This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.mft File: _Uocf_C6UpB9qL67f-u6p1HIjR8.mft (raw, json) Hash identifier: T6ZpnnbtRMcZYUrN9fDQ/5BzAez7sThi6Wq1g+zfVsA= Subject key identifier: AF:BB:68:1D:85:FC:7C:5E:88:58:3E:0E:D1:A2:4F:9D:3C:DE:A5:0A Authority key identifier: FD:4A:1C:7F:F0:BA:52:90:7D:A8:BE:BB:7F:EB:BA:A7:51:C8:8D:1F Certificate issuer: /CN=fd4a1c7ff0ba52907da8bebb7febbaa751c88d1f Certificate serial: 019B3946273617DB2DEB998A8909F278AFB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Uocf_C6UpB9qL67f-u6p1HIjR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.mft Manifest number: 03 Signing time: Sat 20 Dec 2025 01:00:57 +0000 Manifest this update: Sat 20 Dec 2025 01:00:57 +0000 Manifest next update: Sun 21 Dec 2025 01:00:57 +0000 Files and hashes: 1: _Uocf_C6UpB9qL67f-u6p1HIjR8.crl (hash: zlbthYFoYtEL7JsSfUCFqj/FnMCpFCNZdt0Sjb9p40I=) 2: rlM4cnvTeBVqojgLeG_kyPKaF_I.asa (hash: 017qRy2aHTwVo1KO07UeYU0MOeFcAjPdriXzOq7mnXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.mft rsync://rpki.ripe.net/repository/DEFAULT/_Uocf_C6UpB9qL67f-u6p1HIjR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:27:36:17:db:2d:eb:99:8a:89:09:f2:78:af:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd4a1c7ff0ba52907da8bebb7febbaa751c88d1f Validity Not Before: Dec 20 01:00:57 2025 GMT Not After : Dec 21 01:00:57 2025 GMT Subject: CN=afbb681d85fc7c5e88583e0ed1a24f9d3cdea50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5d:9e:a7:ad:47:70:17:e5:f4:86:06:80:b7: 9c:a8:ca:2f:b8:9b:91:fc:85:81:9c:1e:a1:bc:0a: 97:a3:b9:94:c2:75:9c:cc:ec:ee:2e:18:43:25:d1: c6:00:73:00:86:03:a4:a8:c6:2e:4e:61:6f:71:cb: 0f:6a:55:df:fc:e4:f4:87:30:e5:2e:6c:d0:00:8a: 95:0f:83:53:7a:be:33:e3:5a:b8:3e:4e:c4:c2:8e: 2c:39:43:ee:82:9e:ee:8d:d7:d9:ea:3e:c2:7b:b6: c5:5d:7d:71:d2:a0:85:be:03:1e:32:48:98:3e:39: 65:bb:b9:d2:c8:2d:3a:2c:36:81:71:a3:5f:28:ec: b9:63:18:12:1c:0f:98:c7:ee:65:84:77:85:3a:29: 2a:d2:08:4e:76:d0:2d:78:a5:59:8f:4d:7f:a9:ae: ee:63:69:a4:c1:11:b7:0a:8e:79:77:bd:ff:63:ef: 68:6c:b7:78:23:49:a4:8c:cd:a4:5e:8a:2b:17:93: 59:8d:eb:6f:e0:34:6b:88:20:7b:05:ee:76:b0:31: 07:e9:b9:ac:fd:82:f8:7f:64:84:76:5e:c1:8a:29: 47:d8:db:c5:a5:74:24:86:a5:1e:cc:dd:b7:d7:c6: e6:79:5d:ad:e0:f1:a0:08:ca:ec:0e:a9:5a:68:0e: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BB:68:1D:85:FC:7C:5E:88:58:3E:0E:D1:A2:4F:9D:3C:DE:A5:0A X509v3 Authority Key Identifier: keyid:FD:4A:1C:7F:F0:BA:52:90:7D:A8:BE:BB:7F:EB:BA:A7:51:C8:8D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Uocf_C6UpB9qL67f-u6p1HIjR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7e:f4:95:27:cf:c8:2e:15:7c:df:d8:ac:5e:39:81:9d:99: 3e:dd:30:a8:e1:6a:46:c7:24:db:bf:39:14:8e:15:0d:4d:d9: bd:46:cc:fe:a9:df:88:4e:eb:35:3c:ef:f9:72:a1:52:2c:0e: 78:30:82:1f:09:d4:fa:e0:f9:ac:45:e1:29:65:3a:bb:7f:2f: 3e:31:52:38:7e:33:b9:e8:a6:70:b9:b3:a0:e3:2f:ec:3a:cc: 8f:70:8f:65:00:96:93:3d:46:63:60:ab:b5:60:c0:17:bd:b2: f9:97:17:70:1d:57:63:ac:4b:28:04:09:a8:91:56:f0:a0:ab: c2:31:17:20:92:f6:93:c8:20:6f:22:9d:6c:86:a1:99:b1:d8: 2e:fc:12:67:36:e2:ec:0a:5c:b2:83:b3:0c:11:d3:18:6f:52: e7:4b:93:c0:40:18:70:b9:74:d9:ce:f2:73:39:e2:7b:f2:8c: ce:06:fd:ff:af:59:d6:72:c4:6f:8a:d7:98:7d:c1:52:48:99: 53:05:40:0f:a4:4f:f7:b7:ae:fc:31:c1:d5:b5:01:36:df:3e: 1e:af:cc:b4:5e:b1:8f:62:11:06:09:03:9d:a9:58:a8:65:ac: 19:f2:0a:12:6a:e0:13:95:ef:69:d5:f6:a4:ec:71:00:fb:2c: 57:70:49:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Ric2F9st65mKiQnyeK+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNGExYzdmZjBiYTUyOTA3ZGE4YmViYjdmZWJiYWE3NTFj ODhkMWYwHhcNMjUxMjIwMDEwMDU3WhcNMjUxMjIxMDEwMDU3WjAzMTEwLwYDVQQD EyhhZmJiNjgxZDg1ZmM3YzVlODg1ODNlMGVkMWEyNGY5ZDNjZGVhNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9F2ep61HcBfl9IYGgLecqMovuJuR /IWBnB6hvAqXo7mUwnWczOzuLhhDJdHGAHMAhgOkqMYuTmFvccsPalXf/OT0hzDl LmzQAIqVD4NTer4z41q4Pk7Ewo4sOUPugp7ujdfZ6j7Ce7bFXX1x0qCFvgMeMkiY Pjllu7nSyC06LDaBcaNfKOy5YxgSHA+Yx+5lhHeFOikq0ghOdtAteKVZj01/qa7u Y2mkwRG3Co55d73/Y+9obLd4I0mkjM2kXoorF5NZjetv4DRriCB7Be52sDEH6bms /YL4f2SEdl7BiilH2NvFpXQkhqUezN2318bmeV2t4PGgCMrsDqlaaA5WNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+7aB2F/HxeiFg+DtGiT5083qUKMB8GA1UdIwQY MBaAFP1KHH/wulKQfai+u3/ruqdRyI0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1VvY2ZfQzZVcEI5cUw2N2YtdTZwMUhJalI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hZGQ3NjgtMDQ5Ni00MzY1LTlhOGUt YTdlNWFiZDdiZTczLzEvX1VvY2ZfQzZVcEI5cUw2N2YtdTZwMUhJalI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hZGQ3NjgtMDQ5Ni00MzY1LTlhOGUtYTdlNWFiZDdiZTcz LzEvX1VvY2ZfQzZVcEI5cUw2N2YtdTZwMUhJalI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn70lSfP yC4VfN/YrF45gZ2ZPt0wqOFqRsck2785FI4VDU3ZvUbM/qnfiE7rNTzv+XKhUiwO eDCCHwnU+uD5rEXhKWU6u38vPjFSOH4zueimcLmzoOMv7DrMj3CPZQCWkz1GY2Cr tWDAF72y+ZcXcB1XY6xLKAQJqJFW8KCrwjEXIJL2k8ggbyKdbIahmbHYLvwSZzbi 7ApcsoOzDBHTGG9S50uTwEAYcLl02c7ycznie/KMzgb9/69Z1nLEb4rXmH3BUkiZ UwVAD6RP97eu/DHB1bUBNt8+Hq/MtF6xj2IRBgkDnalYqGWsGfIKEmrgE5XvadX2 pOxxAPssV3BJbw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:48 2025 by rpki-client