This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json) Hash identifier: 95z99gEutLR+Rb2IelSbkJq+upCkTLE78aRHMfhqBzA= Subject key identifier: 63:E1:24:91:A3:E1:C0:2B:BA:26:02:87:ED:CC:73:71:C8:54:47:8B Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7 Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7 Certificate serial: 019B217541A4284A7BC34A75983B13792FF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft Manifest number: 0D0E Signing time: Mon 15 Dec 2025 10:01:31 +0000 Manifest this update: Mon 15 Dec 2025 10:01:31 +0000 Manifest next update: Tue 16 Dec 2025 10:01:31 +0000 Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: Mn+M7X7G9HUHL4cvjJj9cH9zwvztK6bPsw9QzA5piKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:41:a4:28:4a:7b:c3:4a:75:98:3b:13:79:2f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7 Validity Not Before: Dec 15 10:01:31 2025 GMT Not After : Dec 16 10:01:31 2025 GMT Subject: CN=63e12491a3e1c02bba260287edcc7371c854478b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:29:7c:3d:6a:a1:37:c7:4d:72:ed:84:09: f8:0a:21:9e:23:2c:76:e5:57:4d:50:a6:e5:1b:87: f9:3d:88:65:c7:af:3d:d1:ff:9b:c8:d6:ae:b6:be: 09:71:4d:ce:16:e8:6b:00:79:3f:a5:09:19:b5:fe: 28:dd:ff:92:7a:57:de:73:d2:e6:9a:17:f6:1a:be: 0b:9d:98:7a:d3:63:43:9d:ab:96:0a:fb:62:a1:20: d9:cb:e9:c4:c0:83:ad:78:46:13:77:ec:b5:b7:db: 88:fb:76:97:bc:63:64:7c:37:90:0c:79:21:3f:e8: 34:66:53:ec:32:a7:5c:58:a4:a7:b2:38:96:41:17: 75:b4:d5:a4:30:e5:20:ca:2a:6e:e3:f9:b2:fd:41: 98:9b:95:89:83:59:05:11:1c:91:c5:ee:f1:e1:27: 39:6a:49:c6:d4:85:70:61:a0:5c:53:6a:7d:04:75: 96:c1:bd:5b:e7:d0:fc:e0:6f:92:c7:cc:4b:63:a0: f6:cd:dc:94:75:1e:32:cb:80:07:1f:26:6f:47:57: 47:2e:bc:5f:a8:ed:df:80:be:14:fe:4c:d1:83:6c: e0:d8:5d:41:37:58:73:d5:bd:fa:d9:25:8e:81:63: b1:92:7a:26:e6:e2:08:c1:df:6e:6a:f3:e9:b3:a0: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E1:24:91:A3:E1:C0:2B:BA:26:02:87:ED:CC:73:71:C8:54:47:8B X509v3 Authority Key Identifier: keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:62:18:70:c3:32:e3:fc:0f:97:67:5d:5b:f3:97:84:79:22: 4d:b5:65:40:72:55:58:66:3c:50:72:00:37:4c:3c:df:fb:42: b5:9d:c9:c4:14:14:fd:54:be:30:da:26:24:cf:40:0f:b7:c0: 59:c1:08:ef:18:1b:9e:57:60:8a:76:c3:62:3c:3d:58:16:b4: d6:26:c2:3c:e3:6f:cb:88:b2:cb:11:23:27:3e:e4:63:47:50: e7:1a:5a:9c:b3:71:46:f2:b5:12:dd:bf:2b:30:23:5d:01:0c: a0:66:f6:59:76:bf:e9:e5:c3:d4:c8:5a:26:84:01:77:9b:71: 3a:24:f6:5e:11:4d:9d:f2:25:e6:0a:0e:58:3f:40:06:a3:0d: a6:b9:ae:7f:e1:43:5a:05:e7:83:91:d9:2c:b9:d8:a2:be:7e: 6e:a0:a2:c6:2e:81:a1:98:27:98:70:96:35:17:bc:93:dc:d2: c1:00:f3:13:13:ab:4b:cf:ba:84:bf:4a:b4:8a:00:7a:43:8c: 96:dc:4d:84:df:2e:78:09:0b:8e:b1:4b:73:2f:6c:61:5d:6b: 15:cd:41:a9:0a:85:f0:b5:68:96:97:7c:59:61:32:77:3b:f7: 4b:f8:1d:46:a7:cc:8b:2f:6b:3e:7a:e5:7a:e8:5d:d6:0c:64: 64:2d:85:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdUGkKEp7w0p1mDsTeS/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTJiNmE0ZDQ1YWM4YWUxYWVkNTRjNmY1YWM4ZWQ2ZmYz YzFkZDcwHhcNMjUxMjE1MTAwMTMxWhcNMjUxMjE2MTAwMTMxWjAzMTEwLwYDVQQD Eyg2M2UxMjQ5MWEzZTFjMDJiYmEyNjAyODdlZGNjNzM3MWM4NTQ0NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZkpfD1qoTfHTXLthAn4CiGeIyx2 5VdNUKblG4f5PYhlx6890f+byNautr4JcU3OFuhrAHk/pQkZtf4o3f+Selfec9Lm mhf2Gr4LnZh602NDnauWCvtioSDZy+nEwIOteEYTd+y1t9uI+3aXvGNkfDeQDHkh P+g0ZlPsMqdcWKSnsjiWQRd1tNWkMOUgyipu4/my/UGYm5WJg1kFERyRxe7x4Sc5 aknG1IVwYaBcU2p9BHWWwb1b59D84G+Sx8xLY6D2zdyUdR4yy4AHHyZvR1dHLrxf qO3fgL4U/kzRg2zg2F1BN1hz1b362SWOgWOxknom5uIIwd9uavPps6AEUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPhJJGj4cAruiYCh+3Mc3HIVEeLMB8GA1UdIwQY MBaAFLhStqTUWsiuGu1UxvWsjtb/PB3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYt M2M0NmNkNTgwNzg5LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYtM2M0NmNkNTgwNzg5 LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2IYcMMy 4/wPl2ddW/OXhHkiTbVlQHJVWGY8UHIAN0w83/tCtZ3JxBQU/VS+MNomJM9AD7fA WcEI7xgbnldginbDYjw9WBa01ibCPONvy4iyyxEjJz7kY0dQ5xpanLNxRvK1Et2/ KzAjXQEMoGb2WXa/6eXD1MhaJoQBd5txOiT2XhFNnfIl5goOWD9ABqMNprmuf+FD WgXng5HZLLnYor5+bqCixi6BoZgnmHCWNRe8k9zSwQDzExOrS8+6hL9KtIoAekOM ltxNhN8ueAkLjrFLcy9sYV1rFc1BqQqF8LVolpd8WWEydzv3S/gdRqfMiy9rPnrl euhd1gxkZC2FAw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:15:07 2025 by rpki-client