This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json) Hash identifier: BoWPu0CbBJZiOb7Uosoaiq0+JzkJ+c+Vr/XD/AU1/0Q= Subject key identifier: 3E:44:99:7C:34:00:1F:C4:3A:38:3B:61:E8:25:CB:F3:E2:F2:CF:B3 Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94 Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594 Certificate serial: 019AF5779645A89CC0A14FBECB5E6C3B28D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft Manifest number: 0E2B Signing time: Sat 06 Dec 2025 21:00:46 +0000 Manifest this update: Sat 06 Dec 2025 21:00:46 +0000 Manifest next update: Sun 07 Dec 2025 21:00:46 +0000 Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: zd81v55X+8J8x+r7ApkLGdZ26ixYZgzxet22DLUV9/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:96:45:a8:9c:c0:a1:4f:be:cb:5e:6c:3b:28:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594 Validity Not Before: Dec 6 21:00:46 2025 GMT Not After : Dec 7 21:00:46 2025 GMT Subject: CN=3e44997c34001fc43a383b61e825cbf3e2f2cfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bb:57:47:ed:b0:bb:ee:56:cc:fd:99:cc:8e: 10:65:62:35:0f:f6:d2:3f:af:76:fd:41:2c:94:02: e8:04:73:37:56:83:8f:01:a8:44:d9:db:a3:2c:2d: 0d:20:fd:f9:a8:04:02:bc:0e:b5:94:59:97:48:95: 00:16:a1:51:b6:9e:67:52:b3:91:c8:16:f1:92:74: 37:cf:a2:a3:ba:6b:40:d2:97:00:da:f2:0b:40:44: 16:70:22:de:8b:2b:71:ec:3f:fd:94:38:72:a3:bd: 4b:20:4a:05:cf:d2:f5:d9:4f:0f:b2:07:cf:c0:11: 0e:31:9e:b0:ad:3d:b2:65:15:c1:68:de:31:4d:55: 07:63:a2:49:63:c3:74:fe:d4:1d:ad:56:58:8d:01: 47:a9:6a:09:c1:80:52:f8:3e:dd:8f:f7:4c:74:87: e6:4f:1d:2b:c0:7b:7d:4e:8b:b9:a4:51:7a:f3:3b: 61:6d:41:c9:63:71:29:50:df:9a:4e:a3:6c:ec:eb: bd:c4:85:7e:fc:d8:c5:02:44:02:98:c9:bc:28:81: 51:e2:69:76:13:ad:15:8f:0d:9f:a3:bc:de:4f:9c: c9:a6:6a:1e:95:a0:ef:49:99:c6:67:ef:bf:e7:63: b9:64:6a:3b:ff:ef:3f:c1:91:2a:88:84:77:8d:16: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:44:99:7C:34:00:1F:C4:3A:38:3B:61:E8:25:CB:F3:E2:F2:CF:B3 X509v3 Authority Key Identifier: keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f2:53:81:89:30:92:e3:48:02:3d:03:b2:ec:11:61:7f:71: 7a:8b:b7:95:5f:2f:17:c7:63:b1:cd:95:b2:22:10:ed:ea:8f: f2:06:43:dd:ab:68:44:0d:88:a2:db:de:04:91:2f:d7:ab:4a: d9:c9:4a:12:cb:38:48:19:45:77:7c:5f:55:88:04:b0:e1:b0: da:75:5b:8e:67:0d:5c:00:da:fe:84:bb:d0:25:28:f1:1a:08: fe:2e:dc:e4:bc:94:bb:5e:3e:62:d9:d7:88:2e:65:b1:3e:9c: 14:bd:e3:98:25:93:f9:79:73:9e:8f:8c:f4:91:fb:58:8a:95: ca:dc:14:51:75:31:a3:f8:bd:e3:6c:d3:bc:e7:c2:03:db:46: ff:d7:ac:95:2c:40:c6:70:80:6b:85:69:31:25:40:91:6b:e8: 62:65:7a:df:cf:f6:08:5f:13:56:5b:9f:f5:b1:30:9a:3b:b8: 00:f7:b2:4c:1b:cd:95:b0:de:3a:2f:fb:30:96:ba:3d:33:23: b8:07:9e:90:00:10:a0:3f:c5:e8:a7:c2:64:e6:6c:57:38:b6: e9:67:ac:1d:08:9c:82:c0:36:64:b6:80:e2:b7:b7:84:8a:21: 6b:09:11:f5:7b:8b:5f:b4:a1:7b:d6:1a:c6:11:6a:3f:16:fc: 1b:38:94:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5ZFqJzAoU++y15sOyjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NmFlZDQyNmZiMWEwNjMyNWEyNjM3OTIxYTRiNWFiOThh MWE1OTQwHhcNMjUxMjA2MjEwMDQ2WhcNMjUxMjA3MjEwMDQ2WjAzMTEwLwYDVQQD EygzZTQ0OTk3YzM0MDAxZmM0M2EzODNiNjFlODI1Y2JmM2UyZjJjZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7tXR+2wu+5WzP2ZzI4QZWI1D/bS P692/UEslALoBHM3VoOPAahE2dujLC0NIP35qAQCvA61lFmXSJUAFqFRtp5nUrOR yBbxknQ3z6KjumtA0pcA2vILQEQWcCLeiytx7D/9lDhyo71LIEoFz9L12U8PsgfP wBEOMZ6wrT2yZRXBaN4xTVUHY6JJY8N0/tQdrVZYjQFHqWoJwYBS+D7dj/dMdIfm Tx0rwHt9Tou5pFF68zthbUHJY3EpUN+aTqNs7Ou9xIV+/NjFAkQCmMm8KIFR4ml2 E60Vjw2fo7zeT5zJpmoelaDvSZnGZ++/52O5ZGo7/+8/wZEqiIR3jRZhGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5EmXw0AB/EOjg7Yegly/Pi8s+zMB8GA1UdIwQY MBaAFLlq7UJvsaBjJaJjeSGktauYoaWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgt NzkyOTZkM2U2MzI4LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgtNzkyOTZkM2U2MzI4 LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/JTgYkw kuNIAj0DsuwRYX9xeou3lV8vF8djsc2VsiIQ7eqP8gZD3atoRA2IotveBJEv16tK 2clKEss4SBlFd3xfVYgEsOGw2nVbjmcNXADa/oS70CUo8RoI/i7c5LyUu14+YtnX iC5lsT6cFL3jmCWT+Xlzno+M9JH7WIqVytwUUXUxo/i942zTvOfCA9tG/9eslSxA xnCAa4VpMSVAkWvoYmV638/2CF8TVluf9bEwmju4APeyTBvNlbDeOi/7MJa6PTMj uAeekAAQoD/F6KfCZOZsVzi26WesHQicgsA2ZLaA4re3hIohawkR9XuLX7She9Ya xhFqPxb8GziUEQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:20 2025 by rpki-client