This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft File: uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json) Hash identifier: d+3f8V+5Eq68t/pWVVfp21w/oUYILY3whSGebk3Nm64= Subject key identifier: 59:D5:49:9A:23:0D:6C:0A:D8:13:18:B3:7E:C6:8D:74:D8:04:B4:8A Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1 Certificate issuer: /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1 Certificate serial: 019AF209ABBE5DCDF18650DAEF2942892CB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft Manifest number: 057E Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: 35QyHKwzFPGcFXF3AFjmyrxDXXoiWluTFwL7n5sChz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ab:be:5d:cd:f1:86:50:da:ef:29:42:89:2c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=59d5499a230d6c0ad81318b37ec68d74d804b48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:f6:92:d8:a7:82:83:88:3b:da:4d:7a:7d: a3:1f:ec:76:76:a2:72:27:ea:d1:1b:93:1d:60:77: de:07:66:55:57:18:39:04:89:25:5d:3c:52:82:8a: b9:0d:a8:27:ab:4e:a0:0f:40:70:4e:38:e9:ca:90: 5e:20:98:d1:c0:8e:b6:39:a4:81:92:ab:1f:9b:c5: e8:58:22:7d:de:f6:31:59:0c:b8:4f:a1:33:69:7a: 26:52:40:aa:07:ea:7a:d6:1e:1b:af:d2:5f:95:32: 42:75:19:fe:fd:a5:8d:7c:02:1d:d1:99:f3:74:07: 27:a4:96:25:17:26:d6:64:59:de:2f:aa:c7:8f:05: a8:54:3f:bd:cd:7c:43:73:ff:9a:33:7f:83:d3:dd: d3:0b:a1:b6:4b:00:d9:8d:10:e1:8c:fa:d1:4f:dd: cb:12:c9:97:fd:20:31:39:9b:2c:86:86:f0:5f:eb: f1:3e:9f:4a:e0:aa:68:f1:8c:7f:16:4e:09:5b:c0: 02:3b:6b:c6:da:34:15:fd:54:76:a8:58:79:a5:0d: ab:ee:a9:ad:34:8f:d9:40:ce:b4:23:e0:81:2f:a3: b4:cc:14:3e:13:22:6f:c1:25:5f:c0:e5:1f:4b:ad: c9:61:3d:0a:76:51:88:67:f1:58:cc:9b:ed:4c:11: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D5:49:9A:23:0D:6C:0A:D8:13:18:B3:7E:C6:8D:74:D8:04:B4:8A X509v3 Authority Key Identifier: keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1a:c5:a6:c1:5e:53:60:5f:b3:2a:7d:3b:77:2f:10:da:1e: b0:39:5e:fe:08:b1:d1:c1:e2:c7:2d:b7:f8:cc:84:97:f7:02: ad:ac:44:10:d9:a6:4a:fd:f4:d1:a7:3f:cd:ba:ea:d0:18:cf: 8d:16:f3:0f:c5:d6:a2:6d:69:e6:2b:90:fb:04:ef:22:5c:66: 57:fa:93:d3:d9:3b:bf:19:60:5b:6c:3a:c4:75:5f:93:cc:52: 7e:09:8d:bd:92:9b:6a:5a:8b:08:c2:a3:8d:78:70:1e:95:94: e9:84:73:a8:33:8d:bb:1c:c9:f4:20:7b:e5:e5:57:91:0b:40: a1:1a:30:bd:af:45:27:67:51:ea:36:c2:b5:b5:71:d6:dc:9e: 5d:8a:1f:f4:9f:1e:c3:01:92:d4:e0:be:3a:17:12:e1:4b:22: 6e:2b:38:f0:c4:3a:25:b0:fa:80:24:9b:2d:a9:a0:df:14:8b: 10:bd:b6:69:17:b8:3b:44:4f:eb:a1:69:e5:ff:a4:66:59:ae: 8d:ba:7a:72:c9:34:05:af:3c:86:cd:96:c3:cc:80:b3:76:bf: 63:8e:64:79:7e:d1:f4:1b:df:91:aa:30:5c:fa:ff:ec:12:b6: 7a:a7:ba:e1:20:04:93:7c:25:de:13:bc:71:a6:fd:12:ef:5b: 58:55:77:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCau+Xc3xhlDa7ylCiSywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NmUzYmU5OWRlYzYzYjEyYjJiODI3NzlkZmNmNWUzNjNk MzIxYzEwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD Eyg1OWQ1NDk5YTIzMGQ2YzBhZDgxMzE4YjM3ZWM2OGQ3NGQ4MDRiNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmD2ktingoOIO9pNen2jH+x2dqJy J+rRG5MdYHfeB2ZVVxg5BIklXTxSgoq5Dagnq06gD0BwTjjpypBeIJjRwI62OaSB kqsfm8XoWCJ93vYxWQy4T6EzaXomUkCqB+p61h4br9JflTJCdRn+/aWNfAId0Znz dAcnpJYlFybWZFneL6rHjwWoVD+9zXxDc/+aM3+D093TC6G2SwDZjRDhjPrRT93L EsmX/SAxOZsshobwX+vxPp9K4Kpo8Yx/Fk4JW8ACO2vG2jQV/VR2qFh5pQ2r7qmt NI/ZQM60I+CBL6O0zBQ+EyJvwSVfwOUfS63JYT0KdlGIZ/FYzJvtTBHo8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnVSZojDWwK2BMYs37GjXTYBLSKMB8GA1UdIwQY MBaAFLluO+md7GOxKyuCd5389eNj0yHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUt MjViMzYwY2Y4YTIxLzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUtMjViMzYwY2Y4YTIx LzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRrFpsFe U2Bfsyp9O3cvENoesDle/gix0cHixy23+MyEl/cCraxEENmmSv300ac/zbrq0BjP jRbzD8XWom1p5iuQ+wTvIlxmV/qT09k7vxlgW2w6xHVfk8xSfgmNvZKbalqLCMKj jXhwHpWU6YRzqDONuxzJ9CB75eVXkQtAoRowva9FJ2dR6jbCtbVx1tyeXYof9J8e wwGS1OC+OhcS4Usibis48MQ6JbD6gCSbLamg3xSLEL22aRe4O0RP66Fp5f+kZlmu jbp6csk0Ba88hs2Ww8yAs3a/Y45keX7R9BvfkaowXPr/7BK2eqe64SAEk3wl3hO8 cab9Eu9bWFV31w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:22 2025 by rpki-client