This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json) Hash identifier: aSEfSJXi0CqHiNrGRyd7tORslFDUsZFy50TZWonUG5o= Subject key identifier: 2F:C7:5B:CB:33:B6:C8:FC:90:9F:91:9B:B6:EE:97:F7:3C:16:6C:DB Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5 Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5 Certificate serial: 019AF31C1951251315B947A7FBBC95A63D18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft Manifest number: 1015 Signing time: Sat 06 Dec 2025 10:01:36 +0000 Manifest this update: Sat 06 Dec 2025 10:01:36 +0000 Manifest next update: Sun 07 Dec 2025 10:01:36 +0000 Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: L6nWHkC+PzCRXgNlw3vArmG8Io4XUDUbqc34QTZwV0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:19:51:25:13:15:b9:47:a7:fb:bc:95:a6:3d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5 Validity Not Before: Dec 6 10:01:36 2025 GMT Not After : Dec 7 10:01:36 2025 GMT Subject: CN=2fc75bcb33b6c8fc909f919bb6ee97f73c166cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:7c:46:71:fc:4b:48:1c:a5:53:61:6f:79: 91:c6:f1:98:e0:f0:bd:41:96:55:77:67:32:3e:01: 92:7a:6f:72:06:73:f9:80:8c:7f:9e:d6:d8:97:6e: ab:ec:da:62:a1:b5:53:5e:94:71:60:98:79:7a:d4: 7b:75:dd:44:fe:e0:e4:6a:ee:9f:16:2a:92:c2:78: 96:4e:af:79:81:de:61:d0:df:29:66:24:b9:a8:df: 01:3a:73:90:0f:cc:aa:32:81:4f:de:5d:b6:cc:8d: 61:95:72:f8:0c:57:64:e6:ce:fa:0b:18:bb:fc:dd: d3:41:8f:e6:b8:31:95:70:67:96:8c:88:15:e6:70: d8:96:81:44:cf:e4:8e:8a:48:65:e7:37:c7:3b:c5: d7:3d:83:d5:4f:61:e6:4e:df:69:6a:92:35:1a:b8: 6a:91:d2:34:65:ac:63:2b:5d:f3:21:be:e7:f1:09: e0:1d:a3:75:ab:5c:16:62:f8:83:52:32:d9:3c:69: 0e:47:94:fe:6d:41:b3:08:44:a6:01:bf:36:b2:fe: 4a:2c:65:79:f5:6c:7b:97:19:18:a5:bb:f2:ef:96: 3d:bb:9e:d7:1f:26:e2:af:ca:e2:89:16:3c:d2:24: 98:13:15:18:52:6b:f9:6e:c4:c5:a9:5f:4a:36:81: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:5B:CB:33:B6:C8:FC:90:9F:91:9B:B6:EE:97:F7:3C:16:6C:DB X509v3 Authority Key Identifier: keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:99:e2:be:ca:08:52:11:f8:49:39:e9:27:6b:b6:34:29:15: 30:5c:ab:5b:f9:70:20:85:aa:7c:6c:a7:41:2b:23:80:96:28: 7a:8e:93:47:bb:b6:ba:7d:2e:fc:6a:5e:19:d4:46:a0:cb:72: 3d:e4:fe:90:8f:aa:60:9b:0b:1e:c4:9d:b8:cf:86:6f:5d:e0: 87:d3:2c:a1:9d:83:6d:50:a1:58:b3:d7:8d:88:b1:cd:a1:d9: 36:2e:80:e2:d7:bb:41:4a:cc:92:fd:13:e7:eb:11:06:ad:fe: d2:c9:f3:b8:20:ef:56:14:fc:75:55:3a:9d:d5:f1:e8:bd:fc: 14:6c:d3:05:75:ca:b4:f4:83:e3:37:ed:5b:7a:b6:b4:95:7a: 12:7d:aa:96:49:c1:60:c2:42:17:90:a1:8d:58:f1:a3:69:ef: 38:9c:bb:7c:44:da:de:9f:95:3e:5a:57:e1:8d:01:b8:19:a4: fa:c0:07:50:96:30:9d:b9:39:e5:5a:7e:79:06:7b:c1:3c:58: 32:dd:44:d0:a8:4c:9e:34:28:a9:87:8f:d8:1a:d9:66:ee:27: c3:b2:1b:4d:a7:a6:7a:6c:a5:40:05:b0:03:4b:56:6d:43:19: fd:f7:2a:c5:91:ba:98:40:b8:76:ca:ef:b8:70:27:ce:23:5b: 71:08:7a:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBlRJRMVuUen+7yVpj0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMGUzMTY0YjE2YWUwOTEyNjg0ZmFhOTBlNDM5MTRkZTFm ZGQ1YTUwHhcNMjUxMjA2MTAwMTM2WhcNMjUxMjA3MTAwMTM2WjAzMTEwLwYDVQQD EygyZmM3NWJjYjMzYjZjOGZjOTA5ZjkxOWJiNmVlOTdmNzNjMTY2Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZZ8RnH8S0gcpVNhb3mRxvGY4PC9 QZZVd2cyPgGSem9yBnP5gIx/ntbYl26r7NpiobVTXpRxYJh5etR7dd1E/uDkau6f FiqSwniWTq95gd5h0N8pZiS5qN8BOnOQD8yqMoFP3l22zI1hlXL4DFdk5s76Cxi7 /N3TQY/muDGVcGeWjIgV5nDYloFEz+SOikhl5zfHO8XXPYPVT2HmTt9papI1Grhq kdI0ZaxjK13zIb7n8QngHaN1q1wWYviDUjLZPGkOR5T+bUGzCESmAb82sv5KLGV5 9Wx7lxkYpbvy75Y9u57XHybir8riiRY80iSYExUYUmv5bsTFqV9KNoHk1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/HW8sztsj8kJ+Rm7bul/c8FmzbMB8GA1UdIwQY MBaAFFMOMWSxauCRJoT6qQ5DkU3h/dWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAt MDQ5Y2JiZTJmNzY3LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAtMDQ5Y2JiZTJmNzY3 LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJnivsoI UhH4STnpJ2u2NCkVMFyrW/lwIIWqfGynQSsjgJYoeo6TR7u2un0u/GpeGdRGoMty PeT+kI+qYJsLHsSduM+Gb13gh9MsoZ2DbVChWLPXjYixzaHZNi6A4te7QUrMkv0T 5+sRBq3+0snzuCDvVhT8dVU6ndXx6L38FGzTBXXKtPSD4zftW3q2tJV6En2qlknB YMJCF5ChjVjxo2nvOJy7fETa3p+VPlpX4Y0BuBmk+sAHUJYwnbk55Vp+eQZ7wTxY Mt1E0KhMnjQoqYeP2BrZZu4nw7IbTaememylQAWwA0tWbUMZ/fcqxZG6mEC4dsrv uHAnziNbcQh6/A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:13 2025 by rpki-client