This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json) Hash identifier: abTy449fbh8WfkFbS8PiZ4btZ6cJGek7pgX32lZ3AkE= Subject key identifier: E4:43:79:14:99:BD:A8:70:DE:7B:0B:20:08:04:71:19:21:99:C6:83 Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Certificate serial: 019AF088D998449ED7EEACD9ADCFB2119531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft Manifest number: 1733 Signing time: Fri 05 Dec 2025 22:01:31 +0000 Manifest this update: Fri 05 Dec 2025 22:01:31 +0000 Manifest next update: Sat 06 Dec 2025 22:01:31 +0000 Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=) 2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: 3WHJlaVEVfxV2RHo1NREslad0SqeSQaokfWFP/2B+VE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:d9:98:44:9e:d7:ee:ac:d9:ad:cf:b2:11:95:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Validity Not Before: Dec 5 22:01:31 2025 GMT Not After : Dec 6 22:01:31 2025 GMT Subject: CN=e443791499bda870de7b0b20080471192199c683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:04:09:cf:20:20:4d:92:dc:17:11:57:18: 41:c3:a9:f0:59:0f:cc:b4:75:2b:23:0d:f6:e3:e0: 92:d4:2d:0c:e8:d2:33:a8:8a:d5:5c:32:2b:8c:a0: 9d:dc:e6:fb:c1:57:82:40:15:35:c8:cd:cb:b3:96: 0f:a2:5c:dc:b6:3a:af:7b:90:66:56:05:0c:7c:01: ae:8b:5e:ca:1b:be:a1:74:81:54:4b:89:60:06:97: 77:bf:d3:82:b0:7a:c8:ca:3d:75:2a:d7:f1:9c:15: cb:13:9d:81:85:9e:52:4c:b1:80:26:46:70:86:eb: 13:58:58:13:6a:3e:91:f6:76:b8:ff:d4:69:4b:dd: b3:49:b3:06:9f:63:f8:bd:71:d1:e6:5b:77:9e:6f: 99:3f:ba:4c:b2:24:eb:42:66:1f:79:e1:89:da:d8: 49:49:58:cb:7d:ee:8f:e6:45:30:51:51:c9:fa:33: cb:5d:15:c1:4b:65:83:46:08:e3:18:6b:6c:e8:2b: 55:33:a7:6b:92:73:61:fc:70:c5:17:54:6e:c9:82: 50:03:b2:c9:4b:b9:8b:63:7e:8f:b0:cc:64:0e:99: 15:8a:7a:a0:ac:14:f2:2e:f6:47:3d:8f:4a:f1:b4: 82:10:77:15:72:51:31:06:e0:12:cf:38:21:4c:4f: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:79:14:99:BD:A8:70:DE:7B:0B:20:08:04:71:19:21:99:C6:83 X509v3 Authority Key Identifier: keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b6:48:28:9f:f9:52:e0:ab:3b:0a:53:70:77:d2:d4:b1:ef: 41:8f:a1:df:49:4d:5b:00:9d:ef:14:20:34:f2:59:fb:2c:60: 60:a1:42:4f:eb:cb:a2:ea:02:83:40:33:49:7c:7e:62:58:12: 28:4e:2b:ff:92:d4:09:cc:9d:63:16:a4:23:73:b6:3a:3c:71: b4:77:3b:8b:79:36:1f:a1:fb:e0:d7:89:48:c4:a4:f0:2f:ac: a9:ab:5b:aa:16:19:f5:d2:b6:fb:45:e0:15:75:40:39:d0:73: 08:3e:69:91:47:6c:55:91:f6:5e:cf:61:3b:2c:cb:b8:54:fd: d6:83:66:10:b4:9d:9c:24:fb:f0:f5:4e:ec:59:a5:08:fc:38: 58:1a:70:97:cc:27:ef:8b:5e:b6:40:c4:02:49:2e:5d:7f:68: c5:55:b4:7a:01:74:af:d1:cb:6f:62:43:23:a0:4f:95:54:be: 18:86:c4:fa:9d:db:39:af:ba:af:80:23:4e:a2:58:7c:b7:63: a6:c1:0f:b0:89:b2:f0:16:f5:57:32:48:c1:10:99:c0:5b:e8: 77:92:a9:99:d3:4b:c3:a0:76:59:28:7b:62:12:03:9f:0b:5b: 82:d9:89:02:66:2d:20:0b:3c:f7:ef:31:26:4d:48:08:0e:28: 87:7d:c4:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiNmYRJ7X7qzZrc+yEZUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw MTY1YWEwHhcNMjUxMjA1MjIwMTMxWhcNMjUxMjA2MjIwMTMxWjAzMTEwLwYDVQQD EyhlNDQzNzkxNDk5YmRhODcwZGU3YjBiMjAwODA0NzExOTIxOTljNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9wECc8gIE2S3BcRVxhBw6nwWQ/M tHUrIw324+CS1C0M6NIzqIrVXDIrjKCd3Ob7wVeCQBU1yM3Ls5YPolzctjqve5Bm VgUMfAGui17KG76hdIFUS4lgBpd3v9OCsHrIyj11KtfxnBXLE52BhZ5STLGAJkZw husTWFgTaj6R9na4/9RpS92zSbMGn2P4vXHR5lt3nm+ZP7pMsiTrQmYfeeGJ2thJ SVjLfe6P5kUwUVHJ+jPLXRXBS2WDRgjjGGts6CtVM6drknNh/HDFF1RuyYJQA7LJ S7mLY36PsMxkDpkVinqgrBTyLvZHPY9K8bSCEHcVclExBuASzzghTE8SoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORDeRSZvahw3nsLIAgEcRkhmcaDMB8GA1UdIwQY MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5 LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7ZIKJ/5 UuCrOwpTcHfS1LHvQY+h30lNWwCd7xQgNPJZ+yxgYKFCT+vLouoCg0AzSXx+YlgS KE4r/5LUCcydYxakI3O2OjxxtHc7i3k2H6H74NeJSMSk8C+sqatbqhYZ9dK2+0Xg FXVAOdBzCD5pkUdsVZH2Xs9hOyzLuFT91oNmELSdnCT78PVO7FmlCPw4WBpwl8wn 74tetkDEAkkuXX9oxVW0egF0r9HLb2JDI6BPlVS+GIbE+p3bOa+6r4AjTqJYfLdj psEPsImy8Bb1VzJIwRCZwFvod5KpmdNLw6B2WSh7YhIDnwtbgtmJAmYtIAs89+8x Jk1ICA4oh33E5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:00 2025 by rpki-client