This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json) Hash identifier: O7cgiQTzZlBf0wFcPIFPIDMEk9K3lDKPS90dlSf4pV0= Subject key identifier: C1:56:DB:66:EF:AF:EB:08:BE:B8:28:CE:2D:C3:8E:3D:40:38:DA:8E Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Certificate serial: 019B3B6B352AE29CDCFC5F1F9B75303041C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft Manifest number: 06D3 Signing time: Sat 20 Dec 2025 11:00:40 +0000 Manifest this update: Sat 20 Dec 2025 11:00:40 +0000 Manifest next update: Sun 21 Dec 2025 11:00:40 +0000 Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=) 2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=) 3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: boUl6snCtNgcnrB1dxGxQe9OZePm0cGGTDxXlipnGZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:35:2a:e2:9c:dc:fc:5f:1f:9b:75:30:30:41:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Validity Not Before: Dec 20 11:00:40 2025 GMT Not After : Dec 21 11:00:40 2025 GMT Subject: CN=c156db66efafeb08beb828ce2dc38e3d4038da8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:a9:22:cc:41:3b:40:27:19:74:64:75:c8: f2:ea:54:92:f8:8d:4b:c5:76:7c:8c:90:4e:9c:23: 21:fc:07:79:87:6f:1a:54:d3:40:4e:23:55:7f:67: 9a:ce:a9:0f:2e:d1:ec:19:26:1b:75:e5:20:08:13: ce:77:58:7f:3b:17:10:f2:7f:a8:41:9d:c4:e0:97: a5:d9:a2:98:26:ec:1b:aa:33:f3:98:35:e0:e4:95: 23:87:a6:96:8b:95:99:f1:0b:e7:a2:bd:39:93:c2: 2e:d1:19:97:e5:01:3c:61:bc:13:26:ff:ea:fe:9c: ff:2b:5d:21:d4:51:ba:37:ae:c0:48:aa:70:3a:32: da:a0:57:38:82:0c:58:86:e6:18:4e:7d:85:1b:9b: f8:a0:e1:60:ae:7d:8e:f7:58:55:d3:8a:71:b8:a1: d3:7e:8b:0c:e3:02:cf:e9:78:90:c2:0f:5b:b3:56: ae:5d:45:2b:ab:b6:07:61:10:5f:cd:70:3c:67:09: f0:e5:60:47:c1:dd:93:85:b0:9f:f1:b9:16:4d:8c: 94:02:cd:85:2e:f2:fb:e3:57:b7:c3:76:aa:28:4a: 49:3e:b1:cd:2e:ed:e1:98:95:9a:5e:99:ba:57:c6: 2f:93:e5:46:6d:0a:07:61:cb:4c:6e:9c:9a:33:11: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:56:DB:66:EF:AF:EB:08:BE:B8:28:CE:2D:C3:8E:3D:40:38:DA:8E X509v3 Authority Key Identifier: keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:18:b4:de:a3:0e:ac:30:26:8d:0a:03:c1:65:ce:70:d1:2c: 76:ab:d6:df:83:1b:b0:84:89:12:69:53:31:63:c6:d7:1b:a5: eb:45:d8:17:4a:69:72:1e:ef:a4:0b:fa:8d:69:5f:69:39:bd: 91:48:47:d0:e7:5c:9f:70:79:33:34:9b:24:68:e5:f8:6b:f7: 2e:e4:f1:41:bf:48:8f:91:75:09:bf:4d:b4:6e:b9:c8:ac:ae: 43:da:72:23:55:63:2e:a6:56:03:10:19:bb:05:59:29:d3:a6: 6c:cd:f2:b7:bf:5d:0c:7a:b4:13:b1:00:b8:e7:55:19:9e:c9: 93:4f:21:71:22:8b:8b:f6:84:82:c6:4f:26:af:07:cf:c4:b3: 4c:83:01:5c:00:c4:89:ac:05:74:28:35:01:6f:0f:8d:8a:ca: f9:7e:45:62:3a:3e:9c:d3:36:cb:c5:76:12:92:67:c2:f0:24: d5:b4:45:c9:76:80:07:7c:ce:b3:5d:8b:b8:e0:e4:ae:b1:ce: 15:b3:c3:06:38:02:a8:03:b6:c2:a8:33:3f:12:1f:79:03:ea: 4d:a9:65:dd:fd:69:fc:c5:89:79:12:d1:c3:72:00:36:a9:28: 57:82:37:66:d9:fd:dd:05:66:9f:9e:71:e1:9e:a8:9f:a6:e0: ca:47:2f:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7azUq4pzc/F8fm3UwMEHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl OWQ3MDkwHhcNMjUxMjIwMTEwMDQwWhcNMjUxMjIxMTEwMDQwWjAzMTEwLwYDVQQD EyhjMTU2ZGI2NmVmYWZlYjA4YmViODI4Y2UyZGMzOGUzZDQwMzhkYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMapIsxBO0AnGXRkdcjy6lSS+I1L xXZ8jJBOnCMh/Ad5h28aVNNATiNVf2eazqkPLtHsGSYbdeUgCBPOd1h/OxcQ8n+o QZ3E4Jel2aKYJuwbqjPzmDXg5JUjh6aWi5WZ8Qvnor05k8Iu0RmX5QE8YbwTJv/q /pz/K10h1FG6N67ASKpwOjLaoFc4ggxYhuYYTn2FG5v4oOFgrn2O91hV04pxuKHT fosM4wLP6XiQwg9bs1auXUUrq7YHYRBfzXA8Zwnw5WBHwd2ThbCf8bkWTYyUAs2F LvL741e3w3aqKEpJPrHNLu3hmJWaXpm6V8Yvk+VGbQoHYctMbpyaMxForQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFW22bvr+sIvrgozi3Djj1AONqOMB8GA1UdIwQY MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhi03qMO rDAmjQoDwWXOcNEsdqvW34MbsISJEmlTMWPG1xul60XYF0ppch7vpAv6jWlfaTm9 kUhH0Odcn3B5MzSbJGjl+Gv3LuTxQb9Ij5F1Cb9NtG65yKyuQ9pyI1VjLqZWAxAZ uwVZKdOmbM3yt79dDHq0E7EAuOdVGZ7Jk08hcSKLi/aEgsZPJq8Hz8SzTIMBXADE iawFdCg1AW8PjYrK+X5FYjo+nNM2y8V2EpJnwvAk1bRFyXaAB3zOs12LuODkrrHO FbPDBjgCqAO2wqgzPxIfeQPqTall3f1p/MWJeRLRw3IANqkoV4I3Ztn93QVmn55x 4Z6on6bgykcvMw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:54:58 2025 by rpki-client