This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft File: uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json) Hash identifier: ahJh9qd0S+tLn40K74pm3yRdPKB5QWbD6UFYLG2MgFM= Subject key identifier: 01:62:29:0F:D4:84:88:35:64:E9:6B:3D:7E:E9:0A:A7:98:67:E3:59 Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Certificate serial: 019B410000EB15B4A70D46565DFFEB7471E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft Manifest number: B3 Signing time: Sun 21 Dec 2025 13:01:17 +0000 Manifest this update: Sun 21 Dec 2025 13:01:17 +0000 Manifest next update: Mon 22 Dec 2025 13:01:17 +0000 Files and hashes: 1: ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa (hash: Yeg65Usz9zdCfiKTUR//qasZbCYjIaaB9OcLvlxhcWk=) 2: kF5hTgdo2CuhP3LVaLK3GCmZiAs.roa (hash: kkwwfJVxfr3h5gNDQoMVJ4cT8Q/GTSSyQ9JkB11j5S0=) 3: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: xlaZnXkyiXs9r7jQi/cJEwUilpJbk1pEzyzklfNlzgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:00:eb:15:b4:a7:0d:46:56:5d:ff:eb:74:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Validity Not Before: Dec 21 13:01:17 2025 GMT Not After : Dec 22 13:01:17 2025 GMT Subject: CN=0162290fd484883564e96b3d7ee90aa79867e359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:8e:40:7c:92:2c:f8:f7:69:9b:fd:31:38: b0:37:4e:cd:8d:6a:41:ba:88:87:b3:32:4d:5a:4b: ce:76:f9:73:e7:f0:0a:5d:f1:6a:c4:70:eb:db:fe: 23:3d:d1:eb:e5:b1:f3:c7:54:5d:34:38:62:92:ff: 59:1b:2c:97:9f:07:e9:fb:f7:a7:c1:e7:2b:58:75: fb:00:7d:5c:eb:b3:c1:32:94:25:8f:8a:c8:2a:f8: 44:df:f9:0d:bf:f7:dc:02:56:d3:f2:c4:89:fc:f9: fe:9d:0a:2f:6b:df:11:9a:dc:ee:aa:ab:ba:78:c2: 72:5b:80:5a:fa:a4:2f:05:43:48:29:46:1e:a4:84: 41:3e:f1:2e:9e:cc:51:e9:3e:50:bc:63:16:1f:c2: 85:1a:6e:c5:a5:f7:1b:83:a1:66:a6:ba:c9:ee:18: 5b:95:42:a9:d5:f6:7a:aa:ed:1e:59:35:64:87:30: 1a:49:9e:38:71:69:b9:d1:55:29:eb:70:73:05:8b: 63:b7:fc:2d:fc:2d:96:05:ef:b9:0b:14:e3:3e:cc: 42:e1:39:f2:2d:16:3f:1e:c6:c3:af:73:fb:c1:13: 0f:bf:cb:1f:26:2b:e4:8f:f3:6b:ff:0e:f8:f8:e7: fd:c6:83:c3:d6:7a:f6:82:13:28:b9:61:72:06:fe: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:62:29:0F:D4:84:88:35:64:E9:6B:3D:7E:E9:0A:A7:98:67:E3:59 X509v3 Authority Key Identifier: keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1b:af:7d:fe:90:3e:60:51:fd:ca:51:1e:ab:87:36:a9:06: c6:9f:03:67:bf:30:93:cd:78:cf:6d:56:96:5d:6c:47:4b:d8: ff:aa:78:75:02:79:6f:e2:8a:0e:ae:82:e2:b8:95:ba:92:6d: 97:e2:d1:5e:be:d6:b7:40:41:8f:2c:ec:0a:d1:ba:87:1e:74: 72:81:a8:5c:9a:91:6f:b9:13:39:05:2b:4e:30:d3:c2:f0:9b: df:67:0b:13:cb:e2:9d:19:de:35:7c:ae:b6:a7:31:2b:ad:9a: 4a:99:fc:3e:5a:a6:2d:75:b2:c5:55:c3:20:56:b5:1f:11:17: f0:f0:e9:4a:40:59:87:7f:05:bf:8f:a3:13:fb:bf:5f:d2:15: 69:84:27:05:ff:c5:50:27:d3:0e:32:13:ce:9c:5f:a2:f4:a6: 06:e6:62:c9:ca:fd:64:f7:7b:53:1a:c5:b0:97:e7:b0:35:b1: e9:5a:f4:b7:71:56:a9:79:4a:c1:bc:07:93:1d:86:d6:e5:65: 77:5f:79:bc:d0:91:5a:a9:27:30:bf:82:cc:75:49:17:21:0c: a2:9b:b7:b1:b4:64:f2:2e:fd:04:23:ae:bb:9d:37:7e:53:1f: 69:2e:78:a9:7c:03:47:2c:68:a8:82:7c:a7:e1:82:39:c6:e0: f4:a0:fe:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAADrFbSnDUZWXf/rdHHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjNkNGFjZTczNTYxM2VjYmM1OTFkZmZjMjk4NWYzNDE3 NjY3ZDMwHhcNMjUxMjIxMTMwMTE3WhcNMjUxMjIyMTMwMTE3WjAzMTEwLwYDVQQD EygwMTYyMjkwZmQ0ODQ4ODM1NjRlOTZiM2Q3ZWU5MGFhNzk4NjdlMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfGOQHySLPj3aZv9MTiwN07NjWpB uoiHszJNWkvOdvlz5/AKXfFqxHDr2/4jPdHr5bHzx1RdNDhikv9ZGyyXnwfp+/en wecrWHX7AH1c67PBMpQlj4rIKvhE3/kNv/fcAlbT8sSJ/Pn+nQova98Rmtzuqqu6 eMJyW4Ba+qQvBUNIKUYepIRBPvEunsxR6T5QvGMWH8KFGm7Fpfcbg6FmprrJ7hhb lUKp1fZ6qu0eWTVkhzAaSZ44cWm50VUp63BzBYtjt/wt/C2WBe+5CxTjPsxC4Tny LRY/HsbDr3P7wRMPv8sfJivkj/Nr/w74+Of9xoPD1nr2ghMouWFyBv7CBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFiKQ/UhIg1ZOlrPX7pCqeYZ+NZMB8GA1UdIwQY MBaAFLiz1KznNWE+y8WR3/wphfNBdmfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2Et NDQyY2MzNjQ5YmFjLzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2EtNDQyY2MzNjQ5YmFj LzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShuvff6Q PmBR/cpRHquHNqkGxp8DZ78wk814z21Wll1sR0vY/6p4dQJ5b+KKDq6C4riVupJt l+LRXr7Wt0BBjyzsCtG6hx50coGoXJqRb7kTOQUrTjDTwvCb32cLE8vinRneNXyu tqcxK62aSpn8PlqmLXWyxVXDIFa1HxEX8PDpSkBZh38Fv4+jE/u/X9IVaYQnBf/F UCfTDjITzpxfovSmBuZiycr9ZPd7UxrFsJfnsDWx6Vr0t3FWqXlKwbwHkx2G1uVl d195vNCRWqknML+CzHVJFyEMopu3sbRk8i79BCOuu503flMfaS54qXwDRyxoqIJ8 p+GCOcbg9KD+Aw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:32:52 2025 by rpki-client