This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json) Hash identifier: q0Eg4QPPUJhpwOxlJTxjYaDX+2dKalOINuaMQx2qKmQ= Subject key identifier: AA:FB:9C:E6:C2:BE:A4:A2:B9:3B:F8:BB:97:C9:91:C4:85:6C:7A:00 Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92 Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92 Certificate serial: 019AF12D9E8B0CA61446555E53A15022E7F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft Manifest number: 09A3 Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: iuFDASt1YwJJ4/zVmBVcGRTbK7txrgAFAAwSo3ZxGuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9e:8b:0c:a6:14:46:55:5e:53:a1:50:22:e7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92 Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=aafb9ce6c2bea4a2b93bf8bb97c991c4856c7a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:35:b4:8c:67:22:78:06:f4:ed:29:e5:91: ef:1e:85:e8:2d:b5:8d:e8:e6:67:33:cb:d4:54:9b: 39:dd:ae:6e:b4:aa:fb:3c:3f:4d:28:a5:af:37:12: 5c:a8:4d:e8:31:44:ce:66:c5:af:e3:0a:4e:26:74: c8:5f:a0:6b:b2:4c:78:03:93:da:64:fa:2e:a9:53: df:f1:b8:b3:be:d8:19:d7:56:dc:5c:85:35:4e:26: 6d:34:39:33:2b:6a:e2:a9:cc:60:e3:20:d9:cd:e0: 57:ef:0c:33:ba:ea:4e:95:6a:e3:9b:b5:f0:82:bd: 14:c1:2a:b9:95:9a:02:47:74:d2:f9:be:bb:41:a7: 6c:54:d8:41:28:e8:db:09:b3:3c:80:f3:e5:fb:f8: d7:18:c4:07:27:45:de:f5:5f:5f:1c:7a:5a:c5:29: 8e:aa:a6:d6:80:c0:66:52:54:0d:9e:df:6a:cb:af: c3:c9:ec:d0:63:aa:91:0c:af:31:33:78:d1:e8:c8: 8c:f8:f3:40:6e:f9:76:fe:fc:17:18:78:7f:e4:40: 2f:46:cb:9a:58:94:76:c0:c1:eb:55:54:ab:3d:e8: 03:19:0a:43:51:4c:d1:6a:db:ec:30:79:e2:e4:8b: ca:26:d9:9d:2a:19:69:ca:64:e6:6e:d1:8b:89:3f: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FB:9C:E6:C2:BE:A4:A2:B9:3B:F8:BB:97:C9:91:C4:85:6C:7A:00 X509v3 Authority Key Identifier: keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f3:6b:ca:1d:d2:a8:86:e4:f2:f2:d0:65:47:5c:5f:a7:31: 2c:cd:dd:d6:aa:02:8e:82:c9:a8:9b:dc:48:7e:cf:18:11:46: 07:5c:ee:b7:0d:fb:1c:9d:96:5d:89:a2:cf:6d:b3:45:37:33: 78:1e:32:48:e8:3a:db:a5:ea:ea:f7:c3:61:62:4c:54:a9:b7: 7c:71:dd:79:bc:2c:ef:3d:ac:b0:7e:c6:b6:66:25:a2:ea:65: 3f:ae:ee:5c:46:46:e6:91:07:14:44:b9:07:83:d5:97:4d:c4: 7c:b1:6a:29:fc:56:ed:e9:b4:5b:2f:fa:36:ba:bd:7b:36:e2: f1:9c:38:f7:4e:94:ec:8f:97:9d:ea:2e:d8:1d:1c:93:df:58: 1c:2e:e4:67:38:0f:5a:62:73:ba:65:2f:2d:00:8e:00:20:8a: 92:bc:fc:38:f2:61:09:87:18:2a:bb:82:00:de:bd:46:0a:24: be:32:b8:6f:ff:6c:bf:d5:cd:90:2c:14:85:06:60:86:79:63: 1f:a8:86:97:9e:b7:6d:ec:1f:b8:d3:af:4b:6f:58:95:6b:24: 48:12:c8:60:f4:3e:b6:cf:e6:94:02:87:e6:41:30:5f:27:26: 2b:d0:58:fa:75:4b:ba:d1:6b:c3:fb:16:10:0e:2a:64:6d:c0: b2:7f:3d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ6LDKYURlVeU6FQIufzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWY4ZGIwMmUyZTk3MWQ1NGY5MGVlZjEwNzA5MDM5OGZj YzNkOTIwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EyhhYWZiOWNlNmMyYmVhNGEyYjkzYmY4YmI5N2M5OTFjNDg1NmM3YTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAico1tIxnIngG9O0p5ZHvHoXoLbWN 6OZnM8vUVJs53a5utKr7PD9NKKWvNxJcqE3oMUTOZsWv4wpOJnTIX6Brskx4A5Pa ZPouqVPf8bizvtgZ11bcXIU1TiZtNDkzK2riqcxg4yDZzeBX7wwzuupOlWrjm7Xw gr0UwSq5lZoCR3TS+b67QadsVNhBKOjbCbM8gPPl+/jXGMQHJ0Xe9V9fHHpaxSmO qqbWgMBmUlQNnt9qy6/DyezQY6qRDK8xM3jR6MiM+PNAbvl2/vwXGHh/5EAvRsua WJR2wMHrVVSrPegDGQpDUUzRatvsMHni5IvKJtmdKhlpymTmbtGLiT8x1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKr7nObCvqSiuTv4u5fJkcSFbHoAMB8GA1UdIwQY MBaAFLkfjbAuLpcdVPkO7xBwkDmPzD2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjkt NjJlMTllZjk2MGE0LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjktNjJlMTllZjk2MGE0 LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvNryh3S qIbk8vLQZUdcX6cxLM3d1qoCjoLJqJvcSH7PGBFGB1zutw37HJ2WXYmiz22zRTcz eB4ySOg626Xq6vfDYWJMVKm3fHHdebws7z2ssH7GtmYlouplP67uXEZG5pEHFES5 B4PVl03EfLFqKfxW7em0Wy/6Nrq9ezbi8Zw4906U7I+Xneou2B0ck99YHC7kZzgP WmJzumUvLQCOACCKkrz8OPJhCYcYKruCAN69RgokvjK4b/9sv9XNkCwUhQZghnlj H6iGl563bewfuNOvS29YlWskSBLIYPQ+ts/mlAKH5kEwXycmK9BY+nVLutFrw/sW EA4qZG3Asn89tw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:01 2025 by rpki-client