This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json) Hash identifier: 9liJTP8HY65bt86I/DVUY/hVSEtA11TJw/ws07IslWs= Subject key identifier: F1:9A:A7:69:DF:BE:01:33:AA:5B:7D:EC:A5:21:0C:6C:5E:B9:CF:39 Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f Certificate serial: 019B3F47EEE0FA59A62E1F97A32CF220C612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft Manifest number: 10AC Signing time: Sun 21 Dec 2025 05:00:37 +0000 Manifest this update: Sun 21 Dec 2025 05:00:37 +0000 Manifest next update: Mon 22 Dec 2025 05:00:37 +0000 Files and hashes: 1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=) 2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=) 3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=) 4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=) 5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: o0dRBloNkLEqyC69iJt8DsnwdOi5S1BHkWGDzIxQqzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:ee:e0:fa:59:a6:2e:1f:97:a3:2c:f2:20:c6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f Validity Not Before: Dec 21 05:00:37 2025 GMT Not After : Dec 22 05:00:37 2025 GMT Subject: CN=f19aa769dfbe0133aa5b7deca5210c6c5eb9cf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:22:49:b9:e6:49:86:35:c1:d9:92:8e:08: 02:bc:65:db:3e:c9:0d:df:77:c6:84:60:29:b3:5d: e6:da:a4:90:f8:ea:db:80:27:91:fa:56:bc:25:ae: b1:9e:7c:fb:48:d3:9c:b8:6a:ad:e5:5a:06:60:b1: 5f:52:c6:21:14:b9:d9:26:5e:8c:70:a7:a5:7f:e3: 12:0d:11:95:bb:79:6b:4a:2f:3c:19:33:38:4f:cc: 14:9d:c0:07:fa:57:44:af:bc:38:7e:27:af:98:b2: 42:cb:b3:45:7b:e5:93:7a:8e:48:32:96:60:46:b7: 5d:ac:e1:b5:19:70:51:ad:be:05:13:88:19:5c:0d: 7b:54:cd:7f:3a:27:ee:75:c2:4d:cd:df:90:27:f4: fe:f6:0f:db:97:10:0e:74:f9:dc:78:8f:90:8a:1e: a4:22:c9:c4:1c:cd:d6:3a:44:6e:37:a3:02:8b:08: f6:f9:6f:9e:3e:9e:b2:54:78:42:7d:03:66:a9:e0: 10:9f:7e:64:74:3b:77:fb:3b:9b:dd:73:b3:18:38: 2e:a5:fa:aa:77:25:1e:8a:c8:94:58:73:38:e6:f1: 9b:c6:c7:48:92:65:bc:6d:35:03:74:6b:63:9c:c3: 62:dd:b6:40:0b:26:91:88:b6:f4:09:d9:01:71:8a: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9A:A7:69:DF:BE:01:33:AA:5B:7D:EC:A5:21:0C:6C:5E:B9:CF:39 X509v3 Authority Key Identifier: keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:99:5c:ed:75:8c:55:d6:a6:40:54:4a:7f:e9:e6:57:85:74: 2e:29:04:7f:84:cf:46:c6:d3:1d:84:9e:04:91:88:52:08:2b: 0b:ff:25:4c:6b:ba:25:36:c5:70:93:fc:ca:b2:80:7f:3b:0e: 37:3b:0f:fe:93:26:d5:9f:e1:cb:c5:fb:c4:8e:31:b2:4e:9d: c0:49:fb:0b:b5:b9:68:d8:e7:fd:a3:41:bc:71:a8:b6:11:82: 8d:a9:59:a8:ae:65:4a:2a:e5:fa:6a:46:ef:22:8f:10:51:24: ec:8d:8f:f0:d2:58:32:1e:04:77:f5:ed:3c:ec:8f:49:94:b4: 76:98:f2:a1:c1:5a:03:2b:02:71:8e:4c:ff:0a:c1:71:87:ef: 87:5a:cd:83:50:64:20:83:87:fd:2a:cc:23:29:33:01:64:76: 34:f5:73:d0:72:5f:ef:0d:98:fd:75:63:5f:70:66:18:54:d6: 5c:27:d7:09:66:69:03:cf:8e:88:5f:63:2f:35:a5:7a:9e:39: c5:2e:a2:65:94:4a:ec:16:3c:48:8f:3a:a8:31:ba:e1:74:0e: 28:cc:fe:1c:e1:ff:2d:70:ad:28:58:a9:49:1f:72:84:b8:a3: f9:37:f1:bb:cf:af:5a:9a:72:c6:19:55:7c:4c:71:b3:36:65: 62:91:c2:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+7g+lmmLh+XoyzyIMYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm MDI0NGYwHhcNMjUxMjIxMDUwMDM3WhcNMjUxMjIyMDUwMDM3WjAzMTEwLwYDVQQD EyhmMTlhYTc2OWRmYmUwMTMzYWE1YjdkZWNhNTIxMGM2YzVlYjljZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO4iSbnmSYY1wdmSjggCvGXbPskN 33fGhGAps13m2qSQ+OrbgCeR+la8Ja6xnnz7SNOcuGqt5VoGYLFfUsYhFLnZJl6M cKelf+MSDRGVu3lrSi88GTM4T8wUncAH+ldEr7w4fievmLJCy7NFe+WTeo5IMpZg RrddrOG1GXBRrb4FE4gZXA17VM1/OifudcJNzd+QJ/T+9g/blxAOdPnceI+Qih6k IsnEHM3WOkRuN6MCiwj2+W+ePp6yVHhCfQNmqeAQn35kdDt3+zub3XOzGDgupfqq dyUeisiUWHM45vGbxsdIkmW8bTUDdGtjnMNi3bZACyaRiLb0CdkBcYqU1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGap2nfvgEzqlt97KUhDGxeuc85MB8GA1UdIwQY MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct OTZkMzA0YzhkYjAyLzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7plc7XWM VdamQFRKf+nmV4V0LikEf4TPRsbTHYSeBJGIUggrC/8lTGu6JTbFcJP8yrKAfzsO NzsP/pMm1Z/hy8X7xI4xsk6dwEn7C7W5aNjn/aNBvHGothGCjalZqK5lSirl+mpG 7yKPEFEk7I2P8NJYMh4Ed/XtPOyPSZS0dpjyocFaAysCcY5M/wrBcYfvh1rNg1Bk IIOH/SrMIykzAWR2NPVz0HJf7w2Y/XVjX3BmGFTWXCfXCWZpA8+OiF9jLzWlep45 xS6iZZRK7BY8SI86qDG64XQOKMz+HOH/LXCtKFipSR9yhLij+Tfxu8+vWppyxhlV fExxszZlYpHCpw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:30:24 2025 by rpki-client