This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft File: Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json) Hash identifier: wuKMVYLKztxyZ6ENHQdRKTCIX7casi6U9Q+IoQ8vEHQ= Subject key identifier: 4A:89:9C:E4:A3:DB:94:60:A8:3D:C6:E6:A7:4E:53:09:BD:37:31:81 Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F Certificate issuer: /CN=52ee489f36de04219cd2192e04a7bdb13914648f Certificate serial: 019AF31B745AE96C897C3CE196D1A928F3CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft Manifest number: 128C Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: Gm0JHXZxDXu2aQLWVW/z1iYbMQFOjY/tEF4TGVfri2c=) 2: f_wj04ETq9bQrF4XPngK42N1KfA.roa (hash: g/L8C+Uofn47VNMVi+59N+SowKWU37rtsG4L1uBFxUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:74:5a:e9:6c:89:7c:3c:e1:96:d1:a9:28:f3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=4a899ce4a3db9460a83dc6e6a74e5309bd373181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:57:c5:c2:ab:f4:3a:bb:2e:ce:5c:f0:36: 33:9c:a4:96:5e:e2:5a:2f:95:cc:af:75:a0:b2:e6: f9:58:f0:53:ae:fa:fc:de:a4:89:b8:82:56:a5:50: c3:f2:35:7a:4e:e3:c7:61:e5:43:52:31:85:d2:04: 6e:cb:87:db:17:a3:77:fb:15:77:8e:54:66:00:c4: cd:94:6e:4b:4b:1d:f4:bb:0d:22:ce:07:41:97:73: 65:51:37:0c:2c:6b:e9:ed:94:ec:bd:47:f9:c6:07: 4c:cf:ab:26:a4:8a:26:c2:9c:aa:5f:a2:f6:d1:1c: d2:71:5f:19:aa:48:58:9e:ab:ac:fb:fc:ed:85:31: 42:7d:ef:d2:e3:dd:f1:77:c2:33:52:10:cb:d3:eb: e7:df:a1:51:dc:e8:43:03:db:03:da:58:d0:e6:dd: e8:0e:20:fb:3f:68:4c:9a:72:4e:82:99:e9:85:b6: 1a:c2:d6:ae:35:3b:82:1a:da:8e:87:97:4d:98:17: 8b:82:59:29:24:f5:f4:91:97:55:b1:d6:c1:86:64: 3d:1b:4f:ef:ff:3c:32:53:42:a8:33:69:a2:32:39: 85:64:30:4f:79:71:af:b6:15:9b:d4:73:26:fc:77: 77:9f:71:55:ee:80:3f:56:5b:14:d1:9e:f5:6b:7a: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:89:9C:E4:A3:DB:94:60:A8:3D:C6:E6:A7:4E:53:09:BD:37:31:81 X509v3 Authority Key Identifier: keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:23:e3:d6:ec:4d:82:c7:75:2f:c8:fc:c0:2b:06:1c:0e:a1: 6a:a2:09:b2:69:b8:3c:79:5a:8e:0b:e8:90:92:be:b7:91:97: df:a5:ff:a4:54:41:28:02:3a:31:ce:9d:ca:1c:eb:17:c1:bf: fd:53:9f:f6:fb:98:e1:cb:d1:cd:d9:3f:73:20:51:92:82:f0: 86:9d:6d:fc:a2:e5:d6:a7:17:d4:80:bf:98:d4:08:96:e4:4c: 13:71:11:b9:62:fc:28:9b:e4:40:bb:01:56:05:18:a1:58:26: 86:a8:1f:97:5e:a8:00:4d:d5:42:a3:74:d3:bc:69:54:45:fb: b1:0b:49:3b:7d:70:2e:61:42:0c:1b:a6:85:e6:5f:5d:84:35: 27:0c:3c:c7:81:32:dc:8a:49:93:ef:e4:a4:64:95:46:43:f5: 7f:a8:12:86:c5:e9:0e:8d:1f:0c:d3:93:53:ef:23:a4:48:3c: c9:c9:7c:71:3b:21:3f:b5:f7:58:c3:00:6a:1a:f4:36:12:51: 58:ca:c5:3a:f6:8a:48:70:36:f2:bc:1b:8e:32:31:37:66:7b: 06:85:5a:72:8d:a8:79:95:22:71:dd:84:42:75:e3:ca:af:d1: 6a:8e:7e:4a:12:5f:64:99:e7:85:55:c2:91:1a:af:d7:71:77: cd:ab:18:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3Ra6WyJfDzhltGpKPPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWU0ODlmMzZkZTA0MjE5Y2QyMTkyZTA0YTdiZGIxMzkx NDY0OGYwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD Eyg0YTg5OWNlNGEzZGI5NDYwYTgzZGM2ZTZhNzRlNTMwOWJkMzczMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMVXxcKr9Dq7Ls5c8DYznKSWXuJa L5XMr3Wgsub5WPBTrvr83qSJuIJWpVDD8jV6TuPHYeVDUjGF0gRuy4fbF6N3+xV3 jlRmAMTNlG5LSx30uw0izgdBl3NlUTcMLGvp7ZTsvUf5xgdMz6smpIomwpyqX6L2 0RzScV8ZqkhYnqus+/zthTFCfe/S493xd8IzUhDL0+vn36FR3OhDA9sD2ljQ5t3o DiD7P2hMmnJOgpnphbYawtauNTuCGtqOh5dNmBeLglkpJPX0kZdVsdbBhmQ9G0/v /zwyU0KoM2miMjmFZDBPeXGvthWb1HMm/Hd3n3FV7oA/VlsU0Z71a3rOjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqJnOSj25RgqD3G5qdOUwm9NzGBMB8GA1UdIwQY MBaAFFLuSJ823gQhnNIZLgSnvbE5FGSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDA0NWQtM2ZmNy00M2FiLWE2NGQt YzRjZjE2ZjIwODNmLzEvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iMDA0NWQtM2ZmNy00M2FiLWE2NGQtYzRjZjE2ZjIwODNm LzEvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCPj1uxN gsd1L8j8wCsGHA6haqIJsmm4PHlajgvokJK+t5GX36X/pFRBKAI6Mc6dyhzrF8G/ /VOf9vuY4cvRzdk/cyBRkoLwhp1t/KLl1qcX1IC/mNQIluRME3ERuWL8KJvkQLsB VgUYoVgmhqgfl16oAE3VQqN007xpVEX7sQtJO31wLmFCDBumheZfXYQ1Jww8x4Ey 3IpJk+/kpGSVRkP1f6gShsXpDo0fDNOTU+8jpEg8ycl8cTshP7X3WMMAahr0NhJR WMrFOvaKSHA28rwbjjIxN2Z7BoVaco2oeZUicd2EQnXjyq/Rao5+ShJfZJnnhVXC kRqv13F3zasYdg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:27 2025 by rpki-client