This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json) Hash identifier: KxXU/TmKJeqUx+DNagNYSyo+MmtQIwj2WPYpBThpR54= Subject key identifier: 12:FE:67:8B:87:1F:1A:FC:72:9E:AD:28:35:7E:68:E6:71:4A:F9:E2 Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e Certificate serial: 019AF12EB62B28FA492517B5A31FD8EA4303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft Manifest number: 175B Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: uZ9ViiRWUP3R3wJi9dRtEdnHjwpXt/TYVnVUgj1bzBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b6:2b:28:fa:49:25:17:b5:a3:1f:d8:ea:43:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=12fe678b871f1afc729ead28357e68e6714af9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:67:3f:9f:bd:42:0b:aa:b6:c8:fc:e7:30: 50:ed:70:e7:55:95:cd:4b:81:8d:c9:a1:16:c0:bf: c0:45:e1:b6:f5:5a:2e:e4:34:8a:72:74:c0:6a:68: a4:61:b0:e3:cd:20:cc:bc:ce:33:d9:36:83:ca:85: 83:a2:b8:52:a8:fa:9a:4b:ab:e0:3e:91:f1:02:0c: 54:1a:d4:3d:b0:78:b9:48:c3:75:ba:f8:90:d1:92: 6b:9a:90:e5:b3:f6:5d:f5:36:fb:a9:f0:09:73:71: ca:ee:ac:bc:12:95:0c:04:28:29:d6:4a:42:ff:ea: a3:7e:d1:62:9b:89:b1:4d:16:e4:c6:d6:eb:95:38: 02:a9:11:4a:7d:df:79:33:97:66:8b:03:7b:97:7c: 61:10:ac:1d:36:50:87:7c:45:dd:e1:24:bc:5a:23: fb:f9:d4:f6:ba:5f:20:ae:c9:ac:86:6b:21:32:b1: a1:ce:fc:ca:54:98:1c:2e:4a:10:f2:3d:f8:7b:fa: ef:8b:c8:1f:b4:b6:1e:cd:9e:a1:e7:18:be:1e:01: 95:bf:dd:17:d3:1f:cc:58:eb:88:6c:53:2b:16:5d: 7f:ce:27:49:b8:2a:cf:b4:ff:97:e8:47:3e:d8:4e: 9e:7c:da:c4:e0:c6:d0:a5:e1:72:18:f8:8c:90:db: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:67:8B:87:1F:1A:FC:72:9E:AD:28:35:7E:68:E6:71:4A:F9:E2 X509v3 Authority Key Identifier: keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e0:6a:c9:28:b0:b1:ad:03:51:1e:9e:79:e6:06:41:4e:34: 08:2f:5d:41:00:0f:54:49:01:36:d9:1d:37:7c:5f:e6:62:4d: 23:0a:41:32:1d:3d:13:d6:8b:48:50:75:2b:57:80:0f:56:4b: c3:fb:fb:e7:a0:61:a0:a7:7a:af:06:5b:ce:86:4f:b4:bf:fa: 69:0a:a2:e4:cd:fa:80:de:0a:bd:58:a0:36:7b:05:b8:88:bd: 1e:5b:ac:a3:21:c1:13:6a:85:8b:37:43:93:20:ad:c0:cc:3d: 63:a8:96:36:d9:5d:86:4c:a8:53:9b:ca:b3:e7:9a:1a:a2:59: 55:d1:f6:9b:c5:c4:41:c3:d7:5d:66:fd:17:67:e4:a2:41:4e: c9:ef:9f:06:dc:5f:4c:11:16:b6:ce:35:2d:00:c4:04:d6:57: 34:28:98:97:c0:6b:ec:f8:52:2b:74:5d:b0:6c:43:e9:3a:ff: 8b:6d:88:05:e4:b5:6d:84:99:27:a6:67:68:c2:e6:01:35:b2: 84:ab:b5:d3:cc:dc:bf:fa:1a:17:6e:18:e1:bd:9b:42:47:f4: 0f:87:c9:11:94:ea:44:c7:1f:5f:6c:b6:3e:b8:c0:6c:2a:85: 63:f1:56:2f:c3:b6:8c:e4:ce:00:dc:d4:e0:09:d2:4e:44:4e: 7e:38:69:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrYrKPpJJRe1ox/Y6kMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOTg1NjdhMDM5ZTVjY2UyM2VlOTM3NDA5NmVlZDU3YmJi YTI5OGUwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EygxMmZlNjc4Yjg3MWYxYWZjNzI5ZWFkMjgzNTdlNjhlNjcxNGFmOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye1nP5+9Qguqtsj85zBQ7XDnVZXN S4GNyaEWwL/AReG29Vou5DSKcnTAamikYbDjzSDMvM4z2TaDyoWDorhSqPqaS6vg PpHxAgxUGtQ9sHi5SMN1uviQ0ZJrmpDls/Zd9Tb7qfAJc3HK7qy8EpUMBCgp1kpC /+qjftFim4mxTRbkxtbrlTgCqRFKfd95M5dmiwN7l3xhEKwdNlCHfEXd4SS8WiP7 +dT2ul8grsmshmshMrGhzvzKVJgcLkoQ8j34e/rvi8gftLYezZ6h5xi+HgGVv90X 0x/MWOuIbFMrFl1/zidJuCrPtP+X6Ec+2E6efNrE4MbQpeFyGPiMkNs9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL+Z4uHHxr8cp6tKDV+aOZxSvniMB8GA1UdIwQY MBaAFFGYVnoDnlzOI+6TdAlu7Ve7uimOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQt ODhhYTgxNDg2NzgzLzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQtODhhYTgxNDg2Nzgz LzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+BqySiw sa0DUR6eeeYGQU40CC9dQQAPVEkBNtkdN3xf5mJNIwpBMh09E9aLSFB1K1eAD1ZL w/v756BhoKd6rwZbzoZPtL/6aQqi5M36gN4KvVigNnsFuIi9HlusoyHBE2qFizdD kyCtwMw9Y6iWNtldhkyoU5vKs+eaGqJZVdH2m8XEQcPXXWb9F2fkokFOye+fBtxf TBEWts41LQDEBNZXNCiYl8Br7PhSK3RdsGxD6Tr/i22IBeS1bYSZJ6ZnaMLmATWy hKu108zcv/oaF24Y4b2bQkf0D4fJEZTqRMcfX2y2PrjAbCqFY/FWL8O2jOTOANzU 4AnSTkROfjhpVw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:25 2025 by rpki-client