This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json) Hash identifier: 5/CGiKTDy0QKbAVpvFD8ufQOHqyzg4yfBmYUUnSCi7k= Subject key identifier: 29:47:18:0F:59:20:1D:2D:37:AB:BF:EE:D3:A3:50:F4:6B:6D:76:F5 Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Certificate serial: 019B2D79788C50F60DB9892FDB1F797D5392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft Manifest number: 0AB4 Signing time: Wed 17 Dec 2025 18:01:33 +0000 Manifest this update: Wed 17 Dec 2025 18:01:33 +0000 Manifest next update: Thu 18 Dec 2025 18:01:33 +0000 Files and hashes: 1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=) 2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: 6/m+BCbJfIO34k98VbywdlGr9xqQ643S8m68ehWe0fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:78:8c:50:f6:0d:b9:89:2f:db:1f:79:7d:53:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Validity Not Before: Dec 17 18:01:33 2025 GMT Not After : Dec 18 18:01:33 2025 GMT Subject: CN=2947180f59201d2d37abbfeed3a350f46b6d76f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:35:ca:84:c1:65:e6:2e:04:bf:6c:0c:22: 5b:0b:f1:f9:a5:e4:32:68:9b:3d:97:08:4c:e2:44: 9a:f3:5f:68:5f:86:29:d0:9d:c4:f6:ad:3e:9f:41: 43:41:6f:9f:5c:36:14:2a:94:e7:27:eb:fb:5e:ee: aa:0e:52:45:dd:c6:ff:f8:38:e4:82:ed:94:cc:67: 6e:2a:80:79:a8:b5:a5:79:3a:ed:87:ad:68:19:e4: c1:6b:3b:dd:3e:e0:94:0b:eb:4b:87:4d:da:05:ba: 9c:e6:39:6a:4c:6a:78:80:58:29:84:9b:e4:70:9c: 74:48:b6:bd:e6:91:25:e3:cc:0f:75:36:cd:86:db: ac:01:50:cb:5f:c4:74:44:03:bc:38:32:ec:ef:0a: 13:f1:ed:02:db:d1:53:9a:f6:29:b6:71:84:d9:1e: da:30:f4:ff:b8:59:d5:b8:ab:e4:3d:0f:ea:71:f1: f6:8f:0c:5b:fa:7e:94:6c:fc:a9:26:63:29:76:3c: f8:ee:a8:50:bd:23:f9:76:c4:ab:15:12:c1:c0:d5: c8:52:77:a9:15:20:38:db:db:fa:fb:f5:40:3e:e4: 59:dc:6c:ce:99:3d:4d:ee:13:7d:15:4f:ec:0a:d6: 55:ef:64:11:81:2e:f8:20:c4:69:3c:c0:4e:e3:be: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:47:18:0F:59:20:1D:2D:37:AB:BF:EE:D3:A3:50:F4:6B:6D:76:F5 X509v3 Authority Key Identifier: keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5a:91:0f:67:1d:93:ee:e7:ef:d9:dd:4e:ba:35:74:b6:17: 51:e4:16:1a:49:b4:fc:90:20:31:62:84:5a:8d:c5:b8:cf:cf: fe:af:ae:7e:84:00:14:87:e3:c3:81:4f:65:89:03:c5:6e:69: 7a:24:93:45:f8:14:2e:54:d3:88:48:a1:88:a2:e9:13:dc:44: c0:60:4a:c5:47:02:35:e9:8e:67:3f:12:1a:09:cf:ba:21:e8: fe:b8:40:95:f2:7c:3f:06:d5:10:04:5e:21:25:62:34:a9:b1: f7:b0:b7:c2:da:b1:3d:60:57:a1:7a:0c:01:29:92:79:78:43: 04:dc:91:51:28:ed:ac:34:a5:38:d5:68:80:eb:e2:13:0e:23: c0:73:d3:93:1b:ae:c2:ea:37:76:9e:5b:b3:a7:32:c9:73:51: a5:4b:f1:69:bb:e5:97:25:ce:8b:9a:3b:76:89:24:71:95:9e: 78:fc:24:06:5e:a2:06:34:54:0a:81:91:03:32:38:8e:1c:07: 51:05:4b:37:be:6c:1b:80:6a:cd:2a:3f:91:bf:70:30:31:39: bd:05:6b:21:2c:a6:29:0d:7a:96:a0:2a:a9:06:6d:0f:2c:86: 5a:48:38:22:cc:08:12:39:5c:fb:90:3e:67:05:d6:45:2e:39: db:bb:29:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteXiMUPYNuYkv2x95fVOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMTFhZTIzYTNlOWM4YmM2ZjVhNzljNzE1ZmE5OWE3OGNm ODVkZmUwHhcNMjUxMjE3MTgwMTMzWhcNMjUxMjE4MTgwMTMzWjAzMTEwLwYDVQQD EygyOTQ3MTgwZjU5MjAxZDJkMzdhYmJmZWVkM2EzNTBmNDZiNmQ3NmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWI1yoTBZeYuBL9sDCJbC/H5peQy aJs9lwhM4kSa819oX4Yp0J3E9q0+n0FDQW+fXDYUKpTnJ+v7Xu6qDlJF3cb/+Djk gu2UzGduKoB5qLWleTrth61oGeTBazvdPuCUC+tLh03aBbqc5jlqTGp4gFgphJvk cJx0SLa95pEl48wPdTbNhtusAVDLX8R0RAO8ODLs7woT8e0C29FTmvYptnGE2R7a MPT/uFnVuKvkPQ/qcfH2jwxb+n6UbPypJmMpdjz47qhQvSP5dsSrFRLBwNXIUnep FSA429v6+/VAPuRZ3GzOmT1N7hN9FU/sCtZV72QRgS74IMRpPMBO476OqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClHGA9ZIB0tN6u/7tOjUPRrbXb1MB8GA1UdIwQY MBaAFLoRriOj6ci8b1p5xxX6maeM+F3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGIt YjFlMGRkMmJmNWM3LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGItYjFlMGRkMmJmNWM3 LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlqRD2cd k+7n79ndTro1dLYXUeQWGkm0/JAgMWKEWo3FuM/P/q+ufoQAFIfjw4FPZYkDxW5p eiSTRfgULlTTiEihiKLpE9xEwGBKxUcCNemOZz8SGgnPuiHo/rhAlfJ8PwbVEARe ISViNKmx97C3wtqxPWBXoXoMASmSeXhDBNyRUSjtrDSlONVogOviEw4jwHPTkxuu wuo3dp5bs6cyyXNRpUvxabvllyXOi5o7dokkcZWeePwkBl6iBjRUCoGRAzI4jhwH UQVLN75sG4BqzSo/kb9wMDE5vQVrISymKQ16lqAqqQZtDyyGWkg4IswIEjlc+5A+ ZwXWRS4527spcg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:19 2025 by rpki-client