This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft File: ufurlhxKPhbNdhvC_tuaKBd8tHM.mft (raw, json) Hash identifier: XJT8z3RG72MXmSrqz05X/ofAkSK8lSaL3f3k4oEUClE= Subject key identifier: F9:8E:3F:89:16:97:FC:7C:DD:13:FD:4D:3D:CD:AB:C6:1F:C6:10:0A Authority key identifier: B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73 Certificate issuer: /CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473 Certificate serial: 019B3C1061CB29CE6C178AE6CD5E8B338E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft Manifest number: 020D Signing time: Sat 20 Dec 2025 14:01:05 +0000 Manifest this update: Sat 20 Dec 2025 14:01:05 +0000 Manifest next update: Sun 21 Dec 2025 14:01:05 +0000 Files and hashes: 1: h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa (hash: h3p/LWTg/DWcs8xgDXGpmbcqHQbGvNr+C69wyUtdibA=) 2: ufurlhxKPhbNdhvC_tuaKBd8tHM.crl (hash: 9qrt5MM0lSBAjL7BBkntACaxC/76hDgpEq03mYyNg7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:61:cb:29:ce:6c:17:8a:e6:cd:5e:8b:33:8e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473 Validity Not Before: Dec 20 14:01:05 2025 GMT Not After : Dec 21 14:01:05 2025 GMT Subject: CN=f98e3f891697fc7cdd13fd4d3dcdabc61fc6100a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:62:e0:77:d0:f4:70:1c:32:b9:33:fb:9c:b9: c3:49:ce:18:66:6d:ab:d6:6e:c4:a6:89:cf:8a:3e: 08:86:35:51:a5:89:85:d1:7b:48:40:c3:96:cc:4b: 81:d9:3f:34:53:d9:99:23:bf:c8:d2:30:ef:05:81: ce:a5:c1:ea:cc:ef:f2:77:b3:3b:ac:9e:96:8a:6e: 14:bc:45:3e:d2:a5:0c:17:1f:3a:af:7c:b3:b2:b9: 03:9b:ef:ab:a5:28:7e:be:e0:ee:8d:79:03:25:f0: b2:ae:d4:60:34:92:ce:cb:bc:c3:f8:44:2a:6c:26: d8:6f:e4:18:7a:00:8f:5e:54:94:fb:77:4d:5a:77: f1:9a:e6:76:4d:66:65:3f:97:e7:85:ee:69:72:39: e2:5d:96:03:05:9f:02:f9:f8:28:4e:ee:e4:69:e5: 6f:fe:9c:2b:7d:98:dc:f0:9f:ee:85:65:ba:9d:25: c7:21:db:9a:e9:d3:5e:27:23:c0:7a:b8:cf:94:47: 11:71:00:65:40:4c:d0:14:f8:50:25:a8:a5:d7:58: 83:0a:7a:02:d1:f5:f7:4d:18:b3:3b:e7:0e:95:a0: fd:43:42:06:c8:de:bd:3c:3b:1c:97:0f:53:08:36: 09:80:6d:d9:0e:08:22:c2:70:91:56:51:59:41:79: b5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8E:3F:89:16:97:FC:7C:DD:13:FD:4D:3D:CD:AB:C6:1F:C6:10:0A X509v3 Authority Key Identifier: keyid:B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c1:f5:78:9d:5f:11:36:6b:7a:35:1e:4f:db:ba:30:f1:02: 53:d9:ae:1c:f1:20:bb:88:e8:57:6b:cb:a0:56:c7:a5:42:68: 28:cf:a8:c9:7a:b2:74:a3:24:cc:cc:2e:1f:39:4f:dc:02:8f: 9e:e2:d4:95:b4:d7:a6:a4:a2:34:15:4a:48:c6:ab:cb:86:46: 46:34:a2:ee:9a:31:9c:39:5a:ea:c9:0b:5d:d5:6b:c9:49:0e: 67:f7:dc:62:9d:6a:1e:66:9b:bd:a2:be:2d:e4:bc:7e:8d:cc: 11:a5:a7:40:37:e6:8a:a8:37:85:1b:e5:9d:69:fb:a1:9c:ea: b5:ac:97:69:6c:62:a7:00:7c:c6:63:96:a9:e7:51:48:07:64: 4e:bf:13:84:ce:ef:b5:fc:ca:d4:e4:9a:0f:93:8d:46:38:d4: fd:dc:2b:67:1b:d3:f9:6e:36:4f:87:5e:8e:c6:ab:5e:1f:5e: 66:e2:6e:6b:0f:eb:ad:43:52:15:b0:4c:dc:82:e6:c6:3e:8c: 27:39:f3:30:bd:12:3f:d9:a7:63:1e:17:c0:96:3d:2b:4c:50: 5d:b0:aa:56:cf:56:4b:a6:0f:49:d8:39:76:53:14:55:a4:c6: 5d:89:ad:2a:f7:cc:a1:0e:70:aa:21:a6:d3:36:5d:23:ae:9f: 6d:8d:28:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGHLKc5sF4rmzV6LM46LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZmJhYjk2MWM0YTNlMTZjZDc2MWJjMmZlZGI5YTI4MTc3 Y2I0NzMwHhcNMjUxMjIwMTQwMTA1WhcNMjUxMjIxMTQwMTA1WjAzMTEwLwYDVQQD EyhmOThlM2Y4OTE2OTdmYzdjZGQxM2ZkNGQzZGNkYWJjNjFmYzYxMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGLgd9D0cBwyuTP7nLnDSc4YZm2r 1m7EponPij4IhjVRpYmF0XtIQMOWzEuB2T80U9mZI7/I0jDvBYHOpcHqzO/yd7M7 rJ6Wim4UvEU+0qUMFx86r3yzsrkDm++rpSh+vuDujXkDJfCyrtRgNJLOy7zD+EQq bCbYb+QYegCPXlSU+3dNWnfxmuZ2TWZlP5fnhe5pcjniXZYDBZ8C+fgoTu7kaeVv /pwrfZjc8J/uhWW6nSXHIdua6dNeJyPAerjPlEcRcQBlQEzQFPhQJail11iDCnoC 0fX3TRizO+cOlaD9Q0IGyN69PDsclw9TCDYJgG3ZDggiwnCRVlFZQXm1cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmOP4kWl/x83RP9TT3Nq8YfxhAKMB8GA1UdIwQY MBaAFLn7q5YcSj4WzXYbwv7bmigXfLRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZ1cmxoeEtQaGJOZGh2Q190dWFLQmQ4dEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zZDkyMWItOWRhNi00YTc5LWEyNjQt ZmMxMzAzZGU2ZDQ5LzEvdWZ1cmxoeEtQaGJOZGh2Q190dWFLQmQ4dEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zZDkyMWItOWRhNi00YTc5LWEyNjQtZmMxMzAzZGU2ZDQ5 LzEvdWZ1cmxoeEtQaGJOZGh2Q190dWFLQmQ4dEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcH1eJ1f ETZrejUeT9u6MPECU9muHPEgu4joV2vLoFbHpUJoKM+oyXqydKMkzMwuHzlP3AKP nuLUlbTXpqSiNBVKSMary4ZGRjSi7poxnDla6skLXdVryUkOZ/fcYp1qHmabvaK+ LeS8fo3MEaWnQDfmiqg3hRvlnWn7oZzqtayXaWxipwB8xmOWqedRSAdkTr8ThM7v tfzK1OSaD5ONRjjU/dwrZxvT+W42T4dejsarXh9eZuJuaw/rrUNSFbBM3ILmxj6M JznzML0SP9mnYx4XwJY9K0xQXbCqVs9WS6YPSdg5dlMUVaTGXYmtKvfMoQ5wqiGm 0zZdI66fbY0orA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:07:41 2025 by rpki-client