This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft File: uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json) Hash identifier: QwAU/t8LOBfvoQZTL47ZOuLb+ZenmG44UIapbUkLv5Q= Subject key identifier: 7B:2C:34:9A:55:B9:0F:EB:30:D6:53:E1:38:97:6D:33:95:56:5D:7D Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Certificate serial: 019AF20931AE4AD57808B81DF825EC5F1E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft Manifest number: 0A12 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: TlU9Uk_nAAl7-fcJ5oPvF-WHQ6g.roa (hash: kHfyiCHQk1viwG97rNRumEvrS7xQPQhtjEnkV3NwAaY=) 2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: g3Rw7cvR8/L8O4O3U7DNnQITugJPazdjJUJ/iDlS2b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:31:ae:4a:d5:78:08:b8:1d:f8:25:ec:5f:1e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=7b2c349a55b90feb30d653e138976d3395565d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:37:73:24:e3:2e:4f:f2:3c:28:fb:34:77: 42:1a:6b:97:b0:2d:96:c4:2d:78:77:0e:8e:2c:6c: 3b:c1:aa:5c:df:03:f4:7e:f8:cc:70:65:1b:bc:f2: ea:f9:fe:0f:e4:30:5b:d9:4f:9f:c2:c6:bb:6b:ef: e4:65:ac:6d:13:30:fa:4c:b1:0e:d6:cb:7b:98:5e: 07:37:14:50:29:bd:a4:9e:b2:c6:11:0a:35:eb:cb: 5c:01:5c:77:ad:39:e7:af:ee:0b:8a:58:f2:87:e4: 6a:4b:e1:4e:6b:af:42:b2:b1:cb:0e:31:f7:7e:50: a8:4a:8f:64:c9:4d:17:21:86:fe:aa:40:2a:0b:76: af:87:9b:43:1a:19:e1:00:83:40:a2:af:b6:18:42: b8:e9:2a:25:19:b0:d6:4d:39:8c:56:7a:40:55:df: 1c:67:5f:f3:c6:d1:7c:48:b6:95:b6:a2:be:c0:ee: 9b:7b:68:ba:88:9c:ac:e0:78:02:6e:2b:5d:3e:a2: 35:d8:b4:8f:fa:cf:e5:2d:c8:2b:9e:10:b0:51:70: 49:68:64:f2:f5:a1:3a:ac:f9:59:59:b5:e4:9d:91: 8a:23:2c:7c:a8:79:fd:44:c0:96:cb:b8:a8:e1:c0: 00:ec:a4:2e:8b:a3:8a:ea:07:cc:f3:d7:88:b6:16: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:34:9A:55:B9:0F:EB:30:D6:53:E1:38:97:6D:33:95:56:5D:7D X509v3 Authority Key Identifier: keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d5:26:0a:c9:02:83:a3:e3:f2:67:71:eb:0f:45:b1:16:e3: da:6e:4f:8d:af:ea:ce:d2:9e:c7:66:44:58:a2:2c:a5:38:25: 13:4f:23:d4:02:16:27:34:f2:76:f6:46:fb:60:d8:ec:1b:88: d6:3d:b9:a4:f8:87:e7:98:9b:2b:89:60:fa:c5:fa:de:f5:90: 76:fd:6c:99:ec:a0:b8:1e:f8:5b:85:74:de:97:f2:c8:a1:16: 7c:a5:fd:a5:24:10:5b:fa:21:c0:f8:78:de:ff:5c:0c:92:74: 30:c9:99:1f:25:3f:b2:40:b2:8f:6e:96:26:84:1e:e1:3d:bf: 63:44:90:07:8e:8d:02:5b:b3:31:ac:c0:86:57:43:ce:06:43: bc:28:b1:13:60:d0:1e:95:56:3f:21:e9:b4:3e:92:80:30:05: 60:33:60:bf:da:f5:2a:90:aa:fa:70:86:c7:b4:3a:82:64:44: ff:a7:69:d0:5d:88:e4:86:20:42:17:b4:45:18:ea:f1:9b:3f: 48:dc:19:e5:da:a7:26:5e:ed:f8:eb:05:41:7d:63:8e:d7:55: ce:26:c3:39:ce:25:27:01:e2:a5:6c:f3:80:20:6c:40:b3:3e: b6:58:77:fe:c3:6f:67:89:30:5a:2d:a2:34:89:bb:82:4b:e2: 90:7a:b8:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTGuStV4CLgd+CXsXx5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2NhNmZkMDAzMjdhZWRmMWQ0ZTMyNzU1NjJjYWU3MzNi NGU3NDMwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD Eyg3YjJjMzQ5YTU1YjkwZmViMzBkNjUzZTEzODk3NmQzMzk1NTY1ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymc3cyTjLk/yPCj7NHdCGmuXsC2W xC14dw6OLGw7wapc3wP0fvjMcGUbvPLq+f4P5DBb2U+fwsa7a+/kZaxtEzD6TLEO 1st7mF4HNxRQKb2knrLGEQo168tcAVx3rTnnr+4Liljyh+RqS+FOa69CsrHLDjH3 flCoSo9kyU0XIYb+qkAqC3avh5tDGhnhAINAoq+2GEK46SolGbDWTTmMVnpAVd8c Z1/zxtF8SLaVtqK+wO6be2i6iJys4HgCbitdPqI12LSP+s/lLcgrnhCwUXBJaGTy 9aE6rPlZWbXknZGKIyx8qHn9RMCWy7io4cAA7KQui6OK6gfM89eIthb9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHssNJpVuQ/rMNZT4TiXbTOVVl19MB8GA1UdIwQY MBaAFLk8pv0AMnrt8dTjJ1ViyucztOdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYt N2U4NTlmZjQ2NTFjLzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYtN2U4NTlmZjQ2NTFj LzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtUmCskC g6Pj8mdx6w9FsRbj2m5Pja/qztKex2ZEWKIspTglE08j1AIWJzTydvZG+2DY7BuI 1j25pPiH55ibK4lg+sX63vWQdv1smeyguB74W4V03pfyyKEWfKX9pSQQW/ohwPh4 3v9cDJJ0MMmZHyU/skCyj26WJoQe4T2/Y0SQB46NAluzMazAhldDzgZDvCixE2DQ HpVWPyHptD6SgDAFYDNgv9r1KpCq+nCGx7Q6gmRE/6dp0F2I5IYgQhe0RRjq8Zs/ SNwZ5dqnJl7t+OsFQX1jjtdVzibDOc4lJwHipWzzgCBsQLM+tlh3/sNvZ4kwWi2i NIm7gkvikHq4SA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:50 2025 by rpki-client