a:45:54:ca:b2:0f:e4:0f:82: fc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B3:6E:59:D7:36:38:E2:D4:C3:2E:5C:A4:E1:52:A5:C9:BE:5C:1F X509v3 Authority Key Identifier: keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9f:9b:7c:c6:d9:66:df:1e:3e:e9:55:45:36:4e:b3:f3:c7: 8a:d9:ba:27:bf:8c:9f:33:87:07:d3:07:a4:fb:3d:4e:6b:69: 98:60:a0:b1:f1:2d:f5:87:04:4c:d5:78:99:9b:99:3b:98:8a: 99:d7:32:89:0a:ba:c3:4f:85:b7:b6:fa:07:f8:e7:46:d3:62: 77:b6:6c:b7:f7:6d:03:a1:92:98:8e:a1:20:8b:93:b8:8d:20: c0:df:42:3f:12:f1:49:a3:01:9c:53:5b:ac:eb:f7:85:70:64: c6:c5:f4:29:76:08:1f:c2:9c:1a:e9:05:1f:5f:ad:ca:29:86: 77:df:f9:8e:f2:9f:3b:0c:02:fb:ed:70:3d:39:7b:62:3c:83: 72:68:d2:eb:21:4d:fe:bb:64:75:c7:73:37:0b:49:ea:3a:5b: ae:9f:ec:10:31:5c:16:11:d9:cf:10:7a:10:6c:47:1d:57:c9: ce:e6:67:b8:26:17:c8:3b:7f:ae:0c:a2:95:4d:5f:19:99:81: e7:c7:84:29:f4:65:e2:57:b6:82:5a:82:7c:79:d6:db:fe:e4: 22:01:e9:a0:ff:cf:e8:0b:5b:6e:03:70:32:ac:07:0a:f8:00: 49:f4:e7:e1:f6:2e:2c:a9:76:7a:31:f8:9f:fe:84:1c:c1:70: d5:f1:27:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1JE8ZtNEyyx0hLhxb19+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MzBkYTIxNTE4MTg0MTQ1ZjZkNzYyMWI1YTEzYmQ1NDAz NWFjODMwHhcNMjUxMjMxMTYwMTEyWhcNMjYwMTAxMTYwMTEyWjAzMTEwLwYDVQQD EygwY2IzNmU1OWQ3MzYzOGUyZDRjMzJlNWNhNGUxNTJhNWM5YmU1YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWlP7QHJrm1PWAAoj0i82+5qmbvN 2VHuVdL8gAPwg0kXb1+E1RHnDNYcmG3gd6x493n4ImiHnabq+wlK1GZvzO4TwfHA b0EMMt9O+i6xyqJXbQLhKSd5dwXWqki0xZSp7xQVUwsEvBz2ug/2FBv6QMj0Tvu+ 1BmVXAI/bqXS/TLjqKp/EBmpwFdCiykopPwSiaMTSqzQzK1CQZ7BsoPamm9ewB+M NpgNsKjcKlNAljMnVafg88XaHMOzT6XCIJQ/SV6dW37Vdx9VyQpEbI3wgT7AyHMR xwXykWgKCo2qtIgDEsYNYlcK3YAPWurQlhAT8j0ebPxKRVTKsg/kD4L8HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyzblnXNjji1MMuXKThUqXJvlwfMB8GA1UdIwQY MBaAFLkw2iFRgYQUX212IbWhO9VANayDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWIt OTk0YWY1YzM0NDAyLzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWItOTk0YWY1YzM0NDAy LzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5+bfMbZ Zt8ePulVRTZOs/PHitm6J7+MnzOHB9MHpPs9TmtpmGCgsfEt9YcETNV4mZuZO5iK mdcyiQq6w0+Ft7b6B/jnRtNid7Zst/dtA6GSmI6hIIuTuI0gwN9CPxLxSaMBnFNb rOv3hXBkxsX0KXYIH8KcGukFH1+tyimGd9/5jvKfOwwC++1wPTl7YjyDcmjS6yFN /rtkdcdzNwtJ6jpbrp/sEDFcFhHZzxB6EGxHHVfJzuZnuCYXyDt/rgyilU1fGZmB 58eEKfRl4le2glqCfHnW2/7kIgHpoP/P6AtbbgNwMqwHCvgASfTn4fYuLKl2ejH4 n/6EHMFw1fEnTw== -----END CERTIFICATE-----Generated at Wed Dec 31 19:36:23 2025 by rpki-client