This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json) Hash identifier: bIcHyc0DS2f+N3UVyKVjXymm+eSrxNYrd3Dk63Py9qQ= Subject key identifier: 5A:A2:56:E0:0B:E5:19:79:B8:C5:06:52:B8:1F:34:6F:82:1B:AB:A3 Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Certificate serial: 019B3E6CBBFDC6D237E23784C0C58D0061A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft Manifest number: 0331 Signing time: Sun 21 Dec 2025 01:01:11 +0000 Manifest this update: Sun 21 Dec 2025 01:01:11 +0000 Manifest next update: Mon 22 Dec 2025 01:01:11 +0000 Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=) 2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: NUlSsg2T5xK8+0/CJW0RMbeYfw3YUywRVg1MweAN3GM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:bb:fd:c6:d2:37:e2:37:84:c0:c5:8d:00:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3 Validity Not Before: Dec 21 01:01:11 2025 GMT Not After : Dec 22 01:01:11 2025 GMT Subject: CN=5aa256e00be51979b8c50652b81f346f821baba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:3e:57:71:b5:70:0d:18:58:52:66:05:46: 2d:8a:a5:fe:cd:42:6e:e0:4c:3b:83:c8:e6:38:81: 15:9a:53:d1:1e:15:e2:f4:b6:3a:ef:5e:c7:6b:05: 03:2a:70:a6:fe:8d:3c:c7:c9:84:76:8a:9c:fd:d6: 10:fa:c9:c2:a8:f9:22:2d:a2:62:74:58:5f:92:88: 27:6c:9a:bd:4c:9c:34:45:71:53:be:6b:a8:e7:23: 8d:60:47:9b:00:b3:3c:23:88:0c:14:02:4c:09:f7: 82:21:fb:e4:bd:b1:13:da:71:d4:ab:80:b4:0e:4c: 28:3e:87:d8:c0:4e:22:cb:8f:b0:1a:16:b8:a7:1e: 3a:8d:7b:06:dd:74:1f:4c:fc:56:b7:4e:6a:e1:b3: 21:a6:cb:9d:cc:d4:a5:a8:b4:17:9f:66:64:4f:20: 68:26:de:52:20:f2:d5:ba:ab:0a:14:20:5a:59:28: 45:93:b8:04:05:10:57:67:d7:22:0b:a6:52:ae:a4: 57:e8:a5:1e:4f:64:d3:ec:05:5c:99:1f:1e:56:35: d1:8a:92:dd:5f:a6:cc:ce:24:8a:0d:09:a1:77:8b: 7d:86:cb:cb:c2:0c:70:e9:a4:ca:ed:85:d1:33:80: e2:e3:e5:45:e2:6f:13:75:8b:02:aa:63:03:1b:ea: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A2:56:E0:0B:E5:19:79:B8:C5:06:52:B8:1F:34:6F:82:1B:AB:A3 X509v3 Authority Key Identifier: keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:a7:0b:0c:85:bd:f3:77:c7:84:ba:b6:89:89:0b:48:63: 39:d5:2b:f9:3f:a7:6b:2e:fd:04:47:05:da:72:b4:0d:00:f2: 02:28:ee:3b:50:43:27:fa:eb:6f:3c:39:50:5c:27:86:b7:8b: 6b:2e:44:04:89:2c:40:01:c8:c0:15:8f:43:e0:63:29:fd:03: db:55:ff:ea:63:4c:69:56:99:72:d3:2e:b0:84:77:a8:05:8e: bf:9f:ff:24:6a:10:7b:d4:e6:62:b7:2e:ac:29:c9:8c:4e:d3: d2:9c:cc:fa:02:dd:80:63:74:9b:e0:d1:53:1e:8c:6d:f3:03: 18:e5:15:cb:8d:c2:7c:52:d8:9d:a3:80:ac:26:90:bf:5e:ce: 47:97:03:d0:bf:d2:ed:77:75:7f:da:cc:c2:89:9b:60:ef:1d: f9:90:be:61:6d:7f:d6:e5:2c:e5:37:c2:6b:97:92:36:11:85: ec:12:db:6e:f0:7f:b4:5f:50:81:84:8a:89:93:1f:43:70:92: 2b:f8:3e:6c:71:06:8b:f6:a8:3c:d4:82:6e:25:cd:0b:bb:29: 6a:c3:fa:0e:4a:87:a9:dc:38:0d:b3:1b:e5:54:63:bf:c1:f0: a7:66:22:d1:26:0a:d1:c4:d3:2b:3a:97:91:37:b6:69:80:43: c4:46:b0:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bLv9xtI34jeEwMWNAGGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NzM1ZWIyY2QyYzRkOGNmNWJmM2Q3NTA3ZDg0ZDYwMzU0 NWRmZTMwHhcNMjUxMjIxMDEwMTExWhcNMjUxMjIyMDEwMTExWjAzMTEwLwYDVQQD Eyg1YWEyNTZlMDBiZTUxOTc5YjhjNTA2NTJiODFmMzQ2ZjgyMWJhYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjo+V3G1cA0YWFJmBUYtiqX+zUJu 4Ew7g8jmOIEVmlPRHhXi9LY6717HawUDKnCm/o08x8mEdoqc/dYQ+snCqPkiLaJi dFhfkognbJq9TJw0RXFTvmuo5yONYEebALM8I4gMFAJMCfeCIfvkvbET2nHUq4C0 DkwoPofYwE4iy4+wGha4px46jXsG3XQfTPxWt05q4bMhpsudzNSlqLQXn2ZkTyBo Jt5SIPLVuqsKFCBaWShFk7gEBRBXZ9ciC6ZSrqRX6KUeT2TT7AVcmR8eVjXRipLd X6bMziSKDQmhd4t9hsvLwgxw6aTK7YXRM4Di4+VF4m8TdYsCqmMDG+rj4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqiVuAL5Rl5uMUGUrgfNG+CG6ujMB8GA1UdIwQY MBaAFLhzXrLNLE2M9b89dQfYTWA1Rd/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUt YjRkY2Y4Y2VhMzVhLzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUtYjRkY2Y4Y2VhMzVh LzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifynCwyF vfN3x4S6tomJC0hjOdUr+T+nay79BEcF2nK0DQDyAijuO1BDJ/rrbzw5UFwnhreL ay5EBIksQAHIwBWPQ+BjKf0D21X/6mNMaVaZctMusIR3qAWOv5//JGoQe9TmYrcu rCnJjE7T0pzM+gLdgGN0m+DRUx6MbfMDGOUVy43CfFLYnaOArCaQv17OR5cD0L/S 7Xd1f9rMwombYO8d+ZC+YW1/1uUs5TfCa5eSNhGF7BLbbvB/tF9QgYSKiZMfQ3CS K/g+bHEGi/aoPNSCbiXNC7spasP6DkqHqdw4DbMb5VRjv8Hwp2Yi0SYK0cTTKzqX kTe2aYBDxEawVA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:42 2025 by rpki-client