This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json) Hash identifier: gv2b9TvvykiACSdcQN2J2IcTv4IqhxJHKTDIkTQAQ/w= Subject key identifier: 59:67:53:BA:7E:A8:EA:0A:48:0A:31:5B:9C:CD:FE:0F:50:9B:7C:08 Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00 Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300 Certificate serial: 019B31C3E96E36C2AC00EAD11463A022180B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft Manifest number: 1751 Signing time: Thu 18 Dec 2025 14:01:21 +0000 Manifest this update: Thu 18 Dec 2025 14:01:21 +0000 Manifest next update: Fri 19 Dec 2025 14:01:21 +0000 Files and hashes: 1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=) 2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: mu2D5R9pLM/vEWeakM85VcHR25rlODZY+TlC7VEXRiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:e9:6e:36:c2:ac:00:ea:d1:14:63:a0:22:18:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300 Validity Not Before: Dec 18 14:01:21 2025 GMT Not After : Dec 19 14:01:21 2025 GMT Subject: CN=596753ba7ea8ea0a480a315b9ccdfe0f509b7c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:ad:ec:2f:fd:b9:92:6f:95:b3:c9:31:b4: 36:ce:bb:ec:8f:8d:a4:5a:fd:6a:1e:9d:2b:d9:30: 08:a9:36:50:09:9c:c9:97:6b:6b:5b:17:96:2b:68: 7e:34:72:33:bd:b4:a9:08:5e:64:04:c8:03:fa:3d: 98:2b:87:2a:31:f2:fe:17:9f:f0:26:d0:b6:e8:77: 76:52:a4:26:37:b4:9b:47:0b:24:a8:7c:97:7d:65: 94:35:a6:c8:4b:9d:97:03:96:e5:97:37:d6:1b:e8: 93:2d:61:6e:d4:06:97:c8:db:10:15:8f:c4:df:ac: 84:14:13:56:41:7f:ea:18:2e:b5:11:13:2b:f5:34: a1:7e:fa:0e:12:d8:ec:b8:bd:a5:a4:07:51:68:cc: 46:a0:6d:89:31:b1:ae:d0:99:54:ef:c2:55:38:a3: 3b:47:c7:14:0a:8a:f9:48:57:e2:da:41:fd:9d:1e: c4:be:2c:f5:8b:8a:ef:14:a3:94:89:e9:57:89:5b: 33:f8:cd:2a:1e:1f:b2:d7:9b:e9:25:d9:8f:2d:91: 78:af:b0:1e:0f:d8:af:61:bb:69:e4:a2:6d:96:4e: ae:f0:e4:a9:f5:44:4e:1f:c3:66:15:8d:d3:0a:56: 94:2f:7d:c2:ff:32:09:a0:96:7c:f8:40:3e:f2:20: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:67:53:BA:7E:A8:EA:0A:48:0A:31:5B:9C:CD:FE:0F:50:9B:7C:08 X509v3 Authority Key Identifier: keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a5:24:3f:a5:f5:a8:29:55:6a:82:99:3e:bf:30:ec:28:81: be:d4:32:74:89:74:37:8b:3d:41:ee:eb:aa:cc:15:34:81:3c: f0:e6:2a:3f:c9:7d:96:f2:cc:31:36:c0:70:c8:ec:d4:91:64: 3d:14:3f:d3:0e:df:c1:32:c4:02:cf:66:b0:f2:c7:23:b2:12: 8f:53:3e:ab:1b:3e:16:6d:47:a9:c6:c1:9d:53:78:6d:23:96: 09:d7:68:99:50:e5:c8:02:6c:fc:95:e5:17:27:35:b2:ef:b4: bf:4f:9f:7c:5a:bd:01:e8:bd:36:00:c8:4b:9f:68:ac:f3:8e: 83:5a:45:ea:72:9b:75:7f:a6:b7:e8:bc:ad:e0:96:3f:4d:b1: 74:b9:01:9e:87:b9:a3:9d:c2:a0:5b:7f:68:78:2a:ef:8f:23: ed:90:e6:46:17:eb:3b:c3:09:c4:59:78:e9:6f:9f:ed:a0:1c: 7b:9f:46:8f:bb:47:9c:7b:d8:63:89:ee:bc:e5:0a:b2:eb:3b: cf:30:68:66:11:97:93:53:88:65:ae:b9:c0:22:b2:c4:17:da: d2:48:16:ef:ca:9c:9f:58:cb:98:f6:ea:1b:bb:04:29:fd:2c: 65:20:88:2a:22:1d:94:ea:df:c1:ef:09:4e:3f:ac:db:7d:94: b4:87:ee:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw+luNsKsAOrRFGOgIhgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZmFkYTg3YTc2ZjI5ZjgyZTI1YTMxNzllN2EzOGNmMGM2 YjAzMDAwHhcNMjUxMjE4MTQwMTIxWhcNMjUxMjE5MTQwMTIxWjAzMTEwLwYDVQQD Eyg1OTY3NTNiYTdlYThlYTBhNDgwYTMxNWI5Y2NkZmUwZjUwOWI3YzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu6t7C/9uZJvlbPJMbQ2zrvsj42k Wv1qHp0r2TAIqTZQCZzJl2trWxeWK2h+NHIzvbSpCF5kBMgD+j2YK4cqMfL+F5/w JtC26Hd2UqQmN7SbRwskqHyXfWWUNabIS52XA5bllzfWG+iTLWFu1AaXyNsQFY/E 36yEFBNWQX/qGC61ERMr9TShfvoOEtjsuL2lpAdRaMxGoG2JMbGu0JlU78JVOKM7 R8cUCor5SFfi2kH9nR7Eviz1i4rvFKOUielXiVsz+M0qHh+y15vpJdmPLZF4r7Ae D9ivYbtp5KJtlk6u8OSp9UROH8NmFY3TClaUL33C/zIJoJZ8+EA+8iAp/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlnU7p+qOoKSAoxW5zN/g9Qm3wIMB8GA1UdIwQY MBaAFLj62oenbyn4LiWjF556OM8MawMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgt NmY2N2I2NDc3MjJkLzEvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgtNmY2N2I2NDc3MjJk LzEvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaUkP6X1 qClVaoKZPr8w7CiBvtQydIl0N4s9Qe7rqswVNIE88OYqP8l9lvLMMTbAcMjs1JFk PRQ/0w7fwTLEAs9msPLHI7ISj1M+qxs+Fm1HqcbBnVN4bSOWCddomVDlyAJs/JXl Fyc1su+0v0+ffFq9Aei9NgDIS59orPOOg1pF6nKbdX+mt+i8reCWP02xdLkBnoe5 o53CoFt/aHgq748j7ZDmRhfrO8MJxFl46W+f7aAce59Gj7tHnHvYY4nuvOUKsus7 zzBoZhGXk1OIZa65wCKyxBfa0kgW78qcn1jLmPbqG7sEKf0sZSCIKiIdlOrfwe8J Tj+s232UtIfuYA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:54 2025 by rpki-client