This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json) Hash identifier: 2xbRxv3r+iGzZ6SQBfJXCLngjIYbcv+s0w/x9RCsajs= Subject key identifier: 09:F9:10:63:83:17:F5:5C:DA:D4:EB:DA:03:85:A8:FC:E1:87:CA:2E Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Certificate serial: 019AF19B520680867BFBBA596090B691F492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: QIvgzrEJMjsyUEW+OEg+Jf0FPCjgSOxrsy+Rh1vBIok=) 2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:52:06:80:86:7b:fb:ba:59:60:90:b6:91:f4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=09f910638317f55cdad4ebda0385a8fce187ca2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:12:11:0c:15:cd:c4:b7:fc:2b:c3:3b:e3: 1d:a5:de:db:c2:7b:b1:76:df:93:a6:6f:73:28:64: 78:23:ec:d2:01:1f:96:44:6f:9c:47:74:66:23:9c: 1b:3a:8d:aa:6b:12:4f:17:26:37:76:81:78:80:55: aa:4b:61:ec:cf:29:cc:15:bb:07:22:c1:24:fe:de: 48:1f:9b:c9:01:b2:71:13:80:09:22:b4:c7:6c:b0: a0:77:be:ba:b2:7b:6e:83:c8:c7:e5:f0:bb:9d:07: c0:59:0a:5d:37:c8:e1:1f:d3:cf:28:0e:bd:c8:26: d3:2c:a5:f8:4a:9e:e0:ae:43:88:6c:1d:2e:65:ae: 0c:f4:01:98:c1:80:95:bd:90:4d:ba:cb:f2:19:cb: e7:69:d3:52:61:b9:49:15:8d:c5:5b:14:cf:3b:ef: d7:4c:7b:34:da:e5:a3:3b:9b:b3:9e:23:b1:17:ee: 87:79:da:a1:18:db:64:35:a2:f4:1f:4d:72:dd:52: ac:85:b1:c4:6f:af:ec:4b:70:60:56:43:4a:f4:f5: c8:ce:51:ec:43:d2:b7:14:ec:f7:d0:23:e7:9f:f5: bc:17:a7:ec:02:3f:7e:59:83:1b:2b:26:f0:0f:18: 29:23:7c:ef:71:6e:3e:33:69:59:d3:2e:1c:8c:6e: d4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F9:10:63:83:17:F5:5C:DA:D4:EB:DA:03:85:A8:FC:E1:87:CA:2E X509v3 Authority Key Identifier: keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:23:29:40:5c:62:a5:84:5c:d4:7e:a7:5b:c7:5c:ab:cb:47: 3a:a7:40:0e:59:11:bf:99:6a:a1:f5:77:c5:37:51:6d:ff:3e: f7:47:59:c1:de:d5:ee:00:dc:6f:55:a1:a7:f4:8d:c0:9d:64: 1d:3f:79:02:92:71:46:0b:ff:3b:f4:dd:1f:e5:35:93:09:85: 4e:6d:13:22:5f:93:17:66:d3:1e:d8:e8:61:b5:a3:d1:7e:e2: 10:aa:5a:b8:94:65:c7:bf:95:57:13:f1:d7:89:15:5a:ca:3f: 68:27:ff:31:dc:c3:ea:f3:d4:21:c5:35:5e:ef:83:01:d3:f6: ce:62:8b:17:3f:e8:55:18:f9:92:c9:df:f8:6a:95:e4:d4:eb: 5d:dd:6b:df:31:24:28:b2:d6:d1:e9:af:b0:41:09:b3:31:87: 50:8c:a2:5c:e7:0e:2c:bc:f3:ea:d6:df:79:85:66:2e:af:56: ea:39:77:33:82:10:3c:07:8b:42:f7:09:58:77:a6:fe:44:bc: d2:9f:23:b6:39:57:71:b9:40:aa:04:fa:67:35:b8:32:9a:cf: 76:43:4c:ab:a5:13:21:da:c3:0e:c5:dd:27:9a:04:27:ab:8c: 1d:f7:bb:d8:1c:65:cf:c4:12:d0:32:39:54:f4:0f:1b:30:7e: 63:54:53:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1IGgIZ7+7pZYJC2kfSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYwNTc0MmI3ZTEyMmZjZmIyYWViYTlmYjEwZDZmY2E0 OGU3OGUwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EygwOWY5MTA2MzgzMTdmNTVjZGFkNGViZGEwMzg1YThmY2UxODdjYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SwSEQwVzcS3/CvDO+Mdpd7bwnux dt+Tpm9zKGR4I+zSAR+WRG+cR3RmI5wbOo2qaxJPFyY3doF4gFWqS2HszynMFbsH IsEk/t5IH5vJAbJxE4AJIrTHbLCgd766sntug8jH5fC7nQfAWQpdN8jhH9PPKA69 yCbTLKX4Sp7grkOIbB0uZa4M9AGYwYCVvZBNusvyGcvnadNSYblJFY3FWxTPO+/X THs02uWjO5uzniOxF+6HedqhGNtkNaL0H01y3VKshbHEb6/sS3BgVkNK9PXIzlHs Q9K3FOz30CPnn/W8F6fsAj9+WYMbKybwDxgpI3zvcW4+M2lZ0y4cjG7U3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAn5EGODF/Vc2tTr2gOFqPzhh8ouMB8GA1UdIwQY MBaAFFM2BXQrfhIvz7Kuup+xDW/KSOeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt NGZmOTBkMzc4NjQyLzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy LzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyMpQFxi pYRc1H6nW8dcq8tHOqdADlkRv5lqofV3xTdRbf8+90dZwd7V7gDcb1Whp/SNwJ1k HT95ApJxRgv/O/TdH+U1kwmFTm0TIl+TF2bTHtjoYbWj0X7iEKpauJRlx7+VVxPx 14kVWso/aCf/MdzD6vPUIcU1Xu+DAdP2zmKLFz/oVRj5ksnf+GqV5NTrXd1r3zEk KLLW0emvsEEJszGHUIyiXOcOLLzz6tbfeYVmLq9W6jl3M4IQPAeLQvcJWHem/kS8 0p8jtjlXcblAqgT6ZzW4MprPdkNMq6UTIdrDDsXdJ5oEJ6uMHfe72Bxlz8QS0DI5 VPQPGzB+Y1RTjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:40 2025 by rpki-client