This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json) Hash identifier: RuXERD/MG+oCmpwnDzi3wtrjm21jcfrHw6QDxJfzvuY= Subject key identifier: 22:75:6B:25:09:D0:D6:5C:FD:54:8F:E6:16:AE:B2:C0:39:00:5A:65 Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 Certificate issuer: /CN=52eff385d4b48215d805b588a2705829d4621171 Certificate serial: 019AF31CCD17980BAD1A3D145F934A86B928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft Manifest number: 0B0B Signing time: Sat 06 Dec 2025 10:02:22 +0000 Manifest this update: Sat 06 Dec 2025 10:02:22 +0000 Manifest next update: Sun 07 Dec 2025 10:02:22 +0000 Files and hashes: 1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: yEpPIPieu0/J+3IzjOlQrb7qV+2surTNlpBtqharWY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cd:17:98:0b:ad:1a:3d:14:5f:93:4a:86:b9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52eff385d4b48215d805b588a2705829d4621171 Validity Not Before: Dec 6 10:02:22 2025 GMT Not After : Dec 7 10:02:22 2025 GMT Subject: CN=22756b2509d0d65cfd548fe616aeb2c039005a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:03:2d:57:20:2b:20:51:b8:c6:54:c8:d0: 9c:b8:e3:d4:b4:d7:c6:02:7f:1c:30:72:73:98:77: 80:46:c1:42:5f:b7:ed:61:57:da:50:1d:09:c8:6a: c9:f8:c6:26:90:80:82:ad:82:78:de:18:9b:d8:30: 0a:7c:ab:7e:0e:dc:55:7b:4d:82:66:6c:8e:e7:7d: 05:71:f0:c9:af:34:3a:90:88:2d:63:9c:7a:e3:78: 10:09:51:7c:2d:e4:be:05:b7:8d:29:44:a6:79:c6: 98:b0:14:19:62:88:3c:24:65:e4:44:d7:6d:44:ab: 2c:fc:f2:4e:97:bf:3b:55:7e:79:18:8e:d4:57:3e: 0e:77:b8:bb:1f:b9:15:99:e6:20:84:d2:54:0e:8e: 1c:6e:41:a4:dc:09:75:ac:83:a9:d5:78:10:d0:83: 39:d3:10:5c:ca:a2:67:4e:08:f2:32:69:33:96:48: 62:67:73:47:2b:e1:c3:ec:ac:ed:87:a7:ac:b8:9b: a1:de:23:20:5e:49:a1:fc:d7:c6:b5:27:ef:01:0f: 8c:e3:e5:19:cb:d7:cf:f3:5a:81:ee:ee:0b:a3:47: 9f:e2:65:28:a4:18:6b:c0:cf:f5:00:56:de:3c:19: ed:c5:12:3d:bf:39:22:70:4d:5c:2d:0d:50:b3:6d: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:75:6B:25:09:D0:D6:5C:FD:54:8F:E6:16:AE:B2:C0:39:00:5A:65 X509v3 Authority Key Identifier: keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ad:66:d0:d5:c7:11:a1:76:4e:ca:b8:98:53:46:95:f8:f0: 07:17:f7:4d:8f:ed:2f:82:aa:58:90:d9:e1:4e:41:98:4a:6f: 2f:94:31:68:5f:19:fc:9e:60:bf:39:b6:85:93:4c:90:a1:94: 84:35:bf:2e:80:5d:f4:c5:24:9b:51:d1:80:04:23:90:b9:62: bd:d1:79:8d:d2:26:92:c9:e3:81:06:78:f6:ba:3d:e6:60:39: 9b:ea:e0:63:92:c6:ae:d4:c4:a4:f7:85:85:d7:12:86:66:ee: ee:a9:d1:aa:5b:5a:8e:a3:fc:b1:84:55:bb:43:6f:1b:67:e3: e5:83:b4:02:b7:08:63:a6:1f:f7:4a:20:4d:a2:3e:b3:4d:fd: 7b:e2:26:27:38:fd:b7:74:ae:72:b1:d3:61:41:18:5e:fb:16: 2e:d5:d5:72:ca:f5:46:ca:4c:db:e6:8c:11:ae:25:71:e6:7b: 6a:20:fa:0c:21:17:70:f9:a0:13:d0:34:28:c6:cd:e2:11:d4: 46:e8:67:0b:13:c5:1a:a3:57:f7:46:80:8d:6f:0e:7c:a9:5c: 70:32:98:a7:38:97:53:3f:24:61:d6:12:3f:ac:99:4c:16:15: 3d:b7:7e:6e:fa:96:86:21:cd:25:9a:74:6c:63:57:cf:dc:20: 7c:37:35:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHM0XmAutGj0UX5NKhrkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWZmMzg1ZDRiNDgyMTVkODA1YjU4OGEyNzA1ODI5ZDQ2 MjExNzEwHhcNMjUxMjA2MTAwMjIyWhcNMjUxMjA3MTAwMjIyWjAzMTEwLwYDVQQD EygyMjc1NmIyNTA5ZDBkNjVjZmQ1NDhmZTYxNmFlYjJjMDM5MDA1YTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhoDLVcgKyBRuMZUyNCcuOPUtNfG An8cMHJzmHeARsFCX7ftYVfaUB0JyGrJ+MYmkICCrYJ43hib2DAKfKt+DtxVe02C ZmyO530FcfDJrzQ6kIgtY5x643gQCVF8LeS+BbeNKUSmecaYsBQZYog8JGXkRNdt RKss/PJOl787VX55GI7UVz4Od7i7H7kVmeYghNJUDo4cbkGk3Al1rIOp1XgQ0IM5 0xBcyqJnTgjyMmkzlkhiZ3NHK+HD7Kzth6esuJuh3iMgXkmh/NfGtSfvAQ+M4+UZ y9fP81qB7u4Lo0ef4mUopBhrwM/1AFbePBntxRI9vzkicE1cLQ1Qs20k/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJ1ayUJ0NZc/VSP5haussA5AFplMB8GA1UdIwQY MBaAFFLv84XUtIIV2AW1iKJwWCnUYhFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYt MzBkNDc1YmY0ZjYyLzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYtMzBkNDc1YmY0ZjYy LzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo61m0NXH EaF2Tsq4mFNGlfjwBxf3TY/tL4KqWJDZ4U5BmEpvL5QxaF8Z/J5gvzm2hZNMkKGU hDW/LoBd9MUkm1HRgAQjkLlivdF5jdImksnjgQZ49ro95mA5m+rgY5LGrtTEpPeF hdcShmbu7qnRqltajqP8sYRVu0NvG2fj5YO0ArcIY6Yf90ogTaI+s039e+ImJzj9 t3SucrHTYUEYXvsWLtXVcsr1RspM2+aMEa4lceZ7aiD6DCEXcPmgE9A0KMbN4hHU RuhnCxPFGqNX90aAjW8OfKlccDKYpziXUz8kYdYSP6yZTBYVPbd+bvqWhiHNJZp0 bGNXz9wgfDc1/A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:47 2025 by rpki-client