This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json) Hash identifier: YY898bdcU59Lpl70K8peaMBJsGr4+I38nOzKap1QdFY= Subject key identifier: 82:94:59:41:F8:15:3E:D9:52:48:60:75:12:93:BA:EC:29:BE:7B:13 Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Certificate serial: 019B710FE3A1D89D790101F7913213E6CD03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft Manifest number: 0A1C Signing time: Tue 30 Dec 2025 21:00:25 +0000 Manifest this update: Tue 30 Dec 2025 21:00:25 +0000 Manifest next update: Wed 31 Dec 2025 21:00:25 +0000 Files and hashes: 1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=) 2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: gz3fUdTwEhaT5cSIuG7kb17nT1UrZEDkEdo/tyuZD6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:e3:a1:d8:9d:79:01:01:f7:91:32:13:e6:cd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Validity Not Before: Dec 30 21:00:25 2025 GMT Not After : Dec 31 21:00:25 2025 GMT Subject: CN=82945941f8153ed9524860751293baec29be7b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:df:21:03:7d:54:51:dc:17:b3:00:20:7c: 9c:43:e9:96:a8:f3:5b:8b:0e:f2:41:08:a7:4d:68: ff:7b:2b:af:19:f2:d9:00:60:f5:81:a2:37:9b:0d: 56:c5:27:bf:f1:c4:ca:26:fa:09:88:9b:7e:56:72: cf:ff:f3:d4:e5:c6:27:26:8f:cd:a4:3a:91:5a:dc: 9f:0e:fe:f8:6e:4c:e5:ed:fa:fa:20:98:21:0e:8a: 0e:91:1d:60:0d:f8:d2:5f:22:6a:5c:ac:55:5c:4f: 77:42:6d:74:94:25:86:56:ab:ea:6f:1a:81:d2:c5: 15:c2:c8:13:15:2e:98:4d:84:a8:6a:4a:f6:eb:2d: 2d:67:5a:bd:e2:71:80:f1:f4:17:22:8e:cd:4b:18: da:7f:f0:01:f1:b3:fa:cb:b0:70:02:ef:83:6d:2e: 54:55:20:7f:23:ae:d4:a0:4b:0c:a5:54:43:6c:14: 37:e8:ed:d7:3f:f5:f1:b3:94:b0:c0:07:47:49:ba: b3:82:9c:a5:f7:ce:5e:31:5c:d7:cb:40:e0:e3:26: 3f:9a:6c:bd:e9:96:3a:86:64:49:0c:b3:d1:dd:97: f7:db:87:f2:dc:a7:5c:d0:60:96:d1:d7:e8:86:36: ce:0a:b0:c0:4a:35:47:88:74:b0:a7:da:ed:f3:42: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:94:59:41:F8:15:3E:D9:52:48:60:75:12:93:BA:EC:29:BE:7B:13 X509v3 Authority Key Identifier: keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:74:e8:94:a7:a2:28:39:0e:e0:3b:90:27:1a:a4:b9:5a:5a: 97:22:34:d8:de:14:3a:0c:c0:9e:a2:70:f6:7e:97:79:ab:68: ad:b2:a5:20:f4:da:c3:ed:46:a4:7d:d9:d2:8e:47:98:ff:d9: 17:71:39:14:ec:d3:bb:27:6e:de:20:f7:6e:bf:3c:9e:07:45: 00:17:3e:34:1d:9c:fb:49:0b:7e:c2:6e:5c:aa:ed:d3:63:b9: 51:98:a3:d7:e0:7a:f8:ec:38:52:51:f0:11:96:3e:1d:84:12: 5e:f8:d7:26:20:7b:ca:4d:9d:a6:9b:32:4e:6c:a2:08:38:d6: 0d:f3:88:14:9a:64:aa:ff:fa:70:ca:08:42:20:57:98:d5:f4: a2:6d:9a:c1:ea:15:17:40:d6:a9:a0:db:21:0e:84:2b:a0:d2: 9d:c0:86:23:b8:8b:b3:93:2c:8b:e8:47:63:09:5e:d9:9a:34: 5d:c6:b5:53:11:ca:7e:a0:35:44:15:45:1b:98:3d:fc:a8:d1: ec:4b:9f:e4:2a:bc:17:2d:58:3f:96:d5:e9:39:b7:6f:a7:26: 5c:bb:f6:b0:b9:e8:24:c6:df:78:a9:a5:24:17:f6:e1:c9:24: c4:cf:82:e1:e2:f3:47:b4:ec:16:77:f0:8e:96:ad:77:48:a9: 38:9a:14:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxD+Oh2J15AQH3kTIT5s0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2JiZjhlNWM3NGE1MjZiYWFmNjE4NWFiZDk0OWRhZmE4 ZjZkY2IwHhcNMjUxMjMwMjEwMDI1WhcNMjUxMjMxMjEwMDI1WjAzMTEwLwYDVQQD Eyg4Mjk0NTk0MWY4MTUzZWQ5NTI0ODYwNzUxMjkzYmFlYzI5YmU3YjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBLfIQN9VFHcF7MAIHycQ+mWqPNb iw7yQQinTWj/eyuvGfLZAGD1gaI3mw1WxSe/8cTKJvoJiJt+VnLP//PU5cYnJo/N pDqRWtyfDv74bkzl7fr6IJghDooOkR1gDfjSXyJqXKxVXE93Qm10lCWGVqvqbxqB 0sUVwsgTFS6YTYSoakr26y0tZ1q94nGA8fQXIo7NSxjaf/AB8bP6y7BwAu+DbS5U VSB/I67UoEsMpVRDbBQ36O3XP/Xxs5SwwAdHSbqzgpyl985eMVzXy0Dg4yY/mmy9 6ZY6hmRJDLPR3Zf324fy3Kdc0GCW0dfohjbOCrDASjVHiHSwp9rt80Ii3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKUWUH4FT7ZUkhgdRKTuuwpvnsTMB8GA1UdIwQY MBaAFLh7v45cdKUmuq9hhavZSdr6j23LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUt NTM5MGY5ZjgzNjIwLzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUtNTM5MGY5ZjgzNjIw LzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHTolKei KDkO4DuQJxqkuVpalyI02N4UOgzAnqJw9n6XeatorbKlIPTaw+1GpH3Z0o5HmP/Z F3E5FOzTuydu3iD3br88ngdFABc+NB2c+0kLfsJuXKrt02O5UZij1+B6+Ow4UlHw EZY+HYQSXvjXJiB7yk2dppsyTmyiCDjWDfOIFJpkqv/6cMoIQiBXmNX0om2aweoV F0DWqaDbIQ6EK6DSncCGI7iLs5Msi+hHYwle2Zo0Xca1UxHKfqA1RBVFG5g9/KjR 7Euf5Cq8Fy1YP5bV6Tm3b6cmXLv2sLnoJMbfeKmlJBf24ckkxM+C4eLzR7TsFnfw jpatd0ipOJoUCw== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:34 2025 by rpki-client