This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json) Hash identifier: jnJkdXgRmb4Js7e1oxRNcswIkW6QGeoWmkAdpBykxZg= Subject key identifier: AF:90:D7:CF:DC:C6:A4:29:7E:EB:3E:E9:9B:13:01:5F:79:FA:E6:88 Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Certificate serial: 019B3EDA55DA098A56BCFE584AE2EFB9EA39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft Manifest number: 171A Signing time: Sun 21 Dec 2025 03:00:54 +0000 Manifest this update: Sun 21 Dec 2025 03:00:54 +0000 Manifest next update: Mon 22 Dec 2025 03:00:54 +0000 Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: Fwypweh4oL4H+SEvnSSfGxgCuur1As7ld926Rn9SCp4=) 2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:55:da:09:8a:56:bc:fe:58:4a:e2:ef:b9:ea:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Validity Not Before: Dec 21 03:00:54 2025 GMT Not After : Dec 22 03:00:54 2025 GMT Subject: CN=af90d7cfdcc6a4297eeb3ee99b13015f79fae688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:1d:5d:c6:d9:e2:e9:17:bb:68:61:b2:6b: 2a:12:3d:07:22:72:d9:70:b2:e9:dc:49:ba:0c:94: c4:86:50:55:18:8e:95:18:28:a8:0d:48:2a:7b:63: 87:cc:52:85:eb:26:2d:1d:e7:46:8b:aa:fd:ad:2d: d9:a5:77:ff:13:c6:5b:c1:a4:e4:cc:6a:2f:9d:f1: b2:64:48:c9:7e:bf:04:97:14:66:c5:4c:23:1a:07: d2:8f:af:7c:5a:f3:da:0d:29:cf:11:dd:ca:b4:f4: ad:12:7c:21:9d:7d:4f:2d:c4:08:4d:66:53:e7:96: ab:c7:a6:8b:5b:89:f7:4e:cc:65:42:42:9c:1d:d5: 24:1c:16:21:9c:4f:10:bf:9e:a3:3c:2a:7a:4e:d4: 70:83:5e:10:dd:f2:6e:e5:96:42:08:1c:2b:26:a6: 2b:25:ad:52:1c:49:55:99:24:73:43:42:ad:db:1f: f4:30:c8:e1:e5:35:0a:87:46:12:9d:40:76:97:3f: 32:80:90:4f:3b:a9:0c:e1:ef:f1:f6:0a:3a:e5:4a: fc:50:b0:33:d0:7a:d1:e0:6b:91:4e:8b:ca:c4:18: ad:f6:08:d5:3e:d0:34:2b:87:3c:91:30:1b:22:ed: d1:27:54:98:92:33:3c:d0:3b:d4:9a:76:bb:15:95: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:D7:CF:DC:C6:A4:29:7E:EB:3E:E9:9B:13:01:5F:79:FA:E6:88 X509v3 Authority Key Identifier: keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:35:15:e2:2b:31:28:99:48:e0:34:67:b9:cd:1e:01:a8:e6: 76:e4:cc:59:cf:20:bf:4c:1b:36:f2:94:ed:5a:20:06:fc:e1: 22:63:b5:41:b8:f6:c1:78:ac:6a:b8:a8:54:48:f9:66:12:20: 65:2a:b0:30:bf:c8:c8:01:f5:ca:ad:80:0f:85:92:e0:26:43: 93:fe:1e:d8:e8:ff:aa:80:94:3f:0e:62:d5:16:dd:1c:4b:e5: 94:03:26:13:40:02:2b:87:df:a7:78:10:83:b6:8c:4b:42:8d: 93:ad:6a:1a:33:84:73:00:16:e6:83:4b:0f:da:3f:d3:d1:fe: ed:14:41:4e:c9:23:2f:3d:fe:bc:92:46:d6:67:7f:9a:03:a3: 2b:61:e9:2f:b1:25:ac:ab:48:1f:47:b7:a6:e1:00:12:18:21: a3:85:d5:0a:ee:5e:0c:75:6a:f3:d8:bd:76:a5:64:6f:23:0e: 68:9a:33:a2:03:1f:20:66:f1:9c:55:bf:de:a3:eb:68:7c:c4: 4e:18:14:5f:11:27:1f:25:ff:3f:8b:89:03:85:10:82:ff:bc: 7d:12:5f:8e:14:58:c9:5b:4d:78:b9:44:27:0d:30:39:5a:86: 8e:2b:70:1a:03:50:9a:bf:43:a5:7c:67:5a:13:e6:5c:7b:f0: 2d:e6:c1:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lXaCYpWvP5YSuLvueo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYwNTc0MmI3ZTEyMmZjZmIyYWViYTlmYjEwZDZmY2E0 OGU3OGUwHhcNMjUxMjIxMDMwMDU0WhcNMjUxMjIyMDMwMDU0WjAzMTEwLwYDVQQD EyhhZjkwZDdjZmRjYzZhNDI5N2VlYjNlZTk5YjEzMDE1Zjc5ZmFlNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlodXcbZ4ukXu2hhsmsqEj0HInLZ cLLp3Em6DJTEhlBVGI6VGCioDUgqe2OHzFKF6yYtHedGi6r9rS3ZpXf/E8ZbwaTk zGovnfGyZEjJfr8ElxRmxUwjGgfSj698WvPaDSnPEd3KtPStEnwhnX1PLcQITWZT 55arx6aLW4n3TsxlQkKcHdUkHBYhnE8Qv56jPCp6TtRwg14Q3fJu5ZZCCBwrJqYr Ja1SHElVmSRzQ0Kt2x/0MMjh5TUKh0YSnUB2lz8ygJBPO6kM4e/x9go65Ur8ULAz 0HrR4GuRTovKxBit9gjVPtA0K4c8kTAbIu3RJ1SYkjM80DvUmna7FZVa4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+Q18/cxqQpfus+6ZsTAV95+uaIMB8GA1UdIwQY MBaAFFM2BXQrfhIvz7Kuup+xDW/KSOeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt NGZmOTBkMzc4NjQyLzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy LzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTUV4isx KJlI4DRnuc0eAajmduTMWc8gv0wbNvKU7VogBvzhImO1Qbj2wXisarioVEj5ZhIg ZSqwML/IyAH1yq2AD4WS4CZDk/4e2Oj/qoCUPw5i1RbdHEvllAMmE0ACK4ffp3gQ g7aMS0KNk61qGjOEcwAW5oNLD9o/09H+7RRBTskjLz3+vJJG1md/mgOjK2HpL7El rKtIH0e3puEAEhgho4XVCu5eDHVq89i9dqVkbyMOaJozogMfIGbxnFW/3qPraHzE ThgUXxEnHyX/P4uJA4UQgv+8fRJfjhRYyVtNeLlEJw0wOVqGjitwGgNQmr9DpXxn WhPmXHvwLebBjw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:43:55 2025 by rpki-client