This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json) Hash identifier: Ar7FsLwt8qqgoHp7EZskkm5Xp7kO08zk0eRCuSgf3tw= Subject key identifier: EF:F9:24:34:41:25:15:74:A8:8D:42:0E:3C:A3:3C:9A:E9:76:DB:5B Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd Certificate serial: 019B40C942F1104247A569C4BB893822769B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft Manifest number: 13A8 Signing time: Sun 21 Dec 2025 12:01:30 +0000 Manifest this update: Sun 21 Dec 2025 12:01:30 +0000 Manifest next update: Mon 22 Dec 2025 12:01:30 +0000 Files and hashes: 1: hx_fLybZMd0bewVXBVAM7S3L-GQ.roa (hash: sK9kED5NHQV+ZF0/R5VnMBtuYFGBIVWRa2IGw5jpGTA=) 2: oZEDClQI5mUeR-tun2SMB8BFO6g.roa (hash: aVZk36h9DNYmGpwbSUsBXNwd3910rjsUnxEvjedXyHo=) 3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: UXexjhvaF/lvj7H4J5Pmky9FTUhxB1rxWcOLXdoMnhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:42:f1:10:42:47:a5:69:c4:bb:89:38:22:76:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd Validity Not Before: Dec 21 12:01:30 2025 GMT Not After : Dec 22 12:01:30 2025 GMT Subject: CN=eff9243441251574a88d420e3ca33c9ae976db5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:51:48:64:64:12:91:45:8c:6f:e4:c2:d9: eb:97:99:26:5f:4f:3c:aa:79:dc:40:e3:fb:55:5e: 6f:e6:7f:3f:ab:ac:fe:29:b0:0c:00:f9:dc:3e:2d: eb:fd:c0:cc:8e:3a:3e:01:8a:81:f5:3f:42:b3:f4: 9c:11:b0:7d:57:11:02:e0:bb:be:73:0a:3b:8a:3e: 52:77:b4:17:44:4f:1c:9c:77:72:af:ca:61:6d:78: e0:ab:bc:3f:59:23:15:7d:3b:69:b6:59:0f:4e:e0: 06:fc:58:95:b7:9e:0a:b6:7f:8f:d0:cd:73:44:2b: b6:23:0e:2c:60:23:42:8f:b3:85:a8:2a:05:02:7b: 96:f3:20:42:3f:14:91:8e:b6:b9:2c:e7:75:f7:2c: 99:57:23:59:58:17:df:9c:37:75:68:55:71:df:d9: 3e:fd:ea:dc:4d:5e:78:4a:16:7b:d7:9b:5f:75:c5: 31:69:cc:62:bf:20:5e:b4:78:c6:b9:6d:40:af:fd: 7b:28:8a:1f:95:d8:18:f8:e1:de:ab:63:c9:16:5f: 03:62:64:9b:6b:6a:4f:df:cc:73:11:47:ac:06:19: ef:03:5d:6b:a3:09:92:b3:bc:86:6d:2d:66:3a:5a: ee:e0:74:21:aa:ca:62:cd:15:5e:a1:4d:72:30:56: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F9:24:34:41:25:15:74:A8:8D:42:0E:3C:A3:3C:9A:E9:76:DB:5B X509v3 Authority Key Identifier: keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:98:b8:70:fb:ad:2e:d1:f6:df:ea:d2:13:9f:93:fa:c2:e2: d8:95:59:4c:7a:a4:89:23:55:b2:31:79:fc:1d:cd:60:e9:b4: 40:76:90:66:43:9e:65:08:62:b8:69:3f:0d:b6:f6:47:d0:3e: ed:ed:58:a4:65:c3:2e:e2:8e:eb:77:17:41:89:d6:ee:18:fd: a0:d9:39:d1:b1:e6:8e:19:a9:5b:cb:b3:b0:03:8d:3f:43:67: 4b:28:b0:53:c7:a5:67:88:d3:bf:d7:91:45:e4:d8:c2:1d:42: 7b:68:8e:71:fa:41:85:e0:b3:3b:f2:cf:8b:19:d5:24:65:ac: 5f:e2:19:51:f5:09:85:0a:a5:17:33:86:63:2d:31:ca:62:55: 03:29:00:0a:10:2a:37:b8:ad:1b:78:c7:8e:60:43:3c:d7:8b: 43:1c:9d:76:68:b4:27:9e:e8:cc:16:f9:d0:02:e3:8a:76:33: ca:02:5b:79:81:50:15:f5:82:31:fd:01:86:0b:2f:f8:2f:fd: 6e:31:46:54:f0:3d:b8:b4:c6:98:97:a3:d1:ec:f4:8c:93:ff: bd:82:1f:bc:f6:89:88:86:69:f3:cb:ad:16:95:32:54:80:cb: 0c:a7:97:28:7a:5a:89:e2:8c:c8:1a:83:96:33:8a:07:1d:60: e5:10:80:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyULxEEJHpWnEu4k4InabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNzczMDFlMTRkNjViM2EzZDY4NmRhYWMxNmRmYzQ5YWM0 OGM3Y2QwHhcNMjUxMjIxMTIwMTMwWhcNMjUxMjIyMTIwMTMwWjAzMTEwLwYDVQQD EyhlZmY5MjQzNDQxMjUxNTc0YTg4ZDQyMGUzY2EzM2M5YWU5NzZkYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFhRSGRkEpFFjG/kwtnrl5kmX088 qnncQOP7VV5v5n8/q6z+KbAMAPncPi3r/cDMjjo+AYqB9T9Cs/ScEbB9VxEC4Lu+ cwo7ij5Sd7QXRE8cnHdyr8phbXjgq7w/WSMVfTtptlkPTuAG/FiVt54Ktn+P0M1z RCu2Iw4sYCNCj7OFqCoFAnuW8yBCPxSRjra5LOd19yyZVyNZWBffnDd1aFVx39k+ /ercTV54ShZ715tfdcUxacxivyBetHjGuW1Ar/17KIofldgY+OHeq2PJFl8DYmSb a2pP38xzEUesBhnvA11rowmSs7yGbS1mOlru4HQhqspizRVeoU1yMFZ1NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/5JDRBJRV0qI1CDjyjPJrpdttbMB8GA1UdIwQY MBaAFLp3MB4U1ls6PWhtqsFt/EmsSMfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEt NWM2OGY2YjBiMmM3LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEtNWM2OGY2YjBiMmM3 LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5i4cPut LtH23+rSE5+T+sLi2JVZTHqkiSNVsjF5/B3NYOm0QHaQZkOeZQhiuGk/Dbb2R9A+ 7e1YpGXDLuKO63cXQYnW7hj9oNk50bHmjhmpW8uzsAONP0NnSyiwU8elZ4jTv9eR ReTYwh1Ce2iOcfpBheCzO/LPixnVJGWsX+IZUfUJhQqlFzOGYy0xymJVAykAChAq N7itG3jHjmBDPNeLQxyddmi0J57ozBb50ALjinYzygJbeYFQFfWCMf0Bhgsv+C/9 bjFGVPA9uLTGmJej0ez0jJP/vYIfvPaJiIZp88utFpUyVIDLDKeXKHpaieKMyBqD ljOKBx1g5RCAuA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:05 2025 by rpki-client