This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json) Hash identifier: 9KJt3ynWsb9NU0pc/0SMU/T7xSMy2t3HRsXXZLpWApY= Subject key identifier: 9F:BC:A2:4B:8D:32:93:17:97:46:6F:13:7B:2D:8F:B9:DB:63:AA:7F Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Certificate serial: 019AF1D1979B943C64D728DDDB935B516467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft Manifest number: 033B Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: E+qWvwqXSrYhnVqgHjZZj683lYpfJoudzwnBCP27Kbg=) 2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:97:9b:94:3c:64:d7:28:dd:db:93:5b:51:64:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=9fbca24b8d32931797466f137b2d8fb9db63aa7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:2a:db:65:a5:ea:2e:ea:19:76:75:00:57: 3a:ce:00:ca:73:c6:2b:c0:2e:c3:1e:27:ad:fa:d3: eb:db:ed:67:db:43:85:67:72:05:c0:9f:ab:96:e6: 8b:f5:42:45:be:78:2d:c2:57:f6:68:98:69:b9:60: 87:97:f9:f3:0d:dc:c5:67:ef:50:d0:08:cb:8b:1e: ec:62:bc:c3:ab:2e:aa:36:17:78:7b:19:f1:a0:0d: f9:c8:f8:25:06:51:7f:92:b9:7b:b0:2d:df:6f:e9: dc:81:51:fb:7a:87:9e:39:b0:32:70:a3:34:6e:96: 4b:24:f4:bc:ed:5b:da:f4:d3:69:3f:43:ae:82:f9: 8d:1d:eb:74:a2:03:02:9b:9c:2a:b2:cb:a2:0c:ff: 20:34:69:9c:02:5b:ef:27:85:d3:15:e3:88:b4:57: 72:b6:92:ce:ed:07:e5:49:76:c8:2b:ae:4c:28:8f: f4:fb:40:48:ac:59:7b:d7:a7:8c:6e:19:c1:6e:81: 9c:67:bc:4c:ec:d9:ff:90:25:53:c3:1e:2b:fc:d2: 6f:61:e8:5b:cd:aa:08:3f:77:5a:9b:22:68:e7:bd: 6b:d6:85:86:7c:21:75:f6:88:93:e4:a3:98:4a:0c: 8f:84:14:33:f8:f1:54:8a:c7:12:28:c7:fe:09:ca: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BC:A2:4B:8D:32:93:17:97:46:6F:13:7B:2D:8F:B9:DB:63:AA:7F X509v3 Authority Key Identifier: keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7e:a9:b7:33:ef:36:81:5e:58:21:45:40:aa:74:9a:65:f7: 19:6b:ee:ca:ff:6d:41:25:5b:89:b1:6e:86:bb:cf:85:17:df: 50:fa:f7:ea:b0:65:68:3b:ec:4d:08:ac:bb:4c:b2:f7:b8:2a: b0:91:6c:ef:e0:b7:a6:28:1e:11:53:de:a6:79:57:5e:66:b5: 26:7f:df:95:0b:da:d0:53:46:b9:16:f7:53:73:2f:b4:8d:5b: 66:bc:df:14:e3:65:e5:86:e9:e8:d2:01:04:0a:a8:36:4a:0d: 98:38:e9:32:f8:a3:bd:67:ce:6c:dc:27:cc:cf:2c:0c:4d:fe: 97:4a:6c:be:04:63:8c:08:65:09:85:c4:4d:46:6a:cb:4f:03: d2:f8:85:4b:dd:fc:e1:cb:22:2a:f2:de:81:f0:74:45:64:40: 90:81:12:a7:94:59:02:17:22:0c:4c:5b:f4:19:c0:26:46:c6: 77:a6:6f:0f:3f:45:74:a9:58:4d:0e:f8:14:9e:9e:53:3d:84: bd:d0:ab:87:b7:37:31:5a:67:64:2b:3e:4a:4b:a0:82:19:37: 82:a6:95:f9:cc:d2:48:bf:4d:60:bc:2c:3d:3c:6c:5f:3e:e9: 4e:19:77:df:8a:9e:71:c7:54:62:e4:42:64:31:38:aa:36:8d: ba:79:2e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZeblDxk1yjd25NbUWRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTRjZmU3ZjQ3ZjUyNDY0NTQ1YWRiYjBiYmM0ZDMzNDc4 YWFlYjIwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD Eyg5ZmJjYTI0YjhkMzI5MzE3OTc0NjZmMTM3YjJkOGZiOWRiNjNhYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqUq22Wl6i7qGXZ1AFc6zgDKc8Yr wC7DHiet+tPr2+1n20OFZ3IFwJ+rluaL9UJFvngtwlf2aJhpuWCHl/nzDdzFZ+9Q 0AjLix7sYrzDqy6qNhd4exnxoA35yPglBlF/krl7sC3fb+ncgVH7eoeeObAycKM0 bpZLJPS87Vva9NNpP0OugvmNHet0ogMCm5wqssuiDP8gNGmcAlvvJ4XTFeOItFdy tpLO7QflSXbIK65MKI/0+0BIrFl716eMbhnBboGcZ7xM7Nn/kCVTwx4r/NJvYehb zaoIP3damyJo571r1oWGfCF19oiT5KOYSgyPhBQz+PFUiscSKMf+CcqSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+8okuNMpMXl0ZvE3stj7nbY6p/MB8GA1UdIwQY MBaAFNLkz+f0f1JGRUWtuwu8TTNHiq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMt OGYyMzFmNzMxN2I5LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMtOGYyMzFmNzMxN2I5 LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGn6ptzPv NoFeWCFFQKp0mmX3GWvuyv9tQSVbibFuhrvPhRffUPr36rBlaDvsTQisu0yy97gq sJFs7+C3pigeEVPepnlXXma1Jn/flQva0FNGuRb3U3MvtI1bZrzfFONl5Ybp6NIB BAqoNkoNmDjpMvijvWfObNwnzM8sDE3+l0psvgRjjAhlCYXETUZqy08D0viFS938 4csiKvLegfB0RWRAkIESp5RZAhciDExb9BnAJkbGd6ZvDz9FdKlYTQ74FJ6eUz2E vdCrh7c3MVpnZCs+Skugghk3gqaV+czSSL9NYLwsPTxsXz7pThl334qeccdUYuRC ZDE4qjaNunkuqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:37 2025 by rpki-client