This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json) Hash identifier: vmOcRhdMu3V+N8QwS39uGYNvX6BsBL/l7qPwIPkBQis= Subject key identifier: E1:19:4B:F2:36:2F:C3:6C:DF:93:E1:65:EF:3A:6F:32:48:DD:1A:BB Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055 Certificate serial: 019B530621A4D88A6060F00B49EEFFCC98D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft Manifest number: 1287 Signing time: Thu 25 Dec 2025 01:01:09 +0000 Manifest this update: Thu 25 Dec 2025 01:01:09 +0000 Manifest next update: Fri 26 Dec 2025 01:01:09 +0000 Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=) 2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: cxZNDCpr1p1tErsrVSMJ99CZL1bR5U5GZJtwWdbE7WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:21:a4:d8:8a:60:60:f0:0b:49:ee:ff:cc:98:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055 Validity Not Before: Dec 25 01:01:09 2025 GMT Not After : Dec 26 01:01:09 2025 GMT Subject: CN=e1194bf2362fc36cdf93e165ef3a6f3248dd1abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:d6:3d:12:ee:58:27:b1:06:67:05:cb:a7: f6:37:ba:81:97:c8:c7:0c:f4:df:1e:91:5e:33:c0: 1d:db:3e:a9:49:5a:99:f5:4e:bb:3d:25:d8:37:1a: be:6e:c5:22:a7:4c:7e:86:7c:09:3a:5f:54:ef:ba: 8d:9a:8e:b9:ad:62:9d:f0:38:cf:f7:eb:10:40:45: c1:ac:b3:a9:d4:18:86:da:6e:fb:2a:8a:02:7d:66: 21:09:92:f4:e2:35:1e:a1:29:7a:b9:aa:52:b9:cc: e2:a8:d5:34:07:9c:9d:7f:91:14:1d:1c:f6:51:20: ab:8a:6a:77:e8:f7:5a:d6:e6:fd:b1:cb:d3:c2:1f: 37:9d:37:cb:10:00:a8:c7:d4:86:fe:39:2e:f3:c0: a9:38:21:64:9e:36:32:8d:90:a5:8c:ab:a1:c7:31: b4:b6:9e:4d:11:1a:6f:d9:47:23:e4:f1:60:63:95: 88:74:6f:cb:35:35:c3:09:e4:3e:b7:66:c3:d3:df: ae:da:73:3d:72:24:3f:f2:6f:61:8e:fb:1d:44:6f: 2f:a0:81:16:0d:39:85:76:26:25:9c:3f:2d:6a:9b: aa:bf:8f:db:ba:42:a1:b2:ac:ac:43:c9:f6:97:16: a1:61:f0:e4:e1:5b:3b:18:34:3a:3d:db:93:35:c2: d0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:19:4B:F2:36:2F:C3:6C:DF:93:E1:65:EF:3A:6F:32:48:DD:1A:BB X509v3 Authority Key Identifier: keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:99:d7:c1:77:f2:c0:4c:9d:10:a1:78:8d:b7:c7:98:8a:8a: 56:08:fc:2e:de:5e:34:64:42:2f:54:0f:dc:01:f6:3e:e2:44: 5f:08:a4:05:78:a5:ff:14:21:33:49:68:a1:ea:54:fd:f4:27: 4c:d7:ca:f5:c4:9f:23:35:1b:e9:a4:d2:22:cd:7a:a8:d9:77: 68:1a:d2:66:27:24:52:6d:35:09:67:79:36:36:1a:7e:f4:e8: 77:4b:58:b9:c1:4d:40:55:8b:b7:f3:fa:c7:9a:5f:89:cc:eb: df:85:59:86:cd:2b:17:6b:40:c7:3a:77:26:69:7f:15:f4:1d: 24:dd:8e:9b:54:3d:30:b7:08:8b:f2:bd:d8:28:86:eb:c9:ec: ef:df:e0:51:a1:e3:dc:a2:f4:ed:8a:71:12:32:7c:74:aa:7f: 91:7d:8a:52:23:83:bb:bd:d6:06:a4:80:89:c1:d6:27:05:3a: 7e:00:67:e8:29:66:ff:33:84:34:3a:8b:d4:ac:a2:cd:bd:4b: 93:dc:c1:11:31:62:d7:4d:ec:18:3c:8e:63:ad:70:ff:ed:ed: 31:d5:52:54:04:f3:2c:cc:b6:5e:95:3e:1c:2b:f2:7e:bf:73: 55:91:68:6d:0f:04:43:a5:b7:b2:f2:e8:a2:bb:fb:43:de:a9: cc:47:6e:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBiGk2IpgYPALSe7/zJjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTg3OTUwMzdkZDQwZjAxODM3M2Y0N2M1OWUwNGEyMTJm NWEwNTUwHhcNMjUxMjI1MDEwMTA5WhcNMjUxMjI2MDEwMTA5WjAzMTEwLwYDVQQD EyhlMTE5NGJmMjM2MmZjMzZjZGY5M2UxNjVlZjNhNmYzMjQ4ZGQxYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsovWPRLuWCexBmcFy6f2N7qBl8jH DPTfHpFeM8Ad2z6pSVqZ9U67PSXYNxq+bsUip0x+hnwJOl9U77qNmo65rWKd8DjP 9+sQQEXBrLOp1BiG2m77KooCfWYhCZL04jUeoSl6uapSucziqNU0B5ydf5EUHRz2 USCrimp36Pda1ub9scvTwh83nTfLEACox9SG/jku88CpOCFknjYyjZCljKuhxzG0 tp5NERpv2Ucj5PFgY5WIdG/LNTXDCeQ+t2bD09+u2nM9ciQ/8m9hjvsdRG8voIEW DTmFdiYlnD8tapuqv4/bukKhsqysQ8n2lxahYfDk4Vs7GDQ6PduTNcLQ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEZS/I2L8Ns35PhZe86bzJI3Rq7MB8GA1UdIwQY MBaAFLmoeVA33UDwGDc/R8WeBKIS9aBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQt N2QyMmI3Njg0NDc5LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQtN2QyMmI3Njg0NDc5 LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJnXwXfy wEydEKF4jbfHmIqKVgj8Lt5eNGRCL1QP3AH2PuJEXwikBXil/xQhM0looepU/fQn TNfK9cSfIzUb6aTSIs16qNl3aBrSZickUm01CWd5NjYafvTod0tYucFNQFWLt/P6 x5pficzr34VZhs0rF2tAxzp3Jml/FfQdJN2Om1Q9MLcIi/K92CiG68ns79/gUaHj 3KL07YpxEjJ8dKp/kX2KUiODu73WBqSAicHWJwU6fgBn6Clm/zOENDqL1Kyizb1L k9zBETFi103sGDyOY61w/+3tMdVSVATzLMy2XpU+HCvyfr9zVZFobQ8EQ6W3svLo orv7Q96pzEduMA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:35:39 2025 by rpki-client