This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json) Hash identifier: pkLY8vNbwixHHwbP/3fFrfqiZ7+NVH4mGT6yQSu+Nrg= Subject key identifier: CC:B0:6B:36:3E:58:DD:46:C5:4C:32:6E:15:AC:6B:C1:36:CB:BC:08 Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb Certificate serial: 019AF23F72B8C46DA8CF301B0755DA8D7A3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft Manifest number: 02B1 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: 8lQpGxvfOV1Mu73ehmjrDEDGkPIOxlzHCD61ZirzwR4=) 2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:72:b8:c4:6d:a8:cf:30:1b:07:55:da:8d:7a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=ccb06b363e58dd46c54c326e15ac6bc136cbbc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:cb:be:eb:68:d7:96:af:8d:3a:33:a0:26: 54:5c:6e:61:e2:8c:ca:ae:4c:93:83:da:50:cb:83: 1a:05:93:e7:ac:9b:da:15:af:e4:27:32:51:a5:f3: 59:5f:45:20:c0:2f:7b:29:73:e4:c5:0d:42:02:5f: f4:44:b8:a1:1f:6c:a8:31:9c:5a:47:bb:3f:2b:ad: f7:4d:fe:3a:c0:23:4f:5e:c3:10:28:10:de:36:f8: 91:7d:63:ad:73:f6:da:17:d5:bd:fd:55:77:57:ef: a1:44:4e:3e:ad:1b:46:fb:1d:6e:34:26:9a:ee:8d: bf:e9:a2:b7:ef:a6:c2:9f:88:b8:e2:7c:8c:5e:b2: 42:40:b5:f7:a5:8b:d9:cd:75:2b:69:01:4c:c6:ae: bd:06:c8:7b:5d:ea:c3:25:09:80:fe:8d:7a:b5:7c: 41:3f:87:5d:06:7c:82:43:23:ef:9b:e5:c2:fa:c2: bb:6c:ac:18:d9:86:45:a5:d2:d0:b4:9e:6f:4e:4f: 1e:40:e3:78:fb:af:27:66:01:97:43:57:9d:77:a9: b8:b6:d6:1c:f8:67:de:7f:6b:5c:fc:69:e9:3b:e8: e0:45:6d:5a:f7:9f:33:d7:5d:9f:77:57:57:05:7a: 70:2e:98:4e:04:1d:f9:fc:c6:5f:ba:4d:c9:4d:98: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:6B:36:3E:58:DD:46:C5:4C:32:6E:15:AC:6B:C1:36:CB:BC:08 X509v3 Authority Key Identifier: keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:37:6a:91:a0:c9:8d:8a:76:d6:10:0c:f0:a5:8c:61:7e:38: 5a:4a:d4:51:e0:e9:f3:4c:0e:bb:7d:fc:65:67:a8:f3:ea:ad: 6b:1c:95:3a:b5:eb:b3:64:a1:7e:b4:38:93:ba:1c:60:3e:5b: 33:66:a8:51:77:98:e7:9e:4d:99:9c:45:53:ee:9e:c8:6d:f5: e4:aa:e0:01:00:d4:a1:0a:1a:ff:90:84:26:69:d5:2c:dd:64: 66:fc:a9:8d:e6:c7:b8:b5:82:28:a5:e2:9f:65:07:f2:82:4a: 0d:92:96:13:14:81:32:57:98:18:12:4f:3a:9e:18:d3:67:0e: f0:fc:47:8a:1e:90:83:5e:a0:9e:b6:0b:9d:13:66:99:26:69: 1e:04:a4:26:ed:dd:b9:bc:1c:2e:25:81:50:ec:22:3d:cb:de: 19:5e:21:be:ac:e2:14:e6:da:9c:d0:1c:be:0a:50:c1:1c:f1: 19:56:2f:b4:b4:d5:ef:95:b9:33:e8:25:a5:b2:d5:a8:34:71: ef:44:63:85:85:e0:27:81:c6:81:76:7a:d3:61:3b:28:9d:46: b0:35:ad:a3:35:c9:6d:07:f8:e4:6a:05:0b:8b:c3:9e:20:a9: 22:d2:5c:91:61:3d:e2:4e:38:bc:1f:2e:a7:f4:65:55:b4:69: 50:58:4a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3K4xG2ozzAbB1XajXo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx YzJhZWIwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EyhjY2IwNmIzNjNlNThkZDQ2YzU0YzMyNmUxNWFjNmJjMTM2Y2JiYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsULLvuto15avjTozoCZUXG5h4ozK rkyTg9pQy4MaBZPnrJvaFa/kJzJRpfNZX0UgwC97KXPkxQ1CAl/0RLihH2yoMZxa R7s/K633Tf46wCNPXsMQKBDeNviRfWOtc/baF9W9/VV3V++hRE4+rRtG+x1uNCaa 7o2/6aK376bCn4i44nyMXrJCQLX3pYvZzXUraQFMxq69Bsh7XerDJQmA/o16tXxB P4ddBnyCQyPvm+XC+sK7bKwY2YZFpdLQtJ5vTk8eQON4+68nZgGXQ1edd6m4ttYc +Gfef2tc/GnpO+jgRW1a958z112fd1dXBXpwLphOBB35/MZfuk3JTZhoRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMywazY+WN1GxUwybhWsa8E2y7wIMB8GA1UdIwQY MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0 LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTdqkaDJ jYp21hAM8KWMYX44WkrUUeDp80wOu338ZWeo8+qtaxyVOrXrs2ShfrQ4k7ocYD5b M2aoUXeY555NmZxFU+6eyG315KrgAQDUoQoa/5CEJmnVLN1kZvypjebHuLWCKKXi n2UH8oJKDZKWExSBMleYGBJPOp4Y02cO8PxHih6Qg16gnrYLnRNmmSZpHgSkJu3d ubwcLiWBUOwiPcveGV4hvqziFObanNAcvgpQwRzxGVYvtLTV75W5M+glpbLVqDRx 70RjhYXgJ4HGgXZ602E7KJ1GsDWtozXJbQf45GoFC4vDniCpItJckWE94k44vB8u p/RlVbRpUFhKzw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:57 2025 by rpki-client