This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft File: uzYogf_jYlMUAGCLYyi7Et-hYIE.mft (raw, json) Hash identifier: 2UO/YebQHkRx5F1HUEoyxiPc+wguAFle72gOlFC7E+g= Subject key identifier: 0A:AD:19:23:36:C6:28:12:57:BC:90:38:77:45:D7:C3:B8:5F:C6:3E Authority key identifier: BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81 Certificate issuer: /CN=bb362881ffe362531400608b6328bb12dfa16081 Certificate serial: 019AF31D51382D64DC41E2C4B80B020D1D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft Manifest number: 0E67 Signing time: Sat 06 Dec 2025 10:02:56 +0000 Manifest this update: Sat 06 Dec 2025 10:02:56 +0000 Manifest next update: Sun 07 Dec 2025 10:02:56 +0000 Files and hashes: 1: uzYogf_jYlMUAGCLYyi7Et-hYIE.crl (hash: QNLWgF28xK/fra1xjMfJJ8iZH3ENYyn3NT/BtDTJ0y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:51:38:2d:64:dc:41:e2:c4:b8:0b:02:0d:1d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb362881ffe362531400608b6328bb12dfa16081 Validity Not Before: Dec 6 10:02:56 2025 GMT Not After : Dec 7 10:02:56 2025 GMT Subject: CN=0aad192336c6281257bc90387745d7c3b85fc63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:ec:45:f5:79:e5:d2:a1:cf:1f:71:6f:31: 86:3b:93:2d:7f:c6:12:e5:d6:40:8c:7c:20:27:44: a2:09:d9:e1:5a:4b:e2:66:a7:5d:1d:54:8c:b9:1c: dd:2f:32:1d:48:15:93:5c:36:7f:56:e6:d1:bb:b4: 24:16:75:2c:f0:51:96:a5:a7:aa:7a:8d:aa:e8:f7: b1:38:6b:47:04:b6:cf:c6:69:34:af:99:20:d4:e3: af:39:af:33:85:95:d2:ea:05:93:6f:ed:a7:97:ec: e8:82:5c:33:c5:3e:3f:93:e9:ca:35:46:70:61:6f: 05:10:04:ef:b2:6b:c6:5f:c8:79:27:e6:35:4d:8a: 0e:fa:13:07:c7:7c:ab:73:53:1e:a1:bd:0a:14:9a: fe:70:34:7e:9b:4d:3c:ac:ac:78:ce:2e:ca:82:1a: ec:8e:03:70:97:58:d5:e0:f4:bf:7c:f1:78:61:e3: f1:6a:a6:9c:a3:4b:f2:07:6b:76:aa:03:b9:e8:eb: 44:44:76:95:3d:e3:7e:1b:a3:54:9b:72:b6:6d:44: d9:90:b5:e4:1f:e3:12:07:9e:56:9a:1e:d8:39:5e: 85:b1:40:f5:32:3d:7e:cc:38:63:da:c2:0e:a6:fa: 35:f2:cf:30:95:10:9f:a3:05:68:23:c0:01:a9:82: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AD:19:23:36:C6:28:12:57:BC:90:38:77:45:D7:C3:B8:5F:C6:3E X509v3 Authority Key Identifier: keyid:BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:29:f3:ee:37:f0:40:b2:2f:f8:1d:21:95:43:a4:5c:30:27: 80:97:0f:8c:e0:a4:c7:9b:eb:25:dd:e4:26:cd:56:bc:f3:21: 9d:94:74:93:63:5e:66:05:83:76:54:86:2a:61:71:64:50:4b: 1d:39:b4:eb:82:53:8a:f2:3b:c8:dd:fc:7a:d9:ef:20:bd:0b: 02:18:62:26:4e:d8:1f:56:97:ef:66:0a:f9:c1:d0:c9:c7:a5: cd:ec:f6:d7:59:c1:bc:ce:36:e9:23:17:47:40:d0:97:27:a2: 56:b9:b3:08:dd:b6:bf:22:0d:1f:0c:65:c3:8e:e0:c6:0c:49: ee:30:bd:d7:58:87:fe:cd:c3:41:c2:1e:ae:e8:2c:cb:04:30: 8c:ff:ab:8f:55:bd:76:9f:12:d5:8c:30:8f:a3:3b:89:5f:2e: b5:fa:8d:1d:f3:32:be:53:4c:69:c5:0b:5c:5e:19:ca:2f:46: 41:fa:31:a0:87:58:67:21:20:64:37:d7:8d:25:4a:87:ba:ce: 1e:99:d9:58:22:c2:f7:9c:ad:5a:50:d1:f1:e2:92:db:13:9d: 22:bb:6b:2a:3c:fe:f7:34:b0:fd:b5:d0:49:77:94:6c:d8:fa: c6:82:d1:85:7b:f1:e5:b6:71:e3:dd:f7:eb:09:24:5a:3c:d1: f6:b3:d3:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVE4LWTcQeLEuAsCDR0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMzYyODgxZmZlMzYyNTMxNDAwNjA4YjYzMjhiYjEyZGZh MTYwODEwHhcNMjUxMjA2MTAwMjU2WhcNMjUxMjA3MTAwMjU2WjAzMTEwLwYDVQQD EygwYWFkMTkyMzM2YzYyODEyNTdiYzkwMzg3NzQ1ZDdjM2I4NWZjNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvnsRfV55dKhzx9xbzGGO5Mtf8YS 5dZAjHwgJ0SiCdnhWkviZqddHVSMuRzdLzIdSBWTXDZ/VubRu7QkFnUs8FGWpaeq eo2q6PexOGtHBLbPxmk0r5kg1OOvOa8zhZXS6gWTb+2nl+zoglwzxT4/k+nKNUZw YW8FEATvsmvGX8h5J+Y1TYoO+hMHx3yrc1Meob0KFJr+cDR+m008rKx4zi7Kghrs jgNwl1jV4PS/fPF4YePxaqaco0vyB2t2qgO56OtERHaVPeN+G6NUm3K2bUTZkLXk H+MSB55Wmh7YOV6FsUD1Mj1+zDhj2sIOpvo18s8wlRCfowVoI8ABqYLZwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqtGSM2xigSV7yQOHdF18O4X8Y+MB8GA1UdIwQY MBaAFLs2KIH/42JTFABgi2MouxLfoWCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXpZb2dmX2pZbE1VQUdDTFl5aTdFdC1oWUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kNDY4M2UtMTViZi00MjhiLTg5YjMt NmQ4N2Q0NjViOWUxLzEvdXpZb2dmX2pZbE1VQUdDTFl5aTdFdC1oWUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kNDY4M2UtMTViZi00MjhiLTg5YjMtNmQ4N2Q0NjViOWUx LzEvdXpZb2dmX2pZbE1VQUdDTFl5aTdFdC1oWUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKynz7jfw QLIv+B0hlUOkXDAngJcPjOCkx5vrJd3kJs1WvPMhnZR0k2NeZgWDdlSGKmFxZFBL HTm064JTivI7yN38etnvIL0LAhhiJk7YH1aX72YK+cHQycelzez211nBvM426SMX R0DQlyeiVrmzCN22vyINHwxlw47gxgxJ7jC911iH/s3DQcIerugsywQwjP+rj1W9 dp8S1Ywwj6M7iV8utfqNHfMyvlNMacULXF4Zyi9GQfoxoIdYZyEgZDfXjSVKh7rO HpnZWCLC95ytWlDR8eKS2xOdIrtrKjz+9zSw/bXQSXeUbNj6xoLRhXvx5bZx4933 6wkkWjzR9rPTOw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:29 2025 by rpki-client