This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json) Hash identifier: CmhtoBiHntaKaPPPH0iq0jc7LylIxCTtY60XqB5jtJs= Subject key identifier: DF:EF:AC:6D:7B:62:8F:B0:04:89:9B:A3:59:90:96:34:F9:B3:03:0D Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Certificate serial: 019B4A0470C96E56D55A8BBFDE37DE67C803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft Manifest number: 0337 Signing time: Tue 23 Dec 2025 07:02:43 +0000 Manifest this update: Tue 23 Dec 2025 07:02:43 +0000 Manifest next update: Wed 24 Dec 2025 07:02:43 +0000 Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=) 2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: /v0Vk1zDpFn+WgVT85WrpECIw2QWTESit5dnAoc8Ayk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:70:c9:6e:56:d5:5a:8b:bf:de:37:de:67:c8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Validity Not Before: Dec 23 07:02:43 2025 GMT Not After : Dec 24 07:02:43 2025 GMT Subject: CN=dfefac6d7b628fb004899ba359909634f9b3030d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:52:fa:5a:91:8d:64:30:b6:20:62:28:57: dc:67:97:2d:0f:02:62:d3:c2:0a:40:bf:ef:8c:8e: 48:80:63:b6:19:f1:15:b2:2e:a0:87:2e:91:53:11: 0e:59:cf:5b:ed:ae:5a:ff:f2:f0:ed:27:a7:90:e5: 5d:c6:da:cb:21:fa:99:e8:81:7b:cb:73:24:8c:91: 38:07:c5:3c:40:56:e3:b2:66:f0:a6:09:1a:d5:9b: 8d:8d:2a:14:21:93:f6:77:bc:72:05:5e:39:68:f5: 5c:bd:9c:8c:7c:9b:9e:d2:ec:dc:6a:18:32:9c:f1: e5:1b:64:be:84:3e:65:c7:0b:c4:47:e9:3d:a6:dc: 4b:13:c8:c4:8d:8e:fc:f1:a1:4f:4b:b7:ed:e4:8a: 85:00:ff:62:3c:37:cf:01:fe:70:f6:04:bb:e3:f0: f6:08:a2:e4:89:4b:3d:22:cd:8f:e4:aa:d4:47:13: 69:f8:d8:33:54:f9:94:aa:f7:57:6b:7b:e7:7a:98: 8a:f8:7b:93:83:24:22:af:a1:6b:aa:07:8f:31:6e: ed:83:de:b7:e4:19:a1:5e:7c:62:94:6b:fc:cc:51: 39:8f:f9:7e:70:bc:7b:2f:c8:9e:0a:74:9e:f4:c3: e7:8c:94:9c:7b:35:58:b5:9b:7d:ba:1e:e9:bc:42: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EF:AC:6D:7B:62:8F:B0:04:89:9B:A3:59:90:96:34:F9:B3:03:0D X509v3 Authority Key Identifier: keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a4:c9:a8:6f:9e:66:f3:91:ed:62:7d:07:c9:6d:36:e5:a1: 82:0b:8a:92:be:0d:67:b4:9a:27:ba:63:98:a2:95:96:c0:c6: 28:97:04:b5:4d:96:df:b8:31:84:9d:90:1a:11:a8:21:bf:e5: f2:41:ce:7e:5e:4b:a6:b6:d8:1c:51:b2:4a:40:0a:6b:da:14: 34:61:69:cf:42:f5:08:d3:2f:47:c4:8c:7c:a6:d7:5d:e3:a5: ba:bb:a5:22:75:13:b8:32:13:a3:d1:bc:33:68:3c:ac:cc:0c: bd:be:e3:0a:ec:85:15:2a:8e:8c:12:f7:3c:45:91:4f:a6:83: ab:33:57:ac:c3:77:2a:78:cf:2f:f0:8f:44:8a:98:5f:30:69: 50:f0:4f:6d:c5:7c:04:9c:65:6b:cb:89:d2:2c:60:1e:c3:a0: 0a:59:ac:a7:77:69:fa:f3:e6:40:37:a9:0a:68:0e:ca:f0:02: 44:35:d8:a3:08:ce:89:c8:3c:b6:9a:c6:76:83:53:15:73:19: ac:8c:9d:20:1f:46:9b:0a:85:3b:69:b5:25:90:1a:dd:3c:f6: cd:88:fd:66:a9:87:ea:aa:4b:6f:dd:6c:67:ab:51:40:6c:4f: 3a:08:e1:d6:7d:20:e4:dd:f5:ca:3c:82:ff:d4:20:37:51:8f: e3:b9:d5:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBHDJblbVWou/3jfeZ8gDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NzM1ZWIyY2QyYzRkOGNmNWJmM2Q3NTA3ZDg0ZDYwMzU0 NWRmZTMwHhcNMjUxMjIzMDcwMjQzWhcNMjUxMjI0MDcwMjQzWjAzMTEwLwYDVQQD EyhkZmVmYWM2ZDdiNjI4ZmIwMDQ4OTliYTM1OTkwOTYzNGY5YjMwMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc1S+lqRjWQwtiBiKFfcZ5ctDwJi 08IKQL/vjI5IgGO2GfEVsi6ghy6RUxEOWc9b7a5a//Lw7SenkOVdxtrLIfqZ6IF7 y3MkjJE4B8U8QFbjsmbwpgka1ZuNjSoUIZP2d7xyBV45aPVcvZyMfJue0uzcahgy nPHlG2S+hD5lxwvER+k9ptxLE8jEjY788aFPS7ft5IqFAP9iPDfPAf5w9gS74/D2 CKLkiUs9Is2P5KrURxNp+NgzVPmUqvdXa3vnepiK+HuTgyQir6FrqgePMW7tg963 5BmhXnxilGv8zFE5j/l+cLx7L8ieCnSe9MPnjJScezVYtZt9uh7pvEK8NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/vrG17Yo+wBImbo1mQljT5swMNMB8GA1UdIwQY MBaAFLhzXrLNLE2M9b89dQfYTWA1Rd/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUt YjRkY2Y4Y2VhMzVhLzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUtYjRkY2Y4Y2VhMzVh LzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqTJqG+e ZvOR7WJ9B8ltNuWhgguKkr4NZ7SaJ7pjmKKVlsDGKJcEtU2W37gxhJ2QGhGoIb/l 8kHOfl5LprbYHFGySkAKa9oUNGFpz0L1CNMvR8SMfKbXXeOlurulInUTuDITo9G8 M2g8rMwMvb7jCuyFFSqOjBL3PEWRT6aDqzNXrMN3KnjPL/CPRIqYXzBpUPBPbcV8 BJxla8uJ0ixgHsOgClmsp3dp+vPmQDepCmgOyvACRDXYowjOicg8tprGdoNTFXMZ rIydIB9GmwqFO2m1JZAa3Tz2zYj9ZqmH6qpLb91sZ6tRQGxPOgjh1n0g5N31yjyC /9QgN1GP47nVmQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:13:36 2025 by rpki-client