This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json) Hash identifier: XvmRmt7JJouYTenf+Jd+IeYC2H+75YXWqFVH5pcOdS4= Subject key identifier: 8D:32:E9:52:C5:E0:80:D0:CD:F8:78:9D:30:EA:1B:C1:4B:D3:92:A0 Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Certificate serial: 019B3FECAA9890DB390FD5413C55AE4F6808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft Manifest number: D8 Signing time: Sun 21 Dec 2025 08:00:33 +0000 Manifest this update: Sun 21 Dec 2025 08:00:33 +0000 Manifest next update: Mon 22 Dec 2025 08:00:33 +0000 Files and hashes: 1: M9ok_oEA-Cq66PnPmgpXlFaH8Sc.roa (hash: Bj68sqknRNEMUK6hrMTUuevwXIra7kusoFg9lZhmyJM=) 2: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: hyOwTNWfud7Fm5dy/hBp8TSXsRuQXXXeghWrBR615l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:aa:98:90:db:39:0f:d5:41:3c:55:ae:4f:68:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Validity Not Before: Dec 21 08:00:33 2025 GMT Not After : Dec 22 08:00:33 2025 GMT Subject: CN=8d32e952c5e080d0cdf8789d30ea1bc14bd392a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:5e:c7:b0:e7:15:ef:86:ef:8f:cb:35:02: f3:96:52:fe:c6:44:4f:3d:6b:c9:52:8d:f0:f3:ab: d9:b1:df:58:f6:ee:19:f7:5a:ec:9b:fb:ca:47:2c: 5a:5c:31:f4:ee:43:ac:73:63:a5:4d:2e:bf:a4:92: df:31:54:06:42:18:bf:8b:03:cb:37:9a:20:ae:8d: d2:aa:25:ca:b9:f4:66:67:a3:98:f5:b0:4d:66:d1: c6:be:c0:66:ac:56:ad:ca:05:97:4b:7c:54:40:65: 1e:80:56:88:58:22:cc:17:24:35:a2:72:44:c5:6c: 1e:82:55:0d:d0:0a:34:57:eb:b2:16:f8:b6:f6:83: fe:9e:e2:70:3c:ec:fe:83:fe:36:36:a6:24:9c:a5: 0d:85:3d:f6:e6:c3:26:31:26:7e:4b:0a:77:f7:88: 85:36:ef:37:85:23:2e:4f:c3:62:10:ec:9e:5e:90: 76:b2:4f:df:ff:8f:ae:df:29:45:5c:59:c4:e6:64: ce:62:fa:45:2f:20:34:3c:34:74:0a:8e:c3:13:b7: 05:63:29:83:9a:10:02:c0:93:64:e8:eb:c5:30:d7: 66:8c:47:a5:f6:ed:b4:de:79:ac:f2:f9:50:6b:18: 3c:be:bb:2b:25:00:fc:9b:ba:90:c1:35:df:55:40: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:32:E9:52:C5:E0:80:D0:CD:F8:78:9D:30:EA:1B:C1:4B:D3:92:A0 X509v3 Authority Key Identifier: keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:46:84:59:97:76:13:0b:01:c2:a1:28:27:19:f8:a0:03:cf: c4:63:e9:19:e7:51:11:1f:df:b4:1b:45:6b:68:c6:88:80:76: 4c:1b:68:f1:f6:43:df:82:21:f9:8c:57:f5:06:28:ce:cb:42: f1:18:dc:2e:6a:e0:19:ff:e2:6e:a6:32:aa:8b:dc:74:47:e3: 1f:13:44:12:38:70:4f:a8:d3:4b:a3:43:f3:bc:1a:56:31:19: 33:1a:2d:c7:e9:5d:d7:6c:fc:71:22:5b:05:9c:5f:6e:34:bd: c0:92:09:b7:7c:80:67:c9:17:9f:9b:bf:dc:b7:f8:40:fc:af: 62:c1:80:84:cb:19:9c:73:b1:cd:28:20:ea:d5:f6:82:75:96: f3:3a:b3:47:dc:08:31:fa:1f:5a:f7:28:17:d1:6b:30:a0:91: b7:9c:99:87:2b:9a:88:d7:e1:c4:86:58:db:f2:5b:c1:65:44: 0f:1a:d3:31:5f:12:7c:da:37:a7:a3:9c:0a:40:18:53:74:96: 87:e0:98:07:93:17:b6:39:cc:ce:6c:b3:05:c5:42:e2:f1:d2: ee:6f:33:d5:06:b3:8f:7d:af:2b:6e:be:a7:39:58:18:27:0b: 60:61:cf:5f:b5:1b:0a:ca:89:91:90:6c:64:fb:d0:40:81:6e: d1:8e:5c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7KqYkNs5D9VBPFWuT2gIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDQyN2Q4Yjc5NjY0NWY3NjRiNGU2NmJmMTlhZDM4ZTRh YmVlMWMwHhcNMjUxMjIxMDgwMDMzWhcNMjUxMjIyMDgwMDMzWjAzMTEwLwYDVQQD Eyg4ZDMyZTk1MmM1ZTA4MGQwY2RmODc4OWQzMGVhMWJjMTRiZDM5MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/dex7DnFe+G74/LNQLzllL+xkRP PWvJUo3w86vZsd9Y9u4Z91rsm/vKRyxaXDH07kOsc2OlTS6/pJLfMVQGQhi/iwPL N5ogro3SqiXKufRmZ6OY9bBNZtHGvsBmrFatygWXS3xUQGUegFaIWCLMFyQ1onJE xWweglUN0Ao0V+uyFvi29oP+nuJwPOz+g/42NqYknKUNhT325sMmMSZ+Swp394iF Nu83hSMuT8NiEOyeXpB2sk/f/4+u3ylFXFnE5mTOYvpFLyA0PDR0Co7DE7cFYymD mhACwJNk6OvFMNdmjEel9u203nms8vlQaxg8vrsrJQD8m7qQwTXfVUDgdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0y6VLF4IDQzfh4nTDqG8FL05KgMB8GA1UdIwQY MBaAFLlEJ9i3lmRfdktOZr8ZrTjkq+4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5Zjkt NDdmNWMxYzUyY2UyLzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5ZjktNDdmNWMxYzUyY2Uy LzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkaEWZd2 EwsBwqEoJxn4oAPPxGPpGedRER/ftBtFa2jGiIB2TBto8fZD34Ih+YxX9QYozstC 8RjcLmrgGf/ibqYyqovcdEfjHxNEEjhwT6jTS6ND87waVjEZMxotx+ld12z8cSJb BZxfbjS9wJIJt3yAZ8kXn5u/3Lf4QPyvYsGAhMsZnHOxzSgg6tX2gnWW8zqzR9wI MfofWvcoF9FrMKCRt5yZhyuaiNfhxIZY2/JbwWVEDxrTMV8SfNo3p6OcCkAYU3SW h+CYB5MXtjnMzmyzBcVC4vHS7m8z1Qazj32vK26+pzlYGCcLYGHPX7UbCsqJkZBs ZPvQQIFu0Y5ccg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:12:11 2025 by rpki-client