This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft File: uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json) Hash identifier: e6G7s4jWwtEhm7fFN+IZvmaZxshx7JNBfkCJ0TfaVds= Subject key identifier: 25:5D:A7:79:58:75:38:B0:37:2C:D7:A5:F9:78:AC:FF:69:D0:C9:00 Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B3F117EFB0A0A7882DB03C7635477B9C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft Manifest number: 07D9 Signing time: Sun 21 Dec 2025 04:01:09 +0000 Manifest this update: Sun 21 Dec 2025 04:01:09 +0000 Manifest next update: Mon 22 Dec 2025 04:01:09 +0000 Files and hashes: 1: 5iHrYrKlpDn574dcAV5MQF4xHuk.roa (hash: LC6TWEYqS1CZuKzBl6YN/kJ7pyn+QXIpxyQGn5An1+M=) 2: 60kleZPqdy7U3TKImAtI20xiPqk.roa (hash: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=) 3: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (hash: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=) 4: pMp95DzdRf1pgBQsJLmwp0JpeXI.roa (hash: VEU+wyERacx2v3R6jFxKp8QKArrmRvOUh8IhbniFnxs=) 5: prm1qcLxEj8IUMRu09iPaoSnYdU.roa (hash: y3vrxJh+4Vinokejxdf+O8lEIMMBO2XUs2Esa2IWQn0=) 6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: 535al6CapO68zjRoz/FhuK42d77q30BKkIb1xIG1/aM=) 7: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (hash: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:7e:fb:0a:0a:78:82:db:03:c7:63:54:77:b9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Dec 21 04:01:09 2025 GMT Not After : Dec 22 04:01:09 2025 GMT Subject: CN=255da779587538b0372cd7a5f978acff69d0c900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:32:71:b5:e4:7c:89:b0:6d:aa:98:3a:33: dd:6a:77:01:02:de:41:3d:db:5e:9d:eb:e2:1c:74: 87:53:3c:a5:40:8f:31:a9:2f:cf:93:bf:c6:8c:ad: 19:a7:3e:bf:48:a4:05:7c:97:be:cc:c9:b2:83:b5: 29:52:2a:da:02:a9:89:f8:59:45:95:62:9e:4b:01: 57:6a:77:ee:33:b2:47:00:d0:e7:14:0c:21:e5:99: e3:ec:28:e4:96:81:36:63:de:49:5b:a5:4b:a6:4c: 89:52:28:2c:0f:c2:8c:e9:ce:da:7f:ec:a6:c2:56: d2:1b:5a:eb:42:ea:f3:14:43:d2:c7:e1:fc:24:78: b9:18:2f:0c:ec:33:51:ba:b4:8f:9e:bc:5f:5d:60: e3:ca:bb:c9:09:18:7a:3b:09:11:61:5d:d3:59:f8: a0:02:b7:70:67:3b:86:e0:79:11:39:39:5f:7c:fa: 52:79:c4:70:83:b8:a2:50:32:91:4c:70:5c:b1:ff: 79:96:31:a5:d5:40:25:b8:15:b9:65:9f:b5:4c:c5: ca:83:ff:77:86:de:a6:d4:06:7f:16:01:82:c3:4b: 6b:4a:23:db:ca:3a:24:cc:e5:39:14:97:4b:5e:38: 10:42:50:84:26:e4:e5:dc:bd:d9:f0:8f:83:41:40: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5D:A7:79:58:75:38:B0:37:2C:D7:A5:F9:78:AC:FF:69:D0:C9:00 X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:06:77:27:ed:20:dc:17:b7:9d:02:7c:2f:65:b6:f6:d3:7e: db:7d:08:ff:37:ed:d2:a4:07:d8:df:16:2c:3b:99:62:5c:7f: 23:61:c1:b5:53:ad:3d:24:19:9d:9f:26:7b:d7:bf:ef:f7:d6: 69:80:7e:7d:bd:5c:68:8d:64:eb:0b:dd:ce:e1:c9:80:8a:e8: 34:bf:a3:5e:1f:38:12:4d:3b:60:02:47:c2:e9:5d:59:82:03: 22:5c:2d:3e:2c:36:8f:ee:d1:df:81:98:55:18:b4:a1:10:b3: 13:31:e7:20:3b:f7:f7:98:9f:e1:6f:f2:98:61:b8:ae:ae:1e: 15:31:5c:3d:9f:38:c1:04:98:a1:ca:9b:4d:35:a2:8b:db:13: be:28:f3:42:90:76:b8:67:3b:70:95:34:34:38:4e:4e:3b:08: e3:df:b5:58:df:bc:8f:06:39:39:be:56:f5:9f:9b:5f:2b:1b: 52:55:a8:fb:42:20:03:80:ea:be:37:e9:91:9e:b1:f1:e7:17: 10:7b:d0:ae:8c:e6:27:bd:8b:bf:01:05:03:25:b2:2e:d2:43: eb:c5:5b:51:95:c8:82:1c:ed:8f:f9:81:0a:d8:24:7d:40:62: a1:0a:3f:ef:e8:2c:18:21:7c:a9:8d:be:64:8a:5f:40:ab:7e: 67:b6:26:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EX77Cgp4gtsDx2NUd7nGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjUxMjIxMDQwMTA5WhcNMjUxMjIyMDQwMTA5WjAzMTEwLwYDVQQD EygyNTVkYTc3OTU4NzUzOGIwMzcyY2Q3YTVmOTc4YWNmZjY5ZDBjOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmUycbXkfImwbaqYOjPdancBAt5B PdteneviHHSHUzylQI8xqS/Pk7/GjK0Zpz6/SKQFfJe+zMmyg7UpUiraAqmJ+FlF lWKeSwFXanfuM7JHANDnFAwh5Znj7CjkloE2Y95JW6VLpkyJUigsD8KM6c7af+ym wlbSG1rrQurzFEPSx+H8JHi5GC8M7DNRurSPnrxfXWDjyrvJCRh6OwkRYV3TWfig ArdwZzuG4HkROTlffPpSecRwg7iiUDKRTHBcsf95ljGl1UAluBW5ZZ+1TMXKg/93 ht6m1AZ/FgGCw0trSiPbyjokzOU5FJdLXjgQQlCEJuTl3L3Z8I+DQUBSGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVdp3lYdTiwNyzXpfl4rP9p0MkAMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQZ3J+0g 3Be3nQJ8L2W29tN+230I/zft0qQH2N8WLDuZYlx/I2HBtVOtPSQZnZ8me9e/7/fW aYB+fb1caI1k6wvdzuHJgIroNL+jXh84Ek07YAJHwuldWYIDIlwtPiw2j+7R34GY VRi0oRCzEzHnIDv395if4W/ymGG4rq4eFTFcPZ84wQSYocqbTTWii9sTvijzQpB2 uGc7cJU0NDhOTjsI49+1WN+8jwY5Ob5W9Z+bXysbUlWo+0IgA4DqvjfpkZ6x8ecX EHvQrozmJ72LvwEFAyWyLtJD68VbUZXIghztj/mBCtgkfUBioQo/7+gsGCF8qY2+ ZIpfQKt+Z7Ymzg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:40 2025 by rpki-client