This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json) Hash identifier: GwEV/rJNUiI/6oV8eydTTf+f5kc03pTuRx1yRrjP/HY= Subject key identifier: C6:6E:67:0F:A2:DB:51:60:25:CB:6F:E5:08:AE:61:D3:21:74:5F:E6 Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Certificate serial: 019B446EC825F379E9C0DA25E6D8AFF54B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft Manifest number: 1001 Signing time: Mon 22 Dec 2025 05:01:09 +0000 Manifest this update: Mon 22 Dec 2025 05:01:09 +0000 Manifest next update: Tue 23 Dec 2025 05:01:09 +0000 Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=) 2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=) 3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: johIXEw5g6TGpDDI4JJYAxrDJeAx4+VSMW+VpR4LIaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:c8:25:f3:79:e9:c0:da:25:e6:d8:af:f5:4b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Validity Not Before: Dec 22 05:01:09 2025 GMT Not After : Dec 23 05:01:09 2025 GMT Subject: CN=c66e670fa2db516025cb6fe508ae61d321745fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:4a:8b:e2:34:60:5a:a6:aa:27:b1:4f:aa: 52:35:48:32:02:3c:39:f0:2a:b3:ad:0b:df:f6:04: c4:cc:16:e5:0d:44:ba:65:e1:7e:f7:3d:2b:48:0d: 31:c9:e6:1b:e2:48:cd:0e:93:c2:2a:6a:a3:ac:5a: d8:36:83:50:8c:0c:3f:0f:e6:fa:79:f5:ce:41:63: 90:e2:ae:4b:15:93:0c:83:be:5c:55:0d:05:8e:e7: 22:11:79:c7:1b:7e:fc:d3:37:a5:cf:72:78:5a:9a: 9f:53:6b:6c:e5:a9:cc:00:9d:4e:4e:b1:cd:5c:c5: a0:16:92:5f:13:2a:ec:78:1e:30:0f:94:d1:11:02: bf:2a:7c:c4:af:f4:84:a0:69:3f:07:bb:cd:27:f4: 15:e1:30:d4:af:f2:1e:62:0f:ce:c1:e4:25:88:f0: f0:6a:b9:dd:d5:b2:7e:c1:19:6a:27:fb:4d:99:45: 0b:f4:7d:3c:08:ba:fc:31:68:c0:a9:0c:83:a3:b6: 5e:31:98:7d:76:d9:f6:33:fb:ee:16:f6:5a:93:4a: 97:bd:a3:45:22:09:26:ab:39:fd:62:34:56:48:61: 35:3b:da:67:e0:b2:b1:39:96:a2:69:48:96:66:bd: 7f:bf:9a:a5:9c:61:90:06:1b:ef:ca:95:3e:67:1f: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6E:67:0F:A2:DB:51:60:25:CB:6F:E5:08:AE:61:D3:21:74:5F:E6 X509v3 Authority Key Identifier: keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e1:52:8a:74:14:00:3f:14:f6:2a:b4:c4:29:1a:0e:22:8f: 7b:c5:92:5f:be:6d:02:14:7d:29:83:d5:c2:17:90:19:6f:5d: 2d:81:2a:c9:23:06:22:6a:17:6e:9c:0c:65:43:01:49:a5:9d: d8:77:ea:80:50:d6:3b:a7:ac:06:5d:4b:5d:ce:ce:2a:1e:7f: 15:51:60:2a:22:fe:58:45:19:bd:ea:90:3d:40:2e:3d:e7:75: 74:36:3e:e0:8b:7b:76:f2:e1:a0:95:92:d5:e7:fa:fb:3f:87: 96:91:25:18:84:2c:6c:42:53:60:bd:d4:6d:0f:ac:b7:fa:7f: cc:91:23:50:24:ad:98:8d:8b:30:da:97:c6:a8:02:51:40:c2: f1:2f:1f:73:88:61:a0:f6:67:01:84:81:a8:db:d4:b4:cf:ba: eb:d4:8a:21:48:04:32:56:c1:0e:c5:96:b8:93:e5:eb:56:a1: 63:fd:c9:95:fb:d7:27:c6:d2:c3:db:30:82:32:da:18:c2:dd: d5:40:97:bc:8b:f9:e5:3a:d1:9b:0e:b3:4e:db:16:12:2e:ff: ae:ec:e8:83:c4:7f:cc:30:41:7d:f2:24:fc:1a:fc:f6:e7:af: ce:0d:74:90:14:1e:d8:a4:5c:29:6e:c0:a1:b2:3c:29:6f:8b: 2e:a1:59:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbsgl83npwNol5tiv9UslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0 ZWI4N2UwHhcNMjUxMjIyMDUwMTA5WhcNMjUxMjIzMDUwMTA5WjAzMTEwLwYDVQQD EyhjNjZlNjcwZmEyZGI1MTYwMjVjYjZmZTUwOGFlNjFkMzIxNzQ1ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbdKi+I0YFqmqiexT6pSNUgyAjw5 8CqzrQvf9gTEzBblDUS6ZeF+9z0rSA0xyeYb4kjNDpPCKmqjrFrYNoNQjAw/D+b6 efXOQWOQ4q5LFZMMg75cVQ0FjuciEXnHG3780zelz3J4WpqfU2ts5anMAJ1OTrHN XMWgFpJfEyrseB4wD5TREQK/KnzEr/SEoGk/B7vNJ/QV4TDUr/IeYg/OweQliPDw arnd1bJ+wRlqJ/tNmUUL9H08CLr8MWjAqQyDo7ZeMZh9dtn2M/vuFvZak0qXvaNF Igkmqzn9YjRWSGE1O9pn4LKxOZaiaUiWZr1/v5qlnGGQBhvvypU+Zx/vBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZuZw+i21FgJctv5QiuYdMhdF/mMB8GA1UdIwQY MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuFSinQU AD8U9iq0xCkaDiKPe8WSX75tAhR9KYPVwheQGW9dLYEqySMGImoXbpwMZUMBSaWd 2HfqgFDWO6esBl1LXc7OKh5/FVFgKiL+WEUZveqQPUAuPed1dDY+4It7dvLhoJWS 1ef6+z+HlpElGIQsbEJTYL3UbQ+st/p/zJEjUCStmI2LMNqXxqgCUUDC8S8fc4hh oPZnAYSBqNvUtM+669SKIUgEMlbBDsWWuJPl61ahY/3JlfvXJ8bSw9swgjLaGMLd 1UCXvIv55TrRmw6zTtsWEi7/ruzog8R/zDBBffIk/Br89uevzg10kBQe2KRcKW7A obI8KW+LLqFZyA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:44:24 2025 by rpki-client