This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json) Hash identifier: 62rIAn3DPXz4M5iN/ywJoLcPXnAYXSnot2OEXIyWHJI= Subject key identifier: C4:20:A9:29:9A:63:C7:5D:86:8B:C7:6C:99:A8:C4:08:89:4B:69:68 Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Certificate serial: 019B2BC21742D525F973B0785B1ABC77D5D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft Manifest number: 0359 Signing time: Wed 17 Dec 2025 10:01:38 +0000 Manifest this update: Wed 17 Dec 2025 10:01:38 +0000 Manifest next update: Thu 18 Dec 2025 10:01:38 +0000 Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: qbyWylwNqKmMiHSqW55T6QYuuZw5w0ws3In4vRHS8OU=) 2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:17:42:d5:25:f9:73:b0:78:5b:1a:bc:77:d5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Validity Not Before: Dec 17 10:01:38 2025 GMT Not After : Dec 18 10:01:38 2025 GMT Subject: CN=c420a9299a63c75d868bc76c99a8c408894b6968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:cf:96:54:06:50:f2:59:53:41:eb:f5:24: 35:ae:cb:90:06:50:c2:3b:48:7a:2d:37:f6:8c:b5: 05:1f:b4:c5:44:95:8d:c4:6a:99:5c:ff:04:ba:06: 3b:f0:eb:18:05:48:08:27:df:c2:a8:43:f3:57:17: f1:60:32:da:50:e3:28:aa:67:da:f8:00:42:8f:8b: 82:ed:a6:83:e8:b4:4b:60:08:fa:08:e6:f9:3a:6e: ff:fb:98:fb:93:b5:90:51:f1:f8:ec:0e:41:1f:08: 4b:72:da:38:1e:c6:ff:b2:fe:16:8e:ab:e8:f3:a1: df:33:cb:60:66:d2:03:1a:c0:b4:a9:3d:75:fd:35: 8e:90:97:61:16:74:ca:bd:47:ff:b9:5f:18:53:5d: 2f:e2:75:7f:8e:16:4c:83:ac:c0:90:7b:0f:c1:3e: c1:75:9e:dc:ec:6e:cd:37:6e:d1:20:b2:c7:7f:7b: 0f:be:eb:58:fb:3f:ba:dc:ec:af:be:3d:f0:4e:06: 61:05:67:7b:38:08:62:d0:81:a1:bd:ab:22:56:6b: 4b:cf:4b:53:39:8c:73:20:da:f1:91:20:1f:d2:99: 16:62:92:98:4b:47:33:77:c0:91:64:a6:7d:e6:37: 5c:af:66:77:9a:21:96:b9:2e:42:6c:9f:c7:8b:fb: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:20:A9:29:9A:63:C7:5D:86:8B:C7:6C:99:A8:C4:08:89:4B:69:68 X509v3 Authority Key Identifier: keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6c:0a:17:f0:00:42:6a:0d:49:b5:dc:33:9b:62:6f:68:6e: 2d:26:34:87:53:d4:bd:98:9d:20:26:ea:39:4b:79:52:5c:b2: 8f:bb:fb:4d:63:e5:06:8d:a3:80:11:f9:43:7d:3e:4d:e0:d0: 60:fa:0b:83:7e:05:53:81:8c:f3:37:32:45:46:70:20:32:f7: 2d:25:14:67:db:d2:7d:1e:5f:d2:84:64:9a:03:97:e2:ff:d0: 00:b5:f3:64:64:8e:66:bc:b9:14:6f:7e:e6:98:4b:da:ca:f3: c0:86:d7:f0:d1:d2:ec:fb:45:bb:04:a4:f1:6f:32:c8:66:0a: ff:c3:d6:90:89:7e:73:4a:f4:ee:27:1d:fd:54:1a:87:66:aa: aa:11:a9:3c:50:e4:cb:a1:04:72:4a:46:bf:f2:48:fb:21:ca: 08:77:7b:c2:85:63:e6:80:01:49:7f:be:70:82:b0:3d:f9:74: f8:3a:cf:6c:31:ba:5e:6e:29:b3:0a:08:55:f3:44:be:de:24: 68:01:91:00:1d:0e:5a:33:cb:4a:ba:0c:e4:bf:4a:59:c9:71: ba:37:81:09:69:fc:d8:ac:26:2b:22:c2:04:e3:a6:ec:25:ae: 3b:1d:b0:20:6c:5a:11:a3:60:5d:96:ce:f6:eb:8c:ed:ef:f7: ca:39:af:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwhdC1SX5c7B4Wxq8d9XUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTRjZmU3ZjQ3ZjUyNDY0NTQ1YWRiYjBiYmM0ZDMzNDc4 YWFlYjIwHhcNMjUxMjE3MTAwMTM4WhcNMjUxMjE4MTAwMTM4WjAzMTEwLwYDVQQD EyhjNDIwYTkyOTlhNjNjNzVkODY4YmM3NmM5OWE4YzQwODg5NGI2OTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYfPllQGUPJZU0Hr9SQ1rsuQBlDC O0h6LTf2jLUFH7TFRJWNxGqZXP8EugY78OsYBUgIJ9/CqEPzVxfxYDLaUOMoqmfa +ABCj4uC7aaD6LRLYAj6COb5Om7/+5j7k7WQUfH47A5BHwhLcto4Hsb/sv4Wjqvo 86HfM8tgZtIDGsC0qT11/TWOkJdhFnTKvUf/uV8YU10v4nV/jhZMg6zAkHsPwT7B dZ7c7G7NN27RILLHf3sPvutY+z+63Oyvvj3wTgZhBWd7OAhi0IGhvasiVmtLz0tT OYxzINrxkSAf0pkWYpKYS0czd8CRZKZ95jdcr2Z3miGWuS5CbJ/Hi/sxDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQgqSmaY8ddhovHbJmoxAiJS2loMB8GA1UdIwQY MBaAFNLkz+f0f1JGRUWtuwu8TTNHiq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMt OGYyMzFmNzMxN2I5LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMtOGYyMzFmNzMxN2I5 LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGwKF/AA QmoNSbXcM5tib2huLSY0h1PUvZidICbqOUt5Ulyyj7v7TWPlBo2jgBH5Q30+TeDQ YPoLg34FU4GM8zcyRUZwIDL3LSUUZ9vSfR5f0oRkmgOX4v/QALXzZGSOZry5FG9+ 5phL2srzwIbX8NHS7PtFuwSk8W8yyGYK/8PWkIl+c0r07icd/VQah2aqqhGpPFDk y6EEckpGv/JI+yHKCHd7woVj5oABSX++cIKwPfl0+DrPbDG6Xm4pswoIVfNEvt4k aAGRAB0OWjPLSroM5L9KWclxujeBCWn82KwmKyLCBOOm7CWuOx2wIGxaEaNgXZbO 9uuM7e/3yjmvAA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:19:41 2025 by rpki-client