This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json) Hash identifier: Nolfv0Zo4Z9P919+JCSRLskwYfITKslir1/k7stqr/0= Subject key identifier: 02:D0:5B:1C:FF:89:B5:53:F1:D3:56:2E:9B:9C:73:97:2E:C6:E9:E8 Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e Certificate serial: 019B4D3A635E7ED372B09B68AA1739C75DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft Manifest number: 0723 Signing time: Tue 23 Dec 2025 22:00:30 +0000 Manifest this update: Tue 23 Dec 2025 22:00:30 +0000 Manifest next update: Wed 24 Dec 2025 22:00:30 +0000 Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: ok4pNjI7LmZNTeI9A/Zsk8vEZ/8p052m8XJeWKwnI0Q=) 2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:63:5e:7e:d3:72:b0:9b:68:aa:17:39:c7:5d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e Validity Not Before: Dec 23 22:00:30 2025 GMT Not After : Dec 24 22:00:30 2025 GMT Subject: CN=02d05b1cff89b553f1d3562e9b9c73972ec6e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:03:f5:fa:25:36:22:f2:68:9e:80:ef:de: a2:b3:38:0d:01:29:9b:9c:20:2d:93:0e:d4:26:7d: c3:c5:e7:09:df:1a:05:13:06:31:1e:7e:76:3c:e7: 41:89:3a:0f:df:c3:b2:f6:b9:23:29:14:3f:4f:71: 94:5f:4e:fe:97:4a:c0:b2:8a:b0:28:b4:42:6b:6c: 84:89:39:cf:33:00:fd:54:fa:c0:21:f6:b6:9f:fc: e4:2d:8f:a5:b6:50:89:15:34:8c:fd:76:51:1a:fe: ea:c5:53:9c:0a:ff:00:67:bf:75:92:79:e6:67:bb: fb:6f:18:ce:8d:8f:3e:09:f2:f4:f4:dd:cf:6a:29: 40:f7:4d:00:ff:68:ed:a4:bc:1e:5d:e0:8b:46:95: ba:ef:0c:9f:fc:da:95:8d:6c:86:f4:fd:26:f6:14: a7:09:18:03:ac:b6:af:1c:cf:2b:0e:66:90:91:ec: b8:5b:94:cb:86:2d:5a:d8:27:21:51:73:e0:df:f1: c7:8a:70:f7:2c:07:3e:49:32:81:23:31:44:45:91: 9c:40:52:5e:f7:bc:94:15:55:b0:52:40:f6:38:a3: 7e:31:9e:fe:54:50:d3:3c:53:82:8e:aa:ec:ad:f7: ad:e1:38:73:31:3b:25:18:76:78:f8:13:70:e0:b6: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:5B:1C:FF:89:B5:53:F1:D3:56:2E:9B:9C:73:97:2E:C6:E9:E8 X509v3 Authority Key Identifier: keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:02:9f:f1:65:3d:f3:61:48:ed:ca:e3:43:d8:e8:46:fc:84: 45:f4:ff:5f:46:e1:ab:ee:99:df:76:36:ad:3b:29:ef:4e:b2: e8:bd:70:7f:8e:83:9c:b3:e2:fd:82:eb:24:5d:8c:1f:a4:e5: 35:b8:2f:bb:74:a7:6c:6e:30:f8:ff:ce:00:9d:74:52:11:1c: 70:b7:80:c3:72:03:f9:f1:42:02:bd:39:b4:4a:bf:fc:62:f8: 03:fb:85:9c:36:44:6b:e9:61:c1:22:70:4a:e6:2a:67:17:ba: e3:95:0c:18:07:b1:a0:67:8e:71:a8:a7:0e:99:eb:80:6c:7c: a6:ec:f4:8c:f3:08:a7:e7:d1:a5:ec:c5:25:59:dd:0b:81:21: ea:69:9b:75:be:32:db:69:89:78:9d:2e:01:e8:de:99:1b:09: b0:21:c6:dc:79:a6:b7:6f:d3:b3:75:9c:46:63:18:8b:00:95: 6e:9d:3c:be:b3:1a:f9:85:72:9b:7d:c5:e0:9f:b1:c6:09:38: e8:80:2d:d8:5f:6e:49:0e:69:4a:1c:15:a1:3a:77:70:79:dd: a8:03:b4:f3:50:23:60:1f:bf:45:36:5e:f9:ce:ce:47:a0:2a: c6:cd:04:f2:08:f9:a7:01:2e:cb:e3:0e:1a:0c:e1:e2:4a:ea: 46:04:aa:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOmNeftNysJtoqhc5x13HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzBkZGUzOGJhYjYyNThiNWEwMjk0ZWMxMzRmNmNhYzE1 ZDM2NmUwHhcNMjUxMjIzMjIwMDMwWhcNMjUxMjI0MjIwMDMwWjAzMTEwLwYDVQQD EygwMmQwNWIxY2ZmODliNTUzZjFkMzU2MmU5YjljNzM5NzJlYzZlOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuigD9folNiLyaJ6A796iszgNASmb nCAtkw7UJn3DxecJ3xoFEwYxHn52POdBiToP38Oy9rkjKRQ/T3GUX07+l0rAsoqw KLRCa2yEiTnPMwD9VPrAIfa2n/zkLY+ltlCJFTSM/XZRGv7qxVOcCv8AZ791knnm Z7v7bxjOjY8+CfL09N3PailA900A/2jtpLweXeCLRpW67wyf/NqVjWyG9P0m9hSn CRgDrLavHM8rDmaQkey4W5TLhi1a2CchUXPg3/HHinD3LAc+STKBIzFERZGcQFJe 97yUFVWwUkD2OKN+MZ7+VFDTPFOCjqrsrfet4ThzMTslGHZ4+BNw4Lb6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALQWxz/ibVT8dNWLpucc5cuxunoMB8GA1UdIwQY MBaAFLjA3eOLq2JYtaApTsE09srBXTZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzIt MDRlZGJkYmNlYzM3LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzItMDRlZGJkYmNlYzM3 LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwKf8WU9 82FI7crjQ9joRvyERfT/X0bhq+6Z33Y2rTsp706y6L1wf46DnLPi/YLrJF2MH6Tl Nbgvu3SnbG4w+P/OAJ10UhEccLeAw3ID+fFCAr05tEq//GL4A/uFnDZEa+lhwSJw SuYqZxe645UMGAexoGeOcainDpnrgGx8puz0jPMIp+fRpezFJVndC4Eh6mmbdb4y 22mJeJ0uAejemRsJsCHG3Hmmt2/Ts3WcRmMYiwCVbp08vrMa+YVym33F4J+xxgk4 6IAt2F9uSQ5pShwVoTp3cHndqAO081AjYB+/RTZe+c7OR6Aqxs0E8gj5pwEuy+MO Ggzh4krqRgSq6g== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:28 2025 by rpki-client