This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json) Hash identifier: AjDWzZVIiLDsNwXHxNtXjtnS5xn+4VsF5tUEDAOu3OI= Subject key identifier: B6:4F:85:CE:F4:34:FE:56:84:9E:27:FF:74:FC:C9:76:36:67:D8:A6 Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16 Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16 Certificate serial: 019AF12D187079CD91A153CFD4B12C607E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft Manifest number: 0AE6 Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: sqQDJwyDSo5y8TcW45duNcd6a+nhE7zJLo6QBy4FLlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:18:70:79:cd:91:a1:53:cf:d4:b1:2c:60:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528526de7a42f1e080916840eebf39038b893d16 Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=b64f85cef434fe56849e27ff74fcc9763667d8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:20:64:f2:01:e3:fe:ed:36:d0:2e:ce:97: 6b:cf:51:82:de:df:3c:1f:b1:2f:00:65:a1:39:6f: 33:1b:2e:21:95:7c:b9:c6:a4:ae:27:9d:59:52:54: 35:e3:52:a8:96:4f:ac:e4:8e:05:5a:57:99:0c:22: 4e:78:e7:cc:f2:ae:76:b4:5d:1d:9a:61:4b:6f:d9: 23:43:c4:ae:84:75:5a:e7:45:e9:0e:7b:7a:36:a5: 59:74:22:28:b0:6d:85:43:cc:36:d8:7c:c9:e2:78: d8:f0:88:d2:9d:24:fd:44:9e:71:21:e4:60:28:7f: b5:88:51:fc:1b:b5:39:ee:b6:a5:62:4a:28:67:8a: d8:9d:fb:c4:5e:e4:58:53:4a:fb:68:26:42:9c:20: b2:42:f1:e8:64:15:43:4d:87:8a:26:b8:56:ab:52: 41:a9:94:37:53:e8:87:15:0c:54:d8:9d:2c:1a:25: 31:bd:8f:82:5c:59:e3:cd:14:e6:d2:6d:81:4b:2a: 00:3d:ea:81:77:0a:a2:00:4e:11:e8:99:7a:e1:be: a6:6e:00:74:28:e7:23:35:bf:09:46:a3:26:26:81: dd:7e:d9:9a:31:bd:b1:a1:5b:bc:ef:1f:fc:b1:21: f2:af:bc:c6:9d:74:61:27:2a:82:5b:52:de:ac:6d: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4F:85:CE:F4:34:FE:56:84:9E:27:FF:74:FC:C9:76:36:67:D8:A6 X509v3 Authority Key Identifier: keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fe:5e:20:2d:c0:6e:30:b4:2f:18:58:5b:44:d3:ca:a7:02: ac:c6:27:b0:02:af:09:fa:18:83:33:d4:30:49:ce:15:54:00: 85:dc:af:98:c6:d8:93:dd:38:f5:0d:5a:c8:94:7e:76:25:d2: 57:d3:15:55:15:f6:4c:f9:08:90:a6:5d:9c:e7:d8:e8:96:f6: 9b:e4:4d:4d:e9:df:ab:e3:01:0f:8d:e9:44:cf:46:0e:66:f4: c1:87:f5:db:3e:93:3b:9c:0f:ab:2e:fa:26:69:b4:80:c8:fb: 01:81:b2:ad:c9:f3:eb:ef:07:0d:3d:8e:b0:2d:69:f4:77:2d: 39:70:78:34:66:28:04:a9:a7:af:38:0b:d5:c3:c0:22:5a:39: c0:4f:8a:d9:5c:1a:50:d8:c7:69:ad:15:1d:3a:60:6c:72:7b: be:5d:c4:d6:21:85:43:b4:27:46:86:7a:07:77:c8:4d:9f:03: 70:90:69:aa:ce:07:23:44:c0:09:63:76:5c:0a:cf:57:7a:ae: a9:47:a2:2d:89:92:6c:f0:d3:f6:1c:63:b1:3e:b1:e0:d1:f9: 4b:4b:4b:06:04:17:0e:98:a5:53:c6:6c:5c:9c:e2:85:a8:38: 7e:df:ae:d3:8c:80:7a:19:55:4a:d7:e1:df:d9:f5:c6:52:a3: 88:a7:bf:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRhwec2RoVPP1LEsYH4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyODUyNmRlN2E0MmYxZTA4MDkxNjg0MGVlYmYzOTAzOGI4 OTNkMTYwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD EyhiNjRmODVjZWY0MzRmZTU2ODQ5ZTI3ZmY3NGZjYzk3NjM2NjdkOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2UgZPIB4/7tNtAuzpdrz1GC3t88 H7EvAGWhOW8zGy4hlXy5xqSuJ51ZUlQ141Kolk+s5I4FWleZDCJOeOfM8q52tF0d mmFLb9kjQ8SuhHVa50XpDnt6NqVZdCIosG2FQ8w22HzJ4njY8IjSnST9RJ5xIeRg KH+1iFH8G7U57ralYkooZ4rYnfvEXuRYU0r7aCZCnCCyQvHoZBVDTYeKJrhWq1JB qZQ3U+iHFQxU2J0sGiUxvY+CXFnjzRTm0m2BSyoAPeqBdwqiAE4R6Jl64b6mbgB0 KOcjNb8JRqMmJoHdftmaMb2xoVu87x/8sSHyr7zGnXRhJyqCW1LerG1/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZPhc70NP5WhJ4n/3T8yXY2Z9imMB8GA1UdIwQY MBaAFFKFJt56QvHggJFoQO6/OQOLiT0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEt NTBjOWY1YjNjM2U0LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEtNTBjOWY1YjNjM2U0 LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/5eIC3A bjC0LxhYW0TTyqcCrMYnsAKvCfoYgzPUMEnOFVQAhdyvmMbYk9049Q1ayJR+diXS V9MVVRX2TPkIkKZdnOfY6Jb2m+RNTenfq+MBD43pRM9GDmb0wYf12z6TO5wPqy76 Jmm0gMj7AYGyrcnz6+8HDT2OsC1p9HctOXB4NGYoBKmnrzgL1cPAIlo5wE+K2Vwa UNjHaa0VHTpgbHJ7vl3E1iGFQ7QnRoZ6B3fITZ8DcJBpqs4HI0TACWN2XArPV3qu qUeiLYmSbPDT9hxjsT6x4NH5S0tLBgQXDpilU8ZsXJzihag4ft+u04yAehlVStfh 39n1xlKjiKe/ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:11 2025 by rpki-client