This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft File: uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json) Hash identifier: NmT41LA5x2c6NJbOA1HI7Gr0H8GDzUEQebZggFUNyMw= Subject key identifier: D9:70:B7:5F:E1:5D:43:D6:81:2C:A2:00:40:DD:C7:D9:74:83:1A:99 Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C Certificate issuer: /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c Certificate serial: 019AF19B93DFD23C28BA4AB0041EFFA46DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=) 2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: YTdVFZmhqlMatH8/gTvQa4W+bAhxVZ2ob8jp61XweEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:93:df:d2:3c:28:ba:4a:b0:04:1e:ff:a4:6d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=d970b75fe15d43d6812ca20040ddc7d974831a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:f5:85:7d:f9:78:fa:95:1a:ef:62:67:4f: 5f:14:d3:32:45:71:03:7b:97:1f:34:05:a7:4e:15: f7:91:7e:5c:6a:2c:89:c1:d9:3f:db:12:fa:31:dc: d0:ad:93:87:32:f5:60:9e:8e:d5:70:a5:78:65:ca: e5:8f:de:f1:03:99:34:8d:8d:fc:37:1f:07:7b:5e: 6f:56:a5:b1:97:27:32:ec:80:42:ff:83:fd:46:55: 9e:ce:cf:f2:9b:1c:a4:76:2b:e2:10:2c:b8:7f:ef: b0:74:55:59:8a:d1:bc:2c:b2:2a:15:a1:e5:c5:ad: 59:4b:46:6e:d2:97:99:15:d2:ec:67:c9:30:6c:2f: 03:6a:ba:da:3d:91:82:f9:06:18:35:36:bc:53:82: 82:a8:d0:56:db:67:e5:93:92:ab:8e:90:75:f6:bb: ac:19:d3:ba:1c:9d:8d:91:a9:c7:d1:3f:58:3a:3d: 89:b7:3b:41:ae:6b:38:82:d8:37:e7:b8:9f:be:bd: fc:1d:8d:57:9e:6c:92:32:21:7d:1d:9d:a5:18:11: 97:0a:9e:9d:8e:f9:ce:4e:af:13:5a:c0:87:a9:fe: 7c:06:d2:e1:ba:e6:bb:ac:97:7b:db:eb:ee:64:d8: 0e:24:79:b4:cf:19:88:f6:2d:d4:9b:a6:54:60:e9: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:70:B7:5F:E1:5D:43:D6:81:2C:A2:00:40:DD:C7:D9:74:83:1A:99 X509v3 Authority Key Identifier: keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:05:47:88:5b:85:b5:a5:87:91:7c:2e:dc:f7:29:1b:55:8f: 58:05:c4:81:fb:be:57:11:51:fc:a9:ef:0f:36:e0:2f:f9:c3: 11:e4:f3:c2:e1:40:b4:29:97:9d:22:7d:0c:f3:b4:00:94:8a: 4e:1b:7f:90:61:dd:1c:47:80:47:7e:ec:8a:4b:a0:d6:84:8d: 0d:59:c2:bd:d7:5a:c4:cb:8f:a0:55:0c:53:9f:28:98:9c:1a: 82:e1:9c:08:9d:a7:20:bb:5c:ed:cf:d5:06:33:a0:b7:9c:18: 37:49:fb:d8:2f:2b:76:83:11:26:66:54:9a:79:f3:03:7b:d8: 7f:6f:5b:2b:e0:6e:bf:87:4d:ae:d6:5d:52:3d:c9:ed:67:f9: 88:a0:1f:a8:b6:5c:71:06:2a:c1:b6:1a:50:25:fc:32:fc:79: 8f:71:b5:d6:e8:d6:50:a5:cd:13:ce:58:47:83:7b:6e:0b:c4: c9:2d:b8:13:ee:f4:d9:56:c0:b1:d6:79:23:47:48:5d:61:01: 19:57:93:a1:96:cc:fd:ca:9c:8d:a2:4a:ee:a5:f1:81:9e:b6: 17:74:db:33:e5:07:77:31:0a:35:67:ef:e0:60:dd:52:9d:7b: c3:38:df:90:56:e2:27:5e:26:bc:e7:50:46:62:91:65:74:8e: d5:cd:7a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5Pf0jwoukqwBB7/pG3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDYzM2ZlNzlhNjI5NjEwOWZkYmY2NDc1ZDRjMmE2NWUy ZDRmMWMwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD EyhkOTcwYjc1ZmUxNWQ0M2Q2ODEyY2EyMDA0MGRkYzdkOTc0ODMxYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJT1hX35ePqVGu9iZ09fFNMyRXED e5cfNAWnThX3kX5caiyJwdk/2xL6MdzQrZOHMvVgno7VcKV4Zcrlj97xA5k0jY38 Nx8He15vVqWxlycy7IBC/4P9RlWezs/ymxykdiviECy4f++wdFVZitG8LLIqFaHl xa1ZS0Zu0peZFdLsZ8kwbC8DarraPZGC+QYYNTa8U4KCqNBW22flk5KrjpB19rus GdO6HJ2NkanH0T9YOj2JtztBrms4gtg357ifvr38HY1XnmySMiF9HZ2lGBGXCp6d jvnOTq8TWsCHqf58BtLhuua7rJd72+vuZNgOJHm0zxmI9i3Um6ZUYOmuRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlwt1/hXUPWgSyiAEDdx9l0gxqZMB8GA1UdIwQY MBaAFLgGM/55pilhCf2/ZHXUwqZeLU8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTkt MmEwNmVkMTA0NTUzLzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTktMmEwNmVkMTA0NTUz LzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwVHiFuF taWHkXwu3PcpG1WPWAXEgfu+VxFR/KnvDzbgL/nDEeTzwuFAtCmXnSJ9DPO0AJSK Tht/kGHdHEeAR37sikug1oSNDVnCvddaxMuPoFUMU58omJwaguGcCJ2nILtc7c/V BjOgt5wYN0n72C8rdoMRJmZUmnnzA3vYf29bK+Buv4dNrtZdUj3J7Wf5iKAfqLZc cQYqwbYaUCX8Mvx5j3G11ujWUKXNE85YR4N7bgvEyS24E+702VbAsdZ5I0dIXWEB GVeToZbM/cqcjaJK7qXxgZ62F3TbM+UHdzEKNWfv4GDdUp17wzjfkFbiJ14mvOdQ RmKRZXSO1c16XA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:17 2025 by rpki-client