This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json) Hash identifier: Y3CyrrfIbLP3m64iUshmhXKTt/E1FoC44E5qO0EnwOU= Subject key identifier: B7:8E:70:16:87:8B:0F:93:5F:5E:75:5B:62:F3:91:E5:89:F8:3A:A5 Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Certificate serial: 019B3D5A5E99411BC2313ECA510C17630F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft Manifest number: 0B60 Signing time: Sat 20 Dec 2025 20:01:31 +0000 Manifest this update: Sat 20 Dec 2025 20:01:31 +0000 Manifest next update: Sun 21 Dec 2025 20:01:31 +0000 Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=) 2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=) 3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: vu8fHMTh5JP8pnQ8xdx/zwmrXKsTyjZBrVDV/wkr1V8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:5e:99:41:1b:c2:31:3e:ca:51:0c:17:63:0f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Validity Not Before: Dec 20 20:01:31 2025 GMT Not After : Dec 21 20:01:31 2025 GMT Subject: CN=b78e7016878b0f935f5e755b62f391e589f83aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:6f:27:6d:ce:fb:4b:80:c7:e0:a6:d0:cf: 1b:40:55:f5:64:36:b0:08:e1:be:78:80:6e:f3:83: 87:22:a9:58:9e:42:98:c0:37:29:4a:e2:57:21:40: ce:b3:01:e1:bb:1f:e3:a3:3f:67:4b:f1:62:82:8e: 7f:6d:10:ab:ae:f1:f3:ba:4d:26:03:8e:ec:a4:af: 11:cd:9c:1a:65:57:f8:de:9c:fe:48:fa:23:dc:6f: b2:7f:ec:91:a2:bf:10:5c:dc:46:38:3a:0f:73:1a: e1:59:97:30:b5:e8:20:94:ee:f9:f7:24:3e:fb:bd: a1:1d:fc:e7:d3:65:9b:46:37:de:6e:ae:0f:2d:c0: 91:ac:3a:1b:1b:84:51:bc:93:e2:90:df:07:99:23: 22:ed:fe:a7:3a:8f:1d:a2:48:1b:13:75:13:a7:62: 34:75:76:a6:38:ea:ef:65:e5:67:9b:26:44:f0:52: 18:92:fb:e3:5f:dc:d7:b8:f6:73:0f:58:0a:e7:85: c3:03:7b:7e:a4:25:8c:55:93:55:b3:ec:55:69:15: d2:ed:e6:fc:d3:be:2f:4a:0b:d0:33:80:b0:db:50: 92:ca:8c:f3:d8:33:26:8a:b1:75:f3:1d:73:6b:89: 35:ad:43:46:e0:9b:46:1d:bf:34:4d:9f:e0:34:14: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8E:70:16:87:8B:0F:93:5F:5E:75:5B:62:F3:91:E5:89:F8:3A:A5 X509v3 Authority Key Identifier: keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3e:2e:78:e3:17:58:1f:f5:02:f3:83:04:d0:55:46:d7:ae: 82:83:b3:45:2c:c5:8b:4f:fd:b1:45:06:0f:a6:c8:5a:68:63: 19:79:64:bf:46:67:57:bb:b3:63:53:25:1f:30:a5:fd:46:06: 4b:bb:c5:6f:72:6b:e1:06:7e:5f:0c:a4:dc:4f:8e:f1:e1:e5: 8f:f7:72:a2:7b:99:7f:b9:32:2f:ca:dc:24:78:92:a8:02:c7: 41:68:07:dd:54:33:c1:f6:9a:c2:15:be:d5:77:15:c1:10:71: 48:3e:de:00:38:8b:2a:e3:10:e9:56:58:6c:48:77:4b:38:47: c5:04:fc:f9:36:4a:2e:ce:94:95:f4:00:06:3f:2d:ad:96:7a: 22:11:21:80:ec:fb:8a:3d:bb:94:12:bd:d2:ca:79:c4:78:dd: 23:6f:58:04:9b:70:ff:01:f0:71:36:59:ee:83:1e:e0:41:1f: 49:4e:50:64:32:ee:e5:4e:ff:79:24:be:f8:9d:05:79:b1:a3: 85:df:a9:f1:ae:b2:62:5d:a0:d6:19:ab:2d:4b:de:2a:0d:70: bd:39:4b:cd:16:39:f5:00:13:43:0f:89:25:02:62:7d:29:6d: d7:dc:6a:9f:e9:0a:e7:ce:28:bf:13:c9:b0:c4:07:9d:b3:e5: 5a:43:a7:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wl6ZQRvCMT7KUQwXYw9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1 OTcyZTYwHhcNMjUxMjIwMjAwMTMxWhcNMjUxMjIxMjAwMTMxWjAzMTEwLwYDVQQD EyhiNzhlNzAxNjg3OGIwZjkzNWY1ZTc1NWI2MmYzOTFlNTg5ZjgzYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQRvJ23O+0uAx+Cm0M8bQFX1ZDaw COG+eIBu84OHIqlYnkKYwDcpSuJXIUDOswHhux/joz9nS/Figo5/bRCrrvHzuk0m A47spK8RzZwaZVf43pz+SPoj3G+yf+yRor8QXNxGODoPcxrhWZcwtegglO759yQ+ +72hHfzn02WbRjfebq4PLcCRrDobG4RRvJPikN8HmSMi7f6nOo8dokgbE3UTp2I0 dXamOOrvZeVnmyZE8FIYkvvjX9zXuPZzD1gK54XDA3t+pCWMVZNVs+xVaRXS7eb8 074vSgvQM4Cw21CSyozz2DMmirF18x1za4k1rUNG4JtGHb80TZ/gNBSbEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeOcBaHiw+TX151W2LzkeWJ+DqlMB8GA1UdIwQY MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt NzQyNWIxM2Q1Y2Y4LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4 LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz4ueOMX WB/1AvODBNBVRteugoOzRSzFi0/9sUUGD6bIWmhjGXlkv0ZnV7uzY1MlHzCl/UYG S7vFb3Jr4QZ+Xwyk3E+O8eHlj/dyonuZf7kyL8rcJHiSqALHQWgH3VQzwfaawhW+ 1XcVwRBxSD7eADiLKuMQ6VZYbEh3SzhHxQT8+TZKLs6UlfQABj8trZZ6IhEhgOz7 ij27lBK90sp5xHjdI29YBJtw/wHwcTZZ7oMe4EEfSU5QZDLu5U7/eSS++J0FebGj hd+p8a6yYl2g1hmrLUveKg1wvTlLzRY59QATQw+JJQJifSlt19xqn+kK584ovxPJ sMQHnbPlWkOnhw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:10 2025 by rpki-client