This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json) Hash identifier: O3yx7Jkh/H0jdlzHuIz/xowIDDRXm5QIoOmqpho7m/k= Subject key identifier: 42:D7:00:88:17:CB:55:79:E3:9F:5A:B3:BC:E0:4A:6A:76:42:2A:2E Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 Certificate issuer: /CN=52eff385d4b48215d805b588a2705829d4621171 Certificate serial: 019B2D0C0B6AB1E3B0D44F8DC3E71DA58843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft Manifest number: 0B29 Signing time: Wed 17 Dec 2025 16:02:02 +0000 Manifest this update: Wed 17 Dec 2025 16:02:02 +0000 Manifest next update: Thu 18 Dec 2025 16:02:02 +0000 Files and hashes: 1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: QQ7y3mDhTWlbRLpfwUzn9Erf/Oq+mYDDUEYOv+Ot9gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:0b:6a:b1:e3:b0:d4:4f:8d:c3:e7:1d:a5:88:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52eff385d4b48215d805b588a2705829d4621171 Validity Not Before: Dec 17 16:02:02 2025 GMT Not After : Dec 18 16:02:02 2025 GMT Subject: CN=42d7008817cb5579e39f5ab3bce04a6a76422a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:25:60:93:65:e1:5b:aa:b4:8b:1b:dc:f6:3c: 27:85:d2:e4:0f:54:e3:db:5a:8a:fb:9a:e8:e0:36: dc:60:b9:60:21:9f:af:70:26:f7:9e:3f:31:9f:f7: e7:34:3e:86:43:a7:bb:0f:3b:0c:a7:4d:d1:0d:59: 11:17:23:4a:84:27:0c:bc:9b:b4:11:b4:43:63:a5: 36:7a:1d:ba:0e:a1:60:83:91:36:b6:da:b2:0b:78: 88:fd:48:46:b9:9a:2e:b4:25:b2:76:36:df:83:af: fd:04:d9:7d:a7:27:8f:13:dd:a3:aa:87:8c:35:4a: 19:6e:52:58:fe:8f:8f:a5:4f:5f:d2:78:6d:2b:b8: 62:7f:05:09:78:6c:98:12:64:cd:30:3a:6c:99:72: a1:7d:84:42:08:6c:0c:0c:a9:d9:f7:c8:f0:6e:59: 92:64:16:89:18:33:b0:99:84:25:2e:f8:80:87:c0: 14:9b:74:ab:21:26:00:5e:63:e4:23:c2:7c:e5:f5: c7:fe:d0:ac:35:27:f1:be:40:9d:98:3c:f8:5d:7f: 7b:18:9e:3a:a5:f7:a7:9a:09:23:b9:f2:52:e0:f0: 45:3b:89:7e:4f:af:1c:25:b9:40:0b:14:57:e6:74: 48:db:53:75:a2:9a:ab:10:6c:86:11:1a:14:ce:1e: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:00:88:17:CB:55:79:E3:9F:5A:B3:BC:E0:4A:6A:76:42:2A:2E X509v3 Authority Key Identifier: keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7f:1d:97:87:f3:bc:b7:44:0f:ed:a7:60:51:80:77:3e:98: ed:67:98:2b:83:3a:1c:ee:0f:24:c0:89:e3:7b:3a:45:e8:bd: 98:78:1d:20:54:ec:c1:12:61:4f:5d:90:31:8f:74:40:fa:8b: 82:1e:06:3b:ef:18:0b:ac:6c:87:70:32:be:57:e1:05:f0:75: 86:eb:86:6b:eb:fb:ff:47:9d:d3:6c:50:69:40:0e:e2:aa:a0: 79:c2:3f:53:5a:7d:64:48:12:7b:2f:7c:30:13:23:86:41:f1: 2c:95:56:dd:72:21:c2:0a:6c:51:49:5d:a4:08:e8:e2:3d:75: 66:50:1e:aa:78:97:c9:2f:6b:b4:7b:05:9c:7f:b8:00:f0:59: 25:87:09:b5:b4:c3:4f:14:4d:7d:ee:21:62:15:bc:66:93:9f: 88:32:64:42:8c:54:f1:d6:1f:e6:22:b5:2e:f9:13:7e:54:ef: 0a:44:52:28:05:b0:76:c9:30:88:38:11:dc:3c:ba:2a:d4:f9: f9:72:b1:df:95:8a:24:53:68:f4:8f:84:06:89:f2:ea:e3:6f: 4b:0d:97:f6:0b:0d:87:74:29:77:32:1d:a6:d6:8f:e4:f8:be: bb:b4:f3:ca:c0:19:94:5f:ad:23:8c:fa:24:15:6c:4b:f4:4b: 92:0e:ef:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDAtqseOw1E+Nw+cdpYhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWZmMzg1ZDRiNDgyMTVkODA1YjU4OGEyNzA1ODI5ZDQ2 MjExNzEwHhcNMjUxMjE3MTYwMjAyWhcNMjUxMjE4MTYwMjAyWjAzMTEwLwYDVQQD Eyg0MmQ3MDA4ODE3Y2I1NTc5ZTM5ZjVhYjNiY2UwNGE2YTc2NDIyYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyVgk2XhW6q0ixvc9jwnhdLkD1Tj 21qK+5ro4DbcYLlgIZ+vcCb3nj8xn/fnND6GQ6e7DzsMp03RDVkRFyNKhCcMvJu0 EbRDY6U2eh26DqFgg5E2ttqyC3iI/UhGuZoutCWydjbfg6/9BNl9pyePE92jqoeM NUoZblJY/o+PpU9f0nhtK7hifwUJeGyYEmTNMDpsmXKhfYRCCGwMDKnZ98jwblmS ZBaJGDOwmYQlLviAh8AUm3SrISYAXmPkI8J85fXH/tCsNSfxvkCdmDz4XX97GJ46 pfenmgkjufJS4PBFO4l+T68cJblACxRX5nRI21N1opqrEGyGERoUzh7UoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELXAIgXy1V5459as7zgSmp2QiouMB8GA1UdIwQY MBaAFFLv84XUtIIV2AW1iKJwWCnUYhFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYt MzBkNDc1YmY0ZjYyLzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYtMzBkNDc1YmY0ZjYy LzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG38dl4fz vLdED+2nYFGAdz6Y7WeYK4M6HO4PJMCJ43s6Rei9mHgdIFTswRJhT12QMY90QPqL gh4GO+8YC6xsh3AyvlfhBfB1huuGa+v7/0ed02xQaUAO4qqgecI/U1p9ZEgSey98 MBMjhkHxLJVW3XIhwgpsUUldpAjo4j11ZlAeqniXyS9rtHsFnH+4APBZJYcJtbTD TxRNfe4hYhW8ZpOfiDJkQoxU8dYf5iK1LvkTflTvCkRSKAWwdskwiDgR3Dy6KtT5 +XKx35WKJFNo9I+EBony6uNvSw2X9gsNh3QpdzIdptaP5Pi+u7TzysAZlF+tI4z6 JBVsS/RLkg7vxQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:40 2025 by rpki-client