This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json) Hash identifier: ezVfZFib1Hj0Z589Y9QFSIAtY4qkxJQ/as2V6VsXTa8= Subject key identifier: E7:25:59:26:1F:9B:35:63:34:FF:18:D4:8E:BF:AB:6C:1E:14:D9:CB Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Certificate serial: 019B38D845B1981C47D5ABBBA5E757F17690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft Manifest number: 0FFB Signing time: Fri 19 Dec 2025 23:00:56 +0000 Manifest this update: Fri 19 Dec 2025 23:00:56 +0000 Manifest next update: Sat 20 Dec 2025 23:00:56 +0000 Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=) 2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=) 3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: oHubEfty3oyvWYrZ8T8YVVpQY8hnCzrO2WIjk3erjCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:45:b1:98:1c:47:d5:ab:bb:a5:e7:57:f1:76:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Validity Not Before: Dec 19 23:00:56 2025 GMT Not After : Dec 20 23:00:56 2025 GMT Subject: CN=e72559261f9b356334ff18d48ebfab6c1e14d9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:af:2f:61:bc:76:c2:95:48:ff:25:54:63: c2:10:fb:03:d0:40:2b:0d:3a:68:6d:f5:2a:7b:e7: f7:1c:c4:22:58:34:12:8b:32:6c:01:64:e4:fc:e7: 16:3f:62:24:3e:f0:2d:3f:38:f5:65:71:6c:4c:43: 22:a9:f5:8c:fd:1a:e3:23:c5:01:44:ec:31:70:f7: 19:fd:bd:c1:12:ef:0a:38:41:11:84:fe:e2:a3:27: a8:a3:93:f1:38:01:a7:2b:b3:dd:55:38:5c:43:1b: fd:60:3a:d5:fa:f2:2c:2b:ec:37:4e:92:0b:23:69: f4:38:94:bf:8c:a4:8a:bd:e7:06:75:c4:f0:db:5e: 77:6c:fd:06:9d:3b:77:8a:15:73:56:a7:01:e6:ee: 1a:79:64:f1:5e:1c:62:48:c4:ff:7f:f0:00:de:11: 81:b0:be:ae:9d:2b:35:cb:51:88:70:e4:64:78:77: 96:ba:39:63:e7:39:92:62:24:7d:09:d3:21:c8:fa: b8:c3:b8:c2:0c:42:71:6a:d7:ad:6f:43:2e:44:67: f4:31:86:3b:34:c5:ca:b1:4e:1e:56:6d:6a:fb:f7: 00:94:44:d7:54:08:8e:dc:09:3e:8c:58:ba:b1:24: 5d:d2:ba:7a:36:67:b2:a3:96:f0:5c:51:eb:e1:2f: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:59:26:1F:9B:35:63:34:FF:18:D4:8E:BF:AB:6C:1E:14:D9:CB X509v3 Authority Key Identifier: keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b0:bf:82:43:eb:d3:0b:30:8e:f8:e8:26:eb:e1:1b:01:e9: e6:80:75:8b:de:2e:3c:a9:04:71:9b:e6:2c:4c:b2:97:bf:32: 5a:ba:bc:6f:99:df:01:84:1f:4b:0d:38:16:a4:51:b9:17:0d: 12:c8:ee:85:50:9e:77:fc:db:cc:5f:7d:64:fb:80:45:89:37: ee:20:6c:c6:65:f1:b1:08:17:37:4b:18:b2:74:de:b2:e8:28: 97:c3:89:e0:a8:dc:8c:35:97:c1:1a:3e:d3:b9:88:3f:57:d5: 01:8a:af:05:51:c8:97:12:d5:00:31:db:e6:13:fc:17:dc:fa: 63:d5:d1:ac:8f:69:b4:98:bb:bd:04:23:21:e1:8a:87:75:4b: 21:e3:77:a5:e0:42:e0:e3:a8:16:d4:9d:d6:37:c0:3d:21:3c: e9:fa:49:a4:d6:16:5f:ac:a6:bc:c4:52:32:b7:a2:f5:a0:2f: 0b:7d:8d:a3:c3:f3:17:ee:8b:f9:f5:04:f3:71:cb:55:7d:7c: f6:27:5d:4e:97:e7:75:4d:1e:ad:79:1f:a4:3d:1d:c1:98:0f: 25:57:66:25:1b:35:e0:ab:61:a3:4a:db:a6:70:9e:0a:34:00: b5:77:9b:8b:f0:29:e9:eb:d0:3a:be:7c:7a:f0:b3:d4:9c:eb: d7:39:4c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42EWxmBxH1au7pedX8XaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0 ZWI4N2UwHhcNMjUxMjE5MjMwMDU2WhcNMjUxMjIwMjMwMDU2WjAzMTEwLwYDVQQD EyhlNzI1NTkyNjFmOWIzNTYzMzRmZjE4ZDQ4ZWJmYWI2YzFlMTRkOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhGvL2G8dsKVSP8lVGPCEPsD0EAr DTpobfUqe+f3HMQiWDQSizJsAWTk/OcWP2IkPvAtPzj1ZXFsTEMiqfWM/RrjI8UB ROwxcPcZ/b3BEu8KOEERhP7ioyeoo5PxOAGnK7PdVThcQxv9YDrV+vIsK+w3TpIL I2n0OJS/jKSKvecGdcTw2153bP0GnTt3ihVzVqcB5u4aeWTxXhxiSMT/f/AA3hGB sL6unSs1y1GIcORkeHeWujlj5zmSYiR9CdMhyPq4w7jCDEJxatetb0MuRGf0MYY7 NMXKsU4eVm1q+/cAlETXVAiO3Ak+jFi6sSRd0rp6Nmeyo5bwXFHr4S+uvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOclWSYfmzVjNP8Y1I6/q2weFNnLMB8GA1UdIwQY MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArC/gkPr 0wswjvjoJuvhGwHp5oB1i94uPKkEcZvmLEyyl78yWrq8b5nfAYQfSw04FqRRuRcN EsjuhVCed/zbzF99ZPuARYk37iBsxmXxsQgXN0sYsnTesugol8OJ4KjcjDWXwRo+ 07mIP1fVAYqvBVHIlxLVADHb5hP8F9z6Y9XRrI9ptJi7vQQjIeGKh3VLIeN3peBC 4OOoFtSd1jfAPSE86fpJpNYWX6ymvMRSMrei9aAvC32No8PzF+6L+fUE83HLVX18 9iddTpfndU0erXkfpD0dwZgPJVdmJRs14Ktho0rbpnCeCjQAtXebi/Ap6evQOr58 evCz1Jzr1zlMFA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:00 2025 by rpki-client