This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json) Hash identifier: 8cz9/VaBQcNEdImv9pZsbh0PdammcpUTB+Kg268Rk5E= Subject key identifier: A7:17:A2:7A:9E:C7:EA:0E:13:AB:A6:2C:1F:F9:B0:69:13:A0:96:98 Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94 Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94 Certificate serial: 019B61D42A97B3867B25519B2A3A1B57BA9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 22:00:53 +0000 Manifest this update: Sat 27 Dec 2025 22:00:53 +0000 Manifest next update: Sun 28 Dec 2025 22:00:53 +0000 Files and hashes: 1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=) 2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: PadsV9fp5yDg16WET4x5cvaPDho05AeJQUonolB+KhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:2a:97:b3:86:7b:25:51:9b:2a:3a:1b:57:ba:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94 Validity Not Before: Dec 27 22:00:53 2025 GMT Not After : Dec 28 22:00:53 2025 GMT Subject: CN=a717a27a9ec7ea0e13aba62c1ff9b06913a09698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:19:82:cb:57:9f:60:b4:c0:22:4b:ac:fa: 3d:97:66:0f:ad:0e:1c:f2:ca:24:a5:18:89:6e:3c: 6a:71:5e:c2:fb:5b:4b:26:56:91:70:9b:4d:d2:5a: 37:e3:a9:63:de:ff:2e:ab:c5:3c:00:50:fc:9d:80: 3f:1d:a4:74:8c:00:39:63:fb:d6:81:f8:94:35:00: 94:57:40:8d:36:ec:cc:39:f8:69:18:46:65:90:91: 7e:ff:70:46:69:0c:27:1e:07:ff:30:78:e8:f8:3f: ed:c6:f8:d1:7d:66:da:b9:7e:f1:18:a5:ab:2f:96: 1f:eb:e9:06:0f:e7:e3:a0:cc:9b:50:d9:38:f5:e6: 2d:2d:c8:70:c7:c0:10:d6:55:bc:44:2a:df:0c:b4: e7:7e:3d:fe:63:cd:cc:ed:70:97:91:b0:f6:c3:53: bb:3a:d6:2e:0c:93:c7:3b:7b:50:3c:f4:e9:30:db: 54:56:13:b3:55:8c:5e:a0:3e:a5:44:5f:48:3e:47: b9:f6:fa:7b:bb:32:c8:1a:05:d5:9f:49:1a:8e:55: 6e:08:fd:c3:f7:06:7f:c5:81:3a:22:b0:46:8e:bf: cc:3d:9c:dd:1b:77:2f:df:76:4b:d2:1b:73:ab:cc: 5b:c9:e6:12:df:c2:aa:0c:4c:17:1e:64:15:33:f0: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:17:A2:7A:9E:C7:EA:0E:13:AB:A6:2C:1F:F9:B0:69:13:A0:96:98 X509v3 Authority Key Identifier: keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:fb:fd:50:29:ae:4c:67:c2:62:ad:23:54:cd:81:d8:4e: c4:3b:0a:ad:85:33:17:a9:00:73:51:97:56:50:b5:23:cc:12: f7:6d:fe:ef:03:0f:a5:ec:8c:ae:be:3c:1e:f9:99:a1:a0:3f: 06:29:a6:cd:a2:b7:b7:5e:cd:1e:6a:c8:de:5c:1b:92:2e:40: 03:cd:e3:d8:43:25:6b:66:3a:ef:36:78:7f:1a:d9:e0:33:2b: d9:cf:94:21:9a:ec:68:bd:ed:29:58:ac:3e:a4:fe:52:3f:13: 94:a3:77:e8:15:24:08:6f:d8:c2:aa:11:f8:c9:68:2b:30:35: 27:2f:19:d1:d7:bb:e0:e9:e8:1b:8d:62:72:5d:ae:01:85:ff: 5f:47:b1:8e:6e:d0:44:44:59:51:fc:06:c5:be:bb:64:4f:04: ec:21:33:c0:f5:04:02:b5:0c:07:76:d9:4d:5e:ff:79:7a:f9: 84:84:40:bf:90:da:c7:5c:a1:c9:a6:a3:96:da:e4:4b:dd:09: e2:a2:bc:ec:25:07:fc:b8:e8:89:79:dc:22:46:62:10:f1:51: bf:d5:2a:bb:c7:5e:a2:7d:b7:6a:e9:d8:62:83:89:af:f3:d0: 3d:11:d5:86:e9:ed:49:5d:27:7d:4c:6f:b6:07:e1:29:19:0e: 3c:04:c0:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1CqXs4Z7JVGbKjobV7qbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGExM2ExYzllMWRkODRlZGU0MzI4MzQ5MGJlNzgzODc3 NTRhOTQwHhcNMjUxMjI3MjIwMDUzWhcNMjUxMjI4MjIwMDUzWjAzMTEwLwYDVQQD EyhhNzE3YTI3YTllYzdlYTBlMTNhYmE2MmMxZmY5YjA2OTEzYTA5Njk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur8ZgstXn2C0wCJLrPo9l2YPrQ4c 8sokpRiJbjxqcV7C+1tLJlaRcJtN0lo346lj3v8uq8U8AFD8nYA/HaR0jAA5Y/vW gfiUNQCUV0CNNuzMOfhpGEZlkJF+/3BGaQwnHgf/MHjo+D/txvjRfWbauX7xGKWr L5Yf6+kGD+fjoMybUNk49eYtLchwx8AQ1lW8RCrfDLTnfj3+Y83M7XCXkbD2w1O7 OtYuDJPHO3tQPPTpMNtUVhOzVYxeoD6lRF9IPke59vp7uzLIGgXVn0kajlVuCP3D 9wZ/xYE6IrBGjr/MPZzdG3cv33ZL0htzq8xbyeYS38KqDEwXHmQVM/AbTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcXonqex+oOE6umLB/5sGkToJaYMB8GA1UdIwQY MBaAFLsKE6HJ4d2E7eQyg0kL54OHdUqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjhjY2EtNmIxZC00YWU2LWJjMmEt ZjQyZTdjNDU5MzVhLzEvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjhjY2EtNmIxZC00YWU2LWJjMmEtZjQyZTdjNDU5MzVh LzEvdXdvVG9jbmgzWVR0NURLRFNRdm5nNGQxU3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzv7/VAp rkxnwmKtI1TNgdhOxDsKrYUzF6kAc1GXVlC1I8wS923+7wMPpeyMrr48HvmZoaA/ BimmzaK3t17NHmrI3lwbki5AA83j2EMla2Y67zZ4fxrZ4DMr2c+UIZrsaL3tKVis PqT+Uj8TlKN36BUkCG/YwqoR+MloKzA1Jy8Z0de74OnoG41icl2uAYX/X0exjm7Q RERZUfwGxb67ZE8E7CEzwPUEArUMB3bZTV7/eXr5hIRAv5Dax1yhyaajltrkS90J 4qK87CUH/LjoiXncIkZiEPFRv9Uqu8deon23aunYYoOJr/PQPRHVhuntSV0nfUxv tgfhKRkOPATAcQ== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:38 2025 by rpki-client