This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft File: uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json) Hash identifier: GRQaSXM8FswWlbB/0QCUedjYv4QqUThFPBTa5DEJvXg= Subject key identifier: 10:40:0F:42:7F:17:1C:20:E5:B0:9E:06:0C:D3:B4:F7:55:61:09:86 Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd Certificate serial: 019AF19B6BE2711C72B55FA70C5E7D26CF1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft Manifest number: 0FE4 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=) 2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: FD7Jg5iBa/yH1lyPVQrbuvR1ZSQjV3aYS+Ksv65rvdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6b:e2:71:1c:72:b5:5f:a7:0c:5e:7d:26:cf:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=10400f427f171c20e5b09e060cd3b4f755610986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:00:cb:93:1b:63:66:c6:5d:36:07:54:f2: 71:52:02:66:d1:dc:99:29:a4:b2:42:f2:ae:bf:87: 18:28:8a:8e:79:76:67:83:2b:73:17:0f:75:c5:41: c3:3c:f4:f3:d8:b1:bb:db:c6:47:c9:aa:65:0d:47: 16:c7:29:cd:53:fd:98:d9:8e:3a:52:65:b4:1a:b2: 36:95:8c:ae:2c:0b:e2:52:81:0f:6d:0f:b0:ff:ec: 47:ed:d1:d5:78:21:1f:04:e5:ac:d7:bd:50:d6:0e: 09:43:63:32:bd:eb:03:67:cb:05:d9:08:25:bd:10: d2:26:9b:ba:93:fe:0c:8a:d3:f5:34:a0:69:07:1e: 8e:43:ff:38:b5:29:88:ea:98:b1:f1:cf:67:70:93: 71:28:eb:28:83:6c:f7:72:28:3f:1c:7e:bd:cf:9e: 0b:6a:d9:41:2a:45:e4:b8:62:71:32:29:7a:68:36: 6a:62:31:0a:36:86:c6:fd:16:a5:eb:97:a7:0d:da: 3b:23:27:51:dc:eb:c2:7d:f8:e3:dc:75:0f:b3:f2: 42:9e:e0:0c:6a:48:38:de:8b:4d:59:00:b2:a2:60: 19:99:16:22:86:72:77:16:cc:79:7f:75:12:2b:a1: 91:76:c5:a1:a7:6d:ab:60:99:52:f5:07:16:03:86: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:40:0F:42:7F:17:1C:20:E5:B0:9E:06:0C:D3:B4:F7:55:61:09:86 X509v3 Authority Key Identifier: keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f7:95:81:fa:e8:e9:3a:90:5a:85:29:6d:b9:f0:ff:43:7d: 38:1f:09:1a:33:de:0f:02:73:7d:e9:98:40:b6:4d:57:26:5f: ab:42:a9:41:d9:1f:42:2f:9a:e7:4c:3a:23:6f:b9:74:b0:dd: f1:34:d1:f4:1d:20:02:76:a6:75:ff:15:72:c8:ac:61:7b:2f: 3b:bb:0c:0e:b1:32:96:7f:5f:bb:14:25:08:5b:f2:6f:cc:67: 3f:90:03:f7:84:bd:5a:08:4d:76:9b:fe:c7:c0:42:16:c3:9e: 94:d5:f0:62:6e:59:6d:17:4d:2b:bf:41:63:eb:54:8f:08:35: fe:8a:47:30:72:81:26:67:cd:d1:f0:b6:47:3b:15:e7:60:98: 48:de:9c:2f:5f:e5:c2:a0:2e:1f:22:ff:0e:2d:e2:c4:90:1d: 45:3d:38:22:27:ab:e0:1b:71:50:40:d4:57:e6:45:b2:ff:54: f7:69:5f:ad:ba:69:79:25:a4:df:a6:e9:65:e0:bf:80:6f:f0: 4b:d8:1f:42:c0:4c:4f:a9:20:f2:2a:2a:55:47:de:86:eb:1f: 2c:41:b8:7b:57:44:50:a1:19:68:fb:bd:61:91:c1:b1:85:60: 26:bd:ab:e8:7b:75:45:19:bf:74:a3:f0:78:aa:7e:0a:d4:6f: d2:74:66:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2vicRxytV+nDF59Js8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3 MmVkZGQwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EygxMDQwMGY0MjdmMTcxYzIwZTViMDllMDYwY2QzYjRmNzU1NjEwOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3AAy5MbY2bGXTYHVPJxUgJm0dyZ KaSyQvKuv4cYKIqOeXZngytzFw91xUHDPPTz2LG728ZHyaplDUcWxynNU/2Y2Y46 UmW0GrI2lYyuLAviUoEPbQ+w/+xH7dHVeCEfBOWs171Q1g4JQ2MyvesDZ8sF2Qgl vRDSJpu6k/4MitP1NKBpBx6OQ/84tSmI6pix8c9ncJNxKOsog2z3cig/HH69z54L atlBKkXkuGJxMil6aDZqYjEKNobG/Ral65enDdo7IydR3OvCffjj3HUPs/JCnuAM akg43otNWQCyomAZmRYihnJ3Fsx5f3USK6GRdsWhp22rYJlS9QcWA4YBvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBAD0J/Fxwg5bCeBgzTtPdVYQmGMB8GA1UdIwQY MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct ZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5 LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPeVgfro 6TqQWoUpbbnw/0N9OB8JGjPeDwJzfemYQLZNVyZfq0KpQdkfQi+a50w6I2+5dLDd 8TTR9B0gAnamdf8VcsisYXsvO7sMDrEyln9fuxQlCFvyb8xnP5AD94S9WghNdpv+ x8BCFsOelNXwYm5ZbRdNK79BY+tUjwg1/opHMHKBJmfN0fC2RzsV52CYSN6cL1/l wqAuHyL/Di3ixJAdRT04Iier4BtxUEDUV+ZFsv9U92lfrbppeSWk36bpZeC/gG/w S9gfQsBMT6kg8ioqVUfehusfLEG4e1dEUKEZaPu9YZHBsYVgJr2r6Ht1RRm/dKPw eKp+CtRv0nRmpg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:50 2025 by rpki-client