This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json) Hash identifier: YdKed2aGSRVxlC5CIFvbXmN9giv3BPOmFHhAhYnHf9k= Subject key identifier: 77:26:A4:A2:D0:CF:22:63:E6:4E:36:AA:B8:EB:9F:0F:66:43:DA:CA Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2 Certificate serial: 019B3B6BE0F6020B3DAA903FF86DB8399216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft Manifest number: 0F92 Signing time: Sat 20 Dec 2025 11:01:24 +0000 Manifest this update: Sat 20 Dec 2025 11:01:24 +0000 Manifest next update: Sun 21 Dec 2025 11:01:24 +0000 Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=) 2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=) 3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=) 4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: GGtYuKEyxooKXYNQM858hfcBqTDa4S8esJS4HEsdzLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e0:f6:02:0b:3d:aa:90:3f:f8:6d:b8:39:92:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2 Validity Not Before: Dec 20 11:01:24 2025 GMT Not After : Dec 21 11:01:24 2025 GMT Subject: CN=7726a4a2d0cf2263e64e36aab8eb9f0f6643daca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:1c:bc:fd:86:3a:d9:04:fd:e9:0d:93:9f: 8d:3b:71:25:e6:27:b8:15:93:0a:7a:11:2c:b9:79: 69:6f:b4:30:e4:35:f3:e1:a4:97:fe:4c:25:66:76: 93:31:95:4e:d4:d9:b4:a0:d7:a0:13:11:c1:ac:3e: cb:4b:89:6e:f9:c0:c1:1a:dd:d5:fa:71:7a:56:14: 59:27:87:f6:21:04:ab:a6:de:70:e3:11:e4:85:2d: 5a:54:5b:3d:80:59:00:48:9c:7f:5f:f9:94:8b:ed: e8:8e:07:3c:b3:72:be:1f:c9:fb:90:86:37:ad:b1: 6b:4f:6b:21:e0:f1:bb:39:0f:e1:45:34:d5:5d:92: f3:b3:0b:4a:d8:12:cc:57:0f:77:f0:98:61:8d:ed: 94:a7:4e:f3:ab:d9:60:56:f0:49:50:02:80:91:67: b4:d2:06:80:53:8d:68:19:2c:28:fb:e3:87:28:e2: a6:5d:0e:a6:0f:2c:a5:91:17:e9:20:ab:b5:f7:d6: 78:eb:16:5a:b8:57:3a:38:d9:00:a8:30:d6:e3:84: ae:8e:34:e7:11:65:0a:46:54:11:ee:62:2d:c0:4f: 5a:2b:1a:2a:bc:cd:72:c6:90:dd:04:6d:65:cd:38: c9:81:5e:9e:f8:e8:9b:27:ac:62:82:25:c8:92:75: 94:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:26:A4:A2:D0:CF:22:63:E6:4E:36:AA:B8:EB:9F:0F:66:43:DA:CA X509v3 Authority Key Identifier: keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:52:e1:1b:74:4f:5b:a2:f3:4d:fa:a9:c6:b7:7b:fd:7e:5b: 23:a7:42:bd:85:c0:51:cb:db:14:33:35:35:be:7e:78:35:d4: e0:bc:86:43:17:52:4d:02:3a:f4:dc:69:39:46:d6:b5:99:da: ff:2b:d9:09:ed:3e:75:0a:07:69:4c:0e:11:a7:4b:99:81:e6: 36:58:1e:99:fa:26:c8:21:53:1d:7c:38:dd:d9:0d:04:0b:2c: 2d:6c:7b:38:e2:31:53:05:e2:e2:3c:6a:69:d6:3e:41:7e:d9: e2:64:c4:eb:94:6c:f4:99:41:34:4a:cd:29:ce:8f:6d:95:3c: 41:c0:9b:29:a8:18:50:3f:5e:04:27:ab:43:61:75:45:15:66: f3:d5:cf:18:e6:3d:79:85:64:5b:92:c3:d0:db:23:02:be:61: 12:a0:d7:52:56:25:84:e6:30:50:f2:ab:55:5b:7c:10:e7:62: 5c:d6:d7:a4:ec:3a:9b:d5:be:43:3a:24:be:6c:22:5b:f7:4b: 83:5e:53:4c:c2:76:fe:4b:da:fe:6e:3c:6d:95:f5:4e:66:1e: f1:c3:d0:89:1f:2d:93:1e:f1:41:46:09:a5:b5:f3:1c:29:14: b7:93:61:64:54:c6:e0:8c:e0:d1:92:e9:33:33:34:00:23:5d: d5:5e:07:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+D2Ags9qpA/+G24OZIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi OTNjYzIwHhcNMjUxMjIwMTEwMTI0WhcNMjUxMjIxMTEwMTI0WjAzMTEwLwYDVQQD Eyg3NzI2YTRhMmQwY2YyMjYzZTY0ZTM2YWFiOGViOWYwZjY2NDNkYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCccvP2GOtkE/ekNk5+NO3El5ie4 FZMKehEsuXlpb7Qw5DXz4aSX/kwlZnaTMZVO1Nm0oNegExHBrD7LS4lu+cDBGt3V +nF6VhRZJ4f2IQSrpt5w4xHkhS1aVFs9gFkASJx/X/mUi+3ojgc8s3K+H8n7kIY3 rbFrT2sh4PG7OQ/hRTTVXZLzswtK2BLMVw938Jhhje2Up07zq9lgVvBJUAKAkWe0 0gaAU41oGSwo++OHKOKmXQ6mDyylkRfpIKu199Z46xZauFc6ONkAqDDW44SujjTn EWUKRlQR7mItwE9aKxoqvM1yxpDdBG1lzTjJgV6e+OibJ6xigiXIknWUOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcmpKLQzyJj5k42qrjrnw9mQ9rKMB8GA1UdIwQY MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et ZmYwNWQ0NDZlN2ZkLzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2EtZmYwNWQ0NDZlN2Zk LzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVLhG3RP W6LzTfqpxrd7/X5bI6dCvYXAUcvbFDM1Nb5+eDXU4LyGQxdSTQI69NxpOUbWtZna /yvZCe0+dQoHaUwOEadLmYHmNlgemfomyCFTHXw43dkNBAssLWx7OOIxUwXi4jxq adY+QX7Z4mTE65Rs9JlBNErNKc6PbZU8QcCbKagYUD9eBCerQ2F1RRVm89XPGOY9 eYVkW5LD0NsjAr5hEqDXUlYlhOYwUPKrVVt8EOdiXNbXpOw6m9W+QzokvmwiW/dL g15TTMJ2/kva/m48bZX1TmYe8cPQiR8tkx7xQUYJpbXzHCkUt5NhZFTG4Izg0ZLp MzM0ACNd1V4HLg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:36:42 2025 by rpki-client