This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft File: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json) Hash identifier: WkIEKC18wwV83EGTBzgo+CiMY8e3zP971SmQeeQHbvs= Subject key identifier: 4A:35:D8:02:D8:A4:A1:F1:82:43:F9:BE:5C:F3:AC:5A:87:8E:C9:CA Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Certificate serial: 019B6DA14F6868F3690B3C27F118F464F82A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft Manifest number: 08A9 Signing time: Tue 30 Dec 2025 05:00:46 +0000 Manifest this update: Tue 30 Dec 2025 05:00:46 +0000 Manifest next update: Wed 31 Dec 2025 05:00:46 +0000 Files and hashes: 1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=) 2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: JSK3CKjypzQl+VuCw4kCmKsouxT/WekUo/j2w4Nvca4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:4f:68:68:f3:69:0b:3c:27:f1:18:f4:64:f8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Validity Not Before: Dec 30 05:00:46 2025 GMT Not After : Dec 31 05:00:46 2025 GMT Subject: CN=4a35d802d8a4a1f18243f9be5cf3ac5a878ec9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:bf:c3:bb:13:ee:0c:40:71:86:06:e8:e8: 79:69:6b:2f:9a:aa:42:cf:24:ac:7f:0c:0c:f9:0e: 39:ce:67:70:a6:e9:aa:88:5f:c5:e9:51:24:98:6b: b9:3c:e8:20:5d:c7:36:ff:22:01:23:a5:2e:40:b8: 8b:e0:a7:f4:64:f1:b1:e7:a2:93:19:19:d6:3e:9f: 72:6a:b3:a0:b4:bc:e0:2e:81:9c:05:ed:41:19:59: fa:c4:48:d9:75:dc:f9:6d:f0:66:5f:f9:8b:64:f2: 98:58:29:f9:e7:5f:e6:3a:71:b5:f4:73:09:c6:a5: 85:2d:cb:78:d2:ee:47:09:ad:22:5e:56:6d:b2:2b: 9d:49:d9:02:c3:a3:f5:48:43:47:5f:64:81:0b:05: 92:b0:77:67:bd:1f:cd:b2:4b:bb:18:39:cb:a2:8d: 55:11:fb:e8:8a:58:a4:1b:57:ef:96:13:6f:88:07: a9:7c:8c:0d:30:2c:78:0c:20:90:ef:84:fc:ea:50: 2a:59:9b:70:08:e2:60:0a:58:28:1a:cf:2c:f5:c5: f8:93:00:34:8c:d6:45:c8:65:51:c9:51:50:51:43: b7:3c:f6:61:df:19:14:7f:fa:c6:22:ad:a4:2b:2c: 27:f1:8c:a6:20:8f:c3:03:b6:77:f4:59:97:40:b8: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:35:D8:02:D8:A4:A1:F1:82:43:F9:BE:5C:F3:AC:5A:87:8E:C9:CA X509v3 Authority Key Identifier: keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3a:0c:5f:1a:42:c5:9c:cf:b4:61:2d:ba:42:ad:85:f7:ab: 7f:3e:d3:7d:e1:e0:58:16:33:1f:b5:58:22:e4:df:06:42:41: ed:6c:1f:29:06:b0:67:41:9a:77:a5:4a:77:22:f1:88:5f:6a: 29:2d:e8:6a:47:2c:e5:a3:f8:9a:3b:e8:86:6f:db:25:26:ec: 0c:9e:79:00:df:8c:ad:69:32:be:1b:a6:21:a8:52:d9:e3:90: 95:b1:f1:2d:45:be:8d:67:23:0d:42:83:27:6d:9d:ce:60:7b: 29:93:5c:65:3e:2a:d9:3f:9a:5c:6c:fe:4b:89:9f:f3:5f:86: 07:b6:7e:b3:a9:7d:24:eb:83:ce:cf:cf:cf:ea:d0:7d:41:3d: 15:78:5e:b3:56:5e:1d:7e:33:cd:46:44:d1:e9:d3:0e:b3:b0: 8d:24:c8:07:81:a5:87:5e:02:da:67:3b:6c:37:ef:80:31:e1: 1c:46:24:cf:d8:18:64:c3:db:a3:54:f3:69:b5:24:07:43:8d: 9a:ba:b0:9f:c1:5c:21:11:f8:d9:5b:22:f1:ca:98:0f:42:bd: 7c:7d:38:74:83:6a:00:b1:04:94:71:ba:28:dd:7b:91:35:6b: c1:b5:3e:5f:f3:73:b9:bf:4e:17:8e:6e:2a:35:2a:48:95:34: ae:d2:b9:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoU9oaPNpCzwn8Rj0ZPgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1 NTQzZjYwHhcNMjUxMjMwMDUwMDQ2WhcNMjUxMjMxMDUwMDQ2WjAzMTEwLwYDVQQD Eyg0YTM1ZDgwMmQ4YTRhMWYxODI0M2Y5YmU1Y2YzYWM1YTg3OGVjOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogO/w7sT7gxAcYYG6Oh5aWsvmqpC zySsfwwM+Q45zmdwpumqiF/F6VEkmGu5POggXcc2/yIBI6UuQLiL4Kf0ZPGx56KT GRnWPp9yarOgtLzgLoGcBe1BGVn6xEjZddz5bfBmX/mLZPKYWCn551/mOnG19HMJ xqWFLct40u5HCa0iXlZtsiudSdkCw6P1SENHX2SBCwWSsHdnvR/Nsku7GDnLoo1V EfvoilikG1fvlhNviAepfIwNMCx4DCCQ74T86lAqWZtwCOJgClgoGs8s9cX4kwA0 jNZFyGVRyVFQUUO3PPZh3xkUf/rGIq2kKywn8YymII/DA7Z39FmXQLgXWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo12ALYpKHxgkP5vlzzrFqHjsnKMB8GA1UdIwQY MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1 LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjoMXxpC xZzPtGEtukKthferfz7TfeHgWBYzH7VYIuTfBkJB7WwfKQawZ0Gad6VKdyLxiF9q KS3oakcs5aP4mjvohm/bJSbsDJ55AN+MrWkyvhumIahS2eOQlbHxLUW+jWcjDUKD J22dzmB7KZNcZT4q2T+aXGz+S4mf81+GB7Z+s6l9JOuDzs/Pz+rQfUE9FXhes1Ze HX4zzUZE0enTDrOwjSTIB4Glh14C2mc7bDfvgDHhHEYkz9gYZMPbo1TzabUkB0ON mrqwn8FcIRH42Vsi8cqYD0K9fH04dINqALEElHG6KN17kTVrwbU+X/Nzub9OF45u KjUqSJU0rtK5sA== -----END CERTIFICATE-----Generated at Tue Dec 30 07:58:33 2025 by rpki-client