This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json) Hash identifier: cj+mlkJ9PnXKGdW2DUW3/5j6ve11rP1vwUfd/py3f5k= Subject key identifier: DD:3D:7B:65:2A:75:64:34:E6:49:C2:13:69:85:55:0D:49:4E:5C:D4 Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7 Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7 Certificate serial: 019AF31BD15103E5728F46D72F7E26DCAB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft Manifest number: 0CF6 Signing time: Sat 06 Dec 2025 10:01:17 +0000 Manifest this update: Sat 06 Dec 2025 10:01:17 +0000 Manifest next update: Sun 07 Dec 2025 10:01:17 +0000 Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: y0jIXj4UI9+VMgMTG0KaYFXs28xiQbMsSixszqujhkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d1:51:03:e5:72:8f:46:d7:2f:7e:26:dc:ab:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7 Validity Not Before: Dec 6 10:01:17 2025 GMT Not After : Dec 7 10:01:17 2025 GMT Subject: CN=dd3d7b652a756434e649c2136985550d494e5cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:d1:5d:6d:2a:f6:eb:61:25:32:31:19:2f: d5:7d:5a:04:ff:91:cd:43:c3:03:aa:14:65:ea:90: 05:96:52:a8:ae:4c:f2:a4:71:20:df:de:33:19:6c: 31:c2:24:08:ac:cb:b9:23:18:1d:b4:75:5e:0a:f3: 4f:38:7a:22:5a:d9:26:5e:2c:e9:21:20:69:a0:0d: 4f:dd:3f:f5:b5:19:d5:b9:8b:cb:3e:02:24:fc:db: b9:b2:ac:3b:c4:a6:a9:ba:13:3c:41:09:ca:58:e8: 95:79:26:a1:f5:cd:79:3d:1c:b6:67:3a:4b:ea:3e: 39:3c:22:3e:3b:ba:d3:73:e1:fa:a4:9f:e4:ee:5d: 88:53:8c:7c:95:d1:d7:e6:73:9e:4e:26:2b:a7:de: 04:7e:7b:f2:2c:ee:28:a6:da:f1:4b:fa:7e:3a:ef: fb:39:27:df:02:af:17:ce:55:61:ce:e4:54:8a:47: 2c:75:aa:3b:2e:9f:20:b9:ef:04:5e:e7:c5:12:f2: be:c1:ff:b2:45:47:f1:f3:b6:3a:23:62:78:b7:10: 5e:d3:a1:17:35:df:d2:0b:ab:4d:93:39:09:12:50: 46:ba:fd:62:f6:00:7c:da:33:12:db:09:00:f6:c8: 8b:a7:e3:c1:aa:c8:f1:1d:1a:45:24:dd:ff:b9:e9: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3D:7B:65:2A:75:64:34:E6:49:C2:13:69:85:55:0D:49:4E:5C:D4 X509v3 Authority Key Identifier: keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ae:e5:22:db:6b:8f:5b:29:ea:be:33:8b:d2:e5:87:14:ce: 85:5f:95:ca:fa:01:90:e6:66:d3:b0:e6:dd:f3:66:7e:85:c9: ae:23:8b:48:3b:33:a1:1a:a9:cb:37:bb:1b:c8:27:eb:6c:07: e6:9b:4a:f3:96:13:82:36:2a:ee:b6:53:cd:5e:1e:50:8b:e2: 92:c3:20:f7:3a:79:26:91:3d:1f:3d:e4:f2:7b:6d:10:99:ab: 88:61:5a:93:a5:45:98:c8:1e:71:c1:68:50:b3:2d:31:4d:0e: ac:b5:fd:91:68:f9:ff:10:d3:d5:4b:06:7d:b6:8f:53:69:84: 45:5a:94:7d:6b:67:1a:e1:3b:10:32:ff:1c:ff:32:d9:84:f8: 5b:b7:a7:21:1c:30:13:2a:01:b4:46:92:e8:13:c3:77:90:d0: 9f:e4:05:83:55:0f:d3:5d:e2:3a:b1:56:d0:a8:14:a5:fa:35: e6:6a:0a:6d:5a:b7:a1:ab:09:d5:f4:1c:c4:20:cc:b2:2f:4d: fb:b1:78:16:6d:c7:f3:48:f6:15:f7:9d:bb:b5:4f:6b:f5:6b: 73:e6:9c:19:af:c7:22:27:c2:c4:6c:7c:4a:8b:63:cc:62:f4: 9c:97:36:12:44:f2:51:a0:e3:d1:0e:9a:9c:a9:08:87:f9:12: d7:21:71:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9FRA+Vyj0bXL34m3KsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTJiNmE0ZDQ1YWM4YWUxYWVkNTRjNmY1YWM4ZWQ2ZmYz YzFkZDcwHhcNMjUxMjA2MTAwMTE3WhcNMjUxMjA3MTAwMTE3WjAzMTEwLwYDVQQD EyhkZDNkN2I2NTJhNzU2NDM0ZTY0OWMyMTM2OTg1NTUwZDQ5NGU1Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK/RXW0q9uthJTIxGS/VfVoE/5HN Q8MDqhRl6pAFllKorkzypHEg394zGWwxwiQIrMu5IxgdtHVeCvNPOHoiWtkmXizp ISBpoA1P3T/1tRnVuYvLPgIk/Nu5sqw7xKapuhM8QQnKWOiVeSah9c15PRy2ZzpL 6j45PCI+O7rTc+H6pJ/k7l2IU4x8ldHX5nOeTiYrp94EfnvyLO4optrxS/p+Ou/7 OSffAq8XzlVhzuRUikcsdao7Lp8gue8EXufFEvK+wf+yRUfx87Y6I2J4txBe06EX Nd/SC6tNkzkJElBGuv1i9gB82jMS2wkA9siLp+PBqsjxHRpFJN3/uem3kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN09e2UqdWQ05knCE2mFVQ1JTlzUMB8GA1UdIwQY MBaAFLhStqTUWsiuGu1UxvWsjtb/PB3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYt M2M0NmNkNTgwNzg5LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYtM2M0NmNkNTgwNzg5 LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIK7lIttr j1sp6r4zi9LlhxTOhV+VyvoBkOZm07Dm3fNmfoXJriOLSDszoRqpyze7G8gn62wH 5ptK85YTgjYq7rZTzV4eUIviksMg9zp5JpE9Hz3k8nttEJmriGFak6VFmMgeccFo ULMtMU0OrLX9kWj5/xDT1UsGfbaPU2mERVqUfWtnGuE7EDL/HP8y2YT4W7enIRww EyoBtEaS6BPDd5DQn+QFg1UP013iOrFW0KgUpfo15moKbVq3oasJ1fQcxCDMsi9N +7F4Fm3H80j2Ffedu7VPa/Vrc+acGa/HIifCxGx8SotjzGL0nJc2EkTyUaDj0Q6a nKkIh/kS1yFxBA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:44 2025 by rpki-client