This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json) Hash identifier: TJCF71th0gDcQC1ZrQHFtS5F5ZESL5Mno2A4CZz+Si8= Subject key identifier: 10:CF:5F:FE:F8:EA:F1:3B:2E:72:82:B2:99:1F:06:A5:ED:2A:09:38 Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055 Certificate serial: 019B4581F9D6978F1DBF447BB378410CD5E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft Manifest number: 1280 Signing time: Mon 22 Dec 2025 10:01:44 +0000 Manifest this update: Mon 22 Dec 2025 10:01:44 +0000 Manifest next update: Tue 23 Dec 2025 10:01:44 +0000 Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=) 2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: C+xcyUSzwj+uRNqOdcCBrBX6tot6yEEwXqZ5rUfnKAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:f9:d6:97:8f:1d:bf:44:7b:b3:78:41:0c:d5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055 Validity Not Before: Dec 22 10:01:44 2025 GMT Not After : Dec 23 10:01:44 2025 GMT Subject: CN=10cf5ffef8eaf13b2e7282b2991f06a5ed2a0938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:c5:e2:fd:6e:4c:bf:3a:8d:23:1a:36:9d: 67:38:0f:d7:28:bb:7d:e2:9e:75:5e:4f:58:1c:d5: ac:82:81:d2:11:61:02:00:88:cc:cc:ab:5d:d6:b3: 5e:6f:2f:90:db:f8:cf:8f:b0:fa:67:eb:89:e9:9c: 17:a4:3d:61:c7:44:0b:0b:04:51:d9:87:75:81:e2: 87:f3:7b:fc:c3:0b:ce:97:59:c2:98:71:58:77:e1: 75:74:a7:8d:a9:a2:c8:14:80:57:ae:15:fb:79:ef: dd:3a:f7:93:3f:87:4f:e5:92:66:3e:b1:72:cb:44: 5b:9d:c2:d2:35:dc:2e:fa:08:bc:b2:3b:55:1f:a3: 4d:93:41:f3:a8:54:04:93:08:34:a1:f5:ce:3a:3e: 83:30:11:60:c8:b1:a7:54:7f:9c:b2:e7:3e:5b:69: df:1a:07:c5:3d:02:78:e7:5b:84:3b:32:18:9d:03: c0:de:ac:ac:ed:7a:01:21:45:ab:a0:5e:91:3c:af: 4d:a7:72:80:3f:37:3a:d2:a0:24:ad:6f:60:f9:94: 46:bd:45:f9:28:97:73:5b:a3:3a:d3:a2:03:39:65: e3:86:df:10:8b:32:4a:23:60:8c:d1:17:17:85:df: 18:95:85:56:71:8d:a5:46:91:00:c0:51:f0:62:d2: 9e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:5F:FE:F8:EA:F1:3B:2E:72:82:B2:99:1F:06:A5:ED:2A:09:38 X509v3 Authority Key Identifier: keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3b:d8:82:27:10:84:6e:4b:73:65:f0:01:44:18:08:f1:fc: 57:ab:e7:c8:8b:38:91:59:b7:7c:3b:09:3a:db:9a:6d:8f:e7: b7:3a:29:6b:f2:6a:18:02:cb:e5:af:4a:ed:5f:00:3e:0a:7d: 7b:8b:96:31:73:9e:11:f8:48:44:42:67:8e:29:2a:0c:0f:a6: ee:4b:a4:be:4f:2c:88:25:a7:18:92:b9:8f:ed:73:9a:f9:88: 19:82:62:b3:f1:66:7c:45:1b:da:4d:6e:0f:70:c8:ed:55:de: 5a:0c:ac:8a:af:4f:74:b9:db:ae:6a:0d:30:f5:8a:16:ee:85: 77:ea:bb:6f:2e:29:5b:25:07:35:d2:d3:9a:aa:77:73:0e:ad: ee:06:c4:d1:0b:83:2b:fd:5b:a8:62:12:1b:c9:ad:42:99:91: af:38:fa:b3:25:6c:6c:ac:f4:4b:6a:ab:2e:aa:d4:cc:af:45: 90:28:57:07:ba:fe:ac:8a:92:63:4f:fb:05:5d:61:16:0a:be: 10:af:d5:ac:be:13:65:9e:34:ab:a3:70:3a:a3:18:e3:26:a9: db:80:78:8c:20:39:fd:f9:07:25:31:ed:33:ba:de:43:ff:c4: 0f:e8:e4:1b:93:8f:6d:9c:37:8a:21:a1:49:d4:b1:87:c3:77: a4:0d:4e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgfnWl48dv0R7s3hBDNXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTg3OTUwMzdkZDQwZjAxODM3M2Y0N2M1OWUwNGEyMTJm NWEwNTUwHhcNMjUxMjIyMTAwMTQ0WhcNMjUxMjIzMTAwMTQ0WjAzMTEwLwYDVQQD EygxMGNmNWZmZWY4ZWFmMTNiMmU3MjgyYjI5OTFmMDZhNWVkMmEwOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxofF4v1uTL86jSMaNp1nOA/XKLt9 4p51Xk9YHNWsgoHSEWECAIjMzKtd1rNeby+Q2/jPj7D6Z+uJ6ZwXpD1hx0QLCwRR 2Yd1geKH83v8wwvOl1nCmHFYd+F1dKeNqaLIFIBXrhX7ee/dOveTP4dP5ZJmPrFy y0RbncLSNdwu+gi8sjtVH6NNk0HzqFQEkwg0ofXOOj6DMBFgyLGnVH+csuc+W2nf GgfFPQJ451uEOzIYnQPA3qys7XoBIUWroF6RPK9Np3KAPzc60qAkrW9g+ZRGvUX5 KJdzW6M606IDOWXjht8QizJKI2CM0RcXhd8YlYVWcY2lRpEAwFHwYtKe7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDPX/746vE7LnKCspkfBqXtKgk4MB8GA1UdIwQY MBaAFLmoeVA33UDwGDc/R8WeBKIS9aBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQt N2QyMmI3Njg0NDc5LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQtN2QyMmI3Njg0NDc5 LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjvYgicQ hG5Lc2XwAUQYCPH8V6vnyIs4kVm3fDsJOtuabY/ntzopa/JqGALL5a9K7V8APgp9 e4uWMXOeEfhIREJnjikqDA+m7kukvk8siCWnGJK5j+1zmvmIGYJis/FmfEUb2k1u D3DI7VXeWgysiq9PdLnbrmoNMPWKFu6Fd+q7by4pWyUHNdLTmqp3cw6t7gbE0QuD K/1bqGISG8mtQpmRrzj6syVsbKz0S2qrLqrUzK9FkChXB7r+rIqSY0/7BV1hFgq+ EK/VrL4TZZ40q6NwOqMY4yap24B4jCA5/fkHJTHtM7reQ//ED+jkG5OPbZw3iiGh SdSxh8N3pA1Osw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:46 2025 by rpki-client